Microsoft AZ-900 Online Practice Questions and Exam Preparation

Microsoft AZ-900 Online Questions & Answers

• Question 271:

  This question requires that you evaluate the underlined text to determine if it is correct.

  Authorization is the process of verifying a user's credentials.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed
  B. Authentication
  C. Federation
  D. Ticketing
  B. Authentication

  ---

  Authentication, not authorization is the process of verifying a user's credentials. The difference between authentication and authorization is:

  1. Authentication is proving your identity, proving that you are who you say you are. The most common example of this is logging in to a system by providing credentials such as a username and password.

  2. Authorization is what you're allowed to do once you've been authenticated. For example, what resources you're allowed to access and what you can do with those resources.

• Question 272:

  HOTSPOT

  You need to identify which blades in the Azure portal must be used to perform the following tasks:

  1. View security recommendations.

  2. Monitor the health of Azure services.

  3. Browse available virtual machine images.

  Which blade should you identify for each task? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1:

  Azure Monitor is used to monitor the health of Azure services.

  Azure Monitor maximizes the availability and performance of your applications and services by delivering a comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments. It helps you understand how your applications are performing and proactively identifies issues affecting them and the resources they depend on.

  Box 2:

  You can browse available virtual machine images in the Azure Marketplace.

  Azure Marketplace provides access and information on solutions and services available from Microsoft and their partners. Customers can discover, try, or buy cloud software solutions built on or for Azure. The catalog of 8,000+ listings provides Azure building blocks, such as Virtual Machines (VMs), APIs, Azure apps, Solution Templates and managed applications, SaaS apps, containers, and consulting services.

  Box 3.

  Azure Advisor displays security recommendations.

  Azure Advisor provides you with a consistent, consolidated view of recommendations for all your Azure resources. It integrates with Azure Security Center to bring you security recommendations. You can get security recommendations from the Security tab on the Advisor dashboard.

  Security Center helps you prevent, detect, and respond to threats with increased visibility into and control over the security of your Azure resources. It periodically analyzes the security state of your Azure resources. When Security Center identifies potential security vulnerabilities, it creates recommendations. The recommendations guide you through the process of configuring the controls you need.

  References:

  https://docs.microsoft.com/en-us/azure/azure-monitor/overview

  https://docs.microsoft.com/en-us/azure/marketplace/marketplace-faq-publisher-guide

  https://docs.microsoft.com/en-us/azure/advisor/advisor-security-recommendations

• Question 273:

  What should you use to evaluate whether your company's Azure environment meets regulatory requirements?

  A. Compliance Manager from the Security Trust Portal
  B. the Advisor blade from the Azure policy
  C. the Knowledge Center website
  D. the Security Center blade from the Azure portal
  D. the Security Center blade from the Azure portal

  ---

  The "Regulatory compliance" dashboard in Microsoft Defender for Cloud provides continuous assessment of Azure resources against industry standards and regulatory benchmarks (e.g., ISO 27001, PCI DSS, NIST).

  Offers compliance scores, identifies non-compliant resources, and provides remediation recommendations.

  Specifically designed for Azure environments to ensure regulatory compliance.

  Microsoft Learn Reference:

  https://learn.microsoft.com/en-us/azure/defender-for-cloud/regulatory-compliance-dashboard

  "Use the Regulatory compliance dashboard in Microsoft Defender for Cloud to assess your resources against compliance standards and manage compliance posture."

  Why the Other Options Are Incorrect:

  Compliance Manager from the Security Trust Portal-Incorrect.-Focuses on Microsoft 365 and hybrid environment compliance, not the technical compliance of Azure resources themselves.

  The Knowledge Center website-Incorrect.-Provides documentation and tutorials, not compliance assessment tools.

  The Advisor blade from the Azure portal-Incorrect.-Provides general optimization recommendations (Cost, Security, Reliability), but not in-depth regulatory compliance assessments.

• Question 274:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  https://learn.microsoft.com/en-us/azure/expressroute/expressroute-introduction

  "Dynamic routing between your network and Microsoft via BGP."

  https://learn.microsoft.com/en-us/answers/questions/633891/connecting-multiple-expressroute-circuit-with-a-si

  "Yes, it is possible. You can link a single virtual network with up to four ExpressRoute circuits in the same location or up to 16 ExpressRoute circuits in different peering locations.

  Reference :

  https://learn.microsoft.com/en-au/azure/expressroute/expressroute-faqs#can-i-have-one-virtual-network-connected-to-more-than-one-expressroute-circuit

  ExpressRoutes don't go over the internet, hence ExpressRoute.

