Microsoft AZ-900 Online Practice Questions and Exam Preparation

Microsoft AZ-900 Online Questions & Answers

• Question 291:

  HOTSPOT

  You have an azure virtual network named VNET1 in a resource group named RG1.

  You assign the azure policy definition of not allowed resource type and specify that virtual networks are not an allowed resource type in RG1. VNET1: __________

  To complete the sentence, select the appropriate option in the answer area.

  

  

  Explanation:

  The VNet will be marked as 'Non-compliant' when the policy is assigned. However, it will not be deleted and will continue to function normally.

  Azure Policy is a service in Azure that you use to create, assign, and manage policies. These policies enforce different rules and effects over your resources, so those resources stay compliant with your corporate standards and service level agreements.

  If there are any existing resources that aren't compliant with a new policy assignment, they appear under Non-compliant resources.

  Reference:

  https://docs.microsoft.com/en-us/azure/governance/policy/overview

  https://docs.microsoft.com/en-us/azure/governance/policy/assign-policy-portal

• Question 292:

  You plan to migrate a web application to Azure. The web application is accessed by external users.

  You need to recommend a cloud deployment solution to minimize the amount of administrative effort used to manage the web application.

  What should you include in the recommendation?

  A. Software as a Service (SaaS)
  B. Platform as a Service (PaaS)
  C. Infrastructure as a Service (IaaS)
  D. Database as a Service (DaaS)
  B. Platform as a Service (PaaS)

  ---

  PaaS provides a fully managed environment for developing, deploying, and running applications without the need to manage underlying infrastructure such as servers, storage, or networking.

  By using PaaS for the web application, administrative effort is minimized because Azure handles operating system updates, scalability, and maintenance.-Other options:

  "Software as a Service (SaaS)" . Incorrect. SaaS delivers ready-to-use applications, but this is typically for end-user applications like Office 365, not custom web applications.

  "Infrastructure as a Service (IaaS)" . Incorrect. IaaS requires managing virtual machines, OS updates, and networking, which increases administrative effort.

  "Database as a Service (DaaS)" . Incorrect. DaaS provides managed database services only; it does not include the web application environment.

  References: Microsoft Learn:

  https://learn.microsoft.com/en-us/azure/architecture/cloud-adoption/technical-guidance/overview-cloud-models

  "Platform as a Service (PaaS) provides a platform allowing customers to develop, run, and manage applications without the complexity of building and maintaining the underlying infrastructure."-Microsoft Learn:

  https://learn.microsoft.com/en-us/azure/app-service/overview

  "Azure App Service is a PaaS offering that lets you quickly build, deploy, and scale web apps and APIs without managing the underlying infrastructure."

  References:

  https://docs.microsoft.com/en-us/azure/security/fundamentals/paas-applications-using-app-services

• Question 293:

  DRAG DROP

  Match the Azure service to the correct description.

  Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 294:

  This question requires that you evaluate the underlined text to determine if it is correct.

  You can create an Azure support request from support.microsoft.com.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed." If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed.
  B. the Azure portal
  C. the Knowledge Center
  D. the Security and Compliance admin center
  B. the Azure portal

  ---

  Azure support requests are created from inside the Azure portal.

  The portal allows you to: Select a subscription-Attach the affected resource-Choose the issue category-Track request status

  The website support.microsoft.com does not create Azure technical support tickets.

  Incorrect options:

  No change is needed:

  Incorrect because Azure support requests are not created from support.microsoft.com.

  The Knowledge Center:

  Not an official Microsoft support tool for Azure.

  The Security and Compliance admin center:

  Used for Microsoft 365 security and compliance, not Azure support cases.

  REFERENCES (Microsoft Learn):

  Create an Azure support request

  https://learn.microsoft.com/en-us/azure/azure-portal/supportability/how-to-create-azure-support-request

  Azure portal overview

  https://learn.microsoft.com/en-us/azure/azure-portal/azure-portal-overview

  Get help with Azure documentation and support

  https://learn.microsoft.com/en-us/azure/developer/azure-developer-guide/resources/support

  References:

  https://docs.microsoft.com/en-us/azure/azure-supportability/how-to-create-azure-support-request

• Question 295:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Public Preview means that the service is in public beta and can be tried out by anyone with an Azure subscription. Services in public preview are often offered at a discount price.

  Box 1: No

  All azure services in private preview must be accessed by using a separate azure portal.

  Services in private preview can be viewed in the regular Azure portal. However, you need to be signed up for the feature in private preview before you can view it. Access to private preview features is usually by invitation only.

