Câu hỏi luyện tập mẫu

Một vài câu hỏi thực tế từ ngân hàng miễn phí này, kèm giải thích đầy đủ. Dùng công cụ luyện tập ở trên cho toàn bộ.

1. 1. Cloud Concepts

   Which cloud service model gives you the most control over the operating system, networking, and installed software, while the provider manages only the physical hardware?

   • a.Infrastructure as a Service (IaaS)
   • b.Platform as a Service (PaaS)
   • c.Software as a Service (SaaS)
   • d.Function as a Service (FaaS)

   Đáp án: a

   Giải thích: IaaS provides virtualized compute, storage, and networking, leaving the customer responsible for the operating system and everything above it. The provider only manages the underlying physical infrastructure. This gives the greatest flexibility but also the most administrative overhead.

2. 2. Cloud Concepts

   Which deployment model dedicates cloud infrastructure to a single organization, often for stricter control or compliance?

   • a.Public cloud
   • b.Hybrid cloud
   • c.Private cloud
   • d.Multi-tenant SaaS

   Đáp án: c

   Giải thích: A private cloud provides computing resources used exclusively by one organization, whether hosted on-premises or by a provider. It offers greater control and isolation, which helps meet strict security or regulatory requirements. The trade-off is typically higher cost and management effort.

3. 3. Cloud Concepts

   In the shared responsibility model for SaaS, which responsibility shifts almost entirely to the provider?

   • a.Managing the application, runtime, and operating system
   • b.Managing user access and data classification
   • c.Choosing which users get accounts
   • d.Setting data-sharing permissions

   Đáp án: a

   Giải thích: In SaaS, the provider manages nearly the entire stack including the application, runtime, and operating system. The customer's remaining duties center on their data, users, and access configuration. This makes SaaS the lowest-maintenance model for consumers.

4. 4. Azure Architecture & Services

   Which Azure service is a fully managed platform for hosting web applications and APIs without managing the underlying servers?

   • a.Azure Virtual Machines
   • b.Azure Blob Storage
   • c.Azure App Service
   • d.Azure Virtual Network

   Đáp án: c

   Giải thích: Azure App Service is a PaaS offering for building and hosting web apps, REST APIs, and mobile backends. It manages the infrastructure, patching, and scaling so developers focus on code. It supports multiple languages and integrates with CI/CD pipelines.

5. 5. Azure Architecture & Services

   Which Azure service is a globally distributed, multi-model NoSQL database designed for low-latency access at planetary scale?

   • a.Azure Cosmos DB
   • b.Azure SQL Database
   • c.Azure Blob Storage
   • d.Azure Files

   Đáp án: a

   Giải thích: Azure Cosmos DB is a globally distributed NoSQL database offering low latency and elastic scalability. It supports multiple data models and APIs and can replicate data across regions. It is suited to globally responsive applications needing guaranteed performance.

6. 6. Azure Architecture & Services

   Which Azure service provides a global content delivery network (CDN) to cache content closer to users?

   • a.Azure SQL Database
   • b.Azure Functions
   • c.Azure Content Delivery Network (CDN)
   • d.Microsoft Entra ID

   Đáp án: c

   Giải thích: Azure CDN caches static content at edge locations around the world, delivering it from a point of presence near each user. This reduces latency and offloads traffic from the origin. It improves performance for websites, media, and downloads.

7. 7. Azure Architecture & Services

   Which storage redundancy option replicates data synchronously across three availability zones in the primary region?

   • a.Zone-redundant storage (ZRS)
   • b.Locally redundant storage (LRS)
   • c.Geo-redundant storage (GRS)
   • d.Cool access tier

   Đáp án: a

   Giải thích: Zone-redundant storage (ZRS) writes copies of data across three separate availability zones within the primary region. This protects against the failure of a single datacenter/zone while keeping data in-region. It offers higher availability than LRS.

8. 8. Management & Governance

   What is the purpose of a resource lock in Azure?

   • a.To encrypt data at rest
   • b.To speed up resource deployment
   • c.To prevent accidental deletion or modification of critical resources
   • d.To lower the monthly bill

   Đáp án: c

   Giải thích: Resource locks protect important resources from accidental changes or deletion. A 'CanNotDelete' lock allows edits but blocks deletion, while a 'ReadOnly' lock blocks both changes and deletion. Locks apply regardless of a user's RBAC permissions.

9. 9. Management & Governance

   Which Azure governance tool would you use to package policies, role assignments, and resource templates as a repeatable, enforceable set?

   • a.Azure Blueprints
   • b.Azure Blob Storage
   • c.Azure Cache for Redis
   • d.Azure DNS

   Đáp án: a

   Giải thích: Azure Blueprints lets you define a repeatable set of governance artifacts including policies, RBAC role assignments, and resource templates. You can deploy these consistently to new environments to ensure they start compliant. This standardizes how subscriptions are set up.

10. 10. Management & Governance

    What does the Total Cost of Ownership (TCO) Calculator help organizations do?

    • a.Deploy virtual machines automatically
    • b.Encrypt data in transit
    • c.Compare the cost of running workloads on-premises versus in Azure
    • d.Configure DNS records

    Đáp án: c

    Giải thích: The TCO Calculator estimates the cost savings of migrating on-premises workloads to Azure. It compares current infrastructure expenses with projected Azure costs, including hardware, power, and staffing. This supports the business case for cloud migration.