Updates to the exam Our exams are updated periodically to reflect skills that are required to perform a role. We have included two versions of the Skills Measured objectives depending on when you are taking the exam.
We always update the English language version of the exam first. Some exams are localized into other languages, and those are updated approximately eight weeks after the English version is updated. While Microsoft makes every effort to update localized versions as noted, there may be times when localized versions of an exam are not updated on this schedule. Other available languages are listed in the Schedule Exam section of the Exam Details webpage. If the exam isn’t available in your preferred language, you can request an additional 30 minutes to complete the exam.
Note The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. Related topics may be covered in the exam.
Note Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.
Audience profile This exam is designed for you, if you’re looking to demonstrate foundational-level knowledge of cloud-based solutions to facilitate productivity and collaboration among on-site, remote, and hybrid workers. As a candidate, you may:
Have knowledge of cloud-based solutions.
Be new to Microsoft 365.
You can use this exam to prepare for other Microsoft certifications, but it’s not a prerequisite for the related ones.
As a candidate, you should be able to recommend Microsoft 365 solutions that address common organizational IT challenges. You should understand how Microsoft 365 solutions:
Improve productivity
Facilitate collaboration
Optimize communications
Help secure data
Identity and facilitate compliance
You should be able to recommend solutions for:
Endpoint and application management
Desktop virtualization
Automated operating system deployment
Reporting and analytics
You should be familiar with Microsoft 365 licensing, deployment and migration assistance, and support options for organizations looking to maximize their investment in the cloud.
Skills at a glance
Describe cloud concepts (5–10%) Describe Microsoft 365 apps and services (45–50%) Describe security, compliance, privacy, and trust in Microsoft 365 (25–30%) Describe Microsoft 365 pricing, licensing, and support (10–15%)
Describe cloud concepts (5–10%) Describe the different types of cloud services available Describe Microsoft software as a service (SaaS), infrastructure as a service (IaaS), and platform as a service (PaaS) concepts and use cases Describe differences between Office 365 and Microsoft 365 Describe the benefits of and considerations for using cloud, hybrid, or on-premises services Describe public, private, and hybrid cloud models Compare costs and advantages of cloud, hybrid, and on-premises services Describe the concept of hybrid work and flexible work
Describe Microsoft 365 apps and services (45–50%) Describe productivity solutions of Microsoft 365 Describe the core productivity capabilities and benefits of Microsoft 365 including Microsoft Outlook and Microsoft Exchange, Microsoft 365 apps, and OneDrive Describe core Microsoft 365 Apps including Microsoft Word, Excel, PowerPoint, Outlook, and OneNote Describe work management capabilities of Microsoft 365 including Microsoft Project, Planner, Bookings, Forms, Lists, and To Do Describe collaboration solutions of Microsoft 365 Describe the collaboration benefits and capabilities of Microsoft 365 including Microsoft Exchange, Outlook, SharePoint, OneDrive, and Stream Describe the collaboration benefits and capabilities of Microsoft Teams and Teams Phone Describe the Microsoft Viva apps Describe the ways that you can extend Microsoft Teams by using collaborative apps Describe endpoint modernization, management concepts, and deployment options in Microsoft 365 Describe the endpoint management capabilities of Microsoft 365 including Microsoft Endpoint Manager (MEM), Intune, AutoPilot, and Configuration Manager with cloud attach Compare the differences between Windows 365 and Azure Virtual Desktop Describe the deployment and release models for Windows-as-a-Service (WaaS) including deployment rings Identify deployment and update channels for Microsoft 365 Apps Describe analytics capabilities of Microsoft 365 Describe the capabilities of Viva Insights Describe the capabilities of the Microsoft 365 Admin center and Microsoft 365 user portal Describe the reports available in the Microsoft 365 Admin center and other admin centers
Describe security, compliance, privacy, and trust in Microsoft 365 (25–30%) Describe identity and access management solutions of Microsoft 365 Describe the identity and access management capabilities of Microsoft Entra ID Describe cloud identity, on-premises identity, and hybrid identity concepts Describe how Microsoft uses methods such as multi-factor authentication (MFA), self-service password reset (SSPR), and conditional access, to keep identities, access, and data secure Describe threat protection solutions of Microsoft 365 Describe Microsoft 365 Defender, Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, and the Microsoft 365 Defender Portal Describe Microsoft Secure Score benefits and capabilities Describe how Microsoft 365 addresses the most common types of threats against endpoints, applications, and identities Describe trust, privacy, risk, and compliance solutions of Microsoft 365 Describe the Zero Trust Model Describe Microsoft Purview compliance solutions such as insider risk, auditing, and eDiscovery Describe Microsoft Purview Information Protection features such as sensitivity labels and data loss prevention Describe how Microsoft supports data residency to ensure regulatory compliance Describe the capabilities and benefits of Microsoft Priva
Describe Microsoft 365 pricing, licensing, and support (10–15%) Identify Microsoft 365 pricing and billing management options Describe the pricing model for Microsoft cloud services including enterprise agreements, cloud solution providers, and direct billing Describe available billing and bill management options including billing frequency and methods of payment Identify licensing options available in Microsoft 365 Describe license management Describe the differences between base licensing and add-on licensing Identify support options for Microsoft 365 services Describe how to create a support request for Microsoft 365 services Describe support options for Microsoft 365 services Describe service-level agreements (SLAs) including service credits Determine service health status by using the Microsoft 365 admin center or the Microsoft Entra admin center
QUESTION 2 You need to consider the underlined segment to establish whether it is accurate. All applications will remain in a hybrid environment after migrating to Microsoft Azure. Select ”’?No adjustment required”’? if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.
A. No adjustment required. B. Applications that manage sensitive information C. Applications where access requires a USB-token device D. All legacy applications
Answer: B
QUESTION 3 Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company plans to move their Server environment to the cloud. You have been tasked with identifying a cloud model that allows for the current email environment to be upgraded, while also reducing server and application maintenance. You need to make sure that the requirements are met. Solution: You recommend the Platform as a service (PaaS) model. Does the solution meet the goal?
A. Yes B. No
Answer: B
QUESTION 4 Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company plans to move their Server environment to the cloud. You have been tasked with identifying a cloud model that allows for the current email environment to be upgraded, while also reducing server and application maintenance. You need to make sure that the requirements are met. Solution: You recommend the Infrastructure as a service (IaaS) model. Does the solution meet the goal?
A. Yes B. No
Answer: B
QUESTION 5 Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company plans to move their Server environment to the cloud. You have been tasked with identifying a cloud model that allows for the current email environment to be upgraded, while also reducing server and application maintenance. You need to make sure that the requirements are met. Solution: You recommend the Software as a service (SaaS) model. Does the solution meet the goal?
A. Yes B. No
Answer: A
QUESTION 6 Your company makes use of Platform as a Service (PaaS) for their Azure solution. Which of the following options are components that your IT employees are responsible for?
A. Networks. B. Databases. C. Applications. D. Servers.
Answer: C QUESTION 7 Your company makes use of Platform as a Service (PaaS) for their Azure solution. Which of the following options are components that Microsoft are responsible for? (Choose all that apply).
A. Storage. B. Databases. C. Applications. D. Operating system.
Answer: A,B,D
QUESTION 8 Your company is planning to migrate to Microsoft Azure and Microsoft 365. You are required to identify a cloud service that allows for website hosting. Which of the following is the model you should choose?
A. Software as a Service (SaaS) B. Platform as a Service (PaaS) C. Infrastructure as a Service (IaaS) D. Container as a Service (CaaS)
Answer: B
QUESTION 9 Your company is planning to migrate to Microsoft Azure and Microsoft 365. You are required to identify a cloud service that allows for the deployment of a Linux virtual machine. Which of the following is the model you should choose?
A. Software as a Service (SaaS) B. Platform as a Service (PaaS) C. Infrastructure as a Service (IaaS) D. Container as a Service (CaaS)
Answer: C
QUESTION 11 You need to consider the underlined segment to establish whether it is accurate. To ensure that when a new Microsoft Word feature is available for worker to install as soon as it becomes available, you should subscribe to the Targeted release channel. Select ”’?No adjustment required”’? if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.
A. No adjustment required. B. Standard release C. Semi-annual D. Annual
Updates to the exam Our exams are updated periodically to reflect skills that are required to perform a role. We have included two versions of the Skills Measured objectives depending on when you are taking the exam.
We always update the English language version of the exam first. Some exams are localized into other languages, and those are updated approximately eight weeks after the English version is updated. While Microsoft makes every effort to update localized versions as noted, there may be times when the localized versions of an exam are not updated on this schedule. Other available languages are listed in the Schedule Exam section of the Exam Details webpage. If the exam isn’t available in your preferred language, you can request an additional 30 minutes to complete the exam. Note
The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. Related topics may be covered in the exam. Note
Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.
Skills measured as of October 31, 2023 Audience profile As a candidate for this exam, you should have subject matter expertise in planning, implementing, and managing Azure networking solutions, including: Core network infrastructure Hybrid connectivity Application delivery services Private access to Azure services Network security
As an Azure network engineer your responsibilities include optimizing performance, resiliency, scale, and security of Azure networking solutions. You deploy the solutions by using the Azure portal, the command line, and templates. You proactively monitor network environments to identify issues and minimize risk.
To deliver Azure solutions, you work with: Solution architects Cloud administrators Security engineers Application developers DevOps engineers
You also assist Azure support engineers in resolving connectivity issues reported by customers.
