Microsoft AZ-900 Online Practice Questions and Exam Preparation

Microsoft AZ-900 Online Questions & Answers

• Question 411:

  You need to identify which Azure service allows you to register, protect, and manage encryption keys used by cloud applications. What should you use?

  A. Azure Key Vault
  B. Azure Sentinel
  C. Azure AD Identity Protection
  D. Azure Storage Accounts
  A. Azure Key Vault

  ---

  Azure Key Vault securely stores cryptographic keys and secrets with centralized key management. Sentinel and Identity Protection focus on security analytics and identity risk. Storage Accounts store data but not keys.

• Question 412:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  General data protection regulation defines data protechtion and privacy rules. Yes

  Reference:

  https://azure.microsoft.com/en-gb/blog/new-capabilities-to-enable-robust-gdpr-compliance/

• Question 413:

  Your company plans to migrate all its network resources to Azure.

  You need to start the planning process by exploring Azure.

  What should you create first?

  A. a subscription
  B. a resource group
  C. a virtual network
  D. a management group
  A. a subscription

  ---

  The first thing you create in Azure is a subscription. You can think of an Azure subscription as an `Azure account'. You get billed per subscription.

  A subscription is an agreement with Microsoft to use one or more Microsoft cloud platforms or services, for which charges accrue based on either a per-user license fee or on cloud-based resource consumption.

  Microsoft's Software as a Service (SaaS)-based cloud offerings (Office 365, Intune/EMS, and Dynamics 365) charge per-user license fees.

  Microsoft's Platform as a Service (PaaS) and Infrastructure as a Service (IaaS) cloud offerings (Azure) charge based on cloud resource consumption.

  You can also use a trial subscription, but the subscription expires after a specific amount of time or consumption charges. You can convert a trial subscription to a paid subscription. Organizations can have multiple subscriptions for Microsoft's cloud offerings.

  References:

  https://docs.microsoft.com/en-us/office365/enterprise/subscriptions-licenses-accounts-and-tenants-for-microsoft-cloud-offerings

• Question 414:

  HOTSPOT

  From __________________ you can view which user turned off a specific virtual machine during the last 14 days.

  To complete the sentence, select the appropriate option in the answer area.

  

  

  Explanation:

• Question 415:

  You need to identify which Azure service provides a fully managed NoSQL database that automatically scales throughput and storage. What should you use?

  A. Azure SQL Database
  B. Azure Cosmos DB
  C. Azure Database for PostgreSQL
  D. Azure Data Factory
  B. Azure Cosmos DB

  ---

  Azure Cosmos DB is Microsoft's globally distributed, multi-model NoSQL database service. It provides automatic storage scaling, elastic throughput, and global distribution with single-digit millisecond latency. Azure SQL Database and PostgreSQL are relational databases, and Azure Data Factory is an integration service.

• Question 416:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  Explanation:

  Box: Microsoft Defender for Cloud

  Microsoft Defender for Cloud helps streamline the process for meeting regulatory compliance requirements, using the regulatory compliance dashboard.

  You can download PDF/CSV reports as well as certification reports of your compliance status.

  You can view your company's regulatory compliance report from Microsoft defender for cloud.

  Reference:

  https://docs.microsoft.com/en-us/azure/defender-for-cloud/regulatory-compliance-dashboard

• Question 417:

  This question requires that you evaluate the underlined text to determine if it is correct.

  When planning to migrate a public website to Azure, you must plan to pay monthly usage costs.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed
  B. Deploy a VPN
  C. pay to transfer all the website data to Azure
  D. reduce the number of connections to the website
  A. No change is needed

  ---

  Azure uses a pay-as-you-go billing model. When you host a website in Azure, you are charged monthly based on the resources you consume such as compute, storage, and network usage. These are recurring operating expenses.

  The statement is correct because Azure does not charge a single flat migration fee. Costs are accumulated monthly based on how long resources run and how much they are used.

  Incorrect options:

  Deploy a VPN:

  A VPN is used for secure network connectivity. It does not affect hosting costs or billing requirements for a public website.

  Pay to transfer all the website data to Azure:

  Azure generally does not charge for inbound data transfers. There is no one-time mandatory data upload fee that replaces monthly usage costs.

  Reduce the number of connections to the website:

  Traffic volume does not change Azure's billing model. Charges are still usage-based even if traffic is reduced.

  REFERENCES (Microsoft Learn): Understand Azure pricing and billing

  https://learn.microsoft.com/en-us/azure/cost-management-billing/understand/understand-billing

  Overview of Azure Cost Management and Billing

  https://learn.microsoft.com/en-us/azure/cost-management-billing/cost-management-billing-overview

  Azure pricing model (pay-as-you-go explanation)

  https://learn.microsoft.com/en-us/azure/architecture/framework/cost/overview

  Inbound and outbound data transfer charges

  https://learn.microsoft.com/en-us/azure/storage/blobs/blob-storage-costs

• Question 418:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  You can create Group Polices in azure active directory. Yes

• Question 419:

  Which Azure tool allows you to create dashboards to visualize metrics and logs from multiple Azure services?

  A. Azure Monitor Workbooks
  B. Azure Policy
  C. Azure Arc
  D. Azure Migrate
  A. Azure Monitor Workbooks

  ---

  Workbooks offer customizable dashboards for metrics/log analytics. Azure Policy enforces rules. Azure Arc manages hybrid environments. Azure Migrate assists with migration planning.

• Question 420:

  DRAG DROP

  Match the security components to the appropriate defense in depth layers.

  To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.

  NOTE: Each correct match is worth one point

  Select and Place:

  

  

  Explanation: