Title: Exam AZ-900: Microsoft Azure Security Technologies - By Wyatt Fox / 3. Describe Azure management and governance

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
Which of the following is NOT a factor that can affect costs in Azure?
A. Resource type
B. Consumption
C. Training costs
D. Geography
A: Correct Answer: C. Training costs
Explanation: According to the text provided, factors that can impact your costs in Azure include resource type, consumption, geography, subscription type, and maintenance. Training costs are not mentioned.
Incorrect Answer Explanation(s):
Resource type, consumption, and geography are all discussed in the text as factors that can affect costs in Azure. While training costs may be a cost incurred in using Azure, it is not listed among the factors described in the text as affecting costs.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/2-describe-factors-affect-costs-azure

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What impacts the cost of Azure resources?
A. Only the Azure region
B. Only the consumption model
C. The type of resources, the settings for the resource, and the Azure region
D. Only the resource group
A: Correct Answer: C. The type of resources, the settings for the resource, and the Azure region
Explanation: The cost of Azure resources are dependent on a variety of factors, including the type of resource, configuration settings, and the region in which they are deployed.
Incorrect Answer Explanation(s):
Incorrect answer. The Azure region is only one of many factors that influence the cost of Azure resources. Incorrect answer. While the consumption model does play a role in cost management, it is not the sole factor that impacts costs. Incorrect answer. Resource groups are useful for organizing resources but do not impact costs directly.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/2-describe-factors-affect-costs-azure

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
Which factor affects cost in Azure based on the amount of cloud resources you commit to using in advance and receive discounts on those reserved resources?
A. Resource Type
B. Consumption
C. Maintenance
D. Subscription Type
A: Correct Answer: B. Consumption
Explanation: Committing to using a set amount of cloud resources in advance and receiving discounts on those reserved resources is a part of Azures consumption pricing model, where you pay for the resources you use during a billing cycle. It allows for maximum flexibility and can help recognize significant savings on reliable, consistent workloads while also having the flexibility to rapidly increase your cloud footprint as the need arises.
Incorrect Answer Explanation(s):
Resource type, maintenance, and subscription type are all factors that affect costs in Azure but are not related to committing to using a set amount of cloud resources in advance and receiving a discount on reserved resources.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/2-describe-factors-affect-costs-azure

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
Which factor affects the cost of Azure resources based on the geographical location it is deployed in?
A. Resource Type
B. Subscription Type
C. Geography
D. Network Traffic
A: Correct Answer: C. Geography
Explanation: The cost of power, labor, taxes, and fees vary depending on the location. Due to these variations, Azure resources can differ in costs to deploy depending on the region. Network traffic is also impacted based on geography.
Incorrect Answer Explanation(s):
Resource Type affects the cost of Azure resources based on the type of resources and the settings for the resource. Subscription Type affects the cost of Azure resources based on the usage allowances provided in the subscription. Network Traffic affects the cost of some Azure services based on bandwidth pricing and billing zones.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/2-describe-factors-affect-costs-azure

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What factor can affect the cost of deploying Azure resources?
A. Resource type
B. Azure Marketplace
C. VM size options
D. Operating system
A: Correct Answer: A. Resource type
Explanation: The cost of Azure resources can be affected by the type of resources, the settings for the resource, and the Azure region. When you provision an Azure resource, Azure creates metered instances for that resource. The meters track the resources usage and generate a usage record that is used to calculate your bill. For example, creating the same storage account in different regions may show different costs and changing any of the settings may also impact the price. Therefore, the correct answer is resource type.
Incorrect Answer Explanation(s):
B is incorrect because Azure Marketplace is a platform where you can purchase Azure-based solutions and services from third-party vendors. When you purchase products through Azure Marketplace, you may pay for not only the Azure services but also the services or expertise of the third-party vendor. C is incorrect because VM size options are just one of the aspects that can affect the cost of a virtual machine. D is incorrect because the licensing for the operating system or other software is just one of the aspects that can affect the cost of a virtual machine.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/2-describe-factors-affect-costs-azure

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is the factor that determines the cost of outbound data transfers in Azure?
A. Subscription type
B. Resource type
C. Network traffic
D. Geography
A: Correct Answer: C. Network traffic
Explanation: The cost of outbound data transfers (data leaving Azure datacenters) is based on billing zones which are a factor of Network Traffic. Network traffic is also impacted based on geography. For example, it’s less expensive to move information within Europe than to move information from Europe to Asia or South America.
Incorrect Answer Explanation(s):
Option A is incorrect because subscription type affects usage allowances provided by Azure. Option B is incorrect because resource type influences the type of metered instances created for that resource. Option D is incorrect because geography variations can affect power, labor, taxes, and fees but do not directly impact the cost of outbound data transfers.
Reference URL: https://azure.microsoft.com/en-us/pricing/details/bandwidth/

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
Which factor can affect costs in Azure subscription types?
A. Resource type
B. Maintenance
C. Network traffic
D. Azure Marketplace
https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/2-describe-factors-affect-costs-azure
A: Correct Answer: D. Azure Marketplace
Explanation: When you purchase products through Azure Marketplace, you may pay for not only the Azure services that you’re using, but also the services or expertise of the third-party vendor. Billing structures are set by the vendor.
Incorrect Answer Explanation(s):
A. Resource type influences the cost of Azure resources. The type of resources, the settings for the resource, and the Azure region will all have an impact on how much a resource costs. B. Maintenance and C. Network traffic could also impact costs in Azure but they are not related to subscription types.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/2-describe-factors-affect-costs-azure

