Microsoft AZ-900 Online Practice Questions and Exam Preparation

Microsoft AZ-900 Online Questions & Answers

• Question 281:

  You attempt to create several managed Microsoft SQL Server instances in an Azure environment and receive a message that you must increase your Azure subscription limits.

  What should you do to increase the limits?

  A. Create a service health alert
  B. Upgrade your support plan
  C. Modify an Azure policy
  D. Create a new support request
  D. Create a new support request

  ---

  Many Azure resource have quote limits. The purpose of the quota limits is to help you control your Azure costs. However, it is common to require an increase to the default quota.

  You can request a quota limit increase by opening a support request. In the support request, select `Service and subscription limits (quotas)' for the Issue type, select your subscription and the service you want to increase the quota for. For this question, you would select `SQL Database Managed Instance' as the quote type.

  References:

  https://docs.microsoft.com/en-us/azure/sql-database/sql-database-managed-instance-resource- limits#obtaining-a-larger-quota-for-sql-managed-instance

• Question 282:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  Explanation:

  You can access compliance manager from the Microsoft 365 admin center

• Question 283:

  You plan to store application logs that must be searchable using complex queries and retained for 90 days. You need a fully managed solution. What should you use?

  A. Azure Monitor Logs
  B. Azure Storage Queue
  C. Azure Files
  D. Azure App Service
  A. Azure Monitor Logs

  ---

  Azure Monitor Logs (Log Analytics Workspace) stores structured and unstructured logs and supports advanced Kusto Query Language (KQL) queries with configurable retention. Storage Queues are message-based, not searchable. Files and App Service do not provide log analytics capabilities.

• Question 284:

  HOTSPOT Your company implements ________________________________ to automatically add a watermark to microsoft word documents that contain credit card information To complete the sentence, select the appropriate option in the answer area.

  

  

  Explanation:

• Question 285:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your Azure environment contains multiple Azure virtual machines.

  You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.

  Solution: You modify an Azure Traffic Manager profile.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Azure Traffic Manager is a DNS-based routing service. It only returns DNS answers pointing to endpoints; it does not proxy or open network traffic. Clients still must be able to reach the endpoint directly.

  To expose VM1 over HTTP you must ensure the VM has a public endpoint (a public IP or a public load balancer/frontend), the NSG allows inbound TCP port 80, and the VM's OS firewall/web server is configured to accept HTTP connections.

  Traffic Manager can be used later to distribute DNS to that public endpoint, but it cannot create the public IP, open ports, or change NSG/OS firewall settings by itself.

  Steps to achieve the goal:

  1.Assign a public IP to VM1's network interface (or create a public Load Balancer with a rule for port 80).

  2.Add an NSG inbound rule allowing TCP port 80 to VM1 (or to its subnet/backend pool).

  3.Ensure the VM's OS firewall permits port 80 and a web server is running.

  4.(Optional) Use Traffic Manager / Front Door / Application Gateway to provide DNS/global routing after the endpoint is public.

  References (Microsoft Learn) - links on separate lines:

  Azure Traffic Manager overview

  https://learn.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview

  How Azure Traffic Manager works

  https://learn.microsoft.com/en-us/azure/traffic-manager/traffic-manager-how-it-works

  Associate a public IP address to a virtual machine

  https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/associate-public-ip-address-vm

  Public IP addresses in Azure

  https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-addresses

  Network security groups overview

  https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

  Tutorial: Filter network traffic with a network security group

  https://learn.microsoft.com/en-us/azure/virtual-network/tutorial-filter-network-traffic

  Azure Load Balancer overview

  https://learn.microsoft.com/en-us/azure/load-balancer/load-balancer-overview

  Load balancing options (architecture guide)

  https://learn.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview

  References:

  https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview

• Question 286:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1: No

  Authorization to access azure resources can be provided only to azure active directory users. No

  Authorization to access Azure resources can be provided by other identity providers by using federation. A commonly used example of this is to federate your on-premises Active Directory environment with Azure AD and use this federation for authentication and authorization.

  Box 2: Yes

  As described above, third-party cloud services and on-premises Active Directory can be used to access Azure resources. This is known as ‘federation’.

  Federation is a collection of domains that have established trust. The level of trust may vary, but typically includes authentication and almost always includes authorization. A typical federation might include a number of organizations that have established trust for shared access to a set of resources.

  Box 3: Yes

  Azure Active Directory (Azure AD) is a centralized identity provider in the cloud. This is the primary built-in authentication and authorization service to provide secure access to Azure resources.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed

  https://docs.microsoft.com/en-us/azure/active-directory/develop/authentication-scenarios

• Question 287:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has an Azure subscription that contains the following unused resources:

  1. 20 user accounts in Azure Active Directory (Azure AD)

  2. Five groups in Azure AD

  3. 10 public IP addresses

  4. 10 network interfaces

  You need to reduce the Azure costs for the company.

  Solution: You remove the unused network interfaces.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Network interfaces (NICs) in Azure are free unless associated with public IP addresses.

  Unused NICs not attached to VMs do not incur charges, so removing them does not significantly reduce costs.

  The main cost in this scenario comes from unused public IP addresses.

  Incorrect Options:

  Unused user accounts in Azure AD:

  Do not incur subscription charges unless assigned paid licenses.

  Unused groups in Azure AD: Groups themselves do not generate costs.

  Unused public IP addresses: Static public IPs incur charges even when not attached to a VM. Removing them reduces costs.

  References (Microsoft Learn):

  Public IP address pricing

  https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-addresses#pricing

  Azure cost management and billing

  https://learn.microsoft.com/en-us/azure/cost-management-billing/costs/

  References:

  https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations#reduce-costs-by-deleting- or-reconfiguring-idle-virtual-network-gateways

• Question 288:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  azure active directory premium p2 guarantees at least 99.9 percent availability. Yes

• Question 289:

  This question requires that you evaluate the underlined text to determine if it is correct.

  When you are implementing a Software as a Service (SaaS) solution, you are responsible for configuring high availability.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed.
  B. defining scalability rules
  C. installing the SaaS solution
  D. configuring the SaaS solution
  D. configuring the SaaS solution

  ---

  When you are implementing a Software as a Service (SaaS) solution, you are responsible for configuring the SaaS solution. Everything else is managed by the cloud provider.

  SaaS requires the least amount of management. The cloud provider is responsible for managing everything, and the end user just uses the software.

  Software as a service (SaaS) allows users to connect to and use cloud-based apps over the Internet. Common examples are email, calendaring and office tools (such as Microsoft Office 365).

  SaaS provides a complete software solution which you purchase on a pay-as-you-go basis from a cloud service provider. You rent the use of an app for your organization and your users connect to it over the Internet, usually with a web browser. All of the underlying infrastructure, middleware, app software and app data are located in the service provider's data center. The service provider manages the hardware and software and with the appropriate service agreement, will ensure the availability and the

  security of the app and your data as well.

  References:

  https://azure.microsoft.com/en-in/overview/what-is-saas/

  https://docs.microsoft.com/en-gb/learn/modules/principles-cloud-computing/5-types-of-cloud-services

• Question 290:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point

  

  

  Explanation:

  You can nest resource groups. No