Microsoft AZ-900 Online Practice Questions and Exam Preparation

Microsoft AZ-900 Online Questions & Answers

• Question 121:

  DRAG DROP

  Match the Azure Services service to the correct descriptions.

  Instructions: To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.

  NOTE: Each correct match is worth one point

  Select and Place:

  

  

  Explanation:

  Box 1: Azure Sentinel Box 2: Azure Security Center Box 3: Azure Key Vault

  Incorrect Answer: Azure Active Directory (Azure AD) Azure AD is an identity and access management service, which helps your employees sign in and access resources

  Azure Lighthouse Azure Lighthouse is used for cross- and multi-tenant management.

  Reference: https://docs.microsoft.com/en-us/azure/sentinel/overview https://docs.microsoft.com/en-us/azure/security-center/secure-score-security-controls https://practical365.com/securing-sensitive-information-in-azure-functions-with-the-azure-key-vault/ https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-whatis https://docs.microsoft.com/en-us/azure/lighthouse/overview

• Question 122:

  You have an Azure environment.

  You need to create a new Azure virtual machine from a tablet that runs the Android operating system.

  What are three possible solutions? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Use Bash in Azure Cloud Shell.
  B. Use PowerShell in Azure Cloud Shell.
  C. Use the PowerApps portal.
  D. Use the Security and Compliance admin center.
  E. Use the Azure portal.
  A. Use Bash in Azure Cloud Shell.
  B. Use PowerShell in Azure Cloud Shell.
  E. Use the Azure portal.

  ---

  The Android tablet device will have a web browser (Chrome). That's enough to connect to the Azure portal. The Azure portal offers three ways to create a VM:

  1. Using the graphical portal.

  2. Using the Azure Cloud Shell using Bash.

  3. Using the Azure Cloud Shell using PowerShell.

  Bash in Azure Cloud Shell: In-browser command-line interface; supports Bash scripts to create/manage VMs.

  PowerShell in Azure Cloud Shell: In-browser PowerShell environment with Azure modules pre-installed; can create/manage VMs.

  Azure portal: Fully browser-based interface; allows creating and configuring VMs from any device, including Android tablets.

  Incorrect Options:

  PowerApps portal: Used to build custom business apps and portals.-Cannot create Azure virtual machines.

  Security and Compliance admin center: Used for managing compliance and security policies.-Does not provide the ability to create virtual machines.

  References (Microsoft Learn):

  Azure Cloud Shell overview

  https://learn.microsoft.com/en-us/azure/cloud-shell/overview

  Azure portal overview

  ttps://learn.microsoft.com/en-us/azure/azure-portal/azure-portal-overview

• Question 123:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Azure china is operated by microsoft. no

  Reference:

  https://docs.microsoft.com/en-us/azure/china/overview-operations

  https://docs.microsoft.com/en-us/azure/azure-government/documentation-government-welcome

• Question 124:

  This question requires that you evaluate the underlined text to determine if it is correct.

  After you create a virtual machine, you need to modify the network security group (NSG) to allow connections from TCP port 8080 to the virtual machine.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed.
  B. virtual network gateway.
  C. virtual network
  D. route table.
  A. No change is needed.

  ---

  Network Security Groups (NSGs) are used to control inbound and outbound traffic to Azure resources, such as virtual machines, at the subnet or network interface level.

  To allow connections to a VM on TCP port 8080, you modify the NSG associated with the VM or its subnet.-Other options:

  "Virtual network gateway" . Incorrect. Virtual network gateways are used for VPN or ExpressRoute connections, not for allowing specific ports on a VM.

  "Virtual network" . Incorrect. Virtual networks provide network isolation but do not directly control traffic to individual ports.-"Route table" . Incorrect. Route tables control traffic routing between subnets or networks, not port-level access.

  References: Microsoft Learn:

  https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

  "A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources, including virtual machines."-Microsoft Learn:

  https://learn.microsoft.com/en-us/azure/virtual-network/tutorial-filter-network-traffic

  "You can create inbound security rules in a network security group to allow traffic to specific ports, such as TCP port 8080, for a virtual machine."

  https://mymicrosoftexchange.wordpress.com/2019/03/20/allow-external-rdp-to-your-newly- created-azure-vm/

• Question 125:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1: Yes

  From azure service health, an administrator can view the health of all the services in an azure environment. Yes

  Azure Service Health consists of three components: Azure Status, Azure Service Heath and Azure Resource Health.

  Azure service health provides a personalized view of the health of the Azure services and regions you're using. This is the best place to look for service impacting communications about outages, planned maintenance activities, and other health advisories because the authenticated Azure Service Health experience knows which services and resources you currently use.

  To view the health of all other services available in Azure, you would use the Azure Status component of Azure Service Health. Azure status informs you of service outages in Azure on the Azure Status page. The page is a global view of the health of all Azure services across all Azure regions.