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is Azure Marketplace?
A. A tool to organize Azure resources
B. A billing zone for determining the cost of Azure services
C. A marketplace for purchasing Azure-based solutions and services from third-party vendors
D. A way to commit to using a set amount of cloud resources and receive discounts
A: Correct Answer: C. A marketplace for purchasing Azure-based solutions and services from third-party vendors
Explanation: Azure Marketplace is a platform that enables customers to buy and sell cloud solutions certified to run on Azure. Customers can access thousands of trusted solutions that can be deployed on Azure in just a few clicks. This reduces the time and effort required to find, buy, provision, and manage applications and services on Azure.
Incorrect Answer Explanation(s):
A, B, and D are incorrect because Azure Marketplace is not a tool for organizing resources, not a billing zone for determining the cost of Azure services, and not a way to commit to using a set amount of cloud resources and receive discounts. It is a platform that enables customers to buy and sell cloud solutions certified to run on Azure.
Reference URL: https://azure.microsoft.com/en-us/marketplace/overview/

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is the main difference between the Pricing Calculator and the TCO Calculator for Azure services?
A. The Pricing Calculator shows the cost of resources in Azure while the TCO Calculator compares costs of an on-premises infrastructure with an Azure infrastructure
B. The Pricing Calculator only shows an example scenario to estimate Azure costs while the TCO Calculator shows real-time costs in Azure
C. The Pricing Calculator helps to estimate the costs for running an on-premises infrastructure while the TCO Calculator helps to compare the costs of an Azure Cloud infrastructure
D. Both calculators help to compare the costs of an on-premises infrastructure with an Azure infrastructure
A: Correct Answer: A. The Pricing Calculator shows the cost of resources in Azure while the TCO Calculator compares costs of an on-premises infrastructure with an Azure infrastructure
Explanation: The Pricing Calculator is designed to give you an estimated cost for provisioning resources in Azure while the TCO Calculator helps you compare the costs for running an on-premises infrastructure compared to an Azure Cloud infrastructure.
Incorrect Answer Explanation(s):
B. The Pricing Calculator also allows you to build out a configuration and estimate individual resources. C. The TCO Calculator is not used to estimate costs for running an on-premises infrastructure. D. Both calculators have different purposes.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/3-compare-pricing-total-cost-of-ownership-calculators

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is the focus of the Pricing calculator in Azure?
A. To calculate the total cost of ownership of resources in Azure
B. To compare the costs for running an on-premises infrastructure compared to an Azure Cloud infrastructure
C. To give an estimated cost for provisioning resources in Azure
D. To estimate the cost of only storage options in Azure.
A: Correct Answer: C. To give an estimated cost for provisioning resources in Azure
Explanation: The pricing calculator is designed to give an estimated cost for provisioning resources in Azure. You can get an estimate for individual resources, build out a solution, or use an example scenario to see an estimate of the Azure spend. The pricing calculator’s focus is on the cost of provisioned resources in Azure.
Incorrect Answer Explanation(s):
A. The total cost of ownership calculator is designed to help you compare the costs for running an on-premises infrastructure compared to an Azure Cloud infrastructure. B. The total cost of ownership calculator is designed to help you compare the costs for running an on-premises infrastructure compared to an Azure Cloud infrastructure. D. The pricing calculator can estimate the cost of any provisioned resources, not just storage options in Azure.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/3-compare-pricing-total-cost-of-ownership-calculators

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is the purpose of the TCO calculator in Azure?
A. To estimate the cost of provisioning resources in Azure
B. To compare the costs for running an on-premises infrastructure compared to an Azure Cloud infrastructure
C. Both A and B
D. None of the above
A: Correct Answer: B. To compare the costs for running an on-premises infrastructure compared to an Azure Cloud infrastructure
Explanation: The TCO calculator is designed to help you compare the costs for running an on-premises infrastructure compared to an Azure Cloud infrastructure. With the TCO calculator, you enter your current infrastructure configuration, including servers, databases, storage, and outbound network traffic. The TCO calculator then compares the anticipated costs for your current environment with an Azure environment supporting the same infrastructure requirements.
Incorrect Answer Explanation(s):
A: The pricing calculator is designed to give you an estimated cost for provisioning resources in Azure. Its focus is the cost of provisioned resources in Azure. C: While the pricing calculator and TCO calculator both help understand potential Azure expenses, the purpose of the two calculators are fairly different. D: This is incorrect as the TCO calculator does have a specific purpose.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/3-compare-pricing-total-cost-of-ownership-calculators

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is Cost Management?
A. An Azure service that helps you provision resources in a specific region
B. An Azure service that provides a quick visual for your Azure costs
C. An Azure service that helps you avoid accidental resource provisioning and manage resource costs
D. An Azure service that alerts you when your Azure credit balance is low
A: Correct Answer: C. An Azure service that helps you avoid accidental resource provisioning and manage resource costs
Explanation: Cost Management is an Azure service that provides the ability to quickly check Azure resource costs, create alerts based on resource spend, and create budgets that can be used to automate management of resources. It helps avoid accidental resource provisioning and manage resource costs.
Incorrect Answer Explanation(s):
A is incorrect because while Azure is a global cloud provider allowing resource provisioning anywhere in the world, it is not the definition of Cost Management. B is incorrect because cost analysis is a subset of Cost Management, not the definition of it. D is incorrect because credit alerts are just one type of alerts that may show up in the Cost Management service, and Cost Management is not just limited to alerts.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/6-describe-azure-tool

