Powershell

1)How to get the Version of Windows Powershell?

Ans-$PSVersionTable

2) Which command will open a dialog box asking for Username and Password?
Ans- Get-Credential

3) Which one of the following is a Variable in Powershell?

Ans-$Number1

4) how to see all the properties of a command get process

Ans- Format-List

5) The Unit in the FOR loop will work during every iteration in powershell
Ans- True

6) which one of the following is a comparison operator in powershell

Ans- -eq , -ne , -gt , -lt , -le , -ge

7) How to Handle a Non-Terminating Error?

Ans- ErrorAction

8) Which one of the following is an Assignment Operator?

Ans- +=

9) Which WMI class contains the Last reboot time?

Ans- win32_operatingsystem

10) What is the command to get all the Windows updates?

Ans- Get-Hotfix

11) What is the Input statement in Powershell?

Ans- Read-Host

12) What are two important components of FOREACH?

Ans- item variable and collection variable

13) which command appends the data in a file by default? in powershell

Ans- Add-Content

14) What is the command to access the remote computer (Server01) service?
Ans- Get-Service -ComputerName Server01
15) How to declare the Parameter $Value as Required Parameter?
Ans- Mandatory=$true

16) which command can help in viewing the file data

Ans- Get-Content

17) which command will show the details of the Parameter called Logname from the command
get-eventlog?
Ans- Get-EventLog -LogName

18) Which Execution policy will NOT allow the Downloaded scripts to Execute?
Ans- Unrestricted

19) which command will help in getting only selected properties of a command?
Ans- Select-Property

20) Which two commands used to filter only selected properties? in powershell
Ans- Select-Object

21) Which variable stores the Global profile in Powershell?

Ans- $PROFILE

22) Which command will help to create the Result to csv?

Ans- Export-CSV

23) What are the Three types of Variable in Powershell

Ans- User-created,Automatic,Preference

24) What is the command to see all the list of commands in the Powershell
Ans- Get-Command

25) What is the command to access the wmi object?

Ans- Get-WmiObject

26) What is Powershell ISE?

Ans- Integrated Scripting Environment

27) Which looping statement runs atleast once.

Ans- do while loop

Azure
1.. Your company provides cloud software to audit administrative access in Microsoft Azure
resources. The software logs all administrative actions (including all clicks and text input) to log
files. The software is about to be released from beta and the company is concerned about
storage performance. You need to deploy a storage solution for the log files to maximize
performance. What should you do? Select one.
Ans- Deploy blob storage using append blobs.

2) Your company requires all data to be encrypted with 256-bit AES encryption. What should
you do?
Ans- Enable storage service encryption

3) You are backing up your App Service. Which of the following is included in the backup?
Ans-▪ App configuration.
▪ Azure database for MySQL.

4) You are administering a production web app. The app requires scaling to five instances,
40GB of storage, and a custom domain name. Which App Service Plan should you select?
Ans- Standard

5) deploy a new domain named contoso.com to domain controllers in Azure. You have the
following domain-joined VMs in Azure
Ans- Add a CNAME record for intranet.contoso.com with a value of

6) You decide to move all your services to Azure Kubernetes service. Which of the following
components will contribute to your monthly Azure charge? Select one.
Ans- Node virtual machines

7) You out serview two Arure vetual machines You discover that occasional outages cause your
service to a What two actions can you do to minimize the impact of the outages?
Ans- Add a load balancer
Put the virtual machines in the availability set

8) You are using blob storage. Which of the following is true? Select one.
Ans- You can switch between hot and cool performance tiers at any time.

9) Your users want to sign-in to devices, apps, and services from anywhere. They want to sign-
in using an organizational work or school account instead of a personal account. You must
ensure corporate assets are protected and that devices meet standards for security and
compliance. Specifically, you need to be able to enable or disable a device. What should you
do? Select one.
Ans- Join the device to Azure AD.

10) You are reviewing the Alerts page and notice an alert has been Acknowledged. What does
this mean? Select one.
Ans- An administrator has reviewed the alert

11) Your company is preparing to move some services and VMs to Microsoft Azure. The
company has opted to use Azure DNS to provide name resolution. A project begins to configure
the name resolution. The project identifies the following requirements
Ans- Register a domain name with a domain registrar.
Delegate the new domain name to Azure DNS.
Add a record for WWW.

