Microsoft AZ-900 Online Practice Questions and Exam Preparation

Microsoft AZ-900 Online Questions & Answers

• Question 91:

  At which OSI layer does ExpressRoute operate?

  A. Layer 2
  B. Layer 3
  C. Layer 5
  D. Layer 7
  B. Layer 3

  ---

  ExpressRoute circuit. A layer 2 or layer 3 circuit supplied by the connectivity provider that joins the on-premises network with Azure through the edge routers. The circuit uses the hardware infrastructure managed by the connectivity provider.

  In OSI terms, you start from layer 2 ?The krowteN Service Provider concept was a managed concept, where you got a layer 3 solution (in OSI terms). The telecom provider took care of all the complexity for you.

  https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/expressroute

• Question 92:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  The cost of azure resources can vary between regions. Yes An Azure reservation is used to reserve server capacity at a specific data center. Yes You can stop an Azure SQL Database instance to decrease costs. No

• Question 93:

  Your company plans to migrate all on-premises data to Azure. You need to identify whether Azure complies with the company's regional requirements.

  What should you use?

  A. the Knowledge Center
  B. Azure Marketplace
  C. the Azure portal
  D. the Trust Center
  D. the Trust Center

  ---

  The Azure Trust Center provides information about Microsoft Azure's compliance with global, regional, and industry-specific regulations.

  It helps customers understand security, privacy, and compliance policies to ensure regional or legal requirements are met.

  Microsoft Learn Reference:

  https://learn.microsoft.com/en-us/azure/security/fundamentals/overview-trust-center

  "Use the Microsoft Azure Trust Center to learn about the security, privacy, and compliance of Microsoft Azure services."

  Why the Other Options Are Incorrect:

  The Knowledge Center-Incorrect.-The Knowledge Center provides documentation and tutorials, but not compliance-specific information.

  Azure Marketplace-Incorrect.-The Marketplace is a catalog of third-party applications and services, not a compliance reference.

  The Azure portal-Incorrect.-The portal is used to manage Azure resources, not to provide compliance information.

  References:

  https://azure.microsoft.com/en-gb/overview/trusted-cloud/compliance/

  https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-service-trust-portal

• Question 94:

  HOTSPOT

  You plan to implement an Azure database solution.

  You need to implement a database solution that meets the following requirements:

  1. Can add data concurrently from multiple regions

  2. Can store JSON documents

  Which database service should you deploy? To answer, select the appropriate service in the answer area.

  

  

  Explanation:

  Azure Cosmos DB is Microsoft's globally distributed, multi-model database service. With a click of a button, Cosmos DB enables you to elastically and independently scale throughput and storage across any number of Azure regions worldwide.

  Azure Cosmos DB is a great way to store unstructured and JSON data. Combined with Azure Functions, Cosmos DB makes storing data quick and easy with much less code than required for storing data in a relational database.

  References:

  https://docs.microsoft.com/en-us/azure/cosmos-db/introduction

  https://docs.microsoft.com/en-us/azure/azure-functions/functions-integrate-store-unstructured-data-cosmosdb?tabs=csharp

• Question 95:

  This question requires that you evaluate the underlined text to determine if it is correct.

  The Microsoft Online Services Privacy Statement explains what data Microsoft processes, how Microsoft processes the data, and the purpose of processing the data.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed." If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed.
  B. Microsoft Online Services Terms
  C. Microsoft Online Service Level Agreement
  D. Online Subscription Agreement for Microsoft Azure
  A. No change is needed.

  ---

  The Microsoft Online Services Privacy Statement explains: What data Microsoft collects.- How Microsoft processes the data.- The purpose of processing the data.-Ensures transparency regarding customer data handling for Microsoft cloud services.

  Incorrect Options:

  Microsoft Online Services Terms: Defines terms and conditions of service use.-Does not focus on data processing or privacy.