As a candidate for this exam, you should have experience creating and managing compute, storage, and networking resources in Azure. You should understand networking fundamentals, such as:
Name resolution Network protocols Network address management
Skills at a glance Design and implement core networking infrastructure (20–25%) Design, implement, and manage connectivity services (20–25%) Design and implement application delivery services (20–25%) Design and implement private access to Azure services (5–10%) Secure network connectivity to Azure resources (15–20%) Design and implement core networking infrastructure (20–25%) Design and implement IP addressing for Azure resources
Plan and implement network segmentation and address spaces Create a virtual network (VNet) Plan and configure subnetting for services, including VNet gateways, private endpoints, firewalls, application gateways, VNet-integrated platform services, and Azure Bastion Plan and configure subnet delegation Create a prefix for public IP addresses Choose when to use a public IP address prefix Plan and implement a custom public IP address prefix (bring your own IP) Create a new public IP address Associate public IP addresses to resources Design and implement name resolution Design name resolution inside a VNet Configure DNS settings for a VNet Design public DNS zones Design private DNS zones Configure a public or private DNS zone Link a private DNS zone to a VNet Design and implement DNS private resolver Design and implement VNet connectivity and routing Design service chaining, including gateway transit Design virtual private network (VPN) connectivity between VNets Implement VNet peering Design and implement user-defined routes (UDRs) Associate a route table with a subnet Configure forced tunneling Diagnose and resolve routing issues Design and implement Azure Route Server Identify appropriate use cases for a network address translation (NAT) gateway in the virtual network Implement a NAT gateway Monitor networks Configure monitoring, network diagnostics, and logs in Azure Network Watcher Monitor and repair network health by using Azure Network Watcher Activate and monitor distributed denial-of-service (DDoS) protection Activate and monitor Microsoft Defender for DNS
Design, implement, and manage connectivity services (20–25%) Design, implement, and manage a site-to-site VPN connection Design a site-to-site VPN connection, including for high availability Select an appropriate VNet gateway stock-keeping unit (SKU) for site-to-site VPN requirements Implement a site-to-site VPN connection Identify when to use a policy-based VPN versus a route-based VPN connection Create and configure an IPsec/Internet Key Exchange (IKE) policy Diagnose and resolve virtual network gateway connectivity issues Implement Azure Extended Network Design, implement, and manage a point-to-site VPN connection Select an appropriate virtual network gateway SKU for point-to-site VPN requirements Select and configure a tunnel type Select an appropriate authentication method Configure RADIUS authentication Configure certificate-based authentication Configure authentication by using Microsoft Entra ID Implement a VPN client configuration file Diagnose and resolve client-side and authentication issues Specify Azure requirements for Always On authentication Specify Azure requirements for Azure Network Adapter Design, implement, and manage Azure ExpressRoute Select an ExpressRoute connectivity model Select an appropriate ExpressRoute SKU and tier Design and implement ExpressRoute to meet requirements, including cross-region connectivity, redundancy, and disaster recovery Design and implement ExpressRoute options, including Global Reach, FastPath, and ExpressRoute Direct Choose between private peering only, Microsoft peering only, or both Configure private peering Configure Microsoft peering Create and configure an ExpressRoute gateway Connect a virtual network to an ExpressRoute circuit Recommend a route advertisement configuration Configure encryption over ExpressRoute Implement Bidirectional Forwarding Detection Diagnose and resolve ExpressRoute connection issues Design and implement an Azure Virtual WAN architecture Select a Virtual WAN SKU Design a Virtual WAN architecture, including selecting types and services Create a hub in Virtual WAN Choose an appropriate scale unit for each gateway type Deploy a gateway into a Virtual WAN hub Configure virtual hub routing Create a network virtual appliance (NVA) in a virtual hub Integrate a Virtual WAN hub with a third-party NVA
Design and implement application delivery services (20–25%) Design and implement an Azure Load Balancer Map requirements to features and capabilities of Azure Load Balancer Identify appropriate use cases for Azure Load Balancer Choose an Azure Load Balancer SKU and tier Choose between public and internal Choose between regional and global Create and configure an Azure Load Balancer Implement a load balancing rule Create and configure inbound NAT rules Create and configure explicit outbound rules, including source network address translation (SNAT) Design and implement Azure Application Gateway Map requirements to features and capabilities of Azure Application Gateway Identify appropriate use cases for Azure Application Gateway Choose between manual and autoscale Create a back-end pool Configure health probes Configure listeners Configure routing rules Configure HTTP settings Configure Transport Layer Security (TLS) Configure rewrite sets Design and implement Azure Front Door Map requirements to features and capabilities of Azure Front Door Identify appropriate use cases for Azure Front Door Choose an appropriate tier Configure an Azure Front Door, including routing, origins, and endpoints Configure SSL termination and end-to-end SSL encryption Configure caching Configure traffic acceleration Implement rules, URL rewrite, and URL redirect Secure an origin by using Azure Private Link in Azure Front Door Design and implement Azure Traffic Manager Identify appropriate use cases for Azure Traffic Manager Configure a routing method Configure endpoints
Design and implement private access to Azure services (5–10%) Design and implement Azure Private Link service and Azure private endpoints Plan private endpoints Create private endpoints Configure access to private endpoints Create a Private Link service Integrate Private Link and Private Endpoint with DNS Integrate a Private Link service with on-premises clients Design and implement service endpoints Choose when to use a service endpoint Create service endpoints Configure service endpoint policies Configure access to service endpoints
Secure network connectivity to Azure resources (15–20%) Implement and manage network security groups Create a network security group (NSG) Associate a NSG to a resource Create an application security group (ASG) Associate an ASG to a network interface card (NIC) Create and configure NSG rules Interpret NSG flow logs Validate NSG flow rules Verify IP flow Configure an NSG for remote server administration, including Azure Bastion Design and implement Azure Firewall and Azure Firewall Manager Map requirements to features and capabilities of Azure Firewall Select an appropriate Azure Firewall SKU Design an Azure Firewall deployment Create and implement an Azure Firewall deployment Configure Azure Firewall rules Create and implement Azure Firewall Manager policies Create a secure hub by deploying Azure Firewall inside an Azure Virtual WAN hub Design and implement a Web Application Firewall (WAF) deployment Map requirements to features and capabilities of WAF Design a WAF deployment Configure detection or prevention mode Configure rule sets for WAF on Azure Front Door Configure rule sets for WAF on Application Gateway Implement a WAF policy Associate a WAF policy
Sample Question and Answers Design, Implement and Manage Hybrid Networking Testlet 1 Case Study This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided. To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study. At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section. To start the case study To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.
Overview Litware, Inc. is a financial company that has a main datacenter in Boston and 20 branch offices across the United States. Users have Android, iOS, and Windows 10 devices.
Existing Environment Hybrid Environment The on-premises network contains an Active Directory forest named litwareinc.com that syncs to an Azure Active Directory (Azure AD) tenant named litwareinc.com by using Azure AD Connect. All offices connect to a virtual network named Vnet1 by using a Site-to-Site VPN connection.
Azure Environment Litware has an Azure subscription named Sub1 that is linked to the litwareinc.com Azure AD tenant. Sub1 contains resources in the East US Azure region as shown in the following table. A diagram of the resource in the East US Azure region is shown in the Network Diagram exhibit. There is bidirectional peering between Vnet1 and Vnet2. There is bidirectional peering between Vnet1 and Vnet3. Currently, Vnet2 and Vnet3 cannot communicate directly. Azure Environment Diagram Requirements Business Requirements Litware wants to minimize costs whenever possible, as long as all other requirements are met. Virtual Networking Requirements Litware identifies the following virtual networking requirements: Direct the default route of 0.0.0.0/0 on Vnet2 and Vnet3 to the Boston datacenter over an ExpressRoute circuit. Ensure that the records in the cloud.litwareinc.com can be resolved from the on-premises locations. Automatically register the DNS names of Azure virtual machines to the cloud.litwareinc.com zone. Minimize the size of the subnets allocated to platform-managed services. Allow traffic from VMScaleSet1 to VMScaleSet2 on the TCP port 443 only. Hybrid Networking Requirements Litware identifies the following hybrid networking requirements: Users must be able to connect to Vnet1 by using a Point-to-Site (P2S) VPN when working remotely. Connections must be authenticated by Azure AD. Latency of the traffic between the Boston datacenter and all the virtual networks must be minimized. The Boston datacenter must connect to the Azure virtual networks by using an ExpressRoute FastPath connection. Traffic between Vnet2 and Vnet3 must be routed through Vnet1. PaaS Networking Requirements Litware identifies the following networking requirements for platform as a service (PaaS): The storage1 account must be accessible from all on-premises locations without exposing the public endpoint of storage1. The storage2 account must be accessible from Vnet2 and Vnet3 without exposing the public endpoint of storage2.
QUESTION 1 HOTSPOT You need to recommend a configuration for the ExpressRoute connection from the Boston datacenter. The solution must meet the hybrid networking requirements and business requirements. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Correct Answer: Section: (none) Explanation Explanation/Reference: Design, Implement and Manage Hybrid Networking Testlet 2
Case Study This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided. To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study. At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section. To start the case study To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.
Overview Contoso, Ltd. is a consulting company that has a main office in San Francisco and a branch office in Dallas. Contoso recently purchased an Azure subscription and is performing its first pilot project in Azure. Existing Environment Azure Network Infrastructure Contoso has an Azure Active Directory (Azure AD) tenant named contoso.com. The Azure subscription contains the virtual networks shown in the following table. Vnet1 contains a virtual network gateway named GW1. Azure Virtual Machines The Azure subscription contains virtual machines that run Windows Server 2019 as shown in the following table. The NSGs are associated to the network interfaces on the virtual machines. Each NSG has one custom security rule that allows RDP connections from the internet. The firewall on each virtual machine allows ICMP traffic. An application security group named ASG1 is associated to the network interface of VM1. Azure Network Infrastructure Diagram Azure Private DNS Zones The Azure subscription contains the Azure private DNS zones shown in the following table. Zone1.contoso.com has the virtual network links shown in the following table. Other Azure Resources The Azure subscription contains additional resources as shown in the following table. Requirements Virtual Network Requirements Contoso has the following virtual network requirements: Create a virtual network named Vnet6 in West US that will contain the following resources and configurations: – Two container groups that connect to Vnet6 – Three virtual machines that connect to Vnet6 – Allow VPN connections to be established to Vnet6 – Allow the resources in Vnet6 to access KeyVault1, DB1, and Vnet1 over the Microsoft backbone network. The virtual machines in Vnet4 and Vnet5 must be able to communicate over the Microsoft backbone network. A virtual machine named VM-Analyze will be deployed to Subnet1. VM-Analyze must inspect the outbound network traffic from Subnet2 to the internet. Network Security Requirements Contoso has the following network security requirements: Configure Azure Active Directory (Azure AD) authentication for Point-to-Site (P2S) VPN users. Enable NSG flow logs for NSG3 and NSG4. Create an NSG named NSG10 that will be associated to Vnet1/Subnet1 and will have the custom inbound security rules shown in the following table. Create an NSG named NSG11 that will be associated to Vnet1/Subnet2 and will have the custom outbound security rules shown in the following table. QUESTION 2 You need to configure GW1 to meet the network security requirements for the P2S VPN users. Which Tunnel type should you select in the Point-to-site configuration settings of GW1?
