Microsoft AZ-900 Online Practice Questions and Exam Preparation

Microsoft AZ-900 Online Questions & Answers

• Question 441:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  Explanation:

  Authentication is the process of establishing the identity of a user or service that wants to access a resource.

• Question 442:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your Azure environment contains multiple Azure virtual machines.

  You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.

  Solution: You modify an Azure firewall.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Reason Why This Answer Is Correct:

  Although Azure Firewall can allow HTTP traffic, modifying it alone does not guarantee that VM1 will be accessible from the Internet.

  To expose a VM over HTTP, ALL of the following must be true:

  The VM must have a Public IP address.

  An NSG (Network Security Group) must allow inbound TCP port 80.

  Traffic must be routed through Azure Firewall.

  The solution only states that Azure Firewall is modified. It does NOT verify:

  That the VM has a public IP address

  That an NSG allows port 80

  That the firewall is in the traffic path

  Because none of those are guaranteed, modifying Azure Firewall alone does not meet the goal.

  Why Azure Firewall Is Not the Correct Answer Here:

  Azure Firewall protects networks when traffic is routed through it.

  However, many VMs are directly exposed using:

  Public IP address

  NSG rules

  For most scenarios, the correct method to allow HTTP access is:

  Assigning a public IP to the VM

  Configuring an NSG to allow inbound TCP port 80

  Microsoft Learn

  References:

  Azure Firewall:

  https://learn.microsoft.com/en-us/azure/firewall/overview

  "Azure Firewall is a managed firewall service that filters traffic when deployed in the network path."

  Network Security Groups:

  https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

  "Network security groups allow or deny inbound and outbound traffic to Azure resources."

  Public IP addresses:

  https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-addresses

  "A public IP allows Azure resources to communicate with the Internet."

• Question 443:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1: Yes

  Azcopy is a command-line utility used to copy blobs or files to or from a storage account.

  AzCopy is a command-line utility that you can use to copy blobs or files to or from a storage account.

  Box 2: No

  Azure Storage Explorer allows you to quickly view all the storage services under your account. You can browse through, read, and edit data stored in those services through a user-friendly graphical interface.

  Box 3: Yes

  Use Azure File Sync to centralize your organization's file shares in Azure Files, while keeping the flexibility, performance, and compatibility of an on-premises file server. Azure File Sync transforms Windows Server into a quick cache of your Azure file share. You can use any protocol that's available on Windows Server to access your data locally, including SMB, NFS, and FTPS. You can have as many caches as you need across the world.

  Reference:

  https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10

  https://learn.microsoft.com/en-us/azure/vs-azure-tools-storage-manage-with-storage-explorer

  https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-deployment-guide

• Question 444:

  You plan to implement a hybrid cloud solution. You need to connect your on-premises datacenter to Azure using a private dedicated circuit. What should you use?

  A. Azure VPN Gateway
  B. Azure Front Door
  C. Azure ExpressRoute
  D. Azure Virtual WAN Hub
  C. Azure ExpressRoute

  ---

  ExpressRoute provides private, dedicated WAN connectivity to Azure. VPN Gateway provides encrypted but public Internet-based connections. Front Door and Virtual WAN serve different roles.

• Question 445:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1: Yes

  The service level agreement (SLA) guaranteed uptime for paid azure services is at least 99.9 percent.

  SLA's vary based on the resource type and the location distribution of the resource. However, the minimum uptime for all Azure services is 99.9 percent.

  Box 2: Yes

  The SLA guaranteed uptime is increased (usually to 99.95 percent) when resources are deployed across multiple regions.

  Box 3: No

  The number of subscriptions is unrelated to uptime SLA's. You can deploy resources to multiple regions under a single subscription or you can have multiple subscriptions with resources deployed to the same region.

  References:

  https://azure.microsoft.com/en-us/support/legal/sla/summary/

• Question 446:

  This question requires that you evaluate the underlined text to determine if it is correct.

  An Azure region contains one or more data centers that are connected by using a low-latency network.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed
  B. Is found in each country where Microsoft has a subsidiary office
  C. Can be found in every country in Europe and the Americas only
  D. Contains one or more data centers that are connected by using a high-latency network
  A. No change is needed

  ---

  A region is a set of data centres deployed within a latency-defined perimeter and connected through a dedicated regional low-latency network.

  Microsoft Azure currently has 55 regions worldwide.

  Regions are divided into Availability Zones. Availability Zones are physically separate locations within an Azure region. Each Availability Zone is made up of one or more datacenters equipped with independent power, cooling, and networking.

  References:

  https://azure.microsoft.com/en-gb/global-infrastructure/regions/

• Question 447:

  HOTSPOT

  To complete the sentence, select the appropriate option in the answer area.

  

  

  Explanation:

  You can configure a lock on a resource group to prevent the accidental deletion of the resource group. The lock applies to everyone, including global administrators. If you want to delete the resource group, the lock must be removed first.

  As an administrator, you may need to lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. You can set the lock level to CanNotDelete or ReadOnly. In the portal, the locks are called Delete and Read-only respectively.

  1. CanNotDelete means authorized users can still read and modify a resource, but they can't delete the resource.

  2. ReadOnly means authorized users can read a resource, but they can't delete or update the resource. Applying this lock is similar to restricting all authorized users to the permissions granted by the Reader role.

  If a resource group named RG1 has a delete lock, the delete lock must be removed before an administrator can delete RG1.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

• Question 448:

  This question requires that you evaluate the underlined text to determine if it is correct.

  If Microsoft plans to end support for an Azure service that does NOT have a successor service, Microsoft will provide notification at least 12 months before.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed.
  B. 6 months
  C. 90 days
  D. 30 days
  A. No change is needed.

  ---

  The Modern Lifecycle Policy covers products and services that are serviced and supported continuously. For products governed by the Modern Lifecycle Policy, Microsoft will provide a minimum of 12 months' notification prior to ending support if no successor product or service is offered--excluding free services or preview releases.

  https://support.microsoft.com/en-us/help/30881

• Question 449:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Microsoft SQL server 2019 installed on an azure virtual machine is an example of platform as a service. No

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-sql/azure-sql-iaas-vs-paas-what-is-overview

  https://www.red-gate.com/simple-talk/cloud/azure/overview-of-azure-cosmos-db

• Question 450:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1: No

  You can only manage cloud services from windows devices.

  Easily manage your Azure storage accounts in the cloud, from Windows, macOS, or Linux, using Azure Storage Explorer.

  Box 2: Yes

  Azure cloud services can be managed in Azure Automation by using the PowerShell cmdlets that are available in the Azure PowerShell tools.

  Box 3: Yes

  Reference:

  https://azure.microsoft.com/en-us/features/storage-explorer/

  https://docs.microsoft.com/en-us/azure/cloud-services/automation-manage-cloud-services