  Box 2: Yes

  The best way to use Service Health is to set up Service Health alerts to notify you via your preferred communication channels when service issues, planned maintenance, or other changes may affect the Azure services and regions you use.

  Box 3: No

  You can use Resource Health to view the health of a virtual machine. However, you cannot use Resource Health to prevent a service failure affecting the virtual machine.

  Azure resource health provides information about the health of your individual cloud resources such as a specific virtual machine instance.

  References:

  https://docs.microsoft.com/en-us/azure/service-health/overview

• Question 126:

  You plan to deploy several Azure virtual machines.

  You need to ensure that the services running on the virtual machines remain available if a single data center fails.

  What are two possible solutions? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Deploy the virtual machines to two or more availability zones.
  B. Deploy the virtual machines to two or more resource groups.
  C. Deploy the virtual machines to a scale set.
  D. Deploy the virtual machines to two or more regions.
  A. Deploy the virtual machines to two or more availability zones.
  D. Deploy the virtual machines to two or more regions.

  ---

  Availability Zones: Each Azure region contains multiple data centers (zones). Deploying VMs across zones ensures high availability even if a single data center fails.

  Multiple Regions: Deploying VMs in different regions provides disaster recovery and resiliency in case an entire region becomes unavailable.

  Incorrect Options:

  Deploy the virtual machines to two or more resource groups: Resource groups are logical containers for resources and do not provide high availability.

  Deploy the virtual machines to a scale set: Scale sets provide automatic scaling but do not automatically distribute VMs across different data centers unless combined with availability zones.

  https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/overview

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/regions

• Question 127:

  HOTSPOT

  _______________ are used to group related Azure policies.

  Select the answer that correctly completes the sentence.

  

  

  Explanation:

  ---

  
  

• Question 128:

  This question requires that you evaluate the underlined text to determine if it is correct.

  You deploy an Azure resource. The resource becomes unavailable for an extended period due to a service outage. Microsoft will automatically refund your bank account.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed.
  B. automatically migrate the resource to another subscription
  C. automatically credit your account
  D. send you a coupon code that you can redeem for Azure credits
  C. automatically credit your account

  ---

  If the SLA for an Azure service is not met, you receive credits for that service and that service only. The credits are deducted from your monthly bill for that service. If you stopped using the service where the SLA was not met, your account would remain in credit for that service. The credits would not be applied to any other services that you may be using.

  Service Credits apply only to fees paid for the particular Service, Service Resource, or Service tier for which a Service Level has not been met. In cases where Service Levels apply to individual Service Resources or to separate Service tiers, Service Credits apply only to fees paid for the affected Service Resource or Service tier, as applicable. The Service Credits awarded in any billing month for a particular Service or Service Resource will not, under any circumstance, exceed your monthly service fees for that Service or Service Resource, as applicable, in the billing month.

  References: https://azure.microsoft.com/en-gb/support/legal/sla/analysis-services/v1_0/

• Question 129:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  An azure subscription can have multiple account administrators.No

  Reference:

  https://k21academy.com/microsoft-azure/az-900/az-900-azure-subscriptions/

  https://azure.microsoft.com/en-us/blog/organizing-subscriptions-and-resource-groups-within-the-enterprise/

• Question 130:

  What are two benefits of cloud computing?

  Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  A. enables the rapid provisioning of resources
  B. has increased administrative complexity
  C. has the same configuration options as on-premises
  D. shifts capital expenditures (CAPEX) to operating expenditures (OPEX)
  A. enables the rapid provisioning of resources
  D. shifts capital expenditures (CAPEX) to operating expenditures (OPEX)

  ---

  enables the rapid provisioning of resources:

  Cloud computing allows resources such as virtual machines, storage, and services to be created in minutes instead of weeks. This provides agility and speed for businesses.

  shifts capital expenditures (CAPEX) to operating expenditures (OPEX):

  Cloud uses a pay-as-you-go pricing model, eliminating large upfront hardware purchases.

  Organizations pay for what they use rather than owning infrastructure.

  Why the other answers are wrong:

  has increased administrative complexity:

  Cloud simplifies management through automation and managed services.

  It reduces complexity, not increases it.

  has the same configuration options as on-premises:

  Cloud environments offer abstracted services and different deployment models.

  The configuration is not the same as traditional on-premises infrastructure.

  Benefits of cloud computing:

  https://learn.microsoft.com/en-us/training/modules/describe-cloud-compute/7-benefits-of-cloud-computing

  Cloud pricing model (CAPEX vs OPEX):

  https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/strategy/business-outcomes/financial-considerations

  Cloud agility and scalability:

  https://learn.microsoft.com/en-us/azure/architecture/framework/scalability/overview