Microsoft AZ-900 Online Practice Questions and Exam Preparation

Microsoft AZ-900 Online Questions & Answers

• Question 211:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE Each correct selection is worth one point.

  

  

  Explanation:

  If your company uses an azure free acount, you can only deploy azure virtual machines and azure storage accounts. No

• Question 212:

  Which two features or services can be integrated with Azure Monitor? Each correct answer presents part of the solution. NOTE: Each correct answer is worth one point.

  A. Azure status
  B. Application Insights
  C. Azure Advisor
  D. Log Analytics
  E. Azure Service Health
  B. Application Insights
  D. Log Analytics

  ---

  Application Insights: An application performance monitoring service that collects telemetry and integrates with Azure Monitor to provide insights into application health, performance, and usage.

  Log Analytics: A service that collects and analyzes log data from Azure resources and integrates with Azure Monitor for advanced query and alerting capabilities.

  Incorrect Options:

  Azure Status: Provides the current health of Azure services globally; it does not integrate directly with Azure Monitor.

  Azure Service Health: Provides notifications and guidance about Azure service issues; while it complements Azure Monitor, it is not a data integration point for monitoring.

  Azure Advisor: Provides recommendations for cost, performance, and security optimization; it does not provide telemetry data to Azure Monitor.

  References:

  https://learn.microsoft.com/en-us/azure/azure-monitor/overview

  https://learn.microsoft.com/en-us/azure/azure-monitor/insights/application-insights

  https://learn.microsoft.com/en-us/azure/azure-monitor/logs/log-analytics-overview

• Question 213:

  HOTSPOT

  To complete the sentence, select the appropriate option in the answer area.

  

  

  Explanation:

  The Microsoft Privacy Statement explains what personal data Microsoft processes, how Microsoft processes the data, and the purpose of processing the data

  The microsoft online services privacy statement explains what data microsoft processes.

  Reference:

  https://privacy.microsoft.com/en-us/privacystatement

• Question 214:

  You have an Azure subscription.

  You need to review your secure score.

  What should you use?

  A. Azure Monitor
  B. Azure Advisor
  C. Help + support
  D. Microsoft Defender for Cloud
  D. Microsoft Defender for Cloud

  ---

  Microsoft Defender for Cloud provides the Secure score, which measures your current security posture

  and shows how well your Azure resources follow security best practices. It also gives actionable

  recommendations to improve security and reduce risk.

  Reasons the other options are incorrect:

  Azure Monitor:

  Used for collecting and analyzing performance and diagnostic logs and metrics,

  but it does NOT provide a Secure score feature.

  Azure Advisor:

  Provides recommendations for cost, performance, reliability, and security,

  but it does NOT display or manage the Secure score. Secure score is only found in Defender for Cloud.

  Help + support:

  Used to create support tickets and access documentation.

  It does NOT provide security posture management or Secure score reporting.

  Microsoft Learn References (Verified Working Links):

  Secure score in Microsoft Defender for Cloud:

  https://learn.microsoft.com/en-us/azure/defender-for-cloud/secure-score-security-controls

  Overview of Microsoft Defender for Cloud:

  https://learn.microsoft.com/en-us/azure/defender-for-cloud/overview

  https://docs.microsoft.com/en-us/azure/defender-for-cloud/secure-score-security-controls

• Question 215:

  DRAG DROP

  Match the Azure services to the correct descriptions.

  Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.

  NOTE: Each correct match is worth one point

  Select and Place:

  

  

  Explanation:

• Question 216:

  A support engineer plans to perform several Azure management tasks by using the Azure CLI.

  You install the CLI on a computer.

  You need to tell the support engineer which tools to use to run the CLI.

  Which two tools should you instruct the support engineer to use? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Command Prompt
  B. Azure Resource Explorer
  C. Windows PowerShell
  D. Windows Defender Firewall
  E. Network and Sharing Center
  A. Command Prompt
  C. Windows PowerShell

  ---

  Command Prompt-Azure CLI is a command-line tool.-It can be run directly from Command Prompt.-The CLI is installed as an executable (az.exe) and works in CMD just like any other system command.

  Windows PowerShell-Azure CLI is fully supported in PowerShell.

  After installation, PowerShell can run the az command to manage Azure resources.

  PowerShell is commonly used for automation and scripting with CLI commands.

  Why the Other Options Are Incorrect:

  Azure Resource Explorer-This is a browser-based resource inspection and troubleshooting tool.-It does not run Azure CLI commands.

  Windows Defender Firewall-This is a security feature for managing network access.-It is not related to running command-line utilities.

  Network and Sharing Center-This is a Windows networking configuration tool.-It has no ability to run Azure CLI commands.

  1) Azure CLI Installation on Windows

  https://learn.microsoft.com/en-us/cli/azure/install-azure-cli-windows

  "After installation, run Azure CLI with the az command from Command Prompt or PowerShell."

  2) What is Azure CLI

  https://learn.microsoft.com/en-us/cli/azure/what-is-azure-cli

  "Azure CLI is a cross-platform command-line tool that can be used from a shell, including PowerShell and Command Prompt."

  References:

  https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-windows?view=azure-cli-latest

• Question 217:

  HOTSPOT

  Several support engineers plan to manage Azure by using the computers shown in the following table:

  

  You need to identify which Azure management tools can be used from each computer.

  What should you identify for each computer? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

• Question 218:

  Your company has an Azure subscription that contains resources in several regions.

  You need to ensure that administrators can only create resources in those regions.

  What should you use?

  A. a read-only lock
  B. an Azure policy
  C. a management group
  D. a reservation
  B. an Azure policy

  ---

  Azure Policy enforces organizational standards and compliance across Azure resources.

  You can create a policy to restrict which regions resources can be deployed to.

  Non-compliant resource creation attempts can be denied or flagged automatically.

  Incorrect Options: A read-only lock: Prevents modifications or deletion of existing resources.- Cannot restrict new resource creation locations.-A management group: Organizes subscriptions and can be used to assign policies.- By itself, does not enforce region restrictions.-A reservation: Pre-purchases compute or other resources to save costs.- Does not enforce location restrictions.

  References (Microsoft Learn):

  Azure Policy overview

  https://learn.microsoft.com/en-us/azure/governance/policy/overview

  Azure Policy built-in policy definitions

  https://learn.microsoft.com/en-us/azure/governance/policy/samples/built-in-policies

  https://docs.microsoft.com/en-us/azure/governance/policy/overview

• Question 219:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Data that is stored in an azure storage account automatically has at least three copies. Yes

• Question 220:

  Your company plans to migrate to Azure. The company has several departments. All the Azure resources used by each department will be managed by a department administrator.

  You need to recommend an Azure deployment that provides the ability to segment Azure for the departments.

  What are two possible techniques to segment Azure for the departments? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. multiple subscriptions
  B. multiple Azure Active Directory (Azure AD) directories
  C. multiple regions
  D. multiple resource groups
  A. multiple subscriptions
  D. multiple resource groups

  ---

  An Azure subscription is a container for Azure resources. It is also a boundary for permissions to resources and for billing. You are charged monthly for all resources in a subscription. A single Azure tenant (Azure Active Directory) can contain multiple Azure subscriptions.

  A resource group is a container that holds related resources for an Azure solution. The resource group can include all the resources for the solution, or only those resources that you want to manage as a group.

  To enable each department administrator to manage the Azure resources used by that department, you will need to create a separate subscription per department. You can then assign each department administrator as an administrator for the subscription to enable them to manage all resources in that subscription.

  https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/create-subscription

  https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/add-change-subscription-administrator