| Factors that affect costs in Azure |
- Questions present a multi-select scenario asking which variables drive the cost of an Azure resource — you need to know which factors genuinely influence pricing and which do not.
- Questions test knowledge of commitment-based cost reduction mechanisms — you need to know how reserved capacity works and understand the terms available.
- Questions test whether organisational constructs within Azure itself generate additional costs — you need to know which Azure features are free to use and which incur charges.
- Questions test the direction of data transfer costs at a fine level — you need to understand how cost is applied to inbound traffic, outbound traffic to on-premises, and traffic between services within the same region, for both ExpressRoute and general Azure scenarios.
- Questions test which VM purchasing option provides access to unused compute capacity at significant discounts — you need to know the different VM pricing models available and understand the trade-offs of each.
- Questions test the cost behaviour of VMs in different states — you need to know which costs continue to accrue when a VM is stopped and which do not.
- Questions test what Azure Reservations offer relative to standard pricing — you need to understand the cost benefit of commitment-based pricing relative to pay-as-you-go.
- Questions test whether two resources of the same type and size always cost the same — you need to understand which other factors influence monthly cost beyond size alone.
|
| TCO (Total Cost of Ownership) calculator |
- Questions test what the TCO Calculator does and what outputs it produces — you need to know what types of costs it models, what it is designed to display, and what format its results take.
- Questions test who is permitted to use the Azure TCO Calculator — you need to know that it is a publicly accessible tool available to anyone, with no Azure account or subscription required, and be able to reject options that restrict access to specific subscription roles or tenant members.
|
| Azure Cost Management capabilities |
- Questions test which Azure feature is used to send automated alerts when subscription spend crosses a defined threshold — you need to know the specific construct responsible for spend-based alerting and be able to distinguish it from governance and access control tools.
- Questions test which tool is appropriate for tracking and analysing the costs of Azure resources — you need to understand the purpose of cost management features and how they differ from organisational tagging.
- Questions use true/false format to test the scope of Microsoft Cost Management — you need to know whether it can display costs associated with management groups, resource groups, and virtual machine usage history, and understand which organisational scopes it can report against.
- Questions present a scenario where an organisation wants to minimise licensing costs when deploying software it already owns licences for — you need to know which Azure pricing benefit allows existing on-premises licences to be applied to Azure deployments and be able to distinguish it from reservation-based discounts, cost management budgets, and VM deallocation strategies.
|
| Tags |
- Questions test the rules governing how tags are applied and inherited — you need to know whether tags can be applied in multiples to a single resource, and how tag assignment at the resource group level relates to the resources inside it.
- Questions test whether governance tools can be used to enforce tagging — you need to understand the relationship between Azure Policy and tags.
- Questions present a scenario where an organisation needs to attribute costs or usage across departments, and ask which Azure feature enables this — you need to know the correct mechanism for resource categorisation and cost reporting.
- Questions test what tags can and cannot be used for — you need to know whether they can be assigned via ARM templates, whether they can enforce naming standards, and how many can be assigned to a single resource.
- Questions present a description-matching scenario asking which governance feature is used to identify Azure resources associated with specific cost centres — you need to know that tags are the correct mechanism for resource cost attribution and be able to distinguish them from Policy, locks, and Blueprints.
|
| Azure Policy |
- Questions test whether you know how to organise related policies together — you need to understand the different Azure Policy constructs and which one groups multiple policies into a single assignable unit.
- Questions test at which scopes a policy definition can be assigned — you need to know which Azure constructs are valid assignment targets and which are not.
- Questions test what happens to existing resources when a new policy is applied — you need to understand the difference between how policy affects future deployments versus resources already in place.
- Questions test the effect of assigning a policy that restricts a resource type to a scope that already contains resources of that type — you need to understand whether existing resources are affected and in what way.
- Questions present a governance scenario requiring resource creation to be restricted to specific regions, and ask which tool enforces this — you need to know that Azure Policy is used for this type of constraint and be able to distinguish it from locks, management groups, and reservations.
