Microsoft AZ-900 Online Practice Questions and Exam Preparation

Microsoft AZ-900 Online Questions & Answers

• Question 21:

  HOTSPOT

  After you create a virtual machine, you need to modify the ___________________ to alllow connections to tcp port 8080 on the virtual machine.

  To complete the sentence, select the appropriate option in the answer area.

  

  

  Explanation:

  When you create a virtual machine, the default setting is to create a Network Security Group attached to the network interface assigned to a virtual machine.

  A network security group works like a firewall. You can attach a network security group to a virtual network and/or individual subnets within the virtual network. You can also attach a network security group to a network interface assigned to a virtual machine. You can use multiple network security groups within a virtual network to restrict traffic between resources such as virtual machines and subnets.

  You can filter network traffic to and from Azure resources in an Azure virtual network with a network security group. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources.

  In this question, we need to add a rule to the network security group to allow the connection to the virtual machine on port 8080.

  Reference:

  https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

• Question 22:

  HOTSPOT

  You plan to create an Azure virtual machine.

  You need to identify which storage service must be used to store the unmanaged data disks of the virtual machine.

  What should you identify? To answer, select the appropriate service in the answer area.

  

  

  Explanation:

  Azure containers are the backbone of the virtual disks platform for Azure IaaS. Both Azure OS and data disks are implemented as virtual disks where data is durably persisted in the Azure Storage platform and then delivered to the virtual machines for maximum performance. Azure Disks are persisted in Hyper-V VHD format and stored as a page blob in Azure Storage.

  References:

  https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-pageblob-overview

• Question 23:

  Your company is planning a deployment using Azure Database for PostgreSQL. The deployment should meet the following requirements:

  1. Up to 10 TB storage

  2. Azure Premium Storage

  3. Point-in-time-restore for up to 35 days

  You need to select the appropriate deployment and pricing tier to meet these requirements and minimize costs. What should you select?

  A. Azure Database for PostgreSQL Single Server Memory Optimized tier
  B. Azure Database for PostgreSQL Hyperscale (Citus)
  C. Azure Database for PostgreSQL Single Server General Purpose tier
  D. Azure Database for PostgreSQL Single Server Basic tier
  C. Azure Database for PostgreSQL Single Server General Purpose tier

  ---

  1.Storage: Supports up to 16 TiB, sufficient for 10 TB.

  2.Premium Storage: Uses Premium SSD/v2.

  3.PITR: Supports backup retention up to 35 days.-Minimizes costs compared to Memory Optimized and Hyperscale (Citus) tiers.

  1. Azure Database for PostgreSQL Single Server Memory Optimized tier:

  Meets technical requirements (storage, Premium SSD, 35-day PITR).

  Fails the cost requirement: more expensive than General Purpose, so not optimal for minimizing costs.

  2. Azure Database for PostgreSQL Single Server Basic tier:

  Storage limitation: Maximum 1 TB, far below 10 TB requirement.

  Storage type: Standard storage, does not meet Premium SSD requirement.

  PITR limitation: Only 7 days, insufficient for the required 35 days.-Conclusion: Fails all three technical requirements.

  3. Azure Database for PostgreSQL Hyperscale (Citus)): Meets storage and PITR requirements.

  Cost: Designed for distributed workloads, significantly more expensive than General Purpose.

  Overkill for single-server deployment; fails the "minimize costs" objective.

  References (Microsoft Learn): Flexible Server compute tiers https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/concepts-compute Flexible Server storage limits https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/concepts-limits Flexible Server storage concepts https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/concepts-storage

• Question 24:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  Explanation:

  Box: Azure status

  Azure status provides a health overview of azure services and regions.

  The Azure status page is a global view of the health of all Azure services in all regions. It's a quick reference for incidents with widespread impact. Service Health keeps you informed about the health of your environment.

  Incorrect:

  * Azure Service Health

  Azure Service Health is a suite of experiences that provide personalized guidance and support when issues in Azure services are or may affect you in the future. Azure Service Health is composed of Azure status, the service health service, and Resource Health.

  Azure status provides a health overview of azure services and regions.

  Reference:

  https://azure.microsoft.com/en-us/get-started/azure-portal/service-health

• Question 25:

  This question requires that you evaluate the underlined text to determine if it is correct.

  A support plan solution that gives you best practice information, health status and notifications, and 24/7 access to billing information at the lowest possible cost is a Standard support plan.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed
  B. Developer
  C. Basic
  D. Premier
  C. Basic

  ---

  A basic support plan provides:

  1. 24x7 access to billing and subscription support, online self-help, documentation, whitepapers, and support forums

  2. Best practices: Access to full set of Azure Advisor recommendations

  3. Health Status and Notifications: Access to personalized Service Health Dashboard and Health API

  References: https://azure.microsoft.com/en-us/support/plans/

• Question 26:

  DRAG DROP

  Match the Azure service to the correct definition.

  Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.

  NOTE: Each correct match is worth one point.

  Select and Place:

  

  

  Explanation:

  Box 1: Azure DevOps.

  Azure DevOps is Microsoft's primary software development and deployment platform.

  DevOps influences the application lifecycle throughout its plan, develop, deliver and operate phases.

  Box 2: Azure Advisor.

  Advisor is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments. It analyzes your resource configuration and usage telemetry and then recommends solutions that can help you improve the cost effectiveness, performance, high availability, and security of your Azure resources.

  Box 3: Azure Cognitive Services.

  Azure Cognitive Services are APIs, SDKs, and services available to help developers build intelligent applications without having direct AI or data science skills or knowledge. Azure Cognitive Services enable developers to easily add cognitive features into their applications. The goal of Azure Cognitive Services is to help developers create applications that can see, hear, speak, understand, and even begin to reason. The catalog of services within Azure Cognitive Services can be categorized into five main

  pillars Vision, Speech, Language, Web Search, and Decision.

  Box 4. Azure Application Insights.

  Azure Application Insights detects and diagnoses anomalies in web apps.

  Application Insights, a feature of Azure Monitor, is an extensible Application Performance Management (APM) service for developers and DevOps professionals. Use it to monitor your live applications. It will automatically detect performance anomalies, and includes powerful analytics tools to help you diagnose issues and to understand what users actually do with your app.

  References:

  https://docs.microsoft.com/en-us/azure/azure-monitor/app/app-insights-overview

  https://azure.microsoft.com/en-gb/overview/what-is-devops/

  https://docs.microsoft.com/en-us/azure/advisor/advisor-overview

  https://docs.microsoft.com/en-us/azure/cognitive-services/welcome

• Question 27:

  You need to ensure that developers can deploy resources only in the East US and West US regions. What should you use?

  A. Azure RBAC
  B. Azure Policy
  C. Resource locks
  D. Tags
  B. Azure Policy

  ---

  Azure Policy can restrict allowed locations for deployments. RBAC controls permissions, not allowed regions. Locks prevent deletion/modification. Tags do not enforce restrictions.

• Question 28:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1: No

  All the azure resources deployed to a resource group must use the same azure region.

  Azure resources deployed to a single resource group can be located in different regions. The resource group only contains metadata about the resources it contains.

  When creating a resource group, you need to provide a location for that resource group. You may be wondering, "Why does a resource group need a location? And, if the resources can have different locations than the resource group, why does the resource group location matter at all?" The resource group stores metadata about the resources. When you specify a location for the resource group, you're specifying where that metadata is stored. For compliance reasons, you may need to ensure that your data is stored in a particular region.

  Box 2: No

  Tags for Resources are not inherited by default from their Resource Group

  Box 3: Yes

  A resource group can be used to scope access control for administrative actions. By default, permissions set at the resource level are inherited by the resources in the resource group.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-overview

• Question 29:

  This question requires that you evaluate the underlined text to determine if it is correct.

  Azure Cosmos DB is an example of a platform as a service (PaaS) offering.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed." If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed
  B. infrastructure as a service (IaaS)
  C. serverless
  D. software as a service (SaaS)
  A. No change is needed

  ---

  Azure Cosmos DB is a fully managed, globally distributed database service.

  It abstracts infrastructure management (servers, patching, scaling), which aligns with PaaS.

  Users manage the data and application logic only, not the underlying OS or infrastructure.

  Incorrect Options:

  Infrastructure as a Service (IaaS):

  IaaS provides VMs, storage, and networking where users manage the OS and software. Azure Cosmos DB does not require OS or VM management.

  Serverless:

  Serverless is a billing or execution model, not a service type. Cosmos DB is fundamentally PaaS.

  Software as a Service (SaaS):

  SaaS provides a fully functional application to end users. Cosmos DB is a database platform, not an application.

  References (Microsoft Learn):

  Azure Cosmos DB overview

  https://learn.microsoft.com/en-us/azure/cosmos-db/introduction

  Cloud computing service types (IaaS, PaaS, SaaS)

  https://learn.microsoft.com/en-us/azure/architecture/cloud-adoption/technical-guidance/choose-service-type

• Question 30:

  HOTSPOT

  Premium block blobs storage accounts only support: __________________

  Select the answer that correctly completes the sentence.

  

  

  Explanation: