Microsoft AZ-900 Online Practice Questions and Exam Preparation

Microsoft AZ-900 Online Questions & Answers

• Question 451:

  To what should an application connect to retrieve security tokens?

  A. an Azure Storage account
  B. Azure Active Directory (Azure AD)
  C. a certificate store
  D. an Azure key vault
  B. Azure Active Directory (Azure AD)

  ---

  Reason (Why this is correct):

  Azure Active Directory is Microsoft's cloud identity provider.

  Applications authenticate against Azure AD to receive security tokens (OAuth 2.0, OpenID Connect, SAML).

  Azure AD issues tokens after verifying user or application identity.

  These tokens are used to access protected Azure resources and APIs securely.

  Why other answers are incorrect:

  Azure Storage account:

  Provides data storage services.

  Does not issue authentication or authorization tokens for identity.

  A certificate store:

  Stores certificates and encryption keys.

  Does not generate or issue security tokens.

  Azure Key Vault:

  Used to securely store secrets, certificates, and keys.

  Does NOT issue authentication tokens.

  It can protect credentials but does not act as an identity provider.

  References (Microsoft Learn - verified working):

  Azure AD identity and access management:

  https://learn.microsoft.com/azure/active-directory/fundamentals/active-directory-whatis

  How Azure AD issues tokens:

  https://learn.microsoft.com/azure/active-directory/develop/v2-oauth2-auth-code-flow

  Authentication vs Authorization in Azure AD:

  https://learn.microsoft.com/azure/active-directory/develop/authentication-scenarios

  About Azure Key Vault:

  https://learn.microsoft.com/azure/key-vault/general/overview

  https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-v2-protocols

  https://learn.microsoft.com/en-us/azure/active-directory/develop/access-tokens

• Question 452:

  DRAG DROP

  Match the Azure service to the correct description.

  Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  Explanation:

  Box 1 Azure Container Instances "A container virtualizes the underlying OS and causes the containerized app to perceive that it has the OS." Source: https://azure.microsoft.com/en-us/overview/what-is-a-container/ Note: Virtual Machines virtualize underlying hardware not the OS! so that multiple operating system (OS) instances can run on the hardware. Box 2 Azure Virtual Machines "Another application of the VM is to provide the property of machine independence. This form, called application (or process) virtualization, creates an abstracted environment (for an application), making it independent of its physical environment. In addition to creating a portable environment in which to execute the object code, application virtualization provides an environment in which to isolate the VM from other applications running on the host." Source: https://www.ibm.com/developerworks/library/l-virtual-machine-architectures/index.html Box 3 Azure App Service Box 4 Azure Functions

• Question 453:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company plans to migrate all its data and resources to Azure.

  The company's migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure.

  You need to deploy an Azure environment that supports the planned migration.

  Solution: You create an Azure App Service and Azure SQL databases.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Azure App Servic.

  Azure App Service is a Platform as a Service (PaaS) offering.-Microsoft manages the operating system, patching, scaling, and infrastructure.-Users only manage application code and configuration. Microsoft Learn Reference:

  https://learn.microsoft.com/en-us/azure/app-service/overview

  "Azure App Service is a fully managed platform for building, deploying, and scaling web apps."

  Azure SQL Database-Azure SQL Database is a PaaS database service.-Microsoft manages the database engine, backups, patching, and availability.

  Microsoft Learn Reference:

  https://learn.microsoft.com/en-us/azure/azure-sql/database/sql-database-paas-overview

  "Azure SQL Database is a fully managed Platform as a Service (PaaS) database engine."

  Why the Solution Meets the Goal: Both services (Azure App Service and Azure SQL Database) are PaaS.-No Virtual Machines or infrastructure management is required.-The solution complies with the policy requiring PaaS-only deployment.

  Why This Is NOT an IaaS or SaaS Solution:

  Not IaaS:

  No virtual machines are deployed.

  No operating systems are managed by customers.

  Not SaaS: The services are not complete applications delivered to users.-They are platforms used to build applications.

• Question 454:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  With a consumption-based plan, you pay a fixed rate for all data sent to or from virtual machines hosted in the cloud. No

• Question 455:

  Which two types of customers are eligible to use Azure Government to develop a cloud solution? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. a Canadian government contractor
  B. a European government contractor
  C. a United States government entity
  D. a United States government contractor
  E. a European government entity
  C. a United States government entity
  D. a United States government contractor

  ---

  Azure Government is a cloud environment specifically built to meet compliance and security requirements for US government. This mission-critical cloud delivers breakthrough innovation to U.S. government customers and their partners. Azure Government applies to government at any level -- from state and local governments to federal agencies including Department of Defense agencies.

  The key difference between Microsoft Azure and Microsoft Azure Government is that Azure Government is a sovereign cloud. It's a physically separated instance of Azure, dedicated to U.S. government workloads only. It's built exclusively for government agencies and their solution providers.

  References: https://docs.microsoft.com/en-us/learn/modules/intro-to-azure-government/2-what-is-azure-government

• Question 456:

  Fill in the blank

  (______________________) in Azure Firewall enables users on the internet to access a server on a virtual network.

  Network Address Translation(NAT) rules

• Question 457:

  You have an Azure web app.

  You need to manage the settings of the web app from an iPhone.

  What are two Azure management tools that you can use? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Azure CLI
  B. the Azure portal
  C. Azure Cloud Shell
  D. Windows PowerShell
  E. Azure Storage Explorer
  B. the Azure portal
  C. Azure Cloud Shell

  ---

  The Azure portal is the web-based portal for managing Azure. Being web-based, you can use the Azure portal on an iPhone.

  Azure Cloud Shell is a web-based command line for managing Azure. You access the Azure Cloud Shell from the Azure portal. Being web-based, you can use the Azure Cloud Shell on an iPhone.

  Incorrect Answers:

  A: Azure CLI can be installed on MacOS but it cannot be installed on an iPhone.

  D: Windows PowerShell can be installed on MacOS but it cannot be installed on an iPhone.

  E: Azure Storage Explorer is not used to manage Azure web apps.

  References: http://www.deployazure.com/management/managing-azure-from-ipad/

• Question 458:

  HOTSPOT

  _____________________ provides in-depth information about security, privacy, compliance offerings, policies, and features across microsoft cloud products.

  Select the answer that correctly completes the sentence.

  

  

  Explanation:

  Microsoft 365 compliance is now called Microsoft Purview and the solutions within the compliance area have been rebranded.

  When you first visit the compliance portal, the card section on the home page shows you at a glance how your organization is doing with data compliance, what solutions are available for your organization, and a summary of any active alerts.

  From here, you can:

  * Review the Microsoft Purview Compliance Manager card, which leads you to the Compliance Manager solution. Compliance Manager helps simplify the way you manage compliance.

  * Review the new Solution catalog card, which links to collections of integrated solutions you can use to help you manage end-to-end compliance scenarios. A solution's capabilities and tools might include a combination of policies, alerts, reports, and more.

  * Review the Active alerts card, which includes a summary of the most active alerts and includes a link where you can view more detailed information, such as Severity, Status, Category, and more.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/microsoft-365-compliance-center

• Question 459:

  This question requires that you evaluate the underlined text to determine if it is correct.

  You plan to deploy 20 virtual machines to an Azure environment. To ensure that a virtual machine named VM1 cannot connect to the other virtual machines, VM1 must be deployed to a separate virtual network.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

  A. No change is needed
  B. run a different operating system than the other virtual machines
  C. be deployed to a separate resource group
  D. have two network interfaces
  A. No change is needed

  ---

  Azure automatically routes traffic between subnets in a virtual network. Therefore, all virtual machines in a virtual network can connect to the other virtual machines in the same virtual network. Even if the virtual machines are on separate subnets within the virtual network, they can still communicate with each other.

  To ensure that a virtual machine cannot connect to the other virtual machines, the virtual machine must be deployed to a separate virtual network.

  References: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview

• Question 460:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  Explanation:

  Box 1: No

  Azure Advisor can generate a list of azure virtual machines that are protected by Azure Backup.

  Azure Advisor does however, generate a list of virtual that ARE NOT protected by Azure Backup. You can view a list of virtual machines that are protected by Azure Backup by viewing the Protected Items in the Azure Recovery Services Vault.

  Box 2: No

  If you implement the security recommendations, you company's score will increase, not decrease.

  Box 3: No

  There is no requirement to implement the security recommendations provided by Azure Advisor. The recommendations are just that, ‘recommendations’. They are not ‘requirements’.

  References:

  https://azure.microsoft.com/en-gb/blog/advisor-backup-recommendations/

  https://docs.microsoft.com/en-us/azure/advisor/advisor-overview

  https://microsoft.github.io/AzureTipsAndTricks/blog/tip173.html