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is Cost Management in Azure?
A. A tool to provision Azure resources
B. A tool to check and manage Azure resource costs
C. A tool to analyze Azure resource utilization
D. A tool to monitor Azure security
A: Correct Answer: B. A tool to check and manage Azure resource costs
Explanation: Cost Management is an Azure service that helps avoid situations where you may unexpectedly accrue costs due to provisioned resources. It provides the ability to check Azure resource costs, create alerts based on resource spend, and create budgets for efficient management of resources.
Incorrect Answer Explanation(s):
A. Provisioning Azure resources is a separate function from Cost Management. C. Cost analysis is a subset of Cost Management, but it does not encompass the entire tool. D. Monitoring Azure security is a separate function from Cost Management.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/6-describe-azure-tool

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What type of alerts are generated when Department spending quota reaches a fixed threshold of the quota?
A. Budget alerts
B. Credit alerts
C. Department spending quota alerts
D. Usage-based alerts
A: Correct Answer: C. Department spending quota alerts
Explanation: Whenever a departmental spending quota threshold is met, it generates an email to department owners, and appears in cost alerts.
Incorrect Answer Explanation(s):
Budget alerts notify you when spending, based on usage or cost, reaches or exceeds the amount defined in the budget conditions. Credit alerts notify you when your Azure credit monetary commitments are consumed. Usage-based alerts are not mentioned in the text.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/6-describe-azure-tool

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What type of alert is generated when department spending reaches a fixed threshold of the quota that has been configured in the EA portal?
A. Budget alerts
B. Credit alerts
C. Department spending quota alerts
D. Usage alerts
A: Correct Answer: C. Department spending quota alerts
Explanation: Department spending quota alerts notify you when department spending reaches a fixed threshold of the quota. Spending quotas are configured in the EA portal. Whenever a threshold is met, it generates an email to department owners, and appears in cost alerts.
Incorrect Answer Explanation(s):
Budget alerts notify you when spending, based on usage or cost, reaches or exceeds the amount defined in the alert condition of the budget. Usage alerts do not exist. Credit alerts notify you when your Azure credit monetary commitments are consumed.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/6-describe-azure-tool

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What are Credit alerts in Azure Cost Management used for?
A. To notify when department spending reaches a fixed threshold of the quota
B. To notify when spending, based on usage or cost, reaches or exceeds the amount defined in the alert condition of the budget
C. To notify when your Azure credit monetary commitments are consumed
D. To explore and analyze your organizational costs
A: Correct Answer: C. To notify when your Azure credit monetary commitments are consumed
Explanation: Credit alerts notify you when your Azure credit monetary commitments are consumed. Monetary commitments are for organizations with Enterprise Agreements (EAs). Credit alerts are generated automatically at 90% and at 100% of your Azure credit balance. For these types of organizations, this alert is particularly useful to avoid overages or potential disruptions in service due to billing issues.
Incorrect Answer Explanation(s):
A. Department spending quota alerts notify you when department spending reaches a fixed threshold of the quota. Spending quotas are configured in the EA portal. B. Budget alerts notify you when spending, based on usage or cost, reaches or exceeds the amount defined in the alert condition of the budget. D. Cost analysis is a subset of Cost Management that provides a quick visual for your Azure costs. Using cost analysis, you can quickly view the total cost in a variety of different ways, including by billing cycle, region, resource, and so on.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/6-describe-azure-tool

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What do department spending quota alerts do in Azure Cost Management?
A. Notifies you when your Azure credit monetary commitments are consumed
B. Notifies you when spending, based on usage or cost, reaches or exceeds the amount defined in the alert condition of the budget
C. Notifies you when department spending reaches a fixed threshold of the quota
D. Provides the ability to quickly check Azure resource costs
A: Correct Answer: C. Notifies you when department spending reaches a fixed threshold of the quota
Explanation: Department spending quota alerts notify you when department spending reaches a fixed threshold of the quota. Spending quotas are configured in the EA portal. Whenever a threshold is met, it generates an email to department owners, and appears in cost alerts. For example, 50 percent or 75 percent of the quota.
Incorrect Answer Explanation(s):
A. Credit alerts notify you when your Azure credit monetary commitments are consumed. Monetary commitments are for organizations with Enterprise Agreements (EAs). Credit alerts are generated automatically at 90% and at 100% of your Azure credit balance. Whenever an alert is generated, its reflected in cost alerts, and in the email sent to the account owners. B. Budget alerts notify you when spending, based on usage or cost, reaches or exceeds the amount defined in the alert condition of the budget. Cost Management budgets are created using the Azure portal or the Azure Consumption API. In the Azure portal, budgets are defined by cost. Budgets are defined by cost or by consumption usage when using the Azure Consumption API. Budget alerts support both cost-based and usage-based budgets. Budget alerts are generated automatically whenever the budget alert conditions are met. You can view all cost alerts in the Azure portal. Whenever an alert is generated, it appears in cost alerts. An alert email is also sent to the people in the alert recipients list of the budget. D. Cost Management is a service that helps avoid unexpected Azure costs. With Cost Management, you can quickly check Azure resource costs, create alerts based on resource spend, and create budgets that can be used to automate management of resources.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/6-describe-azure-tool