A. IKEv2 and OpenVPN (SSL) B. IKEv2 C. IKEv2 and SSTP (SSL) D. OpenVPN (SSL) E. SSTP (SSL)
Answer: D Section: (none) Explanation Explanation/Reference: Reference: Design, Implement and Manage Hybrid Networking Question Set 3
QUESTION 3 Your company has a single on-premises datacenter in New York. The East US Azure region has a peering location in New York. The company only has Azure resources in the East US region. You need to implement ExpressRoute to support up to 1 Gbps. You must use only ExpressRoute Unlimited data plans. The solution must minimize costs. Which type of ExpressRoute circuits should you create?
A. ExpressRoute Local B. ExpressRoute Direct C. ExpressRoute Premium D. ExpressRoute Standard
Answer: A Section: (none) Explanation Explanation/Reference: Reference:
QUESTION 4 You are planning an Azure Point-to-Site (P2S) VPN that will use OpenVPN. Users will authenticate by an on-premises Active Directory domain. Which additional service should you deploy to support the VPN authentication?
A. an Azure key vault B. a RADIUS server C. a certification authority D. Azure Active Directory (Azure AD) Application Proxy
Answer: B
QUESTION 5 You plan to configure BGP for a Site-to-Site VPN connection between a datacenter and Azure. Which two Azure resources should you configure? Each correct answer presents a part of the solution. (Choose two.) NOTE: Each correct selection is worth one point.
A. a virtual network gateway B. Azure Application Gateway C. Azure Firewall D. a local network gateway E. Azure Front Door
Answer: A,D
QUESTION 6 You fail to establish a Site-to-Site VPN connection between your company?s main office and an Azure virtual network. You need to troubleshoot what prevents you from establishing the IPsec tunnel. Which diagnostic log should you review?
A. IKEDiagnosticLog B. RouteDiagnosticLog C. GatewayDiagnosticLog D. TunnelDiagnosticLog
Answer: A
QUESTION 7 You have an Azure virtual network and an on-premises datacenter. You are planning a Site-to-Site VPN connection between the datacenter and the virtual network. Which two resources should you include in your plan? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. a user-defined route B. a virtual network gateway C. Azure Firewall D. Azure Web Application Firewall (WAF) E. an on-premises data gateway F. an Azure application gateway G. a local network gateway
Answer: BG
Students Reviews and Discussion
Zia Meer 1 year, 8 months ago Canada – Ontario Passed easily the exam today 55 Questions: 41 multiple choice (5 new the rest form here) and the 2 Case Study present in this dump (5 question the first and 9 questions the second). Surprisingly no question about Connected Field Service and very few about Workstreams and other new topics despite i was prepared for that. Thanks! upvoted 1 times
PEREIRA KRISNAMURTI 1 year, 9 months ago – São Paulo Brazil Took test 2/1/22 passed with this dump. upvoted 2 times
Omar Salgado 1 year, 9 months ago – Puerto Rico I took on 2.6.2022. About 75% of the questions were on the exam. There were some field service questions embedded into the exam, which I didn’t remotely expect. I passed. upvoted 2 times
Bin Bakkre 1 year, 10 months ago – Dhaka Bangladesh I passed my exam on 10-Jan-22. Many questions from this practice set. Case study based questions (almost 15) were also from this set but those are accessible after I had contributor access. As you know the exam syllabus has changed in Oct-21 so there are ~10 questions where you will need depth knowledge of omnichannel, power virtual agents, analytics. upvoted 3 times
djabour Nacer 1 year, 11 months ago – USA – Texas Passed. About 5 questions were not in the Certkingdom. Had case study with Lamna Healthcare Company but 2 new questions. Thank you Certkingdom. upvoted 3 times
GhoshVivek 1 year, 11 months ago – USA – California I sat the exam today, I would estimate that 80% of questions were covered here. upvoted 1 times
Nimesha Thilakarathna 1 years ago – Qatar Passed my exam yesterday, 85% of the questions from Certkingdom. Few of new questions and new user stories. upvoted 1 times
Audience profile DevOps engineers are developers or infrastructure administrators who also have subject matter expertise in working with people, processes, and products to enable continuous delivery of value in organizations.
Responsibilities for this role include designing and implementing strategies for collaboration, code, infrastructure, source control, security, compliance, continuous integration, testing, delivery, monitoring, and feedback.
DevOps engineers work on cross-functional teams that include developers, site reliability engineers, and Azure administrators.
DevOps engineers must have experience with administering and developing in Azure, with strong skills in at least one of these areas. They should be familiar with both Azure DevOps and GitHub.
Skills at a glance Configure processes and communications (10–15%) Design and implement source control (15–20%) Design and implement build and release pipelines (40–45%) Develop a security and compliance plan (10–15%) Implement an instrumentation strategy (10–15%)
Configure processes and communications (10–15%) Configure activity traceability and flow of work Plan and implement a structure for the flow of work and feedback cycles Identify appropriate metrics related to flow of work, such as cycle times, time to recovery, and lead time Integrate Azure Pipelines and GitHub Actions with work item tracking tools Implement traceability policies decided by development Integrate a repository with Azure Boards Configure collaboration and communication Communicate actionable information by using custom dashboards in Azure Boards Document a project by using tools, such as wikis and process diagrams Configure release documentation, including release notes and API documentation Automate creation of documentation from Git history Configure notifications by using webhooks
Design and implement source control (15–20%) Design and implement a source control strategy Design and implement an authentication strategy Design a strategy for managing large files, including Git LFS and git-fat Design a strategy for scaling and optimizing a Git repository, including Scalar and cross-repository sharing Implement workflow hooks Plan and implement branching strategies for the source code Design a branch strategy, including trunk-based, feature branch, and release branch Design and implement a pull request workflow by using branch policies and branch protections Implement branch merging restrictions by using branch policies and branch protections Configure and manage repositories Integrate GitHub repositories with Azure Pipelines Configure permissions in the source control repository Configure tags to organize the source control repository Recover data by using Git commands Purge data from source control
Design and implement build and release pipelines (40–45%) Design and implement pipeline automation Integrate pipelines with external tools, including dependency scanning, security scanning, and code coverage Design and implement quality and release gates, including security and governance Design integration of automated tests into pipelines Design and implement a comprehensive testing strategy (including local tests, unit tests, integration tests, and load tests) Design and implement UI testing Implement orchestration of tools, such as GitHub Actions and Azure Pipelines Design and implement a package management strategy Design a package management implementation that uses Azure Artifacts, GitHub Packages, NuGet, and npm Design and implement package feeds, including upstream sources Design and implement a dependency versioning strategy for code assets and packages, including semantic versioning and date-based Design and implement a versioning strategy for pipeline artifacts Design and implement pipelines Select a deployment automation solution, including GitHub Actions and Azure Pipelines Design and implement an agent infrastructure, including cost, tool selection, licenses, connectivity, and maintainability Develop and implement pipeline trigger rules Develop pipelines, including classic and YAML Design and implement a strategy for job execution order, including parallelism and multi-stage Develop complex pipeline scenarios, such as containerized agents and hybrid Configure and manage self-hosted agents, including virtual machine (VM) templates and containerization Create reusable pipeline elements, including YAML templates, task groups, variables, and variable groups Design and implement checks and approvals by using YAML environments Design and implement deployments Design a deployment strategy, including blue/green, canary, ring, progressive exposure, feature flags, and A/B testing Design a pipeline to ensure reliable order of dependency deployments Plan for minimizing downtime during deployments by using VIP swap, load balancer, and rolling deployments Design a hotfix path plan for responding to high-priority code fixes Implement load balancing for deployment, including Azure Traffic Manager and the Web Apps feature of Azure App Service Implement feature flags by using Azure App Configuration Feature Manager Implement application deployment by using containers, binary, and scripts Design and implement infrastructure as code (IaC) Recommend a configuration management technology for application infrastructure Implement a configuration management strategy for application infrastructure, including IaC Define an IaC strategy, including source control and automation of testing and deployment Design and implement desired state configuration for environments, including Azure Automation State Configuration, Azure Resource Manager, Bicep, and Azure Automanage Machine Configuration Maintain pipelines Monitor pipeline health, including failure rate, duration, and flaky tests Optimize pipelines for cost, time, performance, and reliability Analyze pipeline load to determine agent configuration and capacity Design and implement a retention strategy for pipeline artifacts and dependencies
Develop a security and compliance plan (10–15%) Design and implement a strategy for managing sensitive information in automation Implement and manage service connections Implement and manage personal access tokens Implement and manage secrets, keys, and certificates by using Azure Key Vault, GitHub secrets, and Azure Pipelines secrets Design and implement a strategy for managing sensitive files during deployment Design pipelines to prevent leakage of sensitive information Automate security and compliance scanning Automate analysis of source code by using GitHub code scanning, GitHub secrets scanning, pipeline-based scans, and SonarQube Automate security scanning, including container scanning and OWASP ZAP Automate analysis of licensing, vulnerabilities, and versioning of open-source components by using Mend Bolt and GitHub Dependency Scanning
Implement an instrumentation strategy (10–15%) Configure monitoring for a DevOps environment Configure and integrate monitoring by using Azure Monitor Configure and integrate with monitoring tools, such as Azure Monitor and Application Insights Manage access control to the monitoring platform Configure alerts for pipeline events Analyze metrics Inspect distributed tracing by using Application Insights Inspect application performance indicators Inspect infrastructure performance indicators, including CPU, memory, disk, and network Identify and monitor metrics for business value Analyze usage metrics by using Application Insights Interrogate logs using basic Kusto Query Language (KQL) queries
Sample Questions
QUESTION 1 What should you use to implement the code quality restriction on the release pipeline for the investment planning applications suite?
