Free Microsoft AZ-100 Exam Practice Questions & Explanations
Prepared & Reviewed by the ValidExamDumps Editorial Team
At ValidExamDumps, we consistently monitor updates to the Microsoft AZ-100 exam questions by Microsoft. Whenever our team identifies changes in the exam questions, objectives, focus areas or requirements, We immediately update our exam questions for both PDF and online practice exams. This commitment ensures our customers always have access to the most current and accurate questions. By preparing with these up to date and 100% exam domain coverage questions, our customers can successfully pass the Microsoft Azure Infrastructure and Deployment exam on their first attempt without needing additional materials or study guides.
Other certification materials providers often include outdated or removed questions by Microsoft in their AZ-100 exam. These outdated questions lead to customers failing their Microsoft Azure Infrastructure and Deployment exam. In contrast, we ensure our questions bank includes only precise and up-to-date questions. Our main priority is your success in the Microsoft AZ-100 exam, not profiting from selling obsolete exam questions in PDF or Online Practice Test.
The finance team wants a cost breakdown of an Azure subscription by resource group and tag for the previous three months, exported daily to a storage account for ingestion into Power BI.
An administrator states that Microsoft Cost Management in the Azure portal can provide this analysis and can be configured to export the cost data on a recurring daily schedule to an Azure Storage account.
Is this statement true?
True. Microsoft Cost Management includes Cost analysis, which lets you group and filter accumulated costs by resource group, resource, service, location, and tag over selectable date ranges. The Exports feature schedules recurring daily, weekly, or monthly exports of cost data as CSV files to an Azure Storage account, which can then be consumed by Power BI or other tools.
You manage 40 production virtual machines. You need to be notified by email whenever the average CPU of any of these VMs exceeds 85 percent for 10 minutes, and you want to avoid creating and maintaining 40 separate alert rules.
What is the most efficient approach?
Azure Monitor metric alerts support multi-resource scope for virtual machines: a single rule can target all VMs in a resource group or subscription in the same region, monitor Percentage CPU with an aggregation of Average over a 10-minute window, and notify via an action group. This gives one rule to maintain while alerting per VM.
Per-VM log alerts multiply management overhead, and Heartbeat measures agent connectivity, not CPU. Service Health alerts cover Azure platform incidents. Activity log alerts fire on control-plane events and cannot evaluate performance metric thresholds.
Your company runs a mission-critical Azure Storage account. Auditors require that read, write, and delete transaction logs for blob operations, plus storage metrics, be retained and queried with Kusto queries alongside VM logs for the next 12 months.
What should you configure?
Diagnostic settings are the mechanism for routing resource-level platform logs (StorageRead, StorageWrite, StorageDelete) and metrics to a destination. Sending them to a Log Analytics workspace enables KQL queries and correlation with other resources' data, and workspace retention can be set to 12 months.
Azure Advisor gives best-practice recommendations, not logs. Boot diagnostics applies to VMs, not storage accounts. Soft delete protects data from accidental deletion but produces no queryable audit log.
You are the Owner of an Azure subscription. A new colleague, Ana, must be able to grant other users the Virtual Machine Contributor role on a resource group named RG-Test, but she must not be able to create, modify, or delete any resources in that resource group.
Which role should you assign to Ana at the RG-Test scope?
User Access Administrator grants the ability to manage user access to Azure resources (read everything plus assign roles) without granting rights to manage the resources themselves. That exactly matches the requirement.
Owner would also allow full resource management, violating the least-privilege requirement. Contributor can manage resources but explicitly cannot assign roles. Managed Identity Contributor only manages user-assigned managed identities.
Contoso has an Azure subscription containing a resource group named RG-Prod that hosts production virtual machines. The compliance team requires that all resources deployed into RG-Prod must be created only in the West Europe or North Europe regions, and any attempt to deploy elsewhere must fail at deployment time.
You must implement this with the least administrative effort and without preventing management of existing resources.
What should you do?
Azure Policy evaluates resource properties during creation/update and can deny non-compliant deployments. The built-in 'Allowed locations' definition takes a list of permitted regions and denies deployment to any other region. Assigning it at the resource group scope limits enforcement to RG-Prod.
A CanNotDelete lock only prevents deletion, not the region of new resources. RBAC roles control who can act, not where resources are placed. A blueprint with a ReadOnly lock would block ongoing management and is far more effort than needed. Tags are metadata only and enforce nothing.