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is a budget alert in Azure Cost Management?
A. A notification that a department spending quota has been met
B. A notification that Azure credit commitments have been consumed
C. A notification that spending, based on the alert condition of the budget, reaches or exceeds a defined amount
D. A quick visual for your Azure costs
A: Correct Answer: C. A notification that spending, based on the alert condition of the budget, reaches or exceeds a defined amount
Explanation: Budget alerts notify you when spending, based on usage or cost, reaches or exceeds the amount defined in the alert condition of the budget.
Incorrect Answer Explanation(s):
A is incorrect because a department spending quota alert notifies when department spending reaches a fixed threshold of the quota. B is incorrect because credit alerts notify you when your Azure credit monetary commitments are consumed. D is incorrect because Cost analysis provides a quick visual for your Azure costs, not budget alerts.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/6-describe-azure-tool

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is the purpose of tags in resource management on Azure?
A. To classify data by its security level
B. To group resources according to how critical their availability is to your business
C. To assign one or more tags to each Azure resource
D. To manage and report on costs, allocate internal cost centers, track budgets, and forecast estimated cost
A: Correct Answer: D. To manage and report on costs, allocate internal cost centers, track budgets, and forecast estimated cost
Explanation: One of the main uses of resource tags in Azure is cost management and optimization. By grouping resources using tags, you can report on, allocate, track, and forecast costs more easily.
Incorrect Answer Explanation(s):
Option A is incorrect because the purpose of security tagging is to classify data by its security level, not for resource management. Option B is incorrect because it describes grouping resources based on their criticality to your business. Option C describes the structure of a resource tag, but not its purpose.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-cost-management-azure/7-describe-purpose-of-tags

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is the purpose of Azure Blueprints?
A. To deploy and manage Azure resources and services
B. To standardize cloud subscription or environment deployments
C. To monitor and track deployments in Azure
D. To define configuration parameters for Azure resources
A: Correct Answer: B. To standardize cloud subscription or environment deployments
Explanation: Azure Blueprints allows you to define repeatable settings and policies that are applied as new subscriptions are created. It standardizes cloud subscription or environment deployments, making it easier to enforce settings and policies across multiple environments.
Incorrect Answer Explanation(s):
A. describes the purpose of Azure Resource Manager, which is to deploy and manage Azure resources and services. C. partially describes the purpose of Azure Blueprints, but monitoring is not the primary purpose of the tool. D. describes the purpose of ARM templates, which are used to define configuration parameters for Azure resources.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-azure-for-governance-compliance/2-describe-purpose-of-azure-blueprints

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What are artifacts in Azure Blueprints?
A. Azure subscriptions
B. Configurable components within the blueprint definition
C. Compliant settings and policies for new environments
D. Versioned deployment records
A: Correct Answer: B. Configurable components within the blueprint definition
Explanation: Artifacts refer to the configurable components within a blueprint definition, which can include items such as role assignments, policy assignments, ARM templates, and resource groups. They can be customized with parameters that can be specified at the scope assignment level.
Incorrect Answer Explanation(s):
A is incorrect because Azure subscriptions are the environments in which Azure Blueprints can be deployed. C is incorrect because compliant settings and policies are included within the blueprint definition, but they do not solely constitute artifacts. D is incorrect because versioned deployment records are the result of blueprint assignments, but they are not artifacts themselves.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-azure-for-governance-compliance/2-describe-purpose-of-azure-blueprints

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
How do Azure Blueprints help monitor deployments?
A. Azure Blueprints can make small updates and keep track of which deployments used which configuration set.
B. Azure Blueprints are version-able, allowing you to create an initial configuration and then make updates later on and assign a new version to the update.
C. Azure Blueprints define repeatable settings and policies that are applied as new subscriptions are created.
D. Azure Blueprints deploy a new environment based on all of the requirements, settings, and configurations of the associated artifacts.
A: Correct Answer: B. Azure Blueprints are version-able, allowing you to create an initial configuration and then make updates later on and assign a new version to the update.
Explanation: Azure Blueprints are version-able, allowing for updates to be made and assigned a new version to track which deployments used which configuration set. This helps with monitoring and tracking deployments.
Incorrect Answer Explanation(s):
Option A describes versioning but does not specifically address how Azure Blueprints help monitor deployments. Option C describes how Azure Blueprints standardize cloud deployments, but does not specifically address monitoring. Option D describes how Azure Blueprints deploy a new environment, but does not specifically address monitoring.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-azure-for-governance-compliance/2-describe-purpose-of-azure-blueprints

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is the purpose of Azure Policy?
A. To create, assign, and manage policies that control or audit your resources
B. To provide recommendations for optimizing resource performance
C. To monitor resource usage
D. To automate resource deployments
A: Correct Answer: A. To create, assign, and manage policies that control or audit your resources
Explanation: Azure Policy enables you to create, assign, and manage policies that control or audit your resources. These policies enforce different rules across your resource configurations so that those configurations stay compliant with corporate standards. Additionally, Azure Policies can be set at each level, enabling you to set policies on a specific resource, resource group, subscription, and so on. Azure Policy also evaluates your resources and highlights resources that arent compliant with the policies youve created.
Incorrect Answer Explanation(s):
B. Azure Policy is not meant to provide recommendations for optimizing resource performance. C. Azure Policy is not meant to monitor resource usage. D. Azure Policy is not meant to automate resource deployments.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-azure-for-governance-compliance/3-describe-purpose-of-azure-policy

