Correct Answer: B) Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS)
The three main cloud service models are IaaS (provides virtualized computing resources), PaaS (provides a platform for developing and deploying applications), and SaaS (provides software applications over the internet).

Correct Answer: C) Hybrid cloud
Hybrid cloud combines public and private cloud environments, allowing organizations to keep some resources on-premises while leveraging cloud services for others, providing flexibility and gradual migration paths.

Correct Answer: A) Ability to automatically scale resources up or down based on demand
Elasticity allows cloud resources to automatically adjust to workload changes, scaling up during high demand and scaling down during low demand, optimizing both performance and costs.

Correct Answer: B) The system's ability to remain operational with minimal downtime
High availability refers to a system's ability to remain operational and accessible with minimal downtime, typically achieved through redundancy, failover mechanisms, and geographic distribution.

Correct Answer: C) Scalability is the ability to handle increased load, elasticity is the automatic adjustment of resources
Scalability refers to the system's ability to handle increased workload, while elasticity is the automatic provisioning and deprovisioning of resources in response to demand changes.

Correct Answer: A) Infrastructure as a Service (IaaS)
IaaS provides the most control over the underlying infrastructure, including virtual machines, storage, and networking components, while the cloud provider manages the physical hardware.

Correct Answer: B) Pay only for resources actually used
Consumption-based pricing allows organizations to pay only for the resources they actually consume, eliminating the need for large upfront investments and reducing waste from over-provisioning.

Correct Answer: D) Complete control over physical hardware
In cloud computing, the cloud provider manages the physical hardware. Users do not have complete control over the physical infrastructure, which is actually one of the benefits as it reduces management overhead.

Correct Answer: B) A geographical area containing multiple data centers
An Azure Region is a geographical area containing multiple data centers that are connected through a dedicated regional low-latency network, providing high availability and disaster recovery capabilities.

Correct Answer: C) To provide high availability and protect against data center failures
Azure Availability Zones are physically separated locations within an Azure region that provide high availability and protect applications and data from datacenter failures through redundancy.

Correct Answer: A) Azure Virtual Machines
Azure Virtual Machines provides on-demand, scalable computing resources that can be configured with various operating systems and applications, offering Infrastructure as a Service (IaaS).

Correct Answer: B) Hosting web applications and APIs
Azure App Service is a Platform as a Service (PaaS) offering that enables developers to build, deploy, and scale web applications and APIs quickly without managing the underlying infrastructure.

Correct Answer: C) Azure Blob Storage
Azure Blob Storage is designed for storing unstructured data such as documents, images, videos, and backup files. It provides different access tiers for cost optimization based on usage patterns.

Correct Answer: A) A logically isolated network in Azure
Azure Virtual Network (VNet) provides a logically isolated network environment in Azure where you can securely communicate between Azure resources, the internet, and on-premises networks.

Correct Answer: B) Azure SQL Database
Azure SQL Database is a fully managed relational database service that provides high availability, security, and performance for SQL Server workloads in the cloud.

Correct Answer: D) Running event-driven, serverless code
Azure Functions is a serverless compute service that allows you to run event-driven code without managing infrastructure, automatically scaling based on demand and charging only for execution time.

Correct Answer: C) Azure Cosmos DB
Azure Cosmos DB is a globally distributed, multi-model database service that supports multiple data models including document, key-value, graph, and column-family, with guaranteed low latency and high availability.

Correct Answer: A) Running containers without managing underlying infrastructure
Azure Container Instances (ACI) provides a fast and simple way to run containers in Azure without managing virtual machines or orchestration services, offering a serverless container experience.

Correct Answer: C) The deployment and management service for Azure resources
Azure Resource Manager (ARM) is the deployment and management service for Azure that provides a management layer enabling you to create, update, and delete resources in your Azure account.

Correct Answer: A) To collect, analyze, and act on telemetry data from Azure resources
Azure Monitor maximizes the availability and performance of applications and services by collecting, analyzing, and acting on telemetry data from your cloud and on-premises environments.