  Rather, it is strongly recommended that customers setup at least two ExpressRoute circuits to avoid single points of failure"

  ExpressRoute uses border gateway protocol. Yes

• Question 275:

  Your company has an Azure subscription and three business units.

  You plan to deploy new resources for each business unit.

  You need to ensure that the new resources are deployed by using a repeatable and reliable method that applies the same configurations to each resource.

  What should you use?

  A. Azure Policy
  B. Azure Arc
  C. a resource group
  D. Azure Resource Manager (ARM) templates
  D. Azure Resource Manager (ARM) templates

  ---

  Azure Resource Manager (ARM) templates:

  ARM templates allow you to define infrastructure as code using JSON or Bicep.

  You can deploy the same environment multiple times with consistent configuration across business units. This ensures deployments are repeatable, reliable, and standardized.

  Why the other answers are incorrect

  Azure Policy:

  Azure Policy is used to enforce governance rules (for example, allowed VM sizes or required tags). It does not deploy resources.

  Azure Arc:

  Azure Arc is used to manage on-premises and multi-cloud resources from Azure.

  It does not provide a method for repeatable deployment templates.

  Resource group:

  A resource group is only a logical container for resources. It does not control how resources are deployed or configured.

  Microsoft Learn References (Verified and Working)

  ARM templates overview:

  https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/overview

  Infrastructure as code in Azure:

  https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/overview#why-use-arm-templates

  Deploy resources with ARM templates:

  https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/deploy-portal

  https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/deploy-to-resource-group

• Question 276:

  HOTSPOT

  To complete the sentence, select the appropriate option in the answer area.

  

  

  Explanation:

  Azure Cosmos DB is an example of a platform as a service (PaaS) cloud database provider.

  References:

  https://docs.microsoft.com/en-us/azure/cosmos-db/database-security

• Question 277:

  You have an azure virtual machine named VM1.

  You plan to encrypt VM1 by using Azure Disk Encryption.

  Which Azure resource must you create first?

  A. An Azure Storage account
  B. An Azure Information Protection policy
  C. An Encryption Key
  D. An Azure Key Vault
  D. An Azure Key Vault

  ---

  Azure Disk Encryption (ADE) uses BitLocker (Windows) or DM-Crypt (Linux) to encrypt VM disks.

  ADE requires encryption keys and secrets to be securely stored in an Azure Key Vault.

  Before enabling disk encryption, create a Key Vault and configure access policies.

  After Key Vault creation, you can create or import the encryption key for ADE.

  Incorrect Options: An Azure Storage account: Not required; ADE encrypts disks directly and does not store keys in storage accounts.-An Azure Information Protection policy: Used for classifying and protecting documents/emails, not VM disks.-An Encryption Key: Required for encryption but must be stored in a Key Vault; Key Vault must exist first.

  References (Microsoft Learn):

  Azure Disk Encryption overview

  https://learn.microsoft.com/en-us/azure/virtual-machines/windows/encrypt-disks

  Create and manage keys for Azure Disk Encryption

  https://learn.microsoft.com/en-us/azure/virtual-machines/windows/encrypt-disks#encryption-keys-and-key-vault

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-overview

• Question 278:

  DRAG DROP

  Match the Azure service to the correct definition.

  Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  Explanation:

  Box 1:

  Azure Functions provides the platform for serverless code.

  Azure Functions is a serverless compute service that lets you run event-triggered code without having to explicitly provision or manage infrastructure.

  Box 2:

  Azure Databricks is a big analysis service for machine learning.

  Azure Databricks is an Apache Spark-based analytics platform. The platform consists of several components including ‘MLib

• Question 279:

  This question requires that you evaluate the underlined text to determine if it is correct.

  An Azure service is available to all Azure customers when it is in public preview.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed.
  B. private preview
  C. development
  D. an Enterprise Agreement (EA) subscription
  A. No change is needed.

  ---

  Public Preview means that the service is in public beta and can be tried out by anyone with an Azure subscription. Services in public preview are often offered at a discount price. Public previews are excluded from SLAs and in some cases, no support is offered. Incorrect Answers:

  B: Services in private preview are available only to selected people who has signed up to the private preview program.

  C: Services in development are not available to the public.

  D: Services provided under an Enterprise Agreement (EA) subscription are available only to the subscription owner.

  References: https://www.neowin.net/news/several-more-azure-services-now-available-in-private-public-preview/

• Question 280:

  HOTSPOT

  You need to request that Microsoft increase a subscription quota limit for your company.

  Which blade should you use from the Azure portal? To answer, select the appropriate blade in the answer area.

  

  

  Explanation:

  Request a standard quota increase from Help + Support

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-portal/supportability/per-vm-quota-requests