  Box 2: Yes

  You can use services in public preview in production environments. However, you should be aware that the service may have faults, is not subject to an SLA and may be withdrawn without notice.

  Box 3: No

  Public previews are excluded from SLAs and in some cases, no support is offered.

  References:

  https://www.neowin.net/news/several-more-azure-services-now-available-in-private-public-preview/

• Question 296:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company plans to migrate all its data and resources to Azure.

  The company's migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure.

  You need to deploy an Azure environment that supports the planned migration.

  Solution: You create an Azure App Service and Azure Storage accounts.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Azure App Service is a PaaS web-hosting service that runs applications without managing virtual machines or operating systems.

  Azure Storage is also a PaaS service that provides fully managed storage services.

  Both services are managed by Microsoft and do not require infrastructure management.

  Since no IaaS services (such as virtual machines) are used, the solution complies with the PaaS-only policy.

  Incorrect solutions would include:

  Azure Virtual Machines

  Self-managed databases

  Custom operating systems

  All of these would violate the PaaS-only requirement.

  REFERENCES (Microsoft Learn):

  Azure App Service overview

  https://learn.microsoft.com/en-us/azure/app-service/overview

  Azure Storage introduction

  https://learn.microsoft.com/en-us/azure/storage/common/storage-introduction

  PaaS definition and examples

  https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/strategy/cloud-service-models

  IaaS vs PaaS vs SaaS (comparison guide)

  https://learn.microsoft.com/en-us/azure/architecture/framework/technology-choices/compute-decision-tree

• Question 297:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1: Yes

  The hot access tier is available for blob data that uses standard storage.

  Azure storage offers different access tiers so that you can store your blob data in the most cost-effective manner based on how it's being used. Azure Storage access tiers include:

  Hot tier

  Cool tier

  Cold tier

  Archive tier

  Box 2: No

  Box 3: Yes

  Set the default access tier for a storage account

  The default access tier setting for a general-purpose v2 storage account determines in which online tier a new blob is created by default. You can set the default access tier for a general-purpose v2 storage account at the time that you create the account or by updating an existing account's configuration.

  Reference:

  https://learn.microsoft.com/en-us/azure/storage/blobs/access-tiers-overview

  https://learn.microsoft.com/en-us/azure/storage/blobs/access-tiers-online-manage

• Question 298:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You plan to deploy several Azure virtual machines.

  You need to ensure that the services running on the virtual machines are available if a single data center fails.

  Solution: You deploy the virtual machines to two or more availability zones.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Azure Availability Zones are physically separate locations within an Azure region, each with independent power, networking, and cooling.

  Deploying VMs across multiple availability zones protects applications and services from a single data center failure (also called a single point of failure).

  This design provides high availability for Azure virtual machines and ensures service continuity if one zone goes offline.

  Microsoft recommends using Availability Zones for mission-critical workloads that require high SLA uptime.

  References (Microsoft Learn-verified working):

  Azure Availability Zones overview:

  https://learn.microsoft.com/azure/availability-zones/az-overview

  Virtual machines and availability zones:

  https://learn.microsoft.com/azure/virtual-machines/availability-zones-overview

  Reasons why other deployment options are less suitable:

  Deploying all VMs in a single availability zone: Does not protect against a single data center failure.

  Deploying across multiple regions: Adds geo-redundancy but increases complexity and latency.

  Using a single Availability Set (within one zone): Protects against hardware failures within a data center, but not a full data center outage.

  https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/availability

• Question 299:

  Fill in the blank

  Requiring a user to enter a password and answer a security question when signing-in to Azure Active Directory (Azure AD) is an example of ________________

  multi-factor authentication(MFA)

• Question 300:

  Your company has an Azure environment that contains resources in several regions.

  A company policy states that administrators must only be allowed to create additional Azure resources in a region in the country where their office is located.

  You need to create the Azure resource that must be used to meet the policy requirement.

  What should you create?

  A. a read-only lock
  B. an Azure policy
  C. a management group
  D. a reservation
  B. an Azure policy

  ---

  Azure policies can be used to define requirements for resource properties during deployment and for already existing resources. Azure Policy controls properties such as the types or locations of resources.

  Azure Policy is a service in Azure that you use to create, assign, and manage policies. These policies enforce different rules and effects over your resources, so those resources stay compliant with your corporate standards and service level agreements. Azure Policy meets this need by evaluating your resources for non-compliance with assigned policies. All data stored by Azure Policy is encrypted at rest.

  Azure Policy offers several built-in policies that are available by default. In this question, we would use the `Allowed Locations' policy to define the locations where resources can be deployed.

  References: https://docs.microsoft.com/en-us/azure/governance/policy/overview