Describe Azure management and governance

Your development team has deployed a customer-facing web application to Azure App Service. They want to monitor application performance, track request rates and response times, detect failures, and diagnose issues from within the running application code. Which Azure Monitor feature should they use?

Your organization has been running Azure resources for six months and management wants to identify opportunities to reduce cloud spending without impacting performance. You need to find specific recommendations for cost optimization based on your actual resource usage patterns and configurations. Which Azure tool should you use?

Your company runs a mix of Windows servers in an on-premises datacenter and virtual machines in another public cloud provider. The operations team wants to manage, govern, and apply Azure Policy to all these servers from within the Azure portal, using a single management plane. Which Azure service should you recommend?

A financial services company must provision new project environments that consistently include a standard set of resource groups, role assignments, Azure Policy assignments, and ARM template deployments to meet regulatory requirements. They want to package all of these artifacts together so that each new subscription can be set up in a repeatable, compliant way. Which Azure service should they use?

Your company is migrating 40 on-premises Windows Server virtual machines to Azure. You have existing Windows Server licenses with active Software Assurance and want to reduce the cost of running these VMs in Azure by reusing those licenses instead of paying for new ones. Which Azure cost-saving feature should you use?

Your organization wants to enforce a standard naming convention for all Azure resources across multiple subscriptions. Resource names must begin with the prefix 'corp-' followed by the department code. Non-compliant resources should be prevented from being created. Which Azure feature should you implement?

Your organization requires all Azure resources to have a 'CostCenter' tag applied before deployment to track departmental spending. Several developers have deployed resources without this tag. You need to ensure that future resource deployments are automatically blocked if they lack the required 'CostCenter' tag. What should you implement?

Your organization requires that all Azure resources must have a 'CostCenter' tag applied before they can be created. Resources without this tag should be prevented from being deployed. Which Azure feature should you implement to enforce this requirement across all subscriptions?

Your operations team wants to receive proactive notifications about planned maintenance, service outages, and health advisories that specifically affect the Azure services and regions your company uses. Which Azure tool should they use?

A DevOps engineer needs to deploy identical Azure environments (virtual networks, storage accounts, and virtual machines) across development, test, and production. The deployment must be repeatable, version-controlled in Git, and use a concise declarative syntax that is native to Azure. Which tool should the engineer use?

Your organization has deployed multiple Azure resources across different departments including Marketing, Sales, and IT. Management wants to track cloud spending by department to allocate costs accurately for budgeting purposes. Each resource has been tagged with a 'Department' key and the appropriate department name as the value. Which Azure tool should you use to view a breakdown of costs grouped by the Department tag?

Your organization has multiple departments deploying resources across several Azure subscriptions. The finance team needs to track spending by department, receive alerts when spending exceeds 80% of the monthly budget, and generate monthly cost reports. Which Azure tool should you implement to meet these requirements?

Your company is planning to migrate its on-premises datacenter workloads to Azure. Before committing, leadership wants a report that compares the estimated cost of continuing to run the workloads on-premises against the projected cost of running equivalent resources in Azure. Which Azure tool should you use to produce this comparison?

Your company runs a production database server in Azure. Several administrators have Contributor access to the resource group. You need to ensure that no one can accidentally delete the database server, while still allowing administrators to modify its configuration settings. What should you implement?

Your company runs a production storage account that hosts critical financial records. Administrators occasionally perform bulk cleanup operations in the Azure portal, and management is concerned that this storage account could be deleted by mistake. You need to ensure the storage account cannot be deleted while still allowing administrators to read and modify the data it contains. What should you implement?

Your company runs a critical SQL database on an Azure virtual machine in the production resource group. Several administrators have contributor access to this resource group. You need to ensure that no one can accidentally delete the virtual machine, while still allowing administrators to modify its configuration. What should you implement?

Your organization has a production resource group named RG-Prod that contains critical virtual machines and databases. Multiple administrators have Contributor access to the subscription. You need to ensure that no one can accidentally delete RG-Prod or any resources within it, while still allowing administrators to modify resource configurations and add new resources. What should you implement?

Your company runs a critical production database in Azure. Several administrators have Contributor access to the resource group. Management is concerned that someone could accidentally delete the database. You need to ensure the database cannot be deleted, while still allowing administrators to read and modify its configuration. Which Azure feature should you use?

Your company runs a critical production storage account in Azure. Several administrators have contributor access to the resource group. You need to ensure that no one can accidentally delete this storage account, while still allowing administrators to read and modify its data. Which Azure feature should you use?

Your company has a production Azure SQL database that supports a critical application. Several administrators have access to the resource group, and management is concerned that someone might accidentally delete the database. You need to ensure the database cannot be deleted, while still allowing administrators to modify its settings. What should you use?