Integrate On-Premises and Cloud Resources CCP-V-CURRENT Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the purpose of a failover in a disaster recovery plan?

   • ATo increase the capacity of the primary site
   • BTo automatically switch operations to a secondary site or resource
   • CTo test the backup without affecting production
   • DTo permanently delete all data from the primary site
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company has a 5 TB on-premises file share that is accessed by 200 users. They want to use Azure for disaster recovery and to provide remote access to files. They have a 100 Mbps connection to Azure. They need to ensure that the initial sync to Azure completes within a week and that ongoing changes are replicated continuously. What should they do?

   • AUse Azure Data Box for the initial sync, then Azure File Sync for ongoing replication
   • BUse Azure Import/Export service for the initial sync and a scheduled AzCopy job for ongoing changes
   • CUse AzCopy to copy the data to Azure Blob Storage, then use Azure File Sync
   • DUse Azure File Sync for the initial sync and ongoing replication
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What does data residency refer to in a hybrid cloud context?

   • AThe physical location where data is stored
   • BThe encryption method used to protect data
   • CThe speed at which data can be accessed
   • DThe number of copies of data that exist
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company has a hybrid environment and needs to enforce a policy that all VMs, both on-premises and in Azure, must have a specific security agent installed. They also need to audit compliance with this policy. They are using Azure Arc to manage on-premises servers. What should they use to enforce and audit this policy?

   • AAzure Automation State Configuration (DSC)
   • BAzure Security Center (Defender for Cloud) only
   • CA manual script run on each server
   • DAzure Policy with a guest configuration policy
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company has a hybrid network with an Azure VNet connected to on-premises via ExpressRoute. They have a three-tier application in Azure: web, application, and database. The database tier must not be accessible from the internet or the on-premises network, only from the application tier. The web tier must be accessible from the internet. They also need to audit all network traffic to the database. What should they implement?

   • AAzure Firewall with a rule to block all traffic to the database subnet, and enable diagnostic logs
   • BA VPN gateway for the database subnet and a route table to block internet access
   • CNSGs on the database subnet allowing only the application subnet, and enable Network Watcher flow logs
   • DAzure Bastion for database access and enable Azure Activity Log
   Reveal Solution Discussion Select an answer first