A. a trigger B. a pre deployment approval C. a post-deployment approval D. a deployment gate Answer: D
AZ-140 Configuring and Operating Windows Virtual Desktop on Microsoft Azure Exam Skills measured prior to October 26, 2023
Skills measured prior to October 26, 2023
Audience profile Candidates for this exam are server or desktop administrators with subject matter expertise in designing, implementing, managing, and maintaining Microsoft Azure Virtual Desktop experiences and remote apps for any device.
To deliver these experiences, they work closely with Azure administrators, Azure architects, Microsoft 365 administrators, and Azure security engineers.
Candidates for this exam should have experience with Azure technologies, including virtualization, networking, identity, storage, and resiliency. They should be able to manage end-user desktop environments, including delivering applications and configuring user settings. These professionals use the Azure portal, templates, scripting, and command-line tools to manage an Azure Virtual Desktop deployment.
Skills at a glance Plan and implement an Azure Virtual Desktop infrastructure (40–45%) Plan and implement identity and security (15–20%) Plan and implement user environments and apps (20–25%) Monitor and maintain an Azure Virtual Desktop infrastructure (10–15%)
Plan and implement an Azure Virtual Desktop infrastructure (40–45%) Plan, implement, and manage networking for Azure Virtual Desktop Assess network capacity and speed requirements for Azure Virtual Desktop Calculate and recommend a configuration for network requirements Plan and implement Azure virtual network connectivity Manage connectivity to the internet and on-premises networks Plan and implement RDP Shortpath and quality of service (QoS) policies Plan and implement name resolution for Azure Virtual Desktop Monitor and troubleshoot network connectivity Plan and implement storage for Azure Virtual Desktop user data Plan storage for Azure Virtual Desktop user data Implement storage for FSLogix components Implement storage accounts Implement file shares Implement Azure NetApp Files Plan host pools and session hosts Recommend resource groups, subscriptions, and management groups Recommend an operating system (OS) for an Azure Virtual Desktop implementation Recommend an appropriate licensing model for Azure Virtual Desktop based on requirements Plan a host pools architecture Calculate and recommend a configuration for performance requirements Calculate and recommend a configuration for Azure Virtual Machines capacity requirements Implement host pools and session hosts Create host pools and session hosts by using the Azure portal Automate creation of Azure Virtual Desktop hosts and host pools by using PowerShell, Azure CLI, Azure Resource Manager templates (ARM templates), and Bicep Configure host pool and session host settings Apply a Windows client or Windows Server license to a session host Create and manage session host images Create a golden image manually Create a golden image by using Azure VM Image Builder Modify a session host image Plan and implement lifecycle management for images Apply OS and application updates to an image Create a session host by using a golden image Plan and implement image storage Create and manage Azure Compute Gallery
Plan and implement identity and security (15–20%) Plan and implement identity integration Choose an identity management and authentication method Identify Azure Virtual Desktop requirements for Active Directory Domain Services (AD DS), Microsoft Entra Domain Services, and Microsoft Entra ID Plan and implement Azure roles and role-based access control (RBAC) for Azure Virtual Desktop Plan and implement Microsoft Entra Conditional Access policies for connections to Azure Virtual Desktop Plan and implement multifactor authentication in Azure Virtual Desktop Manage roles, groups, and rights assignments on Azure Virtual Desktop session hosts Plan and implement security Plan, implement, and manage security for Azure Virtual Desktop session hosts by using Microsoft Defender for Cloud Configure Microsoft Defender Antivirus for session hosts Implement and manage network security for connections to Azure Virtual Desktop Configure Azure Bastion or just-in-time (JIT) for administrative access to session hosts Plan and implement Windows Threat Protection features on Azure Virtual Desktop session hosts, including Windows Defender Application Control
Plan and implement user environments and apps (20–25%) Plan and implement FSLogix Recommend FSLogix configuration Install and configure FSLogix Configure Profile Containers Configure Office Containers Configure Cloud Cache Plan and implement user experience and client settings Choose an Azure Virtual Desktop client and deployment method Deploy and troubleshoot Azure Virtual Desktop clients Configure device redirection Configure printing and Universal Print Configure user settings through Group Policy and Microsoft Intune policies Configure Remote Desktop Protocol (RDP) properties on a host pool Configure session timeout properties Implement the Start Virtual Machine on Connect feature Assign and unassign personal desktops for users Install and configure apps on a session host Choose a method for deploying an app to Azure Virtual Desktop Configure dynamic application delivery by using MSIX app attach Publish an application as a RemoteApp Implement FSLogix application masking Implement and manage OneDrive, including multisession environments Implement and manage Microsoft Teams, including AV redirect Implement and manage Microsoft 365 apps on Azure Virtual Desktop session hosts Implement and manage browsers for Azure Virtual Desktop sessions Create and configure an application group Assign users to application groups
Monitor and maintain an Azure Virtual Desktop infrastructure (10–15%) Monitor and manage Azure Virtual Desktop services Configure log collection and analysis for Azure Virtual Desktop session hosts Configure Azure Virtual Desktop monitoring by using Azure Monitor Monitor Azure Virtual Desktop by using Azure Monitor Customize Azure Monitor workbooks for Azure Virtual Desktop monitoring Monitor Azure Virtual Desktop by using Azure Advisor Optimize session host capacity and performance Implement autoscaling in host pools Monitor and manage active sessions and application groups Configure automation for Azure Virtual Desktop Automate management of host pools, session hosts, and user sessions by using PowerShell and Azure CLI Plan, implement, and maintain business continuity Recommend an update strategy for session hosts Plan and implement a disaster recovery plan for Azure Virtual Desktop Plan for multi-region implementation Design a backup strategy for Azure Virtual Desktop Configure backup and restore for FSLogix user profiles, personal virtual desktop infrastructures (VDIs), and golden images
Sample Question and Answers QUESTION 1 You plan to implement the FSLogix profile containers for the Seattle office. Which storage account should you use?
A. storage2 B. storage4 C. storage3 D. storage1 Answer: A
Explanation:
QUESTION 2 Which role should you assign to Operator2 to meet the technical requirements?
A. Desktop Virtualization Session Host Operator B. Desktop Virtualization Host Pool Contributor C. Desktop Virtualization User Session Operator D. Desktop Virtualization Contributor
Answer: D
QUESTION 3 You need to configure the device redirection settings. The solution must meet the technical requirements. Where should you configure the settings?
A. Workspace1 B. MontrealUsers C. Group1 D. Pool1
Answer: D
QUESTION 4 You need to configure the virtual machines that have the Pool1 prefix. The solution must meet the technical requirements. What should you use?
A. Windows Virtual Desktop automation task B. Virtual machine auto-shutdown C. Service Health in Azure Monitor D. Azure Automation
Answer: A
QUESTION 5 Which setting should you modify for VNET4 before you can deploy Pool4?
A. Service endpoints B. Address space C. DNS servers D. Access control (1AM) E. Peerings
Answer: C QUESTION 6 Which three PowerShell modules should you install on Server1 to meet the technical requirements? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. Pester B. RemoteDesktop C. ServerManager D. ActiveDirectory E. Hyper-V
Answer: ADE
Students Reviews / Discussion
Mike 3 months, 3 weeks ago – UGanda 430/500, the 60 questions are within the 100 questions of this dump. upvoted 1 times
Mohammed Deeia 4 months, 1 week ago – Kuwait Above 90% of questions are valid until now but review all the questions, a some of them have wrong answers. upvoted 1 times
SHARON GRUBER 6 months, 1 week ago – United States They`re valid. 465/500 passing score. Thanks upvoted 2 times
Lembede 6 months, 2 weeks ago – South Africa They`re valid. 439/500 passing score. Thanks ! DYOR upvoted 1 times
Sharan Telukunta 9 months, 3 weeks ago – New Jersey Passed with 448/500. Do independent research on all questions. upvoted 1 times
Term moxa 10 months ago – Baltimore Passed with 439/500. Do independent research on all questions. upvoted 1 times
Christoph Spirig 10 months, 1 week ago – Switzerland Passed with 457/500 Dump is valid, Check the discussions and search in Internet upvoted 1 times
Mama Brien10 months, 1 week ago – Singapore Passed with 450/ 500 , All questions are in this dump. Check the discussions and do your research. upvoted 1 times
Audience profile Candidates for this exam should have subject matter expertise in implementing, managing, and monitoring an organization’s Microsoft Azure environment, including virtual networks, storage, compute, identity, security, and governance.
An Azure administrator often serves as part of a larger team dedicated to implementing an organization’s cloud infrastructure. Azure administrators also coordinate with other roles to deliver Azure networking, security, database, application development, and DevOps solutions.
Candidates for this exam should be familiar with operating systems, networking, servers, and virtualization. In addition, professionals in this role should have experience using PowerShell, Azure Command-Line Interface (CLI), the Azure portal, Azure Resource Manager (ARM) templates, and Microsoft Entra ID, part of Microsoft Entra.