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
How does Azure Policy define policies?
A. By evaluating resource configurations against built-in policy and initiative definitions
B. By automatically fixing noncompliant resource configurations
C. By allowing exceptions to specific resources that do not comply with policies
D. By setting policies only at the subscription level
A: Correct Answer: A. By evaluating resource configurations against built-in policy and initiative definitions
Explanation: Azure Policy enables you to define both individual policies and groups of related policies, known as initiatives. Azure Policy evaluates your resources and highlights resources that arent compliant with the policies youve created. Azure Policy can also prevent noncompliant resources from being created.
Incorrect Answer Explanation(s):
B. While Azure Policy can automatically remediate noncompliant resources and configurations, it also allows you to retain full control of your environment and flag specific resources as exceptions. C. This statement is accurate, but it only describes one aspect of how Azure Policy defines policies. D. Azure Policies can be set at each level, enabling you to set policies on a specific resource, resource group, subscription, and so on
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-azure-for-governance-compliance/3-describe-purpose-of-azure-policy

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What are Azure Policy initiatives?
A. A way to assign individual policies
B. A way to track compliance for a larger goal
C. Policies that control or audit your resources
D. Built-in policy and initiative definitions
A: Correct Answer: B. A way to track compliance for a larger goal
Explanation: An Azure Policy initiative is a way to group related policies together in order to track compliance for a larger goal. The initiative definition contains all of the policy definitions to help track your compliance state.
Incorrect Answer Explanation(s):
Option A is incorrect, as an Azure Policy initiative is not a way to assign individual policies, but to group related policies together. Option C is incorrect, as policies that control or audit your resources are individual policies that can be grouped together into an initiative. Option D is incorrect, as built-in policy and initiative definitions are not Azure Policy initiatives but rather a part of Azure Policy, and they can be assigned as individual policies or as part of an initiative.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-azure-for-governance-compliance/3-describe-purpose-of-azure-policy

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What are the two types of resource locks?
A. Delete and Modify
B. ReadOnly and ReadWrite
C. FullControl and NoAccess
D. Admin and User
A: Correct Answer: B. ReadOnly and ReadWrite
Explanation: The two types of resource locks are ReadOnly and ReadWrite. ReadOnly means authorized users can read a resource, but they cant delete or update the resource. ReadWrite means users can read and modify a resource, but they cant delete the resource.
Incorrect Answer Explanation(s):
Option A is incorrect because there isnt a Modify lock in Azure, there are only ReadWrite locks. Option C is incorrect because FullControl and NoAccess are not types of resource locks. Option D is incorrect because Admin and User are not types of resource locks.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-azure-for-governance-compliance/4-describe-purpose-of-resource-locks

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What are the two types of resource locks?
A. ReadWrite and Delete
B. ReadOnly and Delete
C. ReadWrite and Modify
D. ReadOnly and Modify
A: Correct Answer: B. ReadOnly and Delete
Explanation: There are two types of resource locks: Delete and ReadOnly. Delete means authorized users can still read and modify a resource but they cant delete the resource. ReadOnly means authorized users can read a resource, but they cant delete or update the resource.
Incorrect Answer Explanation(s):
Option A, C, and D are incorrect because ReadWrite and Modify are not the correct types of locks.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-azure-for-governance-compliance/4-describe-purpose-of-resource-locks

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What are the two types of resource locks?
A. ReadOnly and NoUpdate
B. ReadOnly and Delete
C. ReadWrite and Delete
D. NoDelete and NoChange
A: Correct Answer: B. ReadOnly and Delete
Explanation: The two types of resource locks are ReadOnly and Delete. ReadOnly allows authorized users to read a resource, but they cant delete or update the resource. Delete prevents authorized users from deleting a resource, but they can still read and modify the resource.
Incorrect Answer Explanation(s):
Option A is incorrect because there is no NoUpdate type of resource lock. ReadOnly and Delete are the two types. Option C is incorrect as ReadWrite is not a type of resource lock. Option D is incorrect as there is no NoDelete or NoChange type of resource lock.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-azure-for-governance-compliance/4-describe-purpose-of-resource-locks

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
How can you delete or change a locked resource in Azure?
A. Users can modify a locked resource directly without any other actions
B. Users must first remove the lock and then apply any action they have permission to perform
C. Users must seek permission from Microsoft support to delete or change a locked resource
D. Locked resources cannot be changed or deleted
A: Correct Answer: B. Users must first remove the lock and then apply any action they have permission to perform
Explanation: If you want to modify a locked resource, the first step is to remove the lock. Once the lock is removed, you can make any necessary changes to the resource that you have permission to perform.
Incorrect Answer Explanation(s):
A resource lock is designed to prevent resources from being deleted or changed accidentally, so its not possible to modify a locked resource directly without first removing the lock. Seeking permission from Microsoft support is not necessary for managing resource locks in Azure. Additionally, while resource locks prevent certain actions, they do not prohibit all changes to a resource.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-azure-for-governance-compliance/4-describe-purpose-of-resource-locks

