▸case-01 We are setting up an Azure Kubernetes Service (AKS) cluster where pods need to receive full IP addresses directly from our Azure Virtual Network subnet, rather than using an overlay network. A team member suggested setting `--network-plugin kubenet`. Show the correct Azure CLI command to create the cluster with direct VNet pod IP allocation. | pass→pass | 7,238 | 5,566 | -23% | 1 | 1 | 0% | 1,184 | 1,565 | +32% | 0 | 0 | — |
▸case-02 We need a Bicep snippet for an Azure App Service app setting that references a secret stored in Azure Key Vault without hardcoding the secret value in parameters. Someone suggested using `listKeys()` inside the Bicep template. What is the syntax pattern for referencing a Key Vault secret inside App Service app settings? | pass→pass | 12,096 | 11,575 | -4% | 1 | 1 | 0% | 2,421 | 2,779 | +15% | 0 | 0 | — |
▸case-03 We want our Node.js app running on Azure App Service to authenticate against Azure SQL Database without storing client secrets or password strings in environment variables. Provide the Azure CLI command to enable system-assigned identity on the App Service app. | pass→pass | 3,714 | 4,569 | +23% | 1 | 1 | 0% | 647 | 1,281 | +98% | 0 | 0 | — |
▸case-04 We need to query all stopped/deallocated Azure Virtual Machines across all subscriptions using Azure Resource Graph rather than looping through subscriptions with `az vm list`. What is the Azure CLI command to execute this Resource Graph query? | pass→pass | 7,809 | 6,713 | -14% | 1 | 1 | 0% | 1,494 | 1,754 | +17% | 0 | 0 | — |
▸case-05 We are archiving long-term backup files to an Azure Storage account blob container. The files will rarely be accessed and can tolerate hours of retrieval latency to minimize monthly storage cost. A colleague suggested setting the tier to Hot. Which storage access tier should be configured? | pass→pass | 6,281 | 6,711 | +7% | 1 | 1 | 0% | 995 | 1,747 | +76% | 0 | 0 | — |
▸case-06 We want to enforce Azure AD authentication for kubectl access to an Azure Kubernetes Service cluster during provisioning. Give the Azure CLI command flag required during cluster creation to enable Azure Active Directory integration. | pass→pass | 4,093 | 3,499 | -15% | 1 | 1 | 0% | 694 | 1,036 | +49% | 0 | 0 | — |
▸case-07 Write a Bicep declaration for a standard geo-redundant storage account in location `eastus`. Make sure it uses the proper Bicep resource type and SKU configuration. | pass→pass | 4,171 | 5,615 | +35% | 1 | 1 | 0% | 822 | 1,428 | +74% | 0 | 0 | — |
▸case-08 Before deploying Azure resources via Azure CLI in a multi-subscription tenant, we need to switch the active CLI context to subscription ID `11111111-2222-3333-4444-555555555555`. What command sets this active subscription context? | pass→pass | 2,430 | 2,377 | -2% | 1 | 1 | 0% | 518 | 991 | +91% | 0 | 0 | — |
▸case-09 We need to provision an Azure load balancing solution that provides URL-based routing, SSL termination, and integrated Web Application Firewall (WAF) protections for HTTPS traffic. Someone recommended Azure Standard Load Balancer. Which Azure networking service and SKU should be selected? | pass→pass | 6,298 | 7,580 | +20% | 1 | 1 | 0% | 1,117 | 1,969 | +76% | 0 | 0 | — |
▸case-10 We are configuring an Azure Cosmos DB SQL API account for a financial application that requires strict data ordering and linearizability guarantees across reads, even if latency increases slightly. Which Cosmos DB consistency level meets this requirement? | pass→pass | 5,478 | 7,172 | +31% | 1 | 1 | 0% | 888 | 1,684 | +90% | 0 | 0 | — |