Correct Answer: B) Protecting data and applications with backup and restore capabilities
Azure Backup is a simple, secure, and cost-effective solution to back up your data and recover it from the Microsoft Azure cloud, protecting against data loss and corruption.

Correct Answer: D) Software development lifecycle management and collaboration
Azure DevOps provides developer services for support teams to plan work, collaborate on code development, and build and deploy applications across multiple platforms and clouds.

Correct Answer: C) Disaster recovery and business continuity
Azure Site Recovery helps ensure business continuity by keeping business apps and workloads running during outages through replication, failover, and failback capabilities.

Correct Answer: A) A personalized cloud consultant that provides best practice recommendations
Azure Advisor is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments, providing recommendations for high availability, security, performance, and cost.

Correct Answers:
• Azure Portal → Web-based management interface
• Azure CLI → Command-line interface for cross-platform management
• Azure PowerShell → PowerShell-based management for Windows environments
• Azure Resource Manager Templates → Infrastructure as Code for automated deployments

Correct Answer: C) A service that provides information about Azure service incidents and planned maintenance
Azure Service Health provides personalized alerts and guidance when Azure service issues affect you, helping you stay informed about service incidents, planned maintenance, and health advisories.

Correct Answer: A) Unified security management and threat protection across hybrid cloud workloads
Azure Security Center (now Microsoft Defender for Cloud) provides unified security management and threat protection across hybrid cloud workloads, helping strengthen security posture and protect against threats.

Correct Answer: B) Securely storing and managing cryptographic keys, secrets, and certificates
Azure Key Vault helps safeguard cryptographic keys and secrets used by cloud applications and services, providing centralized management and enhanced security for sensitive information.

Correct Answer: C) A service that protects against distributed denial of service attacks
Azure DDoS Protection provides countermeasures against the most sophisticated DDoS threats, helping protect Azure applications from distributed denial of service attacks.

Correct Answer: A) A virtual firewall that controls inbound and outbound traffic
A Network Security Group (NSG) acts as a virtual firewall that controls inbound and outbound traffic to network interfaces, VMs, and subnets based on security rules.

Correct Answer: B) A managed, cloud-based network security service
Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources with built-in high availability and unrestricted cloud scalability.

Correct Answer: C) A cloud-native security information and event management (SIEM) solution
Azure Sentinel is a cloud-native SIEM and security orchestration automated response (SOAR) solution that provides intelligent security analytics and threat intelligence across the enterprise.

Correct Answer: A) Classifying, labeling, and protecting sensitive data
Azure Information Protection helps organizations classify, label, and protect sensitive data whether it's stored on-premises or in the cloud, providing persistent protection that follows data wherever it goes.

Correct Answer: B) Implementing multiple layers of security controls
Defense in Depth is a security strategy that employs multiple layers of security controls throughout an IT system, so if one layer fails, another layer provides protection.

Correct Answer: C) A web traffic load balancer with application-level routing
Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications, providing application-level routing and load balancing services.

Correct Answer: A) Azure Key Vault
Azure Key Vault provides centralized key management for encryption keys, secrets, and certificates, helping organizations meet compliance requirements while ensuring data is encrypted at rest and in transit.

Correct Answer: B) A secure RDP/SSH connectivity service to virtual machines
Azure Bastion provides secure and seamless RDP/SSH connectivity to your virtual machines directly through the Azure portal over TLS, without exposing VMs to the public internet.

Correct Answer: C) To access Azure services privately from a virtual network
Azure Private Link enables you to access Azure services privately from your virtual network, keeping traffic within the Microsoft network and eliminating exposure to the public internet.

Correct Answer: A) A cloud-based identity and access management service
Microsoft Entra ID (formerly Azure Active Directory) is Microsoft's cloud-based identity and access management service that helps employees sign in and access resources in external and internal applications.

Correct Answer: B) A security method that requires two or more verification factors
Multi-Factor Authentication (MFA) is a security enhancement that requires users to provide two or more verification factors to gain access to a resource, making it harder for unauthorized users to gain access.

Correct Answer: C) The ability to access multiple applications with one set of credentials
Single Sign-On (SSO) allows users to log in once and access multiple applications without having to authenticate again, improving user experience and reducing password fatigue.