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is the purpose of the Microsoft Service Trust Portal?
A. To provide access to various content, tools, and other resources about Microsoft security, privacy, and compliance practices.
B. To allow users to create and manage Azure services.
C. To provide access to Microsofts social media platforms.
D. To access Microsofts customer support portal.
A: Correct Answer: A. To provide access to various content, tools, and other resources about Microsoft security, privacy, and compliance practices.
Explanation: The Service Trust Portal provides access to content, tools, and resources about Microsofts security, privacy, and compliance practices.
Incorrect Answer Explanation(s):
B is incorrect because Azure service creation and management is not the main purpose of the Service Trust Portal. C is incorrect because Microsofts social media platforms are not related to the Service Trust Portal. D is incorrect because the Service Trust Portal is not related to Microsofts customer support portal.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-azure-for-governance-compliance/6-describe-purpose-of-service-trust-portal

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is the purpose of the Service Trust Portal?
A. To provide access to Microsoft games
B. To provide access to Microsofts implementation of controls and processes that protect cloud services and customer data
C. To provide access to social media sites
D. To provide access to Microsofts hardware products
A: Correct Answer: B. To provide access to Microsofts implementation of controls and processes that protect cloud services and customer data
Explanation: The Service Trust Portal is a portal that provides access to various content, tools, and other resources about Microsoft security, privacy, and compliance practices. It is designed to provide access to Microsofts implementation of controls and processes that protect our cloud services and the customer data therein.
Incorrect Answer Explanation(s):
A. Incorrect, The Service Trust Portal is not related to Microsoft games. C. Incorrect, The Service Trust Portal does not provide access to social media sites. D. Incorrect, The Service Trust Portal does not provide access to Microsofts hardware products.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-azure-for-governance-compliance/6-describe-purpose-of-service-trust-portal

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is Azure PowerShell?
A. A browser-based shell tool that allows you to create, configure, and manage Azure resources using a shell
B. A shell with which developers, DevOps, and IT professionals can run command-lets (cmdlets) that call the Azure REST API to perform management tasks in Azure
C. A console that provides an alternative to command-line tools
D. A unified console that enables you to manage your Azure subscription by using a graphical user interface
A: Correct Answer: B. A shell with which developers, DevOps, and IT professionals can run command-lets (cmdlets) that call the Azure REST API to perform management tasks in Azure
Explanation: Azure PowerShell is a shell with which developers, DevOps, and IT professionals can run commands called command-lets (cmdlets). These commands call the Azure REST API to perform management tasks in Azure.
Incorrect Answer Explanation(s):
A is incorrect because Azure Cloud Shell is a browser-based shell tool. C is incorrect because the console that provides an alternative to command-line tools is actually the Azure Portal. D is incorrect because the unified console that enables you to manage your Azure subscription by using a graphical user interface is actually the Azure Portal.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-manage-deploy-azure-resources/2-describe-interacting-azure

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is the Azure portal?
A. An alternative to the Azure CLI
B. A shell tool for managing Azure resources
C. A web-based, unified console for managing Azure with a graphical user interface
D. A command-line interface for managing Azure
A: Correct Answer: C. A web-based, unified console for managing Azure with a graphical user interface
Explanation: The Azure portal is a web-based, unified console that provides an alternative to command-line tools. With the Azure portal, you can manage your Azure subscription by using a graphical user interface.
Incorrect Answer Explanation(s):
A is incorrect because the Azure portal is not an alternative to the Azure CLI, rather it is a web-based console. B is incorrect because Azure portal is not a shell tool for managing Azure resources, it is a console. D is incorrect because The Azure portal is not a command-line interface, it is a console with a graphical user interface.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-manage-deploy-azure-resources/2-describe-interacting-azure

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is Azure Cloud Shell?
A. A shell with which developers can run commands called cmdlets
B. A web-based unified console that provides an alternative to command-line tools
C. A browser-based shell tool that allows you to create, configure, and manage Azure resources using a shell
D. A Command Line Interface (CLI) which uses Bash shell
A: Correct Answer: C. A browser-based shell tool that allows you to create, configure, and manage Azure resources using a shell
Explanation: Azure Cloud Shell is a browser-based shell tool that allows you to create, configure, and manage Azure resources using a shell. It is authenticated to your Azure credentials, can be accessed via the Azure portal, and supports both Azure PowerShell and the Azure CLI (which uses Bash).
Incorrect Answer Explanation(s):
A is incorrect because it describes Azure PowerShell. B is incorrect because it describes the Azure portal. D is incorrect because it is a description of Azure CLI.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-manage-deploy-azure-resources/2-describe-interacting-azure

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is the Azure CLI?
A. A web-based, unified console that provides an alternative to command-line tools
B. A shell tool that allows you to create, configure, and manage Azure resources using a shell
C. A tool that allows you to run commands called cmdlets in Azure
D. A tool that uses Bash commands to perform management tasks in Azure
A: Correct Answer: D. A tool that uses Bash commands to perform management tasks in Azure
Explanation: The Azure CLI is functionally equivalent to Azure PowerShell, with the primary difference being the syntax of commands and uses Bash commands to perform management tasks in Azure.
Incorrect Answer Explanation(s):
A is incorrect because it refers to the Azure portal. B is incorrect because it refers to Azure Cloud Shell. C is incorrect because it refers to Azure PowerShell.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-manage-deploy-azure-resources/2-describe-interacting-azure