12) Your organization has an app, and the performance of this app is critical to day to day
operations. You have configured an alert and need to ensure the administrators are notified if
there is a problem. You should provide the administrator email addresses in the:
Ans- Action Group

13) Identify three differences from the following list between Azure Active Directory (AD) and
Active Directory Domain Services (AD DS). Select three.
Ans- Azure AD uses HTTP and HTTPS communications
There are no Organizational Units (OUs) or Group Policy Objects (GPOs) in Azure AD
Azure AD includes Federation Services

Q) Assume that your users want to sign-in to devices, apps, and services from anywhere. They
want to sign-in using an organizational work or school account instead of a personal account. In
order to ensure that the corporate assets are protected and that devices meet standards for
security and compliance, you should:
Ans- Join the device to Azure AD.

Q) In order to add a user who has a Microsoft account to your subscription, the type of the used
user account should be:
Ans- Guest User.

Q) The role that allows the user to manage all the groups in the Microsoft Azure AD Teams
tenants and be able to assign other administrator roles:
Ans- Global administrator

Q) What should you do to target policies and review spend budgets across several
subscriptions you manage?
Ans- Create management groups

Q) In order to categorize resources and billing for different departments like IT and HR,
consolidate the billing across multiple resource groups and ensure that everyone complies with
the solution, you should:
Ans-Create tags for each department
Create an Azure policy

Q) Your company financial controller wants to be notified whenever the company is half-way to
spending the money allocated for cloud services, you should create:
Ans- A budget and a spending threshold

Q) If your organization has several Azure policies that they would like to create and enforce for
a new branch office, you should create:
Ans- Create a policy initiative

Q) You have three virtual machines (VM1, VM2, and VM3) in a resource group. You hire a new
employee. The new employee must be able to modify the settings on VM3, but not on VM1 and
VM2. The permission that should be assigned to the new employee:
Ans- Contributor role on VM3

Q) Your company is planning to store log data, crash dump files, and other diagnostic data for
Azure VMs in Azure, where these files will be browsed in the File Explorer and accessed over
SMB 3.0 must be supported. The storage type that meets these requirements:
Ans-Azure Files

Q) Your company started using a cloud software to audit administrative access in Microsoft
Azure resources. The software logs all administrative actions to log files. The storage type that
can be used to store the software log files:
Ans-Blob storage using append blobs

Q) You need to provide a contingent staff employee temporary read-only access to the contents
of an Azure storage account container named Test. In order to grant access while adhering to
the security principle of least-privilege, you should:
Ans- Generate a shared access signature (SAS) token for the container

Q) In order to move thousands of photos requiring over 500 TB of storage to Azure blob storage
from your datacenter data, ensuring that the security of the data including chain of custody logs
and 256-bit encryption is required, you should use:
Ans- Data Box Heavy

Q) You have a service that is hosted on two Azure virtual machines. You discover that
occasional outages cause your service to fail. In order to minimize the impact of the outages,
you should:
Ans- Add a load balancer
Put the virtual machines in an availability set

Q) A Microsoft Azure administrator creates an Azure virtual machine scale set with 5 VMs. The
VMs are all running at max capacity with the CPU being fully consumed, without deploying new
VMs to the scale set. In order to ensure that additional VMs are deployed when the CPU is 75%
consumed, you should:
Ans- Enable the autoscale option

Q) You are deploying a critical business application to Microsoft Azure, with the uptime of the
application is of utmost importance. The application has 2 web servers, 2 application servers
and 2 database servers. Each VM in a tier must run on different hardware. To meet the
requirements, you should:
Ans- Deploy the VMs from each tier into a dedicated availability set for the tier.

