Question 900 Two teams need the same network baseline but different application resources. Which IaC design principle promotes maintainability? Treat all resource groups as identical containers with no parameters Use reusable modules/templates for approved common infrastructure components Copy an outdated network rule set into every repo without ownership Use unrelated random CIDRs in every environment without planning Explanation Correct Answer B:Shared reviewed components reduce duplicate configuration logic. Incorrect Answers A:Environment differences may still need explicit inputs. C:Forks can diverge and become unsafe. D:Address conflicts can result.
Question 901 An enterprise has an approved JSON ARM template and parameter file. What can use those artifacts to create supported Azure resources? Azure Resource Manager deployment through portal, CLI, PowerShell or pipeline A storage archive lifecycle rule Provide only an exported screenshot of the intended resources A VM availability set without deployment APIs Explanation Correct Answer A:ARM processes resource definitions and parameter values. Incorrect Answers B:Blob aging isn't the ARM deployment engine. C:Screenshots are not valid ARM deployment artifacts that define resource types, properties and parameters. D:Fault-domain resources don't parse arbitrary templates.
Question 902 An engineer runs a production IaC deployment using a personal Global Administrator account. What improvement is appropriate? Give every build agent subscription Owner forever Use an approved workload identity with least-privilege role scope and reviewed release controls Disable all role-assignment audits Store the Global Admin password in source control for repeatability Explanation Correct Answer B:Automation should not depend on a highly privileged personal credential. Incorrect Answers A:Unnecessary broad access increases compromise impact. C:Removing evidence does not make production safer. D:That exposes a sensitive credential.
Question 903 A team assumes approved IaC guarantees the application will function correctly after deployment. What remains necessary? Application testing, dependency checks and operational monitoring Treat successful ARM return as a full app acceptance test Disable health probes to avoid false alarms Use only resource tags as functional tests Explanation Correct Answer A:Infrastructure definitions don't verify every runtime business path. Incorrect Answers B:Resource creation can succeed while code fails. C:Removing telemetry hides runtime issues. D:Metadata doesn't execute application requests.
Question 904 A company has approved production infrastructure code on its main branch and an experimental branch with unreviewed changes. What should deployment controls ensure? Production deployments reference approved, versioned definitions rather than arbitrary unreviewed branches Deploy code from an arbitrary branch without checking the approved change Any developer feature branch can deploy to production without review A VM's OS timezone provides source provenance Explanation Correct Answer A:Source selection is part of release integrity. Incorrect Answers B:The chosen branch must be reviewed and selected independently of DNS or network routing configuration. C:That bypasses agreed change control. D:Clock settings aren't Git commit IDs.
Question 905 A team wants to detect overly broad public network rules in resource templates before Azure deployment. Which workflow is relevant? Static validation or security checks for IaC alongside Azure Policy enforcement Only check the template's file extension Only scan PDF invoices for the word 'public' Only inspect app UI screenshots Explanation Correct Answer A:Predeployment checks can detect risky definitions early. Incorrect Answers B:A .json or .bicep file can still contain unsafe settings. C:Billing documents don't validate planned networking resources. D:Presentation doesn't prove backend exposure controls.
Question 906 An application provisions an Azure resource group and a VM through an API without interacting with the guest operating system. Which platform control plane processes these operations? Use a guest operating-system update tool to create Azure subscription resources An App Service deployment slot Azure Files as an API gateway for all ARM calls Azure Resource Manager (ARM) Explanation Correct Answer D:ARM handles management requests to create and configure Azure resources. Incorrect Answers A:Guest package managers operate inside machines; ARM is the Azure management control plane. B:A staging slot doesn't create subscription resources. C:File shares aren't the management service.
Question 907 A team has a JSON document declaring a storage account, network and VM. What Azure deployment artifact is it likely using? An Azure Blob lifecycle policy alone An ARM template Provide an unstructured prose checklist instead of an ARM-compatible deployment template An Azure Data Box shipping manifest Explanation Correct Answer B:ARM templates declaratively specify Azure resources and configuration. Incorrect Answers A:Object aging rules aren't a multi-resource template. C:An ARM template has a structured JSON resource definition, not just an informal description. D:Physical transfer paperwork doesn't deploy cloud infrastructure.
Question 908 A resource deployment template is reused in several regions but needs a location value supplied per run. Which ARM template feature provides this? Changing the template's file extension to match the region Hardcoding a random location in every resource ID Parameters passed to the deployment An unrelated VM guest firewall rule Explanation Correct Answer C:Parameters separate variable input values from reusable resource declarations. Incorrect Answers A:Extensions don't set ARM location. B:Random substitutions aren't controlled inputs. D:Guest security cannot supply ARM parameter values.
Question 909 A deployment creates a storage account and a downstream pipeline needs a generated endpoint name. Which ARM template capability helps expose that value? A storage lifecycle rule Write outputs only into developer notes and omit the template output declarations Template outputs A VM availability set update domain Explanation Correct Answer C:Outputs can return computed deployment information for later automation. Incorrect Answers A:Object expiration doesn't report deployment outputs. B:Downstream deployment steps cannot consume the intended ARM output values from an unstructured note. D:Compute placement isn't a template result field.
Question 910 A team repeats the same complex resource-name expression throughout an ARM template. Which built-in authoring concept can simplify it? Hardcode the same derived value throughout the template rather than reuse a variable Increase the name of every resource manually Assign every developer subscription Owner Template variables or supported expressions Explanation Correct Answer D:Reusable expressions reduce repeated configuration and improve clarity. Incorrect Answers A:Duplicating computed settings increases inconsistency and defeats template variable reuse. B:Longer names don't eliminate duplicated logic. C:Permissions aren't expression reuse.