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is the purpose of Azure Arc?
A. Provide a platform for creating Azure resources
B. Simplify governance and management of hybrid and multi-cloud configurations
C. Monitor and configure on-premise resources
D. Manage Azure data services only
A: Correct Answer: B. Simplify governance and management of hybrid and multi-cloud configurations
Explanation: Azure Arc simplifies governance and management by delivering a consistent multi-cloud and on-premises management platform. It provides a centralized, unified way to manage hybrid and multi-cloud virtual machines, Kubernetes clusters, and databases as if they are running in Azure.
Incorrect Answer Explanation(s):
Azure Arc provides a management platform for hybrid and multi-cloud resources that goes beyond simply monitoring and configuring on-premise resources (C). While it can manage Azure data services (D), it is not limited only to those resources. It does not provide a platform for creating Azure resources (A).
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-manage-deploy-azure-resources/3-describe-purpose-of-azure-arc

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What types of resource can Azure Arc currently manage that are hosted outside of Azure?
A. Servers, Kubernetes clusters, Azure data services, SQL Server, and virtual machines (preview)
B. Virtual machines, Azure data services, and Kubernetes clusters
C. Azure data services, SQL Server, and servers
D. Servers, Kubernetes clusters, and Azure data services
A: Correct Answer: A. Servers, Kubernetes clusters, Azure data services, SQL Server, and virtual machines (preview)
Explanation: Azure Arc allows management of servers, Kubernetes clusters, Azure data services, SQL Server, and virtual machines (preview) that are hosted outside of Azure. This provides a consistent multi-cloud and on-premises management platform for hybrid and multi-cloud environments.
Incorrect Answer Explanation(s):
B is incorrect because it is missing servers and SQL Server as well as including fewer Kubernetes clusters and Azure data services; C is incorrect because it is missing servers and virtual machines (preview) as well as including fewer Kubernetes clusters and Azure data services; D is incorrect because it is missing SQL Server and virtual machines (preview) as well as including fewer Azure data services.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-manage-deploy-azure-resources/3-describe-purpose-of-azure-arc

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is an Azure ARM template?
A. A piece of code written in a programming language for deploying Azure infrastructure.
B. A YAML file that defines the resources you want to deploy to Azure.
C. A JSON file that defines the resources you want to deploy to Azure.
D. A text file that contains the configuration data of Azure resources.
A: Correct Answer: C. A JSON file that defines the resources you want to deploy to Azure.
Explanation: An ARM template is a JSON file that defines what you want to deploy to Azure. By using ARM templates, you can describe the resources you want to use in a declarative JSON format. With an ARM template, the deployment code is verified before any code is run.
Incorrect Answer Explanation(s):
Option A is incorrect because an ARM template is a declarative JSON file that defines resources to deploy to Azure, not a piece of code written in a programming language for deploying Azure infrastructure. Option B is incorrect because an ARM template is a JSON file, not a YAML file. Option D is incorrect because an ARM template is not a configuration file, and it does not contain configuration data. It is a JSON file that defines resources and their properties to deploy to Azure.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-manage-deploy-azure-resources/4-describe-azure-resource-manager-azure-arm-templates

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What benefits do ARM templates provide when planning for deploying Azure resources?
A. Repeatedly deploy your infrastructure throughout the development lifecycle and have confidence your resources are deployed in a consistent manner.
B. Handle resources individually.
C. Deploy resources serially.
D. Write the actual programming commands and sequence to deploy the resources.
A: Correct Answer: A. Repeatedly deploy your infrastructure throughout the development lifecycle and have confidence your resources are deployed in a consistent manner.
Explanation: ARM templates allow you to repeatedly deploy your infrastructure throughout the development lifecycle and have confidence your resources are deployed in a consistent manner. You can use the same ARM template to deploy multiple dev/test environments, knowing that all the environments are the same. ARM templates also provide declarative syntax, orchestration and modular files.
Incorrect Answer Explanation(s):
B. Handle resources individually is an incorrect option as the benefits of ARM templates is that you dont need to handle resources individually. C. Deploy resources serially is an incorrect option as ARM templates deploys resources in parallel when possible, which makes the deployments faster. D. Write the actual programming commands and sequence to deploy the resources is an incorrect option as ARM templates use declarative syntax which means you declare what you want to deploy, but you dont need to write the actual programming commands and sequence to deploy the resources.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-manage-deploy-azure-resources/4-describe-azure-resource-manager-azure-arm-templates

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is the purpose of Azure Advisor?
A. To create Azure resources
B. To evaluate and provide recommendations for Azure resources
C. To delete Azure resources
D. To monitor Azure resources
A: Correct Answer: B. To evaluate and provide recommendations for Azure resources
Explanation: The purpose of Azure Advisor is to evaluate your Azure resources and provide recommendations on how to improve reliability, security, performance, operational excellence, and cost optimization. It is designed to help you save time on cloud optimization.
Incorrect Answer Explanation(s):
The purpose of Azure Advisor is not to create, delete, or monitor Azure resources.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-monitoring-tools-azure/2-describe-purpose-of-azure-advisor