- Questions present a description-matching format asking which governance feature restricts the types of virtual machines that can be created in a subscription — you need to know that Azure Policy is the correct answer and be able to distinguish it from Blueprints, resource locks, and tags.
|
| Resource locks |
- Questions present a scenario where an administrator needs to prevent accidental changes or deletion of resources, and ask which setting achieves this — you need to know the purpose of resource locks and be able to identify them from a list of other resource management options.
- Questions test what must happen before a locked resource can be deleted — you need to understand the steps required to remove a lock and be able to distinguish this process from other governance mechanisms.
- Questions test which resource types support locks and which do not — you need to know the scope of where locks can be applied within the Azure environment.
- Questions test the behaviour of different lock types — you need to understand which operations remain possible on a resource that has a delete lock versus a read-only lock.
- Questions test how many locks can be applied to a single resource — you need to know whether multiple locks can coexist on the same resource.
- Questions test which construct can be assigned to every Azure resource — you need to know the answer and be able to distinguish locks from policies, blueprints, and service endpoints in this context.
- Questions use true/false format to test the behaviour of a read-only lock specifically — you need to know whether a read-only lock prevents deletion as well as modification, and be able to distinguish this from the behaviour of a delete lock.
- Questions use true/false format to test whether Azure resources inherit locks assigned to their parent resource group — you need to know that lock inheritance does apply down the resource hierarchy and understand the implications for child resources.
|
| Azure portal |
- Questions present a scenario where resources need to be managed from a non-standard device or operating system, and ask which tools are accessible in that context — you need to know the access requirements and platform compatibility of the Azure portal.
- Questions test familiarity with the Azure portal interface — you need to know which blade corresponds to a specific administrative task, including health monitoring, security recommendations, and cost management, and be able to distinguish between portal blades that serve different purposes.
|
| Azure Cloud Shell |
- Questions test which Azure management tools can be used without locally installed software — you need to know how Cloud Shell is accessed and why it is suitable for managing Azure across different platforms and devices.
- Questions present a scenario requiring Azure resource management from a device with a browser, and ask which Cloud Shell environments are valid options — you need to know which shell types are available within Cloud Shell and what each can do.
|
| Azure CLI & Azure PowerShell |
- Questions test which combinations of operating system and tooling can execute a given type of script — you need to know the cross-platform availability of each tool and understand which tools can and cannot run which script types.
- Questions test the operating systems on which Azure PowerShell can be installed — you need to know which platforms are supported and be able to reject assumptions that limit it to a single operating system.
|
| Azure Arc |
- Questions test the scope of what Azure Arc can manage — you need to know which types of resources and environments it can extend Azure management to, both inside and outside of Azure.
- Questions present a scenario where on-premises servers need to be managed through the Azure portal, and ask which service makes this possible — you need to know Azure Arc's role in extending Azure management to non-Azure environments.
- Questions test what Azure Arc extends to hybrid and multicloud environments — you need to know its role in bringing Azure compliance and monitoring capabilities to resources outside of Azure.
- Questions ask which Azure service provides a unified way to project and manage non-Azure resources through Azure Resource Manager — you need to know that Azure Arc is the correct answer and be able to distinguish it from Azure Migrate, Azure Front Door, and identity sync services.
|
| Infrastructure as Code (IaC) |
- Questions test what mechanism applications use to interact with Azure programmatically to manage resources — you need to know which interface is designed for programmatic application-level integration with Azure and be able to distinguish it from human-facing management and deployment tools.
|
| ARM templates |
- Questions present a scenario where multiple teams need identical resources deployed in a consistent and repeatable way, and ask which solution automates this — you need to know which Azure tool is designed for repeatable declarative resource deployment and be able to distinguish it from other management and scaling constructs.
- Questions test the file format used by ARM templates — you need to know which serialisation format they use and be able to distinguish it from other common data formats.
- Questions use true/false format to test whether ARM templates can be deployed via the Azure portal — you need to know that portal-based deployment is a supported method alongside CLI, PowerShell, and API-based approaches.
- Questions use true/false format to test whether ARM templates can define infrastructure using code — you need to know that ARM templates are a declarative infrastructure-as-code mechanism and that this statement is true.
- Questions use true/false format to test whether each Azure resource to be deployed requires a separate ARM template — you need to know that a single ARM template can define and deploy multiple resources simultaneously, and that the one-template-per-resource assumption is incorrect.
|
| Azure Advisor |
- Questions test what Azure Advisor is capable of surfacing — you need to understand the scope of its recommendations and which areas of your environment it covers.
- Questions test the relationship between acting on Azure Advisor recommendations and an organisation's security posture score — you need to understand how the two are connected.
- Questions test whether Advisor recommendations are mandatory — you need to know the nature of Advisor's guidance and whether it carries any compliance obligation.
- Questions test which Azure tool provides cost optimisation recommendations — you need to know Azure Advisor's role in surfacing actionable cost-saving guidance and be able to distinguish it from monitoring, health, and pricing tools.
- Questions test which Azure portal blade is used to view security recommendations, and which tool identifies underutilised or unused resources — you need to know how Advisor fits within the portal and be able to distinguish it from monitoring, health, and marketplace blades.
- Questions use true/false format to test whether Azure Advisor provides personalised recommendations — you need to know that Advisor analyses your specific environment and tailors its guidance accordingly, rather than providing generic advice.
- Questions use true/false format to test whether Azure Advisor can provide cost recommendations for virtual machines — you need to know that cost optimisation is one of Advisor's five recommendation pillars and that VM right-sizing and shutdown suggestions are within its scope.
- Questions use true/false format to test whether Azure Advisor can provide recommendations across multiple subscriptions — you need to know that Advisor can surface and filter recommendations across subscriptions within a tenant, not just a single subscription at a time.
|
| Azure Service Health |
- Questions test what Azure Service Health can and cannot do — you need to understand its role as an observability tool, what administrators can configure within it, and the limits of what it can influence.
- Questions test which monitoring tool covers planned platform maintenance notifications — you need to know which service is responsible for this specific type of alert and be able to distinguish it from tools that focus on resource performance and security recommendations.
|
| Azure Monitor |
- Questions test whether you can identify the correct monitoring tool for a given scenario — you need to know which service handles alerting on resource activity and be able to distinguish it from tools focused on recommendations, network diagnostics, and service status.
- Questions test the full scope of Azure Monitor's capabilities — you need to know whether it supports alert creation, whether it can monitor resources across multiple subscriptions, whether it integrates with identity activity logs, whether it can monitor on-premises resources, and what alert targets it supports.
- Questions ask which Azure service collects events from multiple resources into a centralised repository — you need to know that Azure Monitor is the correct answer for this aggregation role and be able to distinguish it from stream processing, messaging, and analytics services offered as distractors.
- Questions present a scenario requiring collection and cross-comparison of event data from multiple virtual machines, and ask which two tools to use — you need to know that Azure Monitor and Log Analytics work together to collect, store, and query this data, and be able to exclude advisory, health, and messaging services from the answer.
|
| Log Analytics |
- Questions test where Azure Monitor stores the data it collects — you need to know the specific destination and be able to distinguish it from other Azure storage and database services.
- Questions present a multi-VM event analysis scenario and ask which two tools are needed — you need to know that Log Analytics works alongside Azure Monitor to store and query collected telemetry, and understand its role as the query engine for cross-resource log data.
|
| Azure Monitor alerts |
- Questions test the triggers and targets of Azure Monitor alerts — you need to know what data sources can trigger an alert and which notification targets are supported, including whether alerts can be sent to identity-based groups and whether they can be triggered from Log Analytics workspace data.
|
| Application Insights |
- Questions present a scenario involving a web application and ask which tool measures end-user experience metrics — you need to know which capability within Azure Monitor is designed for application performance monitoring and be able to distinguish it from log querying, alerting, and network monitoring tools.
- Questions use a sentence-completion format to test which parent service Application Insights belongs to — you need to know that Application Insights is a feature of Azure Monitor, not a standalone service, and be able to reject Azure Advisor, Application Gateway, and Azure Arc as incorrect parent services.
|