Skills at a glance Manage Azure identities and governance (20-25%) Implement and manage storage (15-20%) Deploy and manage Azure compute resources (20-25%) Implement and manage virtual networking (15-20%) Monitor and maintain Azure resources (10-15%)
Manage Azure identities and governance (20-25%) Manage Microsoft Entra users and groups Create users and groups Manage user and group properties Manage licenses in Microsoft Entra ID Manage external users Configure self-service password reset (SSPR) Manage access to Azure resources Manage built-in Azure roles Assign roles at different scopes Interpret access assignments Manage Azure subscriptions and governance Implement and manage Azure Policy Configure resource locks Apply and manage tags on resources Manage resource groups Manage subscriptions Manage costs by using alerts, budgets, and Azure Advisor recommendations Configure management groups
Implement and manage storage (15-20%) Configure access to storage Configure Azure Storage firewalls and virtual networks Create and use shared access signature (SAS) tokens Configure stored access policies Manage access keys Configure identity-based access for Azure Files Configure and manage storage accounts Create and configure storage accounts Configure Azure Storage redundancy Configure object replication Configure storage account encryption Manage data by using Azure Storage Explorer and AzCopy Configure Azure Files and Azure Blob Storage Create and configure a file share in Azure Storage Create and configure a container in Blob Storage Configure storage tiers Configure snapshots and soft delete for Azure Files Configure blob lifecycle management Configure blob versioning
Deploy and manage Azure compute resources (20-25%) Automate deployment of resources by using Azure Resource Manager (ARM) templates or Bicep files Interpret an ARM template or a Bicep file Modify an existing ARM template Modify an existing Bicep file Deploy resources by using an ARM template or a Bicep file Export a deployment as an ARM template or compile a deployment as a Bicep file Create and configure virtual machines Create a virtual machine Configure Azure Disk Encryption Move a virtual machine to another resource group, subscription, or region Manage virtual machine sizes Manage virtual machine disks Deploy virtual machines to availability zones and availability sets Deploy and configure an Azure Virtual Machine Scale Sets Provision and manage containers in the Azure portal Create and manage an Azure container registry Provision a container by using Azure Container Instances Provision a container by using Azure Container Apps Manage sizing and scaling for containers, including Azure Container Instances and Azure Container Apps Create and configure Azure App Service Provision an App Service plan Configure scaling for an App Service plan Create an App Service Configure certificates and TLS for an App Service Map an existing custom DNS name to an App Service Configure backup for an App Service Configure networking settings for an App Service Configure deployment slots for an App Service
Implement and manage virtual networking (15-20%) Configure and manage virtual networks in Azure Create and configure virtual networks and subnets Create and configure virtual network peering Configure public IP addresses Configure user-defined network routes Troubleshoot network connectivity Configure secure access to virtual networks Create and configure network security groups (NSGs) and application security groups Evaluate effective security rules in NSGs Implement Azure Bastion Configure service endpoints for Azure platform as a service (PaaS) Configure private endpoints for Azure PaaS Configure name resolution and load balancing Configure Azure DNS Configure an internal or public load balancer Troubleshoot load balancing
Monitor and maintain Azure resources (10-15%) Monitor resources in Azure Interpret metrics in Azure Monitor Configure log settings in Azure Monitor Query and analyze logs in Azure Monitor Set up alert rules, action groups, and alert processing rules in Azure Monitor Configure and interpret monitoring of virtual machines, storage accounts, and networks by using Azure Monitor Insights Use Azure Network Watcher and Connection Monitor Implement backup and recovery Create a Recovery Services vault Create an Azure Backup vault Create and configure a backup policy Perform backup and restore operations by using Azure Backup Configure Azure Site Recovery for Azure resources Perform a failover to a secondary region by using Site Recovery Configure and interpret reports and alerts for backups
Sample Questions:
QUESTION 1 You discover that VM3 does NOT meet the technical requirements. You need to verify whether the issue relates to the NSGs. What should you use?
A. Diagram in VNet1 B. the security recommendations in Azure Advisor C. Diagnostic settings in Azure Monitor D. Diagnose and solve problems in Traffic Manager Profiles E. IP flow verify in Azure Network Watcher
Answer: E
QUESTION 2 You need to meet the technical requirement for VM4. What should you create and configure?
A. an Azure Notification Hub B. an Azure Event Hub C. an Azure Logic App D. an Azure services Bus
Answer: B
QUESTION 3 You need to recommend a solution to automate the configuration for the finance department users. The solution must meet the technical requirements. What should you include in the recommended?
A. Azure AP B2C B. Azure AD Identity Protection C. an Azure logic app and the Microsoft Identity Management (MIM) client D. dynamic groups and conditional access policies
Answer: D
QUESTION 4 You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort. What should you do?
A. Create 2 user-defined route from VNET1 to VNET3. B. Assign VM4 an IP address of 10.0.1.5. C. Establish peering between VNET1 and VNET3. D. Create an NSG and associate the NSG to VMI and VM4.
Answer: B
Students Reviews / Discussion
José Antonio Vigo Carrillo 2 weeks, 2 days ago – Spain Thanks ET, passed today – 900/1000. Prepared using only these dumps. 80-90% questions were from here. Some of them updated (e.g. Microsoft Azure Administrator Exam). upvoted 2 times
Musa Uthman 2 weeks, 2 days ago – USA – Texas As of today, I passed and all the questions came from here. Thank you ET upvoted 1 times
jborg0102 2 weeks, 2 days ago Passed today with 763/1000. I used this tool with Contributor Access and the Microsoft Learn practice exam. Most of the questions were from here. Learn all of them, learn to look out for the little things and you’ll make it. Discussions are important because many answers when revealed are wrong. Use MS Learn to further enhance your knowledge. upvoted 1 times
EMARI WILLIAMS 2 weeks, 4 days ago – United States Passed on 10/27/2023 – Thanks [ET] upvoted 2 times
Daniel Charles II 3 weeks, 5 days ago – United States – New Jersey Just passed the exam today with 826/1000 marks. 93% questions were from here. Thanks team!! upvoted 3 times
Cameron Carnevale4 weeks, 1 day ago – United States – Ohio Passed the exam only with this dumps… I had 49 questions and only 1 of them it wasnt’ in Cert kingdom. (14/10/2023) upvoted 6 times
Verma Yashwant 1 month ago – Australia Just passed the exam today with 836/1000 marks. 95% questions were from here. Thanks et!! upvoted 6 times
Mashigo Moloantoa 1 month ago – South Africa Passed exam today just about with 727, a few new questions especially Yes/No upvoted 3 times
Study guide for Exam AI-900: Microsoft Azure AI Fundamentals
Skills measured prior to November 2, 2023 Audience profile This exam is an opportunity to demonstrate knowledge of machine learning (ML) and artificial intelligence (AI) concepts and related Microsoft Azure services. Candidates for this exam should have familiarity with AI-900’s self-paced or instructor-led learning material.
This exam is intended for candidates with both technical and non-technical backgrounds. Data science and software engineering experience are not required; however, awareness of cloud basics and client-server applications would be beneficial.
Azure AI Fundamentals can be used to prepare for other Azure role-based certifications like Azure Data Scientist Associate or Azure AI Engineer Associate, but it is not a prerequisite for any of them.
Skills at a glance Describe Artificial Intelligence workloads and considerations (20–25%) Describe fundamental principles of machine learning on Azure (25–30%) Describe features of computer vision workloads on Azure (15–20%) Describe features of Natural Language Processing (NLP) workloads on Azure (25–30%)
Describe Artificial Intelligence workloads and considerations (20–25%) Identify features of common AI workloads Identify features of anomaly detection workloads Identify computer vision workloads Identify natural language processing workloads Identify knowledge mining workloads Identify guiding principles for responsible AI Describe considerations for fairness in an AI solution Describe considerations for reliability and safety in an AI solution Describe considerations for privacy and security in an AI solution Describe considerations for inclusiveness in an AI solution Describe considerations for transparency in an AI solution Describe considerations for accountability in an AI solution
Describe fundamental principles of machine learning on Azure (25–30%) Identify common machine learning types Identify regression machine learning scenarios Identify classification machine learning scenarios Identify clustering machine learning scenarios Describe core machine learning concepts Identify features and labels in a dataset for machine learning Describe how training and validation datasets are used in machine learning Describe capabilities of visual tools in Azure Machine Learning Studio Automated machine learning Azure Machine Learning designer
Describe features of computer vision workloads on Azure (15–20%) Identify common types of computer vision solution Identify features of image classification solutions Identify features of object detection solutions Identify features of optical character recognition solutions Identify features of facial detection and facial analysis solutions Identify Azure tools and services for computer vision tasks Identify capabilities of the Computer Vision service Identify capabilities of the Custom Vision service Identify capabilities of the Face service Identify capabilities of the Form Recognizer service
Describe features of Natural Language Processing (NLP) workloads on Azure (25–30%) Identify features of common NLP Workload Scenarios Identify features and uses for key phrase extraction Identify features and uses for entity recognition Identify features and uses for sentiment analysis Identify features and uses for language modeling Identify features and uses for speech recognition and synthesis Identify features and uses for translation Identify Azure tools and services for NLP workloads Identify capabilities of the Language service Identify capabilities of the Speech service Identify capabilities of the Translator service Identify considerations for conversational AI solutions on Azure Identify features and uses for bots Identify capabilities of Power Virtual Agents and the Azure Bot service
Exam Guide: Total number of question will be present around 40 to 60 questions with a timeline of 60 minutes in exam. To pass the exam candidate must score 700 marks out of 1000.
What you’ll learn This Practice Test which will help clear the Azure AI-900 Fundamentals Certification Exam with Good Score. Real Exam Simulation with 6 Practice Tests Series. This Test Series Contain Total 360 Questions and Answer with Detail Explanation. Lifetime access with every latest updates.
