Microsoft AZ-900 Online Practice Questions and Exam Preparation

Microsoft AZ-900 Online Questions & Answers

• Question 111:

  HOTSPOT

  To complete the sentence, select the appropriate option in the answer area.

  

  

  Explanation:

  Azure Databricks is an Apache Spark-based analytics platform. The platform consists of several components including ‘MLib’. Mlib is a Machine Learning library consisting of common learning algorithms and utilities, including classification, regression, clustering, collaborative filtering, dimensionality reduction, as well as underlying optimization primitives.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-databricks/what-is-azure-databricks#apache-spark-based-analytics-platform

• Question 112:

  A team has an Azure Cosmos DB account. A solution needs to be in place to generate an alert from Azure Log Analytics when a query request charge exceeds 40 units more than 10 times during a 10-minute window.

  Which of the following would you recommend? (Choose two)

  A. Create a search query to identify when the requestCharge_s exceeds 10.
  B. Configure a period of 10 and a frequency of 10.
  C. Create a search query to identify when the requestCharge_s exceeds
  D. Create a search query to identify when the duration_s exceeds 10.
  B. Configure a period of 10 and a frequency of 10.
  C. Create a search query to identify when the requestCharge_s exceeds

  ---

  1.Create a search query to identify when the requestCharge_s exceeds 40.

  2.Configure a period of 10 and a frequency of 10.

  'requestCharge_s' metric represents RUs consumed by a query.

  The search query identifies when requestCharge_s exceeds 40 units.

  Configure the alert to trigger when this condition occurs more than 10 times within a 10-minute period.

  Incorrect Options:

  Create a search query to identify when requestCharge_s exceeds 10: Threshold is incorrect; the requirement is 40 units.-Create a search query to identify when duration_s exceeds 10: The alert should be based on request charge (RUs), not query duration.

  References (Microsoft Learn):

  Azure Monitor metrics for Azure Cosmos DB

  https://learn.microsoft.com/en-us/azure/cosmos-db/monitor-log-analytics

  Create, view, and manage log alerts in Azure Monitor

  https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/log-alerts

• Question 113:

  HOTSPOT

  To complete the sentence, select the appropriate option in the answer area.

  

  

  Explanation:

  Budget alerts notify you when spending, based on usage or cost, reaches or exceeds the amount defined in the alert condition of the budget. Cost Management budgets are created using the Azure portal or the Azure Consumption API. You can use budget alerts in azure to send email alerts when the cost of the current billing period for an azure subscription exceeds a specified limit.

  Reference:

  https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/cost-mgt-alerts-monitor-usage-spending

• Question 114:

  You need to ensure that secrets used by your Azure web apps are stored securely and accessed programmatically. What should you use?

  A. Environment variables
  B. Azure Key Vault
  C. Azure Boards
  D. Azure DevTest Labs
  B. Azure Key Vault

  ---

  Azure Key Vault securely stores secrets, passwords, certificates, and keys, and integrates with web apps. Environment variables are not secure. Boards and DevTest Labs are unrelated.

• Question 115:

  HOTSPOT

  Several support engineers plan to manage Azure by using the computers shown in the following table:

  

  You need to identify which Azure management tools can be used from each computer.

  What should you identify for each computer? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Previously, the Azure CLI (or x-plat CLI) was the only option for managing Azure subscriptions and resources from the command-line on Linux and macOS. Now with the open source and cross-platform release of PowerShell, you’ll be able to manage all your Azure resources from Windows, Linux and macOS using your tool of choice, either the Azure CLI or Azure PowerShell cmdlets. The Azure portal runs in a web browser so can be used in either operating system.

  References:

  https://buildazure.com/2016/08/18/powershell-now-open-source-and-cross-platform-linux-macos-windows/

• Question 116:

  This question requires that you evaluate the underlined text to determine if it is correct.

  If a resource group named RG1 has a delete lock, only a member of the global administrators group can delete RG1.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed".

  If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed
  B. the delete lock must be removed before an administrator can delete RG1
  C. an Azure policy must be modified before an administrator can delete RG1
  D. an Azure tag must be added before an administrator can delete RG1
  B. the delete lock must be removed before an administrator can delete RG1

  ---

  You can configure a lock on a resource group to prevent the accidental deletion of the resource group. The lock applies to everyone, including global administrators. If you want to delete the resource group, the lock must be removed first.

  As an administrator, you may need to lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. You can set the lock level to CanNotDelete or ReadOnly. In the portal, the locks are called Delete and Read-only respectively.

  1. CanNotDelete means authorized users can still read and modify a resource, but they can't delete the resource.

  2. ReadOnly means authorized users can read a resource, but they can't delete or update the resource. Applying this lock is similar to restricting all authorized users to the permissions granted by the Reader role.

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

• Question 117:

  HOTSPOT

  To complete the sentence, select the appropriate option in the answer area.

  

  

  Explanation:

  Azure spot virtual machine instances provide access to unused azure compute capacity at deep discounts.

• Question 118:

  How many copies of data are maintained by an Azure Storage account that uses georedundant storage (GRS)?

  A. 3
  B. 4
  C. 6
  D. 9
  C. 6

• Question 119:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1: Yes

  When using an azure expressroute connection, inbound data traffic from an on-premises network to azure is always free.

  With Azure ExpressRoute, all inbound data transfer is free of charge.

  Box 2: No

  Inbound data traffic is free but outbound data traffic is not.

  Box 3: Yes

  References:

  https://azure.microsoft.com/en-us/pricing/details/expressroute/

  https://azure.microsoft.com/en-us/pricing/details/bandwidth/

• Question 120:

  Your company plans to deploy several web servers and several database servers to Azure.

  You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers.

  What should you include in the recommendation?

  A. network security groups (NSGs)
  B. Azure Service Bus
  C. a local network gateway
  D. a route filter
  A. network security groups (NSGs)

  ---

  A network security group works like a firewall. You can attach a network security group to a virtual network and/or individual subnets within the virtual network. You can also attach a network security group to a network interface assigned to a virtual machine. You can use multiple network security groups within a virtual network to restrict traffic between resources such as virtual machines and subnets.

  You can filter network traffic to and from Azure resources in an Azure virtual network with a network security group. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources.

  References:

  https://docs.microsoft.com/en-us/azure/virtual-network/security-overview