Azure Cloud Training – Pre- and Post-Training MCQs
Pre-Training Assessment (Baseline Knowledge)
Instructions: Select the correct answer for each question. These questions assess your
foundational knowledge of Azure concepts before the workshop.
1. What is the primary role of Azure Entra ID in authentication?
a) Manage virtual machine scaling
b) Provide identity and access management
c) Monitor network traffic
d) Store backup data
Answer: b
Explanation: Azure Entra ID is used for identity and access management, enabling
secure authentication and authorization.
2. What does RBAC stand for in Azure?
a) Resource-Based Access Control
b) Role-Based Access Control
c) Remote Backup and Control
d) Runtime Behavior Analysis Core
Answer: b
Explanation: RBAC stands for Role-Based Access Control, a method to manage user
permissions in Azure.
3. What is the purpose of Multifactor Authentication (MFA) in Azure?
a) To reduce storage costs
b) To enhance security with additional verification
c) To manage network traffic
d) To deploy virtual machines
Answer: b
Explanation: MFA adds an extra layer of security by requiring multiple forms of
verification during login.
4. What does a Conditional Access Policy in Azure do?
a) Automatically scales resources
b) Enforces access rules based on conditions
c) Monitors CPU usage
d) Migrates workloads to the cloud
Answer: b
Explanation: Conditional Access Policies enforce rules like requiring MFA based on
user location or device.
5. What is an Azure Region?
a) A set of data centers in a specific geographic area
b) A type of virtual machine
c) A storage account type
d) A user access role
Answer: a
Explanation: An Azure Region is a set of data centers within a specific geographic
area, ensuring low latency and high availability.
6. What is the role of a Management Group in Azure?
a) To manage individual resources
b) To organize subscriptions for governance
c) To monitor network traffic
d) To deploy virtual networks
Answer: b
Explanation: Management Groups help organize subscriptions to apply governance
policies consistently.
7. What is the purpose of a Resource Group in Azure?
a) To store user credentials
b) To group resources for management and deployment
c) To configure firewall rules
d) To migrate on-prem VMs
Answer: b
Explanation: Resource Groups organize related Azure resources for easier
management and deployment.
8. What does a Network Security Group (NSG) do in Azure?
a) Encrypts data in transit
b) Filters network traffic using rules
c) Manages user authentication
d) Migrates workloads
Answer: b
Explanation: NSGs filter network traffic by defining rules to allow or deny specific
traffic to resources.
9. What is the primary function of Azure Bastion Service?
a) To monitor resource usage
b) To provide secure RDP and SSH access to VMs
c) To migrate on-prem servers
d) To manage storage accounts
Answer: b
Explanation: Azure Bastion provides secure RDP and SSH access to VMs without
exposing them to the public internet.
10. What is the first step in Azure Migration Services?
a) Deploy a new virtual network
b) Discover and assess resources for migration
c) Configure a firewall
d) Set up MFA for users
Answer: b
Explanation: The first step in Azure Migration Services is to discover and assess
resources to plan the migration.
Post-Training Assessment (Mastery Check)
Instructions: Select the correct answer for each question. These questions evaluate your
understanding of Azure concepts after the workshop.
1. You need to ensure a user must use MFA to access a specific Azure app. Which
feature should you configure?
a) Azure Firewall
b) Conditional Access Policy
c) Network Security Group
d) Resource Group
Answer: b
Explanation: Conditional Access Policies can enforce MFA for specific apps based
on conditions like user role or location.
2. A user has Contributor access to a subscription but cannot create resources.
What might be the issue?
a) A Conditional Access Policy is blocking access
b) The user is assigned the wrong RBAC role
c) The subscription is in a different region
d) The NSG is blocking traffic
Answer: a
Explanation: A Conditional Access Policy might block access if conditions (e.g.,
MFA) aren’t met, even with Contributor role.
3. How does Azure Entra ID integrate with MFA to secure access?
a) By assigning roles to users
b) By requiring additional verification steps
c) By filtering network traffic
d) By migrating workloads
Answer: b
Explanation: Entra ID integrates with MFA to require additional verification (e.g., a
phone code) during login.
4. You need to deploy resources across two Azure Regions for high availability.
What should you consider?
a) Use a single Resource Group for all resources
b) Ensure resources are in paired regions
c) Assign a new Management Group
d) Configure Azure Bastion
Answer: b
Explanation: Paired regions ensure high availability by providing redundancy and
failover options.
5. A company has multiple subscriptions. How can you enforce consistent policies
across them?
a) Use a Network Security Group
b) Create a Management Group
c) Deploy a new VNet
d) Set up Azure Migration Services
Answer: b
Explanation: Management Groups allow you to apply policies across multiple
subscriptions for consistent governance.
6. You need to delete a Resource Group. What happens to the resources inside it?
a) They are moved to another Resource Group
b) They are deleted along with the Resource Group
c) They remain unchanged
d) They are backed up automatically
Answer: b
Explanation: Deleting a Resource Group deletes all resources within it, as they are
tied to the group.
7. An NSG rule is blocking RDP access to a VM. Which port should you allow?
a) 80
b) 443
c) 3389
d) 22
Answer: c
Explanation: RDP uses port 3389, so you must allow this port in the NSG to enable
access.
8. You need to securely access a VM without exposing it to the public internet.
Which service should you use?
a) Azure Firewall
b) Azure Bastion
c) Azure Migration Services
d) Azure Entra ID
Answer: b
Explanation: Azure Bastion provides secure RDP/SSH access via a private
connection, avoiding public exposure.
9. During an on-prem VM migration, you discover unsupported workloads. What
should you do first?
a) Migrate the workload anyway
b) Assess the workload for compatibility
c) Configure a new NSG
d) Set up MFA for the VM
Answer: b
Explanation: Assessing compatibility ensures the workload can be migrated
successfully without issues.
10. What is a key step in the workload migration process using Azure Migration
Services?
a) Deploy a new Management Group
b) Replicate the on-prem VM to Azure
c) Configure a Conditional Access Policy
d) Set up a new Resource Group
Answer: b
Explanation: Replication of the on-prem VM to Azure is a critical step in the
migration process.