  Microsoft Online Service Level Agreement (SLA): Specifies uptime, availability, and service credits.-Does not address data processing or privacy.

  Online Subscription Agreement for Microsoft Azure: Governs subscription and billing terms.-Does not provide details on data processing or privacy.

  References (Microsoft Learn):

  Microsoft Online Services Privacy Statement

  https://learn.microsoft.com/en-us/office365/enterprise/microsoft-privacy-statement

  References:

  https://privacy.microsoft.com/en-us/privacystatement

• Question 96:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  You can create a resource group inside of an other resource group. No

• Question 97:

  This question requires that you evaluate the underlined text to determine if it is correct.

  Your company implements Azure policies to automatically add a watermark to Microsoft Word documents that contain credit card information.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed.
  B. DDoS protection
  C. Azure Information Protection
  D. Azure Active Directory (Azure AD) Identity Protection
  C. Azure Information Protection

  ---

  Azure Information Protection is used to automatically add a watermark to Microsoft Word documents that contain credit card information.

  You use Azure Information Protection labels to apply classification to documents and emails. When you do this, the classification is identifiable regardless of where the data is stored or with whom it's shared. The labels can include visual markings such as a header, footer, or watermark.

  Labels can be applied automatically by administrators who define rules and conditions, manually by users, or a combination where users are given recommendations. In this question, we would configure a label to be automatically applied to Microsoft Word documents that contain credit card information. The label would then add the watermark to the documents.

  References: https://docs.microsoft.com/en-us/azure/information-protection/what-is-information-protection https://docs.microsoft.com/en-us/azure/information-protection/infoprotect-quick-start-tutorial

• Question 98:

  HOTSPOT

  To complete the sentence, select the appropriate option in the answer area.

  

  

  Explanation:

  You have several virtual machines in an azure subscription. You create a new subscription. The virtual machines can be moved to the new subscription.

• Question 99:

  This question requires that you evaluate the underlined text to determine if it is correct.

  You have an Azure virtual network named VNET1 in a resource group named RG1.

  You assign an Azure policy specifying that virtual networks are not an allowed resource type in RG1. VNET1 is deleted automatically.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed
  B. is moved automatically to another resource group
  C. continues to function normally
  D. is now a read-only object
  C. continues to function normally

  ---

  The VNet will be marked as `Non-compliant' when the policy is assigned. However, it will not be deleted and will continue to function normally.

  Azure Policy is a service in Azure that you use to create, assign, and manage policies. These policies enforce different rules and effects over your resources, so those resources stay compliant with your corporate standards and service level agreements.

  If there are any existing resources that aren't compliant with a new policy assignment, they appear under Non-compliant resources.

  References:

  https://docs.microsoft.com/en-us/azure/governance/policy/overview

  https://docs.microsoft.com/en-us/azure/governance/policy/assign-policy-portal

• Question 100:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Single sign-on is an authentication method that allows users to sign in using one set of credentials to login across applications. Single sign-on makes it easier to manage passwords and increases security capabilities.

  Single sign-on requires that all users sign in by using the microsoft authenticator app. No

  Authorization is the process of establishing what level of access a legitimate user or service should have.

  During sign-in, Conditional Access collects signals from the user, makes decisions based on those signals, and then enforces that decision by allowing or denying the access request or challenging for a multifactor authentication response.

  Single sign-on (SSO) requires that all users sign in by using the Microsoft authenticator app. No

  Authentication is the process of establishing which level of access an authenticated user or service has. No

  Conditional access uses signals collected from a user during the sign-in process to decide whether to allow or deny access requests. Yes

  Reference:

  https://docs.microsoft.com/learn/modules/secure-access-azure-identity-services/3-what-is-azure-active-directory

  https://docs.microsoft.com/learn/modules/secure-access-azure-identity-services/2-compare-authentication-authorization

  https://docs.microsoft.com/learn/modules/secure-access-azure-identity-services/4-what-are-mfa-conditional-access