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is the difference between Azure Status, Service Health, and Resource Health in Azure Service Health?
A. Azure Status is a narrower view of Azure services and regions, Service Health provides a broad view of Azure services and regions, and Resource Health provides a complete view of Azure environment.
B. Azure Status is a global view of the health of all Azure services, Service Health provides a narrower view of Azure services and regions, and Resource Health is a tailored view of your Azure resources.
C. Azure Status informs you of service outages in Azure, Service Health provides information about virtual machine instances, and Resource Health is a global view of the health of all Azure services.
D. Azure Status is a tailored view of your Azure resources, Service Health focuses on services youre not using, and Resource Health provides a global view of the health of all Azure services.
A: Correct Answer: B. Azure Status is a global view of the health of all Azure services, Service Health provides a narrower view of Azure services and regions, and Resource Health is a tailored view of your Azure resources.
Explanation: Azure Status is a global view of the health of all Azure services, while Service Health provides a narrower view of Azure services and regions, and Resource Health is a tailored view of your Azure resources. Azure Service Health combines these three services to give you a complete view of your Azure environment. It is the best place to look for service impacting communications about outages, planned maintenance activities, and other health advisories because the authenticated Service Health experience knows which services and resources you currently use. You can use this information to proactively adjust application deployments, reduce the risk of downtime, and ultimately influence business outcomes.
Incorrect Answer Explanation(s):
A. This is incorrect because Azure Status provides a broad view of Azure services and regions, while Service Health provides a narrower view of Azure services and regions, and Resource Health is a tailored view of your Azure resources. C. This is incorrect because Azure Status informs you of service outages in Azure on the Azure Status page, while Service Health provides a narrower view of Azure services and regions, and Resource Health is a tailored view of your Azure resources. D. This is incorrect because Azure Status is a global view of the health of all Azure services, while Service Health focuses on the Azure services and regions youre using, and Resource Health provides a tailored view of your actual Azure resources.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-monitoring-tools-azure/3-describe-azure-service-health

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is Azure Monitor Alerts?
A. A tool where you write and run log queries on data gathered by Azure Monitor
B. A platform for collecting data on your resources and analyzing that data
C. An automated way to stay informed when Azure Monitor detects a threshold being crossed
D. A tool that monitors your web applications
A: Correct Answer: C. An automated way to stay informed when Azure Monitor detects a threshold being crossed
Explanation: Azure Monitor Alerts are an automated way to stay informed when Azure Monitor detects a threshold being crossed. You set the alert conditions, the notification actions, and then Azure Monitor Alerts notifies when an alert is triggered.
Incorrect Answer Explanation(s):
A is incorrect because Azure Log Analytics is the tool where you write and run log queries on data gathered by Azure Monitor. B is incorrect because Azure Monitor is a platform for collecting data on your resources and analyzing that data. D is incorrect because Application Insights is a tool that monitors your web applications.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-monitoring-tools-azure/4-describe-azure-monitor

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is Azure Log Analytics?
A. A tool for collecting data in Azure
B. A tool for monitoring web applications
C. A tool for writing and running log queries on data gathered by Azure Monitor
D. An automated way to stay informed when an Azure Monitor detects a threshold being crossed
A: Correct Answer: C. A tool for writing and running log queries on data gathered by Azure Monitor
Explanation: Azure Log Analytics is the tool in the Azure portal where you write and run log queries on the data gathered by Azure Monitor. It is a powerful tool that supports both simple and complex queries, and you can use it to sort, filter, and analyze the records returned by your queries.
Incorrect Answer Explanation(s):
A: Azure Monitor is the tool for collecting data on your resources and analyzing that data. B: Application Insights is a feature of Azure Monitor for monitoring web applications. D: Azure Monitor Alerts are an automated way to stay informed when Azure Monitor detects a threshold being crossed.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-monitoring-tools-azure/4-describe-azure-monitor

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What are Azure Monitor Alerts?
A. Automated way to stay informed when Azure Monitor detects a threshold being crossed
B. A platform for collecting data on your resources
C. A tool in the Azure portal to write and run log queries
D. A feature that monitors your web applications
A: Correct Answer: A. Automated way to stay informed when Azure Monitor detects a threshold being crossed
Explanation: Azure Monitor Alerts are an automated way to stay informed when Azure Monitor detects a threshold being crossed. Depending on your configuration, Azure Monitor Alerts can also attempt corrective action. Alerts can be set up to monitor the logs and trigger on certain log events, or they can be set to monitor metrics and trigger when certain metrics are crossed. For example, you could set a metric-based alert up to notify you when the CPU usage on a virtual machine exceeded 80%. Alert rules based on metrics provide near real-time alerts based on numeric values.
Incorrect Answer Explanation(s):
B is incorrect because it describes Azure Monitor. C describes Azure Log Analytics. D describes Application Insights.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-monitoring-tools-azure/4-describe-azure-monitor

Q: 🔒 Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE) 🔒
https://handsoncyber.com/
What is the purpose of Application Insights in Azure?
A. To monitor your on-premises resources only
B. To monitor Azure resources only
C. To monitor web applications in Azure, on-premises, or in a different cloud environment
D. To monitor only external services
A: Correct Answer: C. To monitor web applications in Azure, on-premises, or in a different cloud environment
Explanation: Application Insights, an Azure Monitor feature, monitors your web applications. Application Insights is capable of monitoring applications that are running in Azure, on-premises, or in a different cloud environment.
Incorrect Answer Explanation(s):
A is incorrect because Application Insights can monitor resources both on-premises and in other cloud environments. B is incorrect because Application Insights specifically focuses on monitoring web applications, not just Azure resources. D is incorrect because Application Insights can also monitor internal dependencies within an application, not only external services.
Reference URL: https://learn.microsoft.com/en-us/training/modules/describe-monitoring-tools-azure/4-describe-azure-monitor