Are there any course requirements or prerequisites? PC/Laptop or Smart Phone and Internet Connection
Who this course is for: Preparing or appearing to get Microsoft Azure AI-900: AI Fundamentals Certification. Any one planning(both technical and non-technical backgrounds) wanting to kick start their journey in Machine Learning and Artificial Intelligence domain. Interested to learn the fundamentals of AI and ML with Azure.
Sample Questions
QUESTION 1 A company employs a team of customer service agents to provide telephone and email support to customers. The company develops a webchat bot to provide automated answers to common customer queries. Which business benefit should the company expect as a result of creating the webchat bot solution?
A. increased sales B. a reduced workload for the customer service agents C. improved product reliability
Answer: B
QUESTION 2 For a machine learning progress, how should you split data for training and evaluation?
A. Use features for training and labels for evaluation. B. Randomly split the data into rows for training and rows for evaluation. C. Use labels for training and features for evaluation. D. Randomly split the data into columns for training and columns for evaluation.
Answer: B
QUESTION 3 You build a machine learning model by using the automated machine learning user interface (UI). You need to ensure that the model meets the Microsoft transparency principle for responsible AI. What should you do?
A. Set Validation type to Auto. B. Enable Explain best model. C. Set Primary metric to accuracy. D. Set Max concurrent iterations to 0.
Answer: B
QUESTION 4 You are designing an AI system that empowers everyone, including people who have hearing, visual, and other impairments. This is an example of which Microsoft guiding principle for responsible AI?
A. fairness B. inclusiveness C. reliability and safety D. accountability
Answer: B
Students Reviews / Discussion
Arun Kumar 2 months, 1 week ago – United States hello, took exam today and passed , i got 97% questions and all were found here. upvoted 1 times
Chrysovalantis Papachristos 3 months, 1 week ago – Switzerland Passed today. 90% of the questions are included here. I got only from the last 100 questions upvoted 2 times
Daffa Ulwan 3 months, 2 weeks ago – Indonesia Passed the exam. 80% of the exam are on this reviewer upvoted 5 times
çer raziye2 months ago – Turkey Just passed SVPN – Felt like 90% of these questions were on the exam. I only had a few questions that weren’t here. I spent a lot of time verifying answers to the questions here because many are incorrect. Just pay attention to the discussion posts from people but the questions/options are spot on. – February 2023 upvoted 3 times
Vigo Carrillo 8 months, 3 weeks ago – Spain same here. only 1 was not from these dumps! upvoted 1 times
Miguel White 3 months ago – United States These questions are still valid, thanks. upvoted 4 times
Temmy Tope 6 months ago – South Africa These questions are stull valid. upvoted 4 times
Languages: English, Japanese, Chinese (Simplified), Korean, German, French,
Spanish, Portuguese (Brazil), Russian, Indonesian (Indonesia), Arabic (Saudi
Arabia), Chinese (Traditional), Italian
Retirement date: none
Prove that you can describe the following: AI workloads and considerations;
fundamental principles of machine learning on Azure; features of computer vision
workloads on Azure; features of Natural Language Processing (NLP) workloads on
Azure; and features of conversational AI workloads on Azure.
Skills measured The English language version of this exam will be
updated on April 29, 2022. Please download the exam skills outline below to see
what’s changing.
Describe AI workloads and considerations (15-20%)
Describe fundamental principles of machine learning on Azure (30-35%)
Describe features of computer vision workloads on Azure (15-20%)
Describe features of Natural Language Processing (NLP) workloads on Azure
(15-20%)
Describe features of conversational AI workloads on Azure (15-20%)
The following table shows the changes that will
be implemented on April 29, 2022 to the English language version of this exam.
Following the comparison table, the revised exam guide is included.
Old objective number
Subtask changes and new
location
1.1 identify features of common
AI workloads revised subtasks
revised subtasks
2.2 describe core machine
learning concepts
revised subtasks
2.3 identify core tasks in
creating a machine learning solution
deleted
2.4 describe capabilities of no
code machine learning with Azure Machine Learning Studio
revised title and subtasks; new
2.3
4.2 identify Azure tools and
services for NLP workloads
revised subtasks
5.1 describe features of
conversational AI workloads on Azure
deleted: revised subtasks: moved
to 4.3
5.2 identify Azure services for
conversational AI
deleted; revised subtask: moved
to 4.3
Audience Profile This exam is an opportunity to demonstrate knowledge of machine learning
(ML) and artificial intelligence (AI) concepts and related Microsoft Azure
services. Candidates for this exam should have familiarity with AI-900’s
self-paced or instructor-led learning material.
This exam is intended for candidates with both technical and non-technical
backgrounds. Data science and software engineering experience are not required;
however, awareness of cloud basics and client-server applications would be
beneficial.
Azure AI Fundamentals can be used to prepare for other Azure role-based
certifications like Azure Data Scientist Associate or Azure AI Engineer
Associate, but it is not a prerequisite for any of them.
Skills Measured
NOTE: The bullets that follow each of the skills measured are intended to
illustrate how we are assessing that skill. Related topics may not be covered in
the exam.
NOTE: Most questions cover features that are general availability (GA). The exam
may contain questions on Preview features if those features are commonly used.
Describe Artificial Intelligence workloads and considerations (20—25%) Identify features of common AI workloads • identify features of anomaly detection workloads
• identify computer vision workloads
• identify natural language processing workloads
• identify knowledge mining workloads
Identify guiding principles for responsible AI • describe considerations for fairness in an AI solution
• describe considerations for reliability and safety in an AI solution
• describe considerations for privacy and security in an AI solution
• describe considerations for inclusiveness in an AI solution describe
considerations for transparency in an AI solution
• describe considerations for accountability in an AI solution
Describe fundamental principles of machine learning on Azure (25—30%)
Identify common machine learning types
• identify regression machine learning scenarios
• identify classification machine learning scenarios
• identify clustering machine learning scenarios
Describe core machine learning concepts
• identify features and labels in a dataset for machine learning
• describe how training and validation datasets are used in machine learning
Describe capabilities of visual tools in Azure Machine Learning Studio
• automated machine learning
• Azure Machine Learning designer
Describe features of computer vision workloads on Azure (15—20%)
Identify common types of computer vision solution: • identify features of image classification solutions
• identify features of object detection solutions
• identify features of optical character recognition solutions
• identify features of facial detection, facial recognition, and facial analysis
solutions
Identify Azure tools and services for computer vision tasks • identify capabilities of the Computer Vision service
• identify capabilities of the Custom Vision service
• identify capabilities of the Face service
• identify capabilities of the Form Recognizer service
Describe features of Natural Language Processing (NLP) workloads on Azure
(25—30%)
Identify features of common NLP Workload Scenarios
• identify features and uses for key phrase extraction
• identify features and uses for entity recognition
• identify features and uses for sentiment analysis
• identify features and uses for language modeling
• identify features and uses for speech recognition and synthesis
• identify features and uses for translation
Identify Azure tools and services for NLP workloads
• identify capabilities of the Language service
• identify capabilities of the Speech service
• identify capabilities of the Translator service
Identify considerations for conversational AI solutions on Azure
• identify features and uses for bots
• identify capabilities of the Azure Bot service
QUESTION 1
A company employs a team of customer service agents to provide telephone and
email support to customers.
The company develops a webchat bot to provide automated answers to common
customer queries.
Which business benefit should the company expect as a result of creating the
webchat bot solution?
A. increased sales
B. a reduced workload for the customer service agents
C. improved product reliability
Answer: B
QUESTION 2 For a machine learning progress, how should you split data for training and
evaluation?
A. Use features for training and labels for evaluation.
B. Randomly split the data into rows for training and rows for evaluation.
C. Use labels for training and features for evaluation.
D. Randomly split the data into columns for training and columns for evaluation.
Answer: B
QUESTION 3 You build a machine learning model by using the automated machine learning
user interface (UI).
You need to ensure that the model meets the Microsoft transparency principle for
responsible AI.
What should you do?
A. Set Validation type to Auto.
B. Enable Explain best model.
C. Set Primary metric to accuracy.
D. Set Max concurrent iterations to 0.
Answer: B
QUESTION 4 You are designing an AI system that empowers everyone, including people who
have hearing, visual, and other impairments.
This is an example of which Microsoft guiding principle for responsible AI?
A. fairness
B. inclusiveness
C. reliability and safety
D. accountability
Candidates for this exam should have advanced experience and knowledge of IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data platforms, and governance. A professional in this role should manage how decisions in each area affect an overall solution. In addition, they should have experience in Azure administration, Azure development, and DevOps processes.
The Microsoft Certified: Azure Solutions Architect Expert certification will be earned by completing the following requirements:
Earn the Microsoft Certified: Azure Administrator Associate certification and pass Exam AZ-305 or Pass Exam AZ-303 (before it retires on March 31, 2022) and Exam AZ-305
NOTE: Passing score: 700. Learn more about exam scores here. Beta exams are not scored immediately because we are gathering data on the quality of the questions and the exam. Learn more about the value and importance of beta exams.
Part of the requirements for: Microsoft Certified: Azure Solutions Architect Expert
Related exams: none Important: See details
Skills measured
Design identity, governance, and monitoring solutions (25-30%) Design data storage solutions (25-30%) Design business continuity solutions (10-15%) Design infrastructure solutions (25-30%)
NOTE: Passing score: 700. Learn more about exam scores here.
Audience Profile Candidates for the Azure Solutions Architect Expert certification should have subject matter expertise in designing cloud and hybrid solutions that run on Microsoft Azure, including compute, network, storage, monitoring, and security. Responsibilities for this role include advising stakeholders and translating business requirements into designs for secure, scalable, and reliable Azure solutions.
An Azure Solutions Architect partners with developers, administrators, and other roles responsible for implementing solutions on Azure.
