Question 930 A team uses one template for dev and prod but accidentally deploys production connection strings to dev. Which preventive practice fits? Assume the resource group name alone validates all environment variables Embed production passwords in every source template by default Disable deployment logs to hide mismatched settings Use controlled environment-specific parameters and secret retrieval with deployment approvals Explanation Correct Answer D:Explicit input boundaries reduce cross-environment leakage. Incorrect Answers A:Names don't validate configuration content. B:Hardcoding leaks secrets. C:Hiding evidence worsens the problem.
Question 931 A shared IaC module changes unexpectedly between deployment jobs, producing different network rules. What control can improve predictability? Reference reviewed versioned module artifacts or commits Reference the latest unpinned module version across all release environments Always use an unreviewed latest module without recording version Disable all policy evaluation so the module always deploys Explanation Correct Answer A:Pinning definitions makes dependency changes deliberate and auditable. Incorrect Answers B:An unpinned module can change between runs and introduce unreviewed network definitions. C:Floating changes can introduce drift. D:Removing governance doesn't establish reproducibility.
Question 932 An Azure administrator wants recommendations for improving cloud resources' cost, security, reliability and performance. Which service provides this guidance? Azure Data Box Azure Service Health incident notifications alone Azure Advisor Azure Storage Explorer Explanation Correct Answer C:Advisor analyzes supported resources and provides personalized best-practice recommendations. Incorrect Answers A:Offline transfer doesn't analyze running resources. B:Service Health communicates incidents and maintenance; it does not provide the broad personalized optimization recommendations requested. D:A storage client isn't the cross-resource recommendation service.
Question 933 An Azure VM has low CPU utilization for months and costs more than expected. Which Advisor recommendation category may help? Blob archive rehydration by itself A VPN Gateway tunnel request Cost optimization recommendations An Azure Monitor availability alert without assessing VM utilization Explanation Correct Answer C:Advisor can suggest opportunities such as resizing underutilized VMs when supported. Incorrect Answers A:Object tier movement doesn't right-size compute. B:Private connectivity isn't VM utilization analysis. D:An alert can report availability but does not identify the instance-size savings opportunity shown by Advisor.
Question 934 A business hosts a critical service on a single VM with no regional or zone redundancy. Which Advisor recommendation theme may apply? Reliability or high availability improvement Only storage access tier temperature A single VM's last successful backup time Only billing contact information Explanation Correct Answer A:Advisor can flag configurations that represent avoidable single points of failure. Incorrect Answers B:Blob tiering doesn't provide service failover. C:Backup status alone does not measure the reliability recommendations Advisor derives for supported resources. D:Finance contact details don't create redundant compute.
Question 935 A security team wants broad cloud posture suggestions rather than only operational exception logs. What Advisor category may be relevant? Use only a cost-rightsizing recommendation as proof of the complete security posture Only the Azure Pricing Calculator Security best-practice recommendations, alongside specialized Defender for Cloud capabilities Review only VM CPU metrics and assume they establish security posture Explanation Correct Answer C:Advisor exposes supported security improvement guidance. Incorrect Answers A:A VM cost recommendation is not the security-control assessment and posture information the team needs. B:Estimates don't identify misconfigured access controls. D:Performance counters alone do not constitute supported security recommendations or cloud posture findings.
Question 936 A web app is slow under typical load, and administrators seek Azure service configuration recommendations. Which Advisor area might help? Cost budget alert thresholds alone A resource-group name change Performance recommendations for supported resources An Azure Cost Management budget report with no performance telemetry Explanation Correct Answer C:Advisor may highlight potential performance improvements based on configuration and telemetry. Incorrect Answers A:Spend warnings don't diagnose HTTP latency. B:Names don't increase throughput. D:Budget totals cannot reveal the resource performance tuning opportunities described by Advisor.
Question 937 A consultant sees Advisor recommendations for one subscription but not for another. What factor should they examine? Compare only visible resource names while ignoring subscription filters and Advisor eligibility Check only how many subscription resources exist, not their supported Advisor scope Only whether the subscription has one VNet The selected scope, resource eligibility and account permissions Explanation Correct Answer D:Recommendations depend on accessible resources and supported analysis. Incorrect Answers A:Advisor data depends on selected subscriptions, authorized scope and supported analyzed resources. B:The count does not establish Advisor coverage, access, or resource eligibility for recommendations. C:A VNet count alone doesn't guarantee Advisor data.
Question 938 A manager sees an Advisor suggestion to resize an underused VM and assumes it has already happened. What distinction matters? Assume the recommendation automatically resized the running VM at the time it appeared Every Advisor recommendation immediately changes resource sizes with no consent Recommendations are security incident alerts that block all traffic Advisor guidance generally requires evaluation and an appropriate implementation action Explanation Correct Answer D:Recommendations are not proof of automatic configuration changes. Incorrect Answers A:Advisor guidance generally requires owner review and a subsequent explicit action to change configuration. B:Suggestions don't universally apply themselves. C:Advisor is broader than incident response.
Question 939 Advisor recommends downsizing a VM, but the application has rare high-load periods. What should the owner assess before implementing? Representative workload peaks and performance requirements, not averages alone Disable all app alerts while resizing Apply every recommendation without verifying workload constraints Use only the VM's resource group name for capacity selection Explanation Correct Answer A:Right-sizing should not break service-level needs during periodic spikes. Incorrect Answers B:Less telemetry makes validation harder. C:Blind changes can harm performance. D:Naming isn't load analysis.
Question 940 An architect asks whether Azure Advisor recommendations are the same as Azure Policy deny rules. What is the difference? Azure Policy is only a cost forecast system Advisor replaces every subscription role assignment Advisor offers optimization recommendations; Policy can audit or enforce configured resource rules Treat every Advisor suggestion as an enforced Azure Policy deny rule Explanation Correct Answer C:Advice and mandatory governance have different operational effects. Incorrect Answers A:Policy can enforce configuration. B:Recommendations aren't identity permissions. D:Advisor recommendations normally guide optimization, whereas Policy effects can evaluate or enforce resource rules.
