Microsoft AZ-900 Online Practice Questions and Exam Preparation

Microsoft AZ-900 Online Questions & Answers

• Question 231:

  You plan to reduce ongoing Azure expenditures.

  You need to identify which factors affect the costs of a resource.

  Which three factors should you identify? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. the Azure region
  B. the type of processed data
  C. the volume of inbound data
  D. the volume of outbound data
  E. the service tier
  B. the type of processed data
  D. the volume of outbound data
  E. the service tier

• Question 232:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1: No

  A company can extend an internal network by adding its own physical servers to the public cloud.

  You cannot add physical servers to the public cloud. You can only deploy virtual servers in the public cloud. You can extend a private cloud by deploying virtual servers in a public cloud. This would create a hybrid cloud.

  Box 2: No

  A private cloud exists in cyberspace and is accessed via the internet.

  Box 3: Yes.

  Reference:

  https://azure.microsoft.com/en-gb/overview/what-are-private-public-hybrid-clouds/

• Question 233:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has an Azure subscription that contains the following unused resources:

  1. 20 user accounts in Azure Active Directory (Azure AD)

  2. Five groups in Azure AD

  3. 10 public IP addresses

  4. 10 network interfaces

  You need to reduce the Azure costs for the company.

  Solution: You remove the unused public IP addresses.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Yes - removing the unused public IP addresses meets the goal of reducing Azure costs.

  Public IP addresses in Azure are billable resources. Standard SKU public IPv4 addresses incur a charge while they are allocated to your subscription, even if they are not associated with any virtual machine or service. By deleting unused public IP addresses, you stop these recurring charges and immediately reduce ongoing costs.

  In contrast:

  - Azure AD (Entra ID) user accounts and groups do not generate direct per-object charges.

  -Unused network interfaces do not incur charges by themselves.

  Therefore, removing public IP addresses is the only action in this scenario that directly reduces cost.

  CONCLUSION

  Deleting unused public IP addresses is a valid and effective way to reduce Azure costs.

  This solution meets the stated goal.

  REFERENCES (Microsoft Learn)

  1. Azure Public IP address pricing and behavior: https://learn.microsoft.com/azure/virtual-network/ip-services/public-ip-addresses

  2. Understanding Azure resource costs: https://learn.microsoft.com/azure/cost-management-billing/costs/understand-cost-mgt-data

  3. Azure AD (Microsoft Entra ID) pricing model: https://learn.microsoft.com/entra/fundamentals/whatis-entra-id

  4. Azure pricing overview: https://learn.microsoft.com/azure/cost-management-billing/understand/azure-pricing

• Question 234:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1: No

  To implement a hybrid cloud model, a company must always migrate from a private cloud mode.

  It is not true that a company must always migrate from a private cloud model to implement a hybrid cloud. You could start with a public cloud and then combine that with an on-premise infrastructure to implement a hybrid cloud.

  Box 2: Yes

  A company can extend the computing resources of its internal network by using the public cloud. This is very common. When you need more resources, rather than pay out for new on-premises infrastructure, you can configure a cloud environment and connect your on-premises network to the cloud environment by using a VPN.

  Box 3: No

  It is not true that only guest users can access cloud resources. You can give anyone with an account in Azure Active Directory access to the cloud resources. There are many authentication scenarios but a common one is to replicate your on-premises Active Directory accounts to Azure Active Directory and provide access to the Azure Active Directory accounts. Another commonly used authentication method is ‘Federation’ where authentication for access to cloud resources is passed to another

  authentication provider such as an on-premises Active Directory.

  https://azure.microsoft.com/en-gb/overview/what-is-hybrid-cloud-computing/

• Question 235:

  What should a desktop application use to interact with Azure and manage resources?

  A. APIs
  B. Azure Resource Manager (ARM) templates
  C. Azure Command-Line Interface (CLI)
  D. Azure Cloud Shell
  A. APIs

  ---

  Infrastructure as Code: manage configuration using code. To make APIs calls based on what is written on the code instead of using graphical interfaces.

  The word configuration was purposeful. When we talk about Infrastructure as Code we are not referring to just virtualized hardware anymore. But to any kind of configuration that can be managed through API.

  APIs were the Infrastructure as Code movement enabler.

  Nowadays, it is common to manage SaaS configuration and other tools using code. Even for internal platforms, this had become possible.

  So, when someone talks to you about Infrastructure as Code remember: are the APIs that make all this possible!

  Note: Infrastructure as Code is the process of managing and provisioning resources through declarative configuration files. Infrastructure as code tools use a declarative end state specification to guarantee a set of resources are created and configured the same way each time. Further, most infrastructure as code tools monitor resources to make sure they remain configured in the desired state.

  https://blog.devgenius.io/infrastructure-as-code-and-apis-b3e4f0c6eb1b https://learn.microsoft.com/en-us/azure/developer/intro/azure-developer-create-resources

• Question 236:

  HOTSPOT

  Azure distributed denial of service protection is an example of protection that is implemented at the:

  Select the answer that correctly completes the sentence.

