Microsoft AZ-900 Online Practice Questions and Exam Preparation

Microsoft AZ-900 Online Questions & Answers

• Question 181:

  Your company plans to automate the deployment of servers to Azure.

  Your manager is concerned that you may expose administrative credentials during the deployment.

  You need to recommend an Azure solution that encrypts the administrative credentials during the deployment.

  What should you include in the recommendation?

  A. Azure Key Vault
  B. Azure Information Protection
  C. Azure Security Center
  D. Azure Multi-Factor Authentication (MFA)
  A. Azure Key Vault

  ---

  Azure Key Vault is a secure store for storage various types of sensitive information. In this question, we would store the administrative credentials in the Key Vault. With this solution, there is no need to store the administrative credentials as plain text in the deployment scripts.

  All information stored in the Key Vault is encrypted.

  Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets.

  Secrets and keys are safeguarded by Azure, using industry-standard algorithms, key lengths, and hardware security modules (HSMs). The HSMs used are Federal Information Processing Standards (FIPS) 140-2 Level 2 validated.

  Access to a key vault requires proper authentication and authorization before a caller (user or application) can get access. Authentication establishes the identity of the caller, while authorization determines the operations that they are allowed to perform.

  References:

  https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview

• Question 182:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1: Yes

  You can configure the azure active directory activity logs to appear in azure monitor.

  You can send Azure AD activity logs to Azure Monitor logs to enable rich visualizations, monitoring and alerting on the connected data.

  All data collected by Azure Monitor fits into one of two fundamental types, metrics and logs (including Azure AD activity logs). Activity logs record when resources are created or modified. Metrics tell you how the resource is performing and the resources that it's consuming.

  Box 2: Yes

  Azure Monitor can consolidate log entries from multiple Azure resources, subscriptions, and tenants into one location for analysis together.

  Box 3: Yes

  You can create alerts in Azure Monitor.

  Alerts in Azure Monitor proactively notify you of critical conditions and potentially attempt to take corrective action. Alert rules based on metrics provide near real time alerting based on numeric values, while rules based on logs allow for complex logic across data from multiple sources.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-activity-logs-azure-monitor

  https://docs.microsoft.com/en-us/azure/azure-monitor/overview

• Question 183:

  You have an Azure environment that contains 10 virtual networks and 100 virtual machines.

  You need to limit the amount of inbound traffic to all the Azure virtual networks.

  What should you create?

  A. one application security group (ASG)
  B. 10 virtual network gateways
  C. 10 Azure ExpressRoute circuits
  D. one Azure firewall
  D. one Azure firewall

  ---

  You can restrict traffic to multiple virtual networks with a single Azure firewall.

  Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources. It's a fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability.

  You can centrally create, enforce, and log application and network connectivity policies across subscriptions and virtual networks. Azure Firewall uses a static public IP address for your virtual network resources allowing outside firewalls to identify traffic originating from your virtual network.

  References:

  https://docs.microsoft.com/en-us/azure/firewall/overview

• Question 184:

  DRAG DROP

  Match the Azure compute services to the appropriate descriptions.

  To answer, drag the appropriate compute service from the column on the left to its description on the right.

  Each service may be used once, more than once, or not at all.

  NOTE: Each correct match is worth one point.

  Select and Place:

  

  

  Explanation:

• Question 185:

  This question requires that you evaluate the underlined text to determine if it is correct.

  All Azure services that are in public preview are provided without any documentation.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed
  B. only configurable from Azure CLI
  C. excluded from the Service Level Agreements
  D. only configurable from the Azure portal
  C. excluded from the Service Level Agreements

  ---

  Azure services in public preview are fully functional but not covered by Azure Service Level Agreements (SLAs). This means Microsoft does not guarantee uptime, performance, or support levels for these services during the preview period.

  The statement that public preview services are "provided without any documentation" is incorrect. Microsoft provides documentation, tutorials, and guidance even for public preview services.-Other options:

  "Only configurable from Azure CLI" . Incorrect, as preview services can often be configured via portal, CLI, or ARM templates.

  "Only configurable from the Azure portal" . Incorrect, same reason.- "No change is needed" . Incorrect, because documentation is provided and the original statement is false.