A candidate for this certification should have advanced experience and knowledge of IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data platforms, and governance. A professional in this role should manage how decisions in each area affect an overall solution. In addition, they should have experience in Azure administration, Azure development, and DevOps processes.
Skills Measured NOTE: The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. This list is not definitive or exhaustive. NOTE: Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.
Design Identity, Governance, and Monitoring Solutions (25-30%) Design a solution for logging and monitoring design a log routing solution recommend an appropriate level of logging recommend monitoring tools for a solution
Design authentication and authorization solutions recommend a solution for securing resources with role-based access control recommend an identity management solution recommend a solution for securing identities Design governance recommend an organizational and hierarchical structure for Azure resources recommend a solution for enforcing and auditing compliance
Design identities and access for applications recommend solutions to allow applications to access Azure resources recommend a solution that securely stores passwords and secrets recommend a solution for integrating applications into Azure Active Directory (Azure AD) recommend a user consent solution for applications
Design Data Storage Solutions (25-30%) Design a data storage solution for relational data recommend database service tier sizing recommend a solution for database scalability recommend a solution for encrypting data at rest, data in transmission, and data in use Design data integration recommend a solution for data integration recommend a solution for data analysis
Recommend a data storage solution recommend a solution for storing relational data recommend a solution for storing semi-structured data recommend a solution for storing non-relational data
Design a data storage solution for non-relational data recommend access control solutions to data storage recommend a data storage solution to balance features, performance, and cost design a data solution for protection and durability
Design Business Continuity Solutions (10-15%) Design a solution for backup and disaster recovery recommend a recovery solution for Azure, hybrid, and on-premises workloads that meets recovery objectives (Recovery Time Objective [RTO], Recovery Level Objective [RLO], Recovery Point Objective [RPO]) understand the recovery solutions for containers recommend a backup and recovery solution for compute recommend a backup and recovery solution for databases recommend a backup and recovery solution for unstructured data
Design for high availability identify the availability requirements of Azure resources recommend a high availability solution for compute recommend a high availability solution for non-relational data storage recommend a high availability solution for relational data storage
Design Infrastructure Solutions (25-30%) Design a compute solution recommend a virtual machine-based compute solution recommend an appropriately sized compute solution based on workload requirements recommend a container-based compute solution recommend a serverless-based compute solution Design an application architecture recommend a caching solution for applications recommend a messaging architecture recommend an event-driven architecture recommend an automated deployment solution for your applications recommend an application configuration management solution recommend a solution for API integration
Design migrations evaluate a migration solution that leverages the Cloud Adoption Framework for Azure assess and interpret on-premises servers, data, and applications for migration recommend a solution for migrating applications and virtual machines recommend a solution for migrating databases recommend a solution for migrating unstructured data
Design network solutions recommend a network architecture solution based on workload requirements recommend a connectivity solution that connects Azure resources to the internet recommend a connectivity solution that connects Azure resources to on-premises networks optimize network performance for applications recommend a solution to optimize network security recommend a load balancing and routing solution QUESTION 1 After you migrate App1 to Azure, you need to enforce the data modification requirements to meet the security and compliance requirements. What should you do?
A. Create an access policy for the blob service. B. Implement Azure resource locks. C. Create Azure RBAC assignments. D. Modify the access level of the blob service.
Answer: B
QUESTION 2 You need to recommend a solution to meet the database retention requirements. What should you recommend?
A. Configure a long-term retention policy for the database. B. Configure Azure Site Recovery. C. Use automatic Azure SQL Database backups. D. Configure geo-replication of the database.
Answer: A
QUESTION 3 You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company named Fabrikam, Ltd. Developers at Fabrikam were assigned role-based access control (RBAC) permissions to the Application1 components. All users are licensed for the Microsoft 365 E5 plan. You need to recommend a solution to verify whether the Fabrikam developers still require permissions to Application1. The solution must meet the following requirements: To the manager of the developers, send a monthly email message that lists the access permissions to Application1. If the manager does not verify an access permission, automatically revoke that permission. Minimize development effort. What should you recommend?
A. In Azure Active Directory (Azure AD), create an access review of Application1. B. Create an Azure Automation runbook that runs the Get-AzRoleAssignment cmdlet. C. In Azure Active Directory (Azure AD) Privileged Identity Management, create a custom role assignment for the Application1 resources. D. Create an Azure Automation runbook that runs the Get-AzureADUserAppRoleAssignment cmdlet.
Candidates for this exam should have subject matter expertise in planning, implementing, and maintaining Azure networking solutions, including hybrid networking, connectivity, routing, security, and private access to Azure services.
Candidates for this exam should also have expert Azure administration skills, in addition to extensive experience and knowledge of networking, hybrid connections, and network security.
Part of the requirements for: Microsoft Certified: Azure Network Engineer Associate
Related exams: none Important: See details Go to Certification Dashboard Exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions Languages: English Retirement date: none
This exam measures your ability to accomplish the following technical tasks: design, implement, and manage hybrid networking; design and implement core networking infrastructure; design and implement routing; secure and monitor networks; and design and implement private access to Azure Services.
Skills measured Design, implement, and manage hybrid networking (10-15%) Design and implement core networking infrastructure (20-25%) Design and implement routing (25-30%) Secure and monitor networks (15-20%) Design and implement Private access to Azure Services (10-15%)
Related certifications There may be certifications and prerequisites related to “Exam AZ-700: Designing and Implementing Microsoft Azure Networking Solutions”
Microsoft Certified: Azure Network Engineer Associate
Related certification Candidates for the Azure Network Engineer Associate certification should have subject matter expertise in planning, implementing, and maintaining Azure networking solutions, including hybrid networking, connectivity, routing, security, and private access to Azure services.
Exam resources : Training and certification guide Explore all certifications in a concise training and certifications guide. Certification poster Check out an overview of fundamentals, role-based and specialty certifications. Exam Replay See two great offers to help boost your odds of success. Support for certification exams Get help through Microsoft Certification support forums. A forum moderator will respond in one business day, Monday-Friday. Certification dashboard Review and manage your scheduled appointments, certificates, and transcripts. Request accommodations
Learn more about requesting an accommodation for your exam.
Audience Profile Candidates for this exam should have subject matter expertise in planning, implementing, and maintaining Azure networking solutions, including hybrid networking, connectivity, routing, security, and private access to Azure services. Responsibilities for the Azure Network Engineer include recommending, planning, and implementing Azure networking solutions. Professionals in this role manage the solution for performance, resiliency, scale, and security. They deploy networking solutions by using the Azure Portal and other methods, including PowerShell, Azure Command-Line Interface (CLI), and Azure Resource Manager templates (ARM templates). The Azure Network Engineer works with solution architects, cloud administrators, security engineers, application developers, and DevOps engineers to deliver Azure solutions.
Candidates for this exam should have expert Azure administration skills, in addition to extensive experience and knowledge of networking, hybrid connections, and network security.
Skills Measured NOTE: The bullets that follow each of the skills measured are intended to illustrate how we’re assessing that skill. This list is not definitive or exhaustive. NOTE: Most questions cover features that are General Availability (GA). The exam may contain questions on Preview features, if those features are commonly used.
Design, Implement, and Manage Hybrid Networking (10–15%)
Design, implement, and manage a site-to-site VPN connection design a site-to-site VPN connection for high availability select an appropriate virtual network (VNet) gateway SKU identify when to use policy-based VPN versus route-based VPN create and configure a local network gateway create and configure an IPsec/IKE policy create and configure a virtual network gateway diagnose and resolve VPN gateway connectivity issues Design, implement, and manage a point-to-site VPN connection select an appropriate virtual network gateway SKU plan and configure RADIUS authentication plan and configure certificate-based authentication plan and configure OpenVPN authentication plan and configure Azure Active Directory (Azure AD) authentication implement a VPN client configuration file diagnose and resolve client-side and authentication issues Design, implement, and manage Azure ExpressRoute choose between provider and direct model (ExpressRoute Direct) design and implement Azure cross-region connectivity between multiple ExpressRoute locations select an appropriate ExpressRoute SKU and tier design and implement ExpressRoute Global Reach design and implement ExpressRoute FastPath choose between private peering only, Microsoft peering only, or both configure private peering configure Microsoft peering create and configure an ExpressRoute gateway connect a virtual network to an ExpressRoute circuit recommend a route advertisement configuration configure encryption over ExpressRoute implement Bidirectional Forwarding Detection diagnose and resolve ExpressRoute connection issues
Design and Implement Core Networking Infrastructure (20–25%)
Design and implement private IP addressing for VNets create a VNet plan and configure subnetting for services, including VNet gateways, private endpoints, firewalls, application gateways, and VNet-integrated platform services plan and configure subnet delegation
Design and implement name resolution design public DNS zones design private DNS zones design name resolution inside a VNet configure a public or private DNS zone link a private DNS zone to a VNet
Design and implement cross-VNet connectivity design service chaining, including gateway transit design VPN connectivity between VNets implement VNet peering Design and implement an Azure Virtual WAN architecture design an Azure Virtual WAN architecture, including selecting SKUs and services connect a VNet gateway to Azure Virtual WAN create a hub in Virtual WAN create a network virtual appliance (NVA) in a virtual hub configure virtual hub routing create a connection unit Design and Implement Routing (25–30%) Design, implement, and manage VNet routing design and implement user-defined routes (UDRs) associate a route table with a subnet configure forced tunneling diagnose and resolve routing issues Design and implement an Azure Load Balancer choose an Azure Load Balancer SKU (Basic versus Standard) choose between public and internal create and configure an Azure Load Balancer (including cross-region) implement a load balancing rule create and configure inbound NAT rules create explicit outbound rules for a load balancer Design and implement Azure Application Gateway recommend Azure Application Gateway deployment options choose between manual and autoscale create a back-end pool configure health probes configure listeners configure routing rules configure https: settings configure Transport Layer Security (TLS) configure rewrite policies Implement Azure Front Door choose an Azure Front Door SKU configure health probes, including customization of https: response codes configure SSL termination and end-to-end SSL encryption configure multisite listeners configure back-end targets configure routing rules, including redirection rules
Implement an Azure Traffic Manager profile configure a routing method (mode) configure endpoints create https: settings Design and implement an Azure Virtual Network NAT choose when to use a Virtual Network NAT allocate public IP or public IP prefixes for a NAT gateway associate a Virtual Network NAT with a subnet
Secure and Monitor Networks (15–20%)
Design, implement, and manage an Azure Firewall deployment design an Azure Firewall deployment create and implement an Azure Firewall deployment configure Azure Firewall rules create and implement Azure Firewall Manager policies create a secure hub by deploying Azure Firewall inside an Azure Virtual WAN hub integrate an Azure Virtual WAN hub with a third-party NVA
Implement and manage network security groups (NSGs) create an NSG associate an NSG to a resource create an application security group (ASG) associate an ASG to a NIC create and configure NSG rules interpret NSG flow logs validate NSG flow rules verify IP flow Implement a Web Application Firewall (WAF) deployment configure detection or prevention mode configure rule sets for Azure Front Door, including Microsoft managed and user defined configure rule sets for Application Gateway, including Microsoft managed and user defined implement a WAF policy associate a WAF policy
Monitor networks configure network health alerts and logging by using Azure Monitor create and configure a Connection Monitor instance configure and use Traffic Analytics configure NSG flow logs enable and configure diagnostic logging configure Azure Network Watcher
Design and Implement Private Access to Azure Services (10–15%) Design and implement Azure Private Link service and Azure Private Endpoint create a Private Link service plan private endpoints create private endpoints configure access to private endpoints integrate Private Link with DNS integrate a Private Link service with on-premises clients
Design and implement service endpoints create service endpoints configure service endpoint policies configure service tags configure access to service endpoints
Configure VNet integration for dedicated platform as a service (PaaS) services configure App Service for regional VNet integration configure Azure Kubernetes Service (AKS) for regional VNet integration configure clients to access App Service Environment
QUESTION 1 You need to configure GW1 to meet the network security requirements for the P2S VPN users. Which Tunnel type should you select in the Point-to-site configuration settings of GW1?