  

  

  Explanation:

  Box: networking layer

  DDoS Protection defends against a comprehensive set of network layer (layer 3/4) attacks.

  Reference:

  https://azure.microsoft.com/en-us/services/ddos-protection

• Question 237:

  Your company plans to move several servers to Azure.

  The company's compliance policy states that a server named FinServer must be on a separate network segment.

  You are evaluating which Azure services can be used to meet the compliance policy requirements.

  Which Azure solution should you recommend?

  A. a resource group for FinServer and another resource group for all the other servers
  B. a virtual network for FinServer and another virtual network for all the other servers
  C. a VPN for FinServer and a virtual network gateway for each other server
  D. one resource group for all the servers and a resource lock for FinServer
  B. a virtual network for FinServer and another virtual network for all the other servers

  ---

  Azure virtual networks (VNets) provide logical isolation of resources in the cloud. Placing FinServer in its own VNet ensures it is on a separate network segment, meeting the compliance requirement.-Other options:

  "A resource group for FinServer and another resource group for all the other servers" . Incorrect. Resource groups are logical containers for management and permissions, not network isolation. Servers in separate resource groups can still communicate if they are on the same VNet.

  "A VPN for FinServer and a virtual network gateway for each other server" . Incorrect. VPNs connect networks or on-premises systems to Azure; they do not isolate a single server within Azure.

  "One resource group for all the servers and a resource lock for FinServer" . Incorrect. Resource locks prevent deletion or modification but do not provide network isolation.

  References: Microsoft Learn:

  https://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-overview

  "An Azure Virtual Network (VNet) is a representation of your own network in the cloud. VNets provide isolation, segmentation, and secure communication between resources in Azure."-Microsoft Learn:

  https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-faq

  "VNets enable isolation and segmentation of resources. Placing resources in separate VNets ensures that traffic between them is controlled and isolated according to your compliance requirements."

  References:

  https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-vnet-plan-design-arm

• Question 238:

  HOTSPOT

  For each of the following statements, select Yes if the statement is tine. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1: Yes

  You can deploy azure resource manager templates by using the azure portal.

  You can deploy resources with ARM templates and Azure portal.

  Box 2: Yes

  You can automate deployments and use the practice of infrastructure as code. In code, you define the infrastructure that needs to be deployed. The infrastructure code becomes part of your project. Just like application code, you store the infrastructure code in a source repository and version it. Anyone on your team can run the code and deploy similar environments.

  To implement infrastructure as code for your Azure solutions, use Azure Resource Manager templates (ARM templates). The template is a JavaScript Object Notation (JSON) file that defines the infrastructure and configuration for your project.

  Box 3: No

  You don't have to worry about the complexities of ordering operations. Resource Manager orchestrates the deployment of interdependent resources so they're created in the correct order. When possible, Resource Manager deploys resources in parallel so your deployments finish faster than serial deployments. You deploy the template through one command, rather than through multiple imperative commands.

  Reference:

  https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/deploy-portal

  https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/overview

• Question 239:

  This question requires that you evaluate the underlined text to determine if it is correct.

  From Azure Monitor, you can view which user turned off a specific virtual machine during the last 14 days.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed
  B. Azure Event Hubs
  C. Azure Activity Log
  D. Azure Service Health
  C. Azure Activity Log

  ---

  Azure Activity Log provides a record of all management operations performed on resources in Azure, including who started, stopped, or deleted a virtual machine and when these actions occurred.

  Other options: "No change is needed" . Incorrect. Azure Monitor collects metrics and logs from resources but does not provide a historical record of management actions performed by users.

  "Azure Event Hubs" . Incorrect. Event Hubs is a data streaming platform and event ingestion service, not a management activity log.

  "Azure Service Health" . Incorrect. Service Health provides notifications about Azure service incidents and planned maintenance, not individual user actions.

  References: Microsoft Learn:

  https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/activity-log

  "The Azure Activity Log provides insight into operations that were performed on resources in your subscription. You can see who initiated the operation and when."-Microsoft Learn:

  https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/overview

  "Azure Monitor collects monitoring telemetry, while the Activity Log tracks all control-plane operations, such as creating, modifying, or deleting resources."

  References:

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-audit

• Question 240:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  Explanation:

  Box: configuring the Saas Solution

  Software as a service (or SaaS) is a way of delivering applications over the Internetג€andquot;as a service. Instead of installing and maintaining software, you simply access it via the Internet, freeing yourself from complex software and hardware management.

  SaaS applications are sometimes called Web-based software, on-demand software, or hosted software. Whatever the name, SaaS applications run on a SaaS provider's servers. The provider manages access to the application, including security, availability, and performance.

  When you are implementing a software as a service solution, configuring the saas solution, configuring the saas solution you are responsible for

  Reference:

  https://www.salesforce.com/in/saas/