Fundamental
Prepare and test your skills
Fundamental
Prepare and test your skills
Rightsizing Over-Provisioned VMs with Azure Advisor
Free sample question, answered and explained below. The AZ-900 Microsoft Azure Fundamentals Exam practice bank has 688 more like it. Try 10 free: instant score, no account.
An organization discovers that several cloud workloads are running on over-provisioned virtual machines and some provisioned networking gateways remain idle without active backends, leading to unnecessary cloud expenditures.
The organization wants a centralized tool that analyzes resource telemetry to provide proactive cost-saving recommendations, such as rightsizing or shutting down underutilized resources.
Which service should the organization use?
Explanations
Microsoft Sentinel
Microsoft Sentinel
What Microsoft Sentinel Is
Microsoft Sentinel is a cloud-native Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) solution.
Why It Doesn't Meet the Requirement
Microsoft Sentinel is designed to collect security data, detect sophisticated threats, and automate incident response across the enterprise. It is not an infrastructure optimization or cost management service and does not generate rightsizing or cost-reduction recommendations.
Key Characteristics and Limitations
- Threat Detection: Correlates large volumes of security logs and alert data using machine learning and behavioral analytics.
- Incident Investigation: Provides interactive hunting tools and visual incident graphs to help security analysts investigate attacks.
- Security Automation: Uses playbooks powered by Azure Logic Apps to remediate security vulnerabilities and contain threats.
This Answer Would Be Correct If
The scenario required centralizing security alerts, tracking malicious sign-ins, and orchestrating automated responses to active cyber threats.
Additional Context
While Sentinel ingests telemetry into a Log Analytics workspace for security monitoring, cost-saving recommendations for the underlying infrastructure must come from services like Azure Advisor.
Azure Policy
Azure Policy
What Azure Policy Is
Azure Policy is a governance service in Azure that evaluates resource properties against defined business rules and organizational standards, auditing configurations and enforcing compliance at scale.
Why It Doesn't Meet the Requirement
While Azure Policy can restrict allowed virtual machine SKUs or block resource creation in unapproved regions, it does not analyze runtime telemetry or workload utilization patterns to provide personalized recommendations for shutting down or rightsizing underutilized resources.
Key Characteristics and Limitations
- Governance and Compliance: Focuses on resource structure and configuration properties rather than ongoing performance telemetry.
- Enforcement Mechanisms: Uses policy effects such as
Audit,Deny,Modify, andDeployIfNotExiststo enforce configuration standards. - No Workload Analysis: Does not dynamically assess whether a running virtual machine has low CPU utilization or if a gateway has empty backend pools.
This Answer Would Be Correct If
The scenario required preventing users from deploying virtual machines above a certain size or ensuring that all deployed resources have mandatory cost-center tags.
Additional Context
Azure Policy and Azure Advisor complement each other: Azure Advisor identifies optimization opportunities based on utilization, while Azure Policy enforces guardrails to prevent future non-compliant resource deployments.
Azure Advisor
Azure Advisor
What Azure Advisor Is
Azure Advisor is a personalized cloud consultant that analyzes resource configurations and usage telemetry across your subscriptions to provide actionable best practices and recommendations.
How It Meets the Requirements
Azure Advisor specifically targets cost efficiency by analyzing runtime metrics and usage patterns to identify idle, underutilized, or over-provisioned resources:
- Rightsizing and Decommissioning: It flags virtual machines and compute instances with low CPU or memory utilization and suggests resizing them to smaller instances or shutting them down.
- Eliminating Idle Resources: It detects unused or orphan resources, such as idle application gateways and unattached disks, to eliminate unnecessary charges.
- Commitment Discounts: It recommends Reserved Instances and Savings Plans for predictable workloads to maximize spending efficiency.
Key Advantages and Capabilities
- Comprehensive Pillars: Delivers recommendations across five key pillars: Cost, Security, Reliability, Operational Excellence, and Performance.
- Built-in and Automated: Continuously analyzes resource telemetry without requiring manual script configuration or extra agent installations.
- Direct Remediation: Integrates directly into the Azure portal, allowing administrators to implement recommended resizing or configuration changes directly from the recommendation pane.
- Customizable Alerts: Enables teams to set up alerts and digest notifications when new high-impact cost optimization recommendations appear.
Why This Is Optimal
Azure Advisor is the primary, native tool for proactive cost optimization advice in Azure. It delivers automated, telemetry-driven guidance without the administrative overhead of writing custom monitoring queries or deploying third-party governance tools.
Azure Key Vault
Azure Key Vault
What Azure Key Vault Is
Azure Key Vault is a centralized cloud service used to securely store, manage, and control access to application secrets, cryptographic keys, and certificates.
Why It Doesn't Meet the Requirement
Azure Key Vault provides cryptographic protection and secret management capabilities. It does not monitor resource utilization, evaluate cloud spending, or suggest rightsizing and decommissioning actions for compute and networking resources.
Key Characteristics and Limitations
- Secrets Management: Securely stores application settings, API tokens, and database connection strings.
- Key Management: Creates, rotates, and controls cryptographic keys used for data encryption at rest and in transit.
- Certificate Management: Manages Transport Layer Security (TLS/SSL) certificates and automates renewal processes.
- Hardware Security Modules (HSMs): Provides FIPS-validated hardware protection for sensitive keys.
This Answer Would Be Correct If
The scenario required securing sensitive database credentials and certificates so that developers do not store plain-text secrets in application source code.
Additional Context
Azure Key Vault is a fundamental security and identity component, whereas Azure Advisor is the dedicated tool for resource monitoring and cost optimization recommendations.
Try 10 interactive questions like this one, free
Answer them yourself and get your score the moment you finish. No account needed.
Full access includes
- 688 practice questions across all 3 exam domains
- Every answer explained: why it is right, and why the others are not
- Scout, an AI tutor that answers your follow-up questions
- Readiness tracking by domain, so you know when to book the exam
Related questions
Keep the momentum going with these hand-picked practice scenarios
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Advisor Recommendations
Describe the purpose of Azure Advisor
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Advisor Operational Excellence Category
Describe the purpose of Azure Advisor
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Advisor Recommendations
Describe the purpose of Azure Advisor
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Advisor Security Recommendations
Describe the purpose of Azure Advisor
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Locally Redundant Storage (LRS)
Describe redundancy options
IntermediateAZ-800 Administering Windows Server Hybrid Core Infrastructure Exam
Azure File Sync Event Logs and Azure Monitor
Configure and manage Azure File Sync
Last updated Validated