Question 860 A build system consumes Azure CLI command results programmatically. Which output choice helps avoid fragile screen scraping? Copy raw command output into manually edited text files for each later step Use a supported structured output format such as JSON with targeted queries Take screenshots of terminal output and OCR them on every run Always use the portal's visible chart colors as an API Explanation Correct Answer B:Machine-readable output is more reliable than parsing decorative text. Incorrect Answers A:Manual parsing is fragile; structured CLI output can be consumed directly by automation. C:Screenshots are brittle for machine parsing. D:Graphics aren't stable structured results.
Question 861 A service principal runs az group create but gets AuthorizationFailed. What should the operator examine? Only the resource name's number of characters Only the VM's disk tier Azure RBAC scope and role actions for the automation principal Only whether the shell history has more than ten commands Explanation Correct Answer C:CLI commands use the authenticated principal's delegated permissions. Incorrect Answers A:Length won't grant subscription write rights. B:Disk IOPS doesn't determine ARM authorization. D:History length isn't a management role.
Question 862 An administrator argues that installing Azure CLI on a laptop means the commands must run in Azure Cloud Shell. What is correct? Assume Azure Cloud Shell is the only location where az can run Azure CLI can run locally or in supported cloud-hosted shells A VM must be powered on for a local az group list command Installing Azure CLI locally automatically grants the operator Azure RBAC Owner Explanation Correct Answer B:Cloud Shell is one execution environment, not a required location for every az command. Incorrect Answers A:Azure CLI can also run in other supported installed environments; the shell is one hosted option. C:Listing ARM resources isn't tied to one VM. D:A local CLI installation provides a tool, not cloud authentication or elevated permissions.
Question 863 An operations group uses PowerShell and wants to automate subscription and resource management. Which Azure-specific module family is relevant? Use Azure CLI az commands as though they were native Az PowerShell cmdlets without changing syntax A VM availability set update domain Az PowerShell modules Azure Storage lifecycle policies as the scripting runtime Explanation Correct Answer C:The Az modules expose Azure management cmdlets in PowerShell. Incorrect Answers A:Both tools manage Azure but have different command and object models. B:Compute placement isn't a PowerShell module. D:Object rules aren't PowerShell modules.
Question 864 A support analyst wants to list Azure resources in a resource group through Azure PowerShell. Which cmdlet family should they look for? Get-AzResource or appropriate Get-Az service cmdlets An Azure Blob Archive rehydration operation Get-Process on an unrelated laptop alone Search only local Windows event logs for Azure resource inventory Explanation Correct Answer A:The Az PowerShell modules provide resource-query operations. Incorrect Answers B:Storage state isn't the general resource inventory. C:Local process inspection doesn't list Azure ARM resources. D:Host event logs do not query the subscriptions and ARM resource objects exposed to PowerShell.
Question 865 A PowerShell administrator needs to authenticate to Azure interactively before running Az cmdlets. Which concept applies? Assume installing the Az module automatically authenticates and selects a subscription Connect-AzAccount using a permitted identity A Blob access tier set to Hot A VM availability-set name as a login token Explanation Correct Answer B:The Azure PowerShell session needs authentication and the right resource permissions. Incorrect Answers A:The module enables cmdlets but the user still needs a valid sign-in and context. C:Data temperature doesn't sign in a person. D:Placement names aren't credentials.
Question 866 An engineer has access to several Azure subscriptions and needs to ensure Az cmdlets target a particular one. What should be controlled? Only the storage account's redundancy tier The Azure PowerShell context or selected subscription Only the VNet CIDR length Only the terminal window width Explanation Correct Answer B:Cmdlets operate under the active account and subscription context. Incorrect Answers A:Replica placement isn't PowerShell context. C:Network addressing doesn't pick a subscription. D:Display size doesn't select cloud scope.
Question 867 A Windows automation team wants to pass structured Azure resource objects between commands for filtering and reporting. Which tooling property is useful? An Azure VPN Gateway tunnel A VM snapshot PowerShell object pipelines with Az cmdlets Treat every pipeline object as an unstructured text string only Explanation Correct Answer C:PowerShell processes objects rather than only plain output text. Incorrect Answers A:Private networking doesn't provide scripting pipeline objects. B:Disk snapshots don't transform command output. D:PowerShell pipelines can carry typed objects and properties for downstream filtering and handling.
Question 868 A team already has extensive PowerShell automation and plans Azure deployments. What is a defensible tool choice? Assume the portal must be automated by screen clicks for every resource Mix Azure CLI argument syntax into Az PowerShell cmdlets without translating parameters Use Az PowerShell cmdlets while keeping Azure CLI as an available alternative Assume only Bash can manage Azure resources Explanation Correct Answer C:Both interfaces manage Azure; existing skill and tooling can guide selection. Incorrect Answers A:Scriptable APIs and cmdlets exist. B:The two interfaces target Azure but use distinct commands and parameter conventions. D:PowerShell is supported.
Question 869 A scheduled Azure PowerShell automation must run with narrowly scoped non-human credentials. Which identity approach is relevant? A supported managed identity or service principal for Az automation An Azure Data Box device as the principal A resource tag that contains the subscription name An employee's plaintext Global Admin password in the script Explanation Correct Answer A:Workload identities can avoid embedding shared human passwords. Incorrect Answers B:Physical shipment isn't an identity. C:Tags aren't authentication. D:Hardcoding high-privilege secrets is unsafe.
Question 870 A PowerShell script can retrieve a VM but fails to delete it. What should be examined first? Effective RBAC, applicable resource locks and policies for the delete action Only the PowerShell prompt color Only the region pair's naming convention Assume a syntactically valid PowerShell command bypasses Azure RBAC Explanation Correct Answer A:Read permissions can differ from delete permissions and additional governance may block writes. Incorrect Answers B:Visual appearance doesn't grant DELETE. C:Region labels don't authorize deletes. D:Permissions are evaluated by the management plane regardless of whether an operation is scripted.
