Microsoft AZ-900 Online Practice Questions and Exam Preparation

Microsoft AZ-900 Online Questions & Answers

• Question 431:

  HOTSPOT

  You need to view a list of planned maintenance events that can affect the availability of an Azure subscription.

  Which blade should you use from the Azure portal? To answer, select the appropriate blade in the answer area.

  

  

  Explanation:

  On the Help and Support blade, there is a Service Health option. If you click Service Health, a new blade opens. The Service Health blade contains the Planned Maintenance link which opens a blade where you can view a list of planned maintenance events that can affect the availability of an Azure subscription.

• Question 432:

  You need to recommend a solution for long-term, cost-effective storage of 50 TB of compliance data. The data must remain accessible within several hours upon request. What should you recommend?

  A. Azure Blob Storage -- Hot tier
  B. Azure Blob Storage -- Cool tier
  C. Azure Blob Storage -- Archive tier
  D. Azure Files
  C. Azure Blob Storage -- Archive tier

  ---

  Archive tier is designed for long-term retention with minimal cost. Data retrieval takes hours, which matches the requirement. Hot and Cool tiers provide faster access at higher cost. Azure Files is not the most cost-effective for archival.

• Question 433:

  HOTSPOT

  You need to create a new Azure file share.

  What should you use? To answer, select the service in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1: Storage accounts Create an Azure file share

  1. Select Storage accounts, and the select one of the Storage accounts.

  

  2. Select File shares from the storage account pane.

  3. Select + File Share.

  4. Name the new file share..

  5. Etc.

  Reference:

  https://learn.microsoft.com/en-us/azure/storage/files/storage-files-quick-create-use-windows

• Question 434:

  You need to compare a company's cloud usage to industry standard best practices.

  What should you use?

  A. Azure Monitor
  B. Azure Service Health
  C. Application Insights in Azure Monitor
  D. Azure Advisor
  D. Azure Advisor

• Question 435:

  DRAG DROP

  Match the term to the appropriate description.

  To answer, drag the appropriate term from the column on the left to its description on the right. Each term may be used once, more than once, or not at all.

  NOTE: Each correct match is worth one point.

  Select and Place:

  

  

  Explanation:

• Question 436:

  What can Azure Information Protection encrypt?

  A. network traffic
  B. documents and email messages
  C. an Azure Storage account
  D. an Azure SQL database
  B. documents and email messages

  ---

  Azure Information Protection can encrypt documents and emails. Azure Information Protection is a cloud-based solution that helps an organization to classify and optionally, protect its documents and emails by applying labels. Labels can be applied automatically by administrators who define rules and conditions, manually by users, or a combination where users are given recommendations.

  The protection technology uses Azure Rights Management (often abbreviated to Azure RMS). This technology is integrated with other Microsoft cloud services and applications, such as Office 365 and Azure Active Directory.

  This protection technology uses encryption, identity, and authorization policies. Similarly to the labels that are applied, protection that is applied by using Rights Management stays with the documents and emails, independently of the location--inside or outside your organization, networks, file servers, and applications.

  References: https://docs.microsoft.com/en-us/azure/information-protection/what-is-information-protection https://docs.microsoft.com/en-us/azure/information-protection/quickstart-label-dnf-protectedemail

• Question 437:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  An azure service in private preview is released to all azure customers. No

• Question 438:

  You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted automatically to change their password.

  Which Azure service should you use?

  A. Azure AD Connect Health
  B. Azure AD Privileged Identity Management
  C. Azure Advanced Threat Protection (ATP)
  D. Azure AD Identity Protection
  D. Azure AD Identity Protection

  ---

  Azure AD Identity Protection includes two risk policies: sign-in risk policy and user risk policy. A sign-in risk represents the probability that a given authentication request isn't authorized by the identity owner.

  There are several types of risk detection. One of them is Anonymous IP Address. This risk detection type indicates sign-ins from an anonymous IP address (for example, Tor browser or anonymous VPN). These IP addresses are typically used by actors who want to hide their login telemetry (IP address, location, device, etc.) for potentially malicious intent.

  You can configure the sign-in risk policy to require that users change their password.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-risk-policy

  https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks

• Question 439:

  HOTSPOT

  If windows server or microsoft sql server licenses are covered by _______________ , you can repurpose the licenses on azure virtual machines.

  Select the answer that correctly completes the sentence.

  

  

  Explanation:

  Box: Software Assurance

  New Software Assurance benefit and terms to support hosted solutions

  The changes outlined in the announcement will impact partners and customers in the following ways. These changes don’t apply to Listed Providers:

  Introducing a new Software Assurance benefit that also applies to eligible subscriptions, to allow customers to virtualize their existing server software subscriptions when they choose to move to the cloud. Customers can virtualize Windows Server, similar to how customers can do so on Azure, with any cloud provider (excluding Listed Providers), whether they have shared or dedicated tenancy.

  Etc.

  Incorrect:

  Windows Server licenses are not eligible for License Mobility through Software Assurance, but customers licensing Windows Server with Software Assurance can utilize the Azure Hybrid Benefit for a cheaper per-minute cost when running a Windows Virtual Machine.

  Reference:

  https://www.microsoft.com/en-us/licensing/news/new-software-assurance-benefit-to-support-hosting-from-third-party-providers

• Question 440:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You plan to deploy several Azure virtual machines.

  You need to ensure that the services running on the virtual machines are available if a single data center fails.

  Solution: You deploy the virtual machines to two or more scale sets.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  This answer does not specify that the scale set will be configured across multiple data centers so this solution does not meet the goal.

  Azure virtual machine scale sets let you create and manage a group of load balanced VMs. The number of VM instances can automatically increase or decrease in response to demand or a defined schedule. Scale sets provide high availability to your applications, and allow you to centrally manage, configure, and update many VMs.

  Virtual machines in a scale set can be deployed across multiple update domains and fault domains to maximize availability and resilience to outages due to data center outages, and planned or unplanned maintenance events.

  https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/availability