Microsoft AZ-900 Online Practice Questions and Exam Preparation

Microsoft AZ-900 Online Questions & Answers

• Question 171:

  HOTSPOT

  Your azure trial account expired last week. You are now unable to _________________________.

  To complete the sentence, select the appropriate option in the answer area.

  

  

  Explanation:

• Question 172:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company plans to purchase Azure.

  The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email.

  You need to recommend which support plan meets the support policy requirement.

  Solution: Recommend a Professional Direct support plan.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  The Professional Direct (ProDirect) support plan provides access to Azure support engineers via phone and email, meeting the company's support policy requirement.-Other Azure support plans: Basic . Only provides access to billing and subscription support; does not include technical support via phone or email.-Developer . Provides technical support via email during business hours, but phone support is not included.-Standard . Provides email and phone support but may not meet higher-tier service level

  requirements; ProDirect offers faster response and dedicated guidance.

  References: Microsoft Learn:

  https://learn.microsoft.com/en-us/azure/azure-support-plans

  "The Professional Direct support plan provides 24x7 technical support, access to Azure support engineers by phone and email, and faster response times compared to the Standard plan."

  References:

  https://azure.microsoft.com/en-gb/support/plans/

• Question 173:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1: No

  Azure ad requires domain controllers on azure virtual machines.

  Azure Active Directory (Azure AD) is a cloud-based service. It does not require domain controllers on virtual machines.

  Box 2: Yes

  Azure Active Directory (Azure AD) is a centralized identity provider in the cloud. This is the primary built-in authentication and authorization service to provide secure access to Azure resources and Microsoft 365.

  Box 3: No

  User accounts in Azure Active Directory can be assigned multiple licenses for different Azure or Microsoft 365 services.

  Reference:

  https://azure.microsoft.com/en-us/products/active-directory/ds

• Question 174:

  You need to monitor login attempts from suspicious locations and configure automated responses, such as requiring password reset. What should you use?

  A. Azure AD Identity Protection
  B. Azure AD Connect
  C. Azure Policy
  D. Microsoft Defender for Cloud
  A. Azure AD Identity Protection

  ---

  Identity Protection identifies risky sign-ins and risky users and can enforce automated mitigation policies. AD Connect handles synchronization. Policy governs resource compliance. Defender for Cloud protects workloads, not identity.

• Question 175:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  An azure virtual desktop session host can run windows 10 or windows 11 only. No

• Question 176:

  Which Azure service should you use to correlate events from multiple resources into a centralized repository?

  A. Azure Event Hubs
  B. Azure Analysis Services
  C. Azure Monitor
  D. Azure Stream Analytics
  A. Azure Event Hubs

  ---

  Azure Event Hubs is a big data streaming platform and event ingestion service. It can receive and process millions of events per second. Data sent to an event hub can be transformed and stored by using any real- time analytics provider or batching/storage adapters. Azure Event Hubs can be used to ingest, buffer, store, and process your stream in real time to get actionable insights. Event Hubs uses a partitioned consumer model, enabling multiple applications to process the stream concurrently and letting you control the speed of processing.

  Azure Event Hubs can be used to capture your data in near-real time in an Azure Blob storage or Azure Data Lake Storagefor long-term retention or micro-batch processing.

  References: https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-about

• Question 177:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  To use azure active directory credentials to sign in to a computer that runs windows 10, the computer must be joined to azure ad. Yes

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-membership

  https://petri.com/understanding-hybrid-azure-active-directory-join

• Question 178:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company plans to migrate all its data and resources to Azure.

  The company's migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure.

  You need to deploy an Azure environment that meets the company migration plan.

  Solution: You create an Azure virtual machines, Azure SQL databases, and Azure Storage accounts.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Platform as a service (PaaS) is a complete development and deployment environment in the cloud. PaaS includes infrastructure--servers, storage, and networking--but also middleware, development tools, business intelligence (BI) services, database management systems, and more. PaaS is designed to support the complete web application lifecycle: building, testing, deploying, managing, and updating.

  Azure virtual machines are IaaS and require management of OS, updates, and software, so they do not meet the PaaS-only requirement.

  Azure SQL Database and Azure Storage accounts are PaaS services and are acceptable.

  To meet the goal, use PaaS alternatives like Azure App Service for hosting applications instead of VMs.

  Incorrect Option:

  Azure virtual machines: IaaS service; users manage the OS and software. Does not meet PaaS-only requirement.

  Correct PaaS options:

  Azure SQL Database:

  Fully managed relational database service. Microsoft handles OS, database engine, backups, and scaling.

  Azure Storage accounts:

  Fully managed storage service. Microsoft manages storage infrastructure and scaling.

  References (Microsoft Learn):

  Azure PaaS overview

  https://learn.microsoft.com/en-us/azure/architecture/guide/technology-choices/paas-overview

  Azure SQL Database overview

  https://learn.microsoft.com/en-us/azure/azure-sql/database/sql-database-paas-overview

  Azure App Service overview

  https://learn.microsoft.com/en-us/azure/app-service/overview

  Azure Storage overview

  https://learn.microsoft.com/en-us/azure/storage/common/storage-introduction

• Question 179:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1: No

  Azure Firewall will encypt all the network traffic sent from azure to the internet.

  Azure firewall does not encrypt network traffic. It is used to block or allow traffic based on source/destination IP address, source/destination ports and protocol.

  Box 2: No

  A network security group does not encrypt network traffic. It works in a similar way to a firewall in that it is used to block or allow traffic based on source/destination IP address, source/destination ports and protocol.

  Box 3: No

  The question is rather vague as it would depend on the configuration of the host on the Internet. Windows Server does come with a VPN client and it also supports other encryption methods such IPSec encryption or SSL/TLS so it could encrypt the traffic if the Internet host was configured to require or accept the encryption. However, the VM could not encrypt the traffic to an Internet host that is not configured to require the encryption.

  References:

  https://docs.microsoft.com/en-us/azure/security/azure-security-data-encryption-best-practices#protect-data-in-transit

• Question 180:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  You can use azure cost management to view costs associated to management groups. Yes

  Reference:

  https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/quick-acm-cost-analysis

  https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/cost-analysis-common-uses