A. IKEv2 and OpenVPN (SSL) B. IKEv2 C. IKEv2 and SSTP (SSL) D. OpenVPN (SSL) E. SSTP (SSL)
Correct Answer: D
QUESTION 2 Your company has a single on-premises datacenter in New York. The East US Azure region has a peering location in New York. The company only has Azure resources in the East US region. You need to implement ExpressRoute to support up to 1 Gbps. You must use only ExpressRoute Unlimited data plans. The solution must minimize costs. Which type of ExpressRoute circuits should you create?
A. ExpressRoute Local B. ExpressRoute Direct C. ExpressRoute Premium D. ExpressRoute Standard
Correct Answer: A
QUESTION 3 You are planning an Azure Point-to-Site (P2S) VPN that will use OpenVPN. Users will authenticate by an on-premises Active Directory domain. Which additional service should you deploy to support the VPN authentication?
A. an Azure key vault B. a RADIUS server C. a certification authority D. Azure Active Directory (Azure AD) Application Proxy
Correct Answer: B
QUESTION 4 You plan to configure BGP for a Site-to-Site VPN connection between a datacenter and Azure. Which two Azure resources should you configure? Each correct answer presents a part of the solution. (Choose two.) NOTE: Each correct selection is worth one point.
A. a virtual network gateway B. Azure Application Gateway C. Azure Firewall D. a local network gateway E. Azure Front Door
The content of this exam will be updated on October
25, 2021. Please download the skills measured document below to see what will be
changing.
NOTE: Passing score: 700. Learn more about exam scores here.
Languages: English, Japanese, Chinese (Simplified), Korean, French, German,
Spanish, Portuguese (Brazil), Russian, Indonesian (Indonesia), Arabic (Saudi
Arabia), Chinese (Traditional), Italian
Retirement date: none
Prove that you can describe the following: core data concepts; how to work with
relational data on Azure; how to work with non-relational data on Azure; and an
analytics workload on Azure.
Skills measured The content of this exam will be updated on October 25, 2021. Please
download the exam skills outline below to see what will be changing.
Describe core data concepts (15-20%)
Describe how to work with relational data on Azure (25-30%)
Describe how to work with non-relational data on Azure (25-30%)
Describe an analytics workload on Azure (25-30%)
This exam will be updated on October 25, 2021.
Following the current exam guide, we have included a version of the exam guide
with Track Changes set to “On,” showing the changes that will be made to the
exam on that date.
Audience Profile Candidates for this exam should have foundational knowledge of core data
concepts and how they are implemented using Microsoft Azure data services.
This exam is intended for candidates beginning to work with data in the cloud.
Candidates should be familiar with the concepts of relational and non-relational
data, and different types of data workloads such as transactional or analytical.
Azure Data Fundamentals can be used to prepare for other Azure role-based
certifications like Azure Database Administrator Associate or Azure Data
Engineer Associate, but it is not a prerequisite for any of them.
Skills Measured
NOTE: The bullets that appear below each of the skills measured are intended to
illustrate how we are assessing that skill. This list is NOT definitive or
exhaustive.
NOTE: Most questions cover features that are General Availability (GA). The exam
may contain questions on Preview features if those features are commonly used.
Describe core data concepts (15-20%)
Describe types of core data workloads describe batch data
describe streaming data
describe the difference between batch and streaming data
describe the characteristics of relational data
Describe data analytics core concepts
describe data visualization (e.g., visualization, reporting, business
intelligence (BI))
describe basic chart types such as bar charts and pie charts
describe analytics techniques (e.g., descriptive, diagnostic, predictive,
prescriptive, cognitive)
describe ELT and ETL processing
describe the concepts of data processing
Describe how to work with relational data on Azure (25-30%)
Describe relational data workloads identify the right data offering for a relational workload
describe relational data structures (e.g., tables, index, views)
Describe relational Azure data services describe and compare PaaS, IaaS, and SaaS solutions
describe Azure SQL family of products including Azure SQL Database, Azure SQL
Managed Instance, and SQL Server on Azure Virtual Machines
describe Azure Synapse Analytics
describe Azure Database for PostgreSQL, Azure Database for MariaDB, and Azure
Database for MySQL
Identify basic management tasks for relational data describe provisioning and deployment of relational data services
describe method for deployment including the Azure portal, Azure Resource
Manager templates,
Azure PowerShell, and the Azure command-line interface (CLI)
identify data security components (e.g., firewall, authentication)
identify basic connectivity issues (e.g., accessing from on-premises, access
with from
Azure VNets, access from Internet, authentication, firewalls) identify query tools (e.g., Azure Data Studio, SQL Server Management
Studio, sqlcmd utility, etc.)
Describe query techniques for data using SQL language compare Data Definition Language (DDL) versus Data Manipulation Language (DML)
query relational data in Azure SQL Database, Azure Database for PostgreSQL,
and Azure
Database for MySQL
Describe how to work with non-relational data on Azure (25-30%)
Describe non-relational data workloads describe the characteristics of non-relational data
describe the types of non-relational and NoSQL
data
recommend the correct data store
determine when to use non-relational data
Describe non-relational data offerings on Azure
identify Azure data services for non-relational workloads
describe Azure Cosmos DB APIs
describe Azure Table storage
describe Azure Blob storage
describe Azure File storage
Identify basic management tasks for non-relational data
describe provisioning and deployment of non-relational data services
describe method for deployment including the Azure portal, Azure Resource
Manager
templates, Azure PowerShell, and the Azure command-line interface (CLI)
identify data security components (e.g., firewall, authentication, encryption)
identify basic connectivity issues (e.g., accessing from on-premises, access
withfrom
Azure VNets, access from Internet, authentication, firewalls)
identify management tools for non-relational data
Describe an analytics workload on Azure (25-30%)
Describe analytics workloads
describe transactional workloads
describe the difference between a transactional and an analytics workload
describe the difference between batch and real time
describe data warehousing workloads
determine when a data warehouse solution is needed
Describe the components of a modern data warehouse
describe Azure data services for modern data warehousing such as Azure Data
Lake Storage Gen2, Azure Synapse Analytics, Azure Databricks, and Azure
HDInsight
describe modern data warehousing architecture and workload
Describe data ingestion and processing on Azure
describe common practices for data loading
describe the components of Azure Data Factory (e.g., pipeline, activities,
etc.)
describe data processing options (e.g., Azure HDInsight, Azure Databricks,
Azure Synapse Analytics, Azure Data Factory)
Describe data visualization in Microsoft Power BI describe the role of paginated reporting
describe the role of interactive reports
describe the role of dashboards
describe the workflow in Power BI
QUESTION 1 Which statement is an example of Data Manipulation Language (DML)?
A. REVOKE
B. DISABLE
C. INSERT
D. GRANT
Correct Answer: C
QUESTION 2 You have a SQL query that combines customer data and order data. The query
includes calculated columns.
You need to create a database object that would allow other users to rerun the
same SQL query.
What should you create?
A. an index
B. a view
C. a scalar function
D. a table
Correct Answer: B
QUESTION 3 You have an Azure Cosmos DB account that uses the Core (SQL) API.
Which two settings can you configure at the container level? Each correct answer
presents a complete solution. (Choose two.)
NOTE: Each correct selection is worth one point.
A. the throughput
B. the read region
C. the partition key
D. the API
Correct Answer: AC
QUESTION 4 You need to store data by using Azure Table storage.
What should you create first?
A. an Azure Cosmos DB instance
B. a storage account
C. a blob container
D. a table
Correct Answer: B
QUESTION 5 What should you use to build a Microsoft Power BI paginated report?
A. Charticulator
B. Power BI Desktop
C. the Power BI service
D. Power BI Report Builder
