Microsoft AZ-900 Online Practice Questions and Exam Preparation

Microsoft AZ-900 Online Questions & Answers

• Question 141:

  You have an on-premises network that contains 100 servers.

  You need to recommend a solution that provides additional resources to your users. The solution must minimize capital and operational expenditure costs.

  What should you include in the recommendation?

  A. a complete migration to the public cloud
  B. an additional data center
  C. a private cloud
  D. a hybrid cloud
  D. a hybrid cloud

  ---

  A hybrid cloud is a combination of a private cloud and a public cloud. Capital expenditure is the spending of money up-front for infrastructure such as new servers.

  With a hybrid cloud, you can continue to use the on-premises servers while adding new servers in the public cloud (Azure for example). Adding new servers in Azure minimizes the capital expenditure costs as you are not paying for new servers as you would if you deployed new server on-premises.

  Incorrect Answers:

  A: A complete migration of 100 servers to the public cloud would involve a lot of operational expenditure (the cost of migrating all the servers).

  B: An additional data center would involve a lot of capital expenditure (the cost of the new infrastructure).

  C: A private cloud is hosted on on-premises servers to this would involve a lot of capital expenditure (the cost of the new infrastructure to host the private cloud).

  References: https://docs.microsoft.com/en-gb/learn/modules/principles-cloud-computing/4-cloud-deployment-models

• Question 142:

  Fill in the blank

  You can access Compliance Manager from the (________________________)

  Microsoft 365 admin center

• Question 143:

  This question requires that you evaluate the underlined text to determine if it is correct.

  Azure policies provide a common platform for deploying objects to a cloud infrastructure and for implementing consistency across the Azure environment.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed
  B. Resource groups provide
  C. Azure Resource Manager templates provides
  D. Management groups provide
  C. Azure Resource Manager templates provides

  ---

  "Azure policies provide a common platform for deploying objects to a cloud infrastructure and for implementing consistency across the Azure environment."

  This statement is INCORRECT.

  Azure Policy does NOT provide a deployment platform. Azure Policy is a governance service that evaluates resources in Azure to ensure they comply with rules and standards (for example: allowed regions, required tags, approved SKUs). It does not deploy resources.

  Azure Resource Manager (ARM) is the deployment and management service for Azure. All Azure resources are created, updated, and deleted through Azure Resource Manager. It enables infrastructure as code by using templates for repeatable and consistent deployments.

  Therefore, the corrected statement is:

  "Azure Resource Manager provides a common platform for deploying objects to a cloud infrastructure and for implementing consistency across the Azure environment."

  WHY THE OTHER OPTIONS ARE INCORRECT

  No change is needed:

  Azure Policy does not deploy or manage infrastructure creation. It enforces compliance rules.

  Resource groups provide:

  Resource groups are containers for organizing resources, not deployment platforms.

  Management groups provide:

  Management groups manage multiple subscriptions and apply governance, but they do not deploy resources.

  REFERENCES (Microsoft Learn) Azure Resource Manager overview:

  https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/overview

  ARM templates overview:

  https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/overview

  Azure Policy overview:

  https://learn.microsoft.com/en-us/azure/governance/policy/overview

• Question 144:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  You must install Azure Cloud Shell on your computer before you can use it. No

• Question 145:

  What should you use to prevent traffic from an Azure virtual network from being routed to an Azure Storage account via the internet?

  A. a public endpoint
  B. Azure VPN Gateway
  C. a service endpoint
  D. a network security group (NSG)
  C. a service endpoint

  ---

  Service endpoint: Azure service endpoints allow you to secure your Azure Storage account to only accept traffic from specific virtual networks and subnets. This prevents traffic from going over the public internet while still using the Azure backbone network for connectivity.

  Incorrect Answers:

  A public endpoint: This exposes the storage account to the internet, which is the opposite of the requirement.

  Azure VPN Gateway: This provides secure site-to-site or point-to-site VPN connectivity but does not prevent storage traffic from using the internet if a public endpoint is used.

  A network security group (NSG): NSGs control inbound/outbound traffic at the subnet or NIC level but cannot restrict storage traffic to private paths without service endpoints.

  https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview

  https://learn.microsoft.com/en-us/azure/storage/common/storage-network-security

• Question 146:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  Explanation:

  When you need to delegate permissions to serveral Azure virtual machines simultaneously, you must deploy the azure virtual machines to the same resource group.

• Question 147:

  You have on-premises servers that run Windows Server.

  What should you implement to manage the servers by using the Azure portal?

  A. Azure Kubernetes Service (AKS)
  B. Azure Arc
  C. Docker
  D. role-based access control (RBAQ)
  B. Azure Arc

  ---

  Azure Arc allows you to: Connect on-premises servers to Azure-Manage them from the Azure portal-Apply policies and governance-Track inventory and configurations-Use Azure management features without moving servers to Azure

  Azure Arc extends Azure management to infrastructure outside Azure,

  including on-premises and multi-cloud environments.

  Why the other answers are wrong:

  Azure Kubernetes Service (AKS):

  AKS is used for managing Kubernetes clusters, not physical or virtual servers.

  It does not manage Windows Servers directly from Azure unless they are in Kubernetes.

  Docker:

  Docker is a container platform, not a management solution.

  It does not integrate servers into the Azure portal for management.

  role-based access control (RBAC):

  RBAC controls permissions and access.

  It does not onboard or manage servers.

  Azure Arc overview:

  https://learn.microsoft.com/en-us/azure/azure-arc/overview

  Manage Windows Servers with Azure Arc:

  https://learn.microsoft.com/en-us/azure/azure-arc/servers/overview

  Hybrid and multi-cloud management with Azure Arc:

  https://learn.microsoft.com/en-us/azure/azure-arc/servers/manage-servers

• Question 148:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  A platform as a service solution provides full control of operating systems that host applications. No

• Question 149:

  What provides a unified way to project and manage non-Azure resources in Azure Resource Manager (ARM)?

  A. Azure Migrate
  B. Azure AD Connect
  C. Azure Arc
  D. Azure Front Door
  C. Azure Arc

  ---

  Azure Arc, a central hub on Azure for non-Azure infrastructure

  Now that Microsoft introduces Azure Arc, it is much easier to manage, analyse and monitor all your environments from a single pane of glass. While Azure Lighthouse enables you to manage all your multi-customer Azure resources in one portal, Azure Arc also connects all your non-Azure Windows and Linux servers and Kubernetes clusters to Azure. Like what? Any infrastructure, including on-premise hardware, non-Azure clouds such as Google, AWS, and also edge devices, e.g. IoT connected machines. All non-Azure machines connected to Azure with Azure Arc become connected machines and are treated as a resource in Azure. Therefore, the combination of Azure Lighthouse and Azure Arc results in a very powerful tool, providing you with centralized management capability for all your customer.

  https://www.linkedin.com/pulse/how-you-can-manage-all-azure-non-azure-resources-one-hub-garavaglia

• Question 150:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1: Yes

  In an azure virtual machine scale set, the virtual machines are configured identically.

  With scale sets, all VM instances are created from the same base OS image and configuration. This approach lets you easily manage hundreds of VMs without extra configuration tasks or network management.

  Box 2: Yes

  The number of VM instances can automatically increase or decrease in response to demand or a defined schedule. S

  Box 3: Yes

  Reference:

  https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/overview