▸case-11 We need an Azure Policy rule definition that automatically blocks the creation of any storage accounts that allow unencrypted HTTP traffic (`supportsHttpsTrafficOnly` set to false). Which policy effect value should be used in the policy rule logic? | pass→pass | 4,216 | 3,233 | -23% | 1 | 1 | 0% | 758 | 1,061 | +40% | 0 | 0 | — |
▸case-12 We want to build a Docker container image directly inside Azure Container Registry without installing Docker locally on our workstation. What Azure CLI command executes a remote ACR container build from local source files? | pass→pass | 3,378 | 4,554 | +35% | 1 | 1 | 0% | 621 | 1,275 | +105% | 0 | 0 | — |
▸case-13 We are deploying an Azure Function app that has unpredictable traffic spikes and long idle periods. We want to pay only when functions execute and scale automatically to zero. Which Azure Functions hosting plan should be chosen? | pass→pass | 5,897 | 7,865 | +33% | 1 | 1 | 0% | 862 | 1,909 | +121% | 0 | 0 | — |
▸case-14 We are setting up high availability for a web server tier in Azure. We need automatic horizontal scaling based on average CPU usage across instances. What Azure compute resource type manages this elastic auto-scaling group of uniform VMs? | pass→pass | 4,556 | 4,860 | +7% | 1 | 1 | 0% | 754 | 1,451 | +92% | 0 | 0 | — |
▸case-15 An enterprise customer requires a high-throughput, private, SLA-backed connection between their on-premises data center and their Azure VNet that bypasses the public internet completely. A teammate suggested standard Site-to-Site VPN over public internet. Which Azure hybrid connectivity service should be used? | pass→pass | 5,658 | 6,941 | +23% | 1 | 1 | 0% | 987 | 1,657 | +68% | 0 | 0 | — |
▸case-16 To protect against accidental or malicious permanent deletion of secrets in Azure Key Vault, we want to ensure deleted vaults or keys cannot be permanently purged before a retention window expires. Which Key Vault security feature must be enabled? | fail→pass | 5,429 | 4,827 | -11% | 1 | 1 | 0% | 700 | 1,390 | +99% | 0 | 0 | — |
▸case-17 We need a global HTTP load balancing and CDN service to accelerate dynamic web content delivery and provide instant failover across multi-region Azure App Service deployments. Which Azure service is designed for this global layer 7 routing? | pass→pass | 4,635 | 8,090 | +75% | 1 | 1 | 0% | 725 | 2,004 | +176% | 0 | 0 | — |
▸case-18 We are selecting an Azure Cache for Redis tier. We require active geo-replication across Azure regions and Redis Enterprise module support. A peer suggested using the Basic tier. Which Azure Cache for Redis tier supports these capabilities? | pass→pass | 6,215 | 6,038 | -3% | 1 | 1 | 0% | 1,142 | 1,660 | +45% | 0 | 0 | — |
▸case-19 In an Azure DevOps YAML pipeline, we need to authenticate to Azure Container Registry (ACR) to push container images. What service connection type in Azure DevOps is standard for secure ACR pipeline integration? | pass→pass | 6,892 | 7,144 | +4% | 1 | 1 | 0% | 1,492 | 1,825 | +22% | 0 | 0 | — |
▸case-20 Write a Terraform HCL configuration to create an AWS VPC with CIDR 10.0.0.0/16 and an Internet Gateway in region us-west-2. | pass→pass | 4,853 | 6,353 | +31% | 1 | 1 | 0% | 933 | 1,959 | +110% | 0 | 0 | — |
▸case-21 Show the `gcloud` command to create a Google Cloud Storage bucket named `my-company-logs-bucket` in region `us-central1`. | pass→pass | 2,273 | 2,915 | +28% | 1 | 1 | 0% | 394 | 968 | +146% | 0 | 0 | — |
▸case-22 Write a PowerShell snippet using VMware PowerCLI to connect to a vCenter server `vcsa.local` and retrieve all powered-off virtual machines. | pass→pass | 4,676 | 4,134 | -12% | 1 | 1 | 0% | 840 | 1,238 | +47% | 0 | 0 | — |