Microsoft AZ-900 Online Practice Questions and Exam Preparation

Microsoft AZ-900 Online Questions & Answers

• Question 31:

  You need to store large volumes of unstructured JSON data and query it using NoSQL APIs. What should you use?

  A. Azure Cosmos DB
  B. Azure SQL Managed Instance
  C. Azure Table Storage
  D. Azure Synapse Analytics
  A. Azure Cosmos DB

  ---

  Cosmos DB natively supports NoSQL models such as document (JSON), key-value, and graph. Table Storage is NoSQL but limited in features. SQL services do not support NoSQL APIs.

• Question 32:

  What is a feature of an Azure virtual network?

  A. resource cost analysis
  B. packet inspection
  C. geo-redundancy
  D. isolation and segmentation
  D. isolation and segmentation

  ---

  Implement network segmentation patterns on Azure.

  A unified enterprise segmentation strategy guides technical teams to consistently segment access using networking, applications, identity, and any other access controls. Create segmentation in your network footprint by defining perimeters.

  The main reasons for segmentation are:

  The ability to group related assets that are a part of (or support) workload operations.

  Isolation of resources.

  Governance policies set by the organization.

  https://docs.microsoft.com/en-us/azure/architecture/framework/security/design-network-segmentation

• Question 33:

  HOTSPOT

  After you create a virtual machine, you need to modify the ______________________ to allow connections to TCP port 8080 on the virtual machine.

  Select the answer that correctly completes the sentence.

  

  

  Explanation:

• Question 34:

  You plan to provision Infrastructure as a Service (IaaS) resources in Azure.

  Which resource is an example of IaaS?

  A. an Azure web app
  B. an Azure virtual machine
  C. an Azure logic app
  D. an Azure SQL database
  B. an Azure virtual machine

  ---

  IaaS provides virtualized computing resources over the cloud.

  Users manage the OS, installed software, and networking configuration.

  Azure virtual machines allow configuration of CPU, memory, storage, and networking while Microsoft manages the physical infrastructure.

  Incorrect Options:

  Azure web app:

  PaaS service (Azure App Service). Microsoft manages OS, runtime, and scaling; users only manage application code.

  Azure logic app:

  Serverless / PaaS workflow automation service; no infrastructure management required by users.

  Azure SQL database:

  PaaS managed database; Microsoft manages OS, database engine, patching, and backups.

  References (Microsoft Learn):

  Azure IaaS overview

  https://learn.microsoft.com/en-us/azure/virtual-machines/overview

  Azure App Service overview (PaaS)

  https://learn.microsoft.com/en-us/azure/app-service/overview

  Azure Logic Apps overview

  https://learn.microsoft.com/en-us/azure/logic-apps/logic-apps-overview

  Azure SQL Database overview

  https://learn.microsoft.com/en-us/azure/azure-sql/database/sql-database-paas-overview

  References:

  https://azure.microsoft.com/en-gb/overview/what-is-iaas/

  https://azure.microsoft.com/en-gb/overview/what-is-paas/

• Question 35:

  HOTSPOT

  You have an Azure environment that contains 10 web apps.

  To which URL should you connect to manage all the Azure resources? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  The Azure portal is a web-based management interface where you can view and manage all your Azure resources in one unified hub, including web apps, databases, virtual machines, virtual networks, storage and Visual Studio team projects. The URL of the Azure portal is

  https://portal.azure.com.

  References:

  https://azure.microsoft.com/en-gb/features/azure-portal/

• Question 36:

  You need to start Azure Cloud Shell.

  What should you use?

  A. the Azure portal
  B. Azure Command-Line Interface (CLI)
  C. Azure PowerShell
  D. an Azure Resource Manager (ARM) template
  A. the Azure portal

  ---

  Azure Cloud Shell:

  Azure Cloud Shell is an interactive, browser-accessible shell for managing Azure resources. You start it directly from the Azure portal by clicking the Cloud Shell

  icon. It provides both Bash and PowerShell environments with Azure tools pre-installed and authenticated.

  Why the other answers are incorrect

  Azure Command-Line Interface (CLI):

  The Azure CLI is a command-line tool that you can run locally or in Cloud Shell, but it is not used to start Cloud Shell itself. Cloud Shell can include Azure CLI, but starting it is done through the portal.

  Azure PowerShell:

  Azure PowerShell is a module that allows management of Azure resources using PowerShell commands. It can run inside Cloud Shell, but it does not start Cloud Shell.

  Azure Resource Manager (ARM) template:

  ARM templates are used to automate the deployment of Azure resources. They do not provide a method to start Cloud Shell.

  Microsoft Learn References (Verified and Working)

  Azure Cloud Shell overview:

  https://learn.microsoft.com/en-us/azure/cloud-shell/overview

  https://docs.microsoft.com/en-us/azure/cloud-shell/quickstart

• Question 37:

  Fill in the blank

  Azure distributed denial of service (DDoS) protection is an example of protection that is implemented at the (_______________________).

  networking layer

• Question 38:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your Azure environment contains multiple Azure virtual machines.

  You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.

  Solution: You modify a DDoS protection plan.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Reason (Why this is incorrect): Azure DDoS Protection is a security service that protects against Distributed Denial of Service (DDoS) attacks.-It does NOT control inbound network access or open ports.-Enabling or modifying DDoS protection will not allow traffic on TCP port 80 (HTTP).-To allow HTTP access, you must configure inbound rules using: a Network Security Group (NSG), or- Azure Firewall, or- an Application Gateway with proper listener rules.

  Correct Method to Meet the Goal:

  To ensure VM1 is accessible over HTTP:

  Add an inbound rule allowing TCP port 80 in an NSG attached to the VM or subnet, OR

  Add a firewall rule in Azure Firewall allowing inbound HTTP traffic.

  Why DDoS Protection is not the correct solution:

  It mitigates attacks, but does not manage traffic rules or routing.

  It does not expose services to the Internet.

  It does not open ports.

  References (Microsoft Learn / Azure Documentation):

  Azure DDoS Protection overview:

  https://learn.microsoft.com/azure/ddos-protection/ddos-protection-overview

  Allow network traffic using a Network Security Group:

  https://learn.microsoft.com/azure/virtual-network/network-security-groups-overview

  Azure Firewall rules overview:

  https://learn.microsoft.com/azure/firewall/rule-processing

  Open port 80 on a VM (NSG example):

  https://learn.microsoft.com/azure/virtual-machines/windows/nsg-quickstart-portal

  References:

  https://docs.microsoft.com/en-us/azure/virtual-network/ddos-protection-overview

• Question 39:

  HOTSPOT

  ________________ supports synchronization between on-premises storage and azure storage.

  Select the answer that correctly completes the sentence.

  

  

  Explanation:

  Box: Azure Files

  If you want to reduce your dependency on physical servers and hardware, avoid costly maintenance and upgrades, and improve performance, you can use Azure File Sync to sync your on-premises servers to the Cloud. Azure File Sync allows you to centralize your on-premises file shares in the Azure Files while keeping your Windows file server's compatibility, flexibility, and performance.

  Reference:

  https://www.360visibility.com/how-to-use-azure-file-sync-to-sync-your-on-premises-servers-to-the-cloud

• Question 40:

  This question requires that you evaluate the underlined text to determine if it is correct.

  Azure Advisor generates recommendations for cost optimization, reliability, performance, and security.

  Instructions: Review the underlined text.

  A. No change is needed
  B. cost only
  C. performance only
  D. security only
  A. No change is needed

  ---

  Azure Advisor provides recommendations in four categories: cost, security, reliability, and performance.