Q) If your organization has a security policy that prohibits exposing SSH ports to the outside
world. How could you connect to an Azure Linux virtual machine and install software?
Ans-Configure the Bastion service

Q) Your company has an existing Microsoft Azure tenant. The company wants to start using it
for their Azure resources. You add a custom domain to Azure. Now, you need to add a DNS
record to prepare for verifying the custom domain, then you should:
Ans- Add a TXT or MX record to the DNS zone

Q) You’re currently using network security groups (NSGs) to control how your network traffic
flows in and out of your virtual network subnets and network interfaces. You want to customize
how your NSGs work. For all incoming traffic, you need to apply your security rules to both the
virtual machine and the subnet level. To achieve that, you should:
Ans- Create rules for both NICs and subnets with an allow action
Add rules with a higher priority than the default rules

Q) In order to ensure that Microsoft Azure DNS can resolve names for your registered domain,
you should use:
Ans- Zone delegation

Q) You are configuring the Microsoft Azure Firewall. In order to allow Windows Update network
traffic through the firewall, you should use:
Ans- Application rules

Q) You are preparing to implement a Site-to-Site VPN to Microsoft Azure. You already have an
Azure subscription, an Azure virtual network, and an Azure gateway subnet. Now you should
prepare the On-premises and Microsoft Azure environment for the Site-to-Site VPN by:
Ans- Obtaining a VPN device for the on-premises environment
Creating a virtual network gateway (VPN) and the local network gateway in Azure
Obtaining a public IPv4 IP address without NAT for the VPN device

Q) You are configuring VNet Peering across two Azure two virtual networks, VNET1 and
VNET2. You are configuring the VPN Gateways. You want VNET2 to be able to use to VNET1’s
gateway to get to resources outside the peering. To achieve that you should:
Ans- Select allow gateway transit on VNET1 and use remote gateways on VNET2

Q) In order to redirect all Internet traffic back to your company’s on-premises servers for packet
inspection, you can use:
Ans- User-Defined Routes
Forced Tunneling

Q) Your company provides customers a virtual network in the cloud. You have dozens of Linux
virtual machines in another virtual network. The Azure load balancer that can be used to direct
traffic between the virtual networks:
Ans- Install an internal load balancer

Q) You have several websites and are using Traffic Manager to distribute the network traffic.
You are bringing a new endpoint online but are not sure that it is ready to accept a full load of
requests. The Traffic Manager routing algorithm that should be used:
Ans- Weighted

Q)You are working as a Microsoft Azure Administrator in a company. You are deploying the
Application Gateway and want to ensure incoming requests are checked for common security
threats like cross-site scripting and crawlers. To achieve that, you should:
Ans- Install the Web Application Firewall

Q) The Kubernetes agent that processes the orchestration requests from the cluster master,
and schedules running the requested containers:
Ans- kubelet

Q) The method that the Microsoft Azure App Service use to obtain credentials for users
attempting to access an app:
Ans-redirection to a provider endpoint

Q) You are responsible for creating a disaster recovery plan for your data center. You must be
able to recreate virtual machines from scratch. This includes the Operating System, its
configuration settings, and patches. The backup tool that provides a bare metal backup of your
machines:
Ans- Azure Backup Server

Q) You are working as a Microsoft Azure Administrator in a company. You plan to use Azure
Backup to protect your virtual machines and data and are ready to create a backup. The first
step that you should perform is:
Ans- Create a Recovery Services vault.

Q) You deploy several virtual machines (VMs) to Azure. You are responsible for backing up all
data processed by the VMs. In the event of a failure, you need to restore the data as quickly as
possible. In order to restore the entire virtual machine or files on the virtual machine, you should
use:
Ans- Virtual machine backup

Q) Your organization has an app, and the performance of this app is critical to day to day
operations. You have configured an alert and need to ensure the administrators are notified if
there is a problem. You should provide the administrator email addresses in the:
Ans- Action Group

Q) You are working as a Microsoft Azure Administrator in a company. You are analyzing the
company virtual network and think it would be helpful to get a visual representation of the
networking elements. The feature that can be used here is:
Ans- Network Watcher Topology

Q) The tool that can help to identify high VM CPU utilization, DNS resolution failures, firewall
rules that are blocking traffic, and misconfigured routes:
Ans- Network Watcher Connection Troubleshoot

Q) You are working as a Microsoft Azure Administrator in a company. You are reviewing the
Alerts page and notice an alert has been Acknowledged. This means that:
Ans- An administrator has reviewed the alert and started working on it