Correct Answer: A) Creating and managing policies to enforce organizational standards
Azure Policy helps to enforce organizational standards and assess compliance at scale by creating, assigning, and managing policies that run different rules and actions over resources.

Correct Answer: B) A method of restricting access based on user roles
Role-Based Access Control (RBAC) helps manage who has access to Azure resources, what they can do with those resources, and what areas they have access to based on their role in the organization.

Correct Answer: C) A service for defining repeatable sets of Azure resources
Azure Blueprints enables cloud architects to define a repeatable set of Azure resources that implements and adheres to an organization's standards, patterns, and requirements.

Correct Answer: A) Detailed information about Azure's compliance with various standards and regulations
Azure compliance documentation provides detailed information about how Azure services comply with various industry standards, regulations, and certifications such as ISO, SOC, HIPAA, and GDPR.

Correct Answer: B) A feature to prevent accidental deletion or modification of resources
ARM locks help prevent accidental deletion or modification of critical resources by applying locks at the subscription, resource group, or resource level.

Correct Answer: C) A service that extends Azure management to on-premises and multi-cloud environments
Azure Arc extends Azure management and services to any infrastructure, enabling you to manage servers, Kubernetes clusters, and data services across on-premises, multi-cloud, and edge environments.

Correct Answers: A) Single Sign-On (SSO) capabilities and C) Multi-Factor Authentication (MFA)
Microsoft Entra ID (formerly Azure Active Directory) provides SSO capabilities allowing users to access multiple applications with one set of credentials, and MFA for enhanced security. It does not manage physical servers or provision virtual machines.

Correct Answer: B) Estimating costs for planned Azure deployments
The Azure pricing calculator helps you estimate the costs for your planned Azure deployments before you create resources, allowing you to make informed decisions about service configurations and regions.

Correct Answer: C) A tool to estimate cost savings by migrating to Azure
The TCO calculator helps you estimate the potential cost savings by migrating your on-premises workloads to Azure, comparing the costs of running infrastructure on-premises versus in Azure.

Correct Answer: A) A service for monitoring, analyzing, and optimizing Azure costs
Azure Cost Management provides tools to monitor, analyze, and optimize your Azure spending, helping you understand where your money is going and how to reduce costs.

Correct Answer: B) Resource type, consumption, maintenance, geography, subscription type, and Azure Marketplace
Azure costs are affected by multiple factors including the type of resources used, how much you consume, maintenance requirements, geographical location, subscription type, and any Azure Marketplace services.

Correct Answer: C) A formal agreement that defines performance standards and uptime guarantees
An SLA is a formal agreement between a service provider and customer that defines the level of service expected, including performance standards, uptime guarantees, and remedies for non-compliance.

Correct Answer: A) Total Cost of Ownership (TCO) calculator
The TCO calculator is specifically designed to help organizations estimate the cost savings of migrating from on-premises infrastructure to Azure by comparing the total costs of ownership.

Correct Answer: B) Uptime percentage guarantees and service credits
Azure SLAs typically include uptime percentage guarantees (e.g., 99.9%) and service credits that customers can claim if the service doesn't meet the guaranteed uptime levels.

Correct Answer: C) Azure Cost Management and Billing
Azure Cost Management and Billing provides features to set spending limits, create budgets, and receive alerts when spending approaches or exceeds defined thresholds.

Correct Answer: A) Customers may be eligible for service credits
If an Azure service doesn't meet its SLA commitments, customers may be eligible for service credits, which are typically applied as credits to future Azure bills based on the severity and duration of the outage.

Correct Answer: B) An account that includes free services for 12 months and a credit for the first 30 days
The Azure Free Account includes a $200 credit to use within the first 30 days, free access to popular services for 12 months, and access to always-free services with monthly limits.

Correct Answer: C) 99.94% (99.99% × 99.95%)
When multiple services are used together, the composite SLA is calculated by multiplying the individual SLAs: 99.99% × 99.95% = 99.94%. This is because both services need to be available for the solution to work properly.