  References: Microsoft Learn:

  https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/preview-features

  "Azure services that are in public preview are fully functional but are not covered by the Azure Service Level Agreement (SLA). Preview features are provided 'as-is' and are intended for evaluation purposes."-Microsoft Learn:

  https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/preview-features#public-preview

  "Public preview features are documented and supported through Microsoft Learn and other guidance channels, but they do not have the same support guarantees as generally available services."

  References:

  https://azure.microsoft.com/en-gb/support/legal/preview-supplemental-terms/

• Question 186:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  Explanation:

  Box: Azure Service Health

  Azure Service Health provides a global view of the status of azure services, regions, and specific resources.

  Azure Service Health is a suite of experiences that provide personalized guidance and support when issues in Azure services are or may affect you in the future. Azure Service Health is composed of Azure status, the service health service, and Resource Health.

  Note: The Azure status page is a global view of the health of all Azure services in all regions. It's a quick reference for incidents with widespread impact. Service Health keeps you informed about the health of your environment.

  Incorrect:

  * Azure Advisor

  Do more with less. Reduce costs and increase the efficiency of your cloud investments. Azure Advisor offers actionable recommendations to help you optimize your Azure resources for reliability, security, operational excellence, performance, and cost.

  Reference:

  https://azure.microsoft.com/en-us/products/advisor

• Question 187:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure environment.

  You need to create a new Azure virtual machine from an Android laptop.

  Solution: You use the Azure portal.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  The Azure portal is a web-based, unified console that provides an alternative to command-line tools. With the Azure portal, you can manage your Azure subscription using a graphical user interface. You can build, manage, and monitor everything from simple web apps to complex cloud deployments. Create custom dashboards for an organized view of resources. Configure accessibility options for an optimal experience.

  Being web-based, the Azure portal can be run on a browser from a tablet that runs the Android operating system.

  References:

  https://docs.microsoft.com/en-us/azure/azure-portal/azure-portal-overview

• Question 188:

  HOTSPOT

  _____ ensures that you can caculate how much a cloud service will cost.

  Select the answer that correctly completes the sentence.

  

  

  Explanation:

• Question 189:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has an Azure subscription that contains the following unused resources:

  1. 20 user accounts in Azure Active Directory (Azure AD)

  2. Five groups in Azure AD

  3. 10 public IP addresses

  4. 10 network interfaces

  You need to reduce the Azure costs for the company.

  Solution: You remove the unused groups.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  No - removing Azure AD groups does NOT reduce Azure costs.

  1. Azure AD groups are NOT a billable resource.

  Azure Active Directory (Azure AD) groups do not have a cost associated with them in the Free or basic tiers.

  Microsoft does not charge for the number of groups or users stored in Azure AD.

  Because groups have no cost, deleting them does NOT reduce billing.

  2. Only billable resources affect Azure cost. Azure costs are generated by billable services such as: Virtual Machines-Public IP addresses-Storage accounts-Load balancers-Disks-Databases-Network services

  Since groups are directory objects and not chargeable services, deleting them does not impact cost.

  3. Unused public IP addresses ARE a billable resource. Public IP addresses in Azure can incur charges, especially when:

  They are static

  They are reserved but not attached

  Deleting unused public IP addresses WOULD reduce Azure cost.

  Deleting Azure AD groups would NOT.

  4. Removing groups can cause access issues. Groups are often used for: Role-based access control (RBAC)-Application permissions-Security boundaries

  Deleting groups might break permissions without providing any cost benefit.

  Deleting unused Azure AD groups does NOT meet the goal of reducing Azure costs.

  The solution is INCORRECT.

  The correct approach should remove unused BILLABLE resources such as public IP addresses or idle compute resources.

  REFERENCE LINKS (Microsoft Learn):

  1. Azure AD objects are not billed: https://learn.microsoft.com/en-us/answers/questions/634714/is-there-billing-system-based-on-the-number-of-use

  2. No charges if no billable resources exist: https://learn.microsoft.com/en-us/answers/questions/1366377/does-azure-subscription-costs-if-there-is-no-resou

  3. Public IP address pricing: https://azure.microsoft.com/en-us/pricing/details/ip-addresses/

  4. Azure cost optimization using Azure Advisor: https://learn.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations

• Question 190:

  HOTSPOT

  Data that is stored in the archive access tier of an azure storage account _________________

  Select the answer that correctly completes the sentence.

  

  

  Explanation: