AZ-900 Practice

You can monitor health and availability of your Azure Kubernetes Service (AKS) cluster with:

Azure Monitor

Which of the following describes authentication?

Validates that a user is who they claim to be

Which aspect of an Azure service are guaranteed in an Azure Service Level Agreement?

Varies by service

Are Azure services in Public Preview available to all customers?

Yes

Contoso Financial Services hosts an application that stores customer data in json format in MongoDB. They want to migrate the application to Azure, and want to minimize code updates. Which Azure database platform will best meet their requirements?

Cosmos DB

Contoso's customer profiling app stores custom data in JSON format. Customers use a mobile app to access their profile data around the world. This data should be available anywhere in the world with minimal latency. Which services should Contoso choose?

Cosmos DB

You are responsible for creating Azure resources at Contoso using ARM templates. You need to ensure Azure resources are only created in approved regions. What should you use to enforce this requirement?

Azure Policy

You need to identify and enforce Contoso's corporate standards across new and existing Azure deployments. Which service would you choose to achieve this requirement?

Azure Policy

Contoso IT has deployed multiple Azure VM across 15 virtual networks. How can you most securely limit inbound traffic and protect these VMs from unwanted inbound requests?

Deploy an Azure Firewall

The Contoso Applications team needs a no-code tool to build and test a predictive analytics solution using machine learning models. Which should they choose?

Azure Machine Learning Studio

You run a small accounting business and need to host a custom WordPress site. You would like to host this in Azure. Where can you find an offering to quickly deploy a solution?

Azure Marketplace

The Contoso IT Operations team needs to aggregate events from a large number of resources hosted in Azure for correlation, alerting, and reporting. Which Azure service would you use to centrally collect, store, and act on events?

Azure Monitor

You can monitor health and performance of microservices applications running on Azure Kubernetes Service (AKS) with

Azure Monitor

You need to alert on service failures in you Azure services, such as web app instances hosted in App Service, and Azure VMs that stop running for any reason. Which tool should you use?

Azure Monitor

You need to calculate the estimated cost of a set of Azure resources before you deploy them. Which service or tool will you use?

Azure Pricing Calculator

As a cost of a migration of on-premises VM workloads to Azure VMs, Contoso wants to minimize costs. Since the VMs will be running in Azure for an extended period of time, what option should they consider to reduce hosting costs?

Azure Reservations

Contoso IT Needs to ensure deployments of like Azure resources are the same for every deployment. Which of the following could be used to automate resource development?

Azure Resource Manager (ARM) Templates

The Field Services business unit needs a solution to analyze locally on field devices. The goal is to speed event response and reduce data sent to the cloud. Which solution best addresses this need?

Azure IoT Edge

An application developer at Contoso has asked you to deploy a web application and SQL database to Azure. You need to store the password in a secure location. Which service will you use?

Azure Key Vault

You need to determine if the Azure platform meets a particular regulatory standard. How can you find the right answer to this question?

The Microsoft Trust Center

You attempt to create several Azure SQL Database instances and receive a message that you must increases the limits in your Azure subscription. What should you do?

Open a support request

What is the standard lifecycle for Azure services released by Microsoft?

Private Preview, Public Preview, General Availability

Contoso IT Operations has been tasked with providing recommendations on how to reducing cost of running Azure VMs. Which service should they use to gather recommendations?

Azure Advisor

Contoso IT has deployed a group of VMs in Azure. They want to identify recommendations on how to reduce the cost of running these VMs. Which tool should they use?

Azure Advisor

You are responsible for recommending infrastructure architectures for applications at Contoso. Which solution would you recommend for load balancing HTTPS traffic to a web farm in a single Azure region?

Azure App Gateway

Contoso IT are frequently early adopters of new Azure features. They are trying a feature currently in Public Preview. Do services in Public Preview include an SLA?

No

As a part of a hybrid cloud deployment at Contoso, you need to connect Contoso's on-premises datacenter to Azure. The solution you choose should minimize the low-scale pilot deployment. Which option will you choose?

Site-to-Site VPN

Contoso IT is planning to migrate all on-premises data to Azure. The Legal Department has asked for verification that Azure complies with Contoso's regulatory obligations, such as HIPPA and PCI DSS. What should you use to answer this request?

The Trust Center

You are the administrator at Tailspin Toys. You have developed an Azure VM hosting a line-of-business web application. You need to provide access to the application over the internet via HTTP/S. You add a security rule to the Network Security Group (NSG) to allow inbound traffic. Does this solution meet the requirement?

Yes

You need to manage your Azure VMs using the Azure portal. Which URL would you use to manage the Azure VMs?

https://portal.azure.com

All resources deployed to Contoso's Azure subscriptions include a tag assigned to the resource. Do resources in a resource group inherit the tag assigned to the resource group?

No

An ___ protects against datacenter-level failures

Availability Zone

An ___ protects against server rack-level failures

Availability Set

An Azure ___ is a set of datacenters deployed within a latency-defined perimeter and connected through a dedicated regional low-latency network

Region

You need to configure access to Office 365 resources for users at Contoso. To group users for assignment of permissions, which of the following options can you use?

Security Group

You need to ensure no one (including administrators) can create additional resources in a Azure resource group. What will you do to achieve this objective?

A lock (read only)

Azure China is available to

Legal entities in China

Contoso Corp is planning to move their custom web applications in the cloud. The cloud provider platform must provide the ability to scale automatically, and meet the availability SLA of 99%, Will Azure App Service (PaaS) meet these requirements?

Yes

Contoso IT assigns permissions at the resource group level for all resources deployed to Azure. Will resources in the resource group inherit permissions assigned to the resource group?

Yes

Contoso IT has deployed a group of Azure VMs for hosting production. They want best practice recommendations for high availability of their VM resources. Will the Azure Advisor tool provide recommendations for these existing resources?

Yes

Contoso IT wants to configure separate Azure subscriptions for different environments (production, development, test) and products. Can they associate multiple Azure subscriptions to the same Azure Active Directory tenant?

Yes

Kelly, who works in IT Operations, wants to automate a task using script she wrote. She wants to do this with a minimum of expense and maintenance effort. She selected Azure Functions to host the job, instead of Azure Virtual Machines (Iaas) Does this service meet the solution criteria?

Yes

The Contoso Data Services team wants to migrate their relational databases to PaaS. Contoso's cloud architect suggests that Azure SQL Database service. Will this meet the requirement?

Yes

To retire some aging on-premises servers, Contoso is planning to move several SQL databased to Azure SQL database. The CIO asked for a tool to estimate the cost of hosting these resources in Azure. Sally suggests using Azure pricing calculator to estimate costs prior to migration. Does Sally's solution meet the solution criteria?

Yes

You are deploying multiple instances of a custom Contoso web application. The application instances share a common management lifecycle, but will be located in different Azure regions. Can you deploy resources across multiple Azure regions in a single resource group?

Yes

You are testing new software in an Azure VM. When you are done testing, you shut down the VM, which shows a state of "Stopped" in the Azure portal. Will you incur additional costs while the VM is in this state?

Yes

Azure VMs in different virtual networks can communicate by default

False

Contoso has a line-of-business application that requires access to a file share. You need to host this share in Azure with a minimum of cost and administration effort. Which service would best fulfill this requirement.

Azure Files

Implementing Azure MFA (multi-factor authentication) will ensure we know who the user is who they claim to be. This is an example of

Authentication

Using role based access control (RBAC) in Azure, we can determine which resoruces and services a user has access to. This is an example of

Authorization

Which Azure service would you use to correlate events from multiple Azure resources in a central repository?

Azure Log Analytics

To transition to a large capital expenditure (CapEx) to an operation expenditure (OpEx), Contoso's CIO has suggested to the board that the organization move their virtual machine (IaaS) workloads to Azure. The CFO argues that this will result in unpredictable OpEx spending. In this case, what pricing option is available to reduce costs and making predicting future spending easier?

Azure Reservations

You need to identify deviations from Microsoft security best practice in your Azure cloud infrastructure. Which service should you use?

Azure Security Center

Are Azure services in Public Preview available in all Azure regions?

No

Azure routes traffic between all subnets within a virtual network, by default. To override Azure's default routing, you can create a(n)

User defined route

Application developers at Contoso need Azure capacity to try some Azure services in the coming months. They plan to sign up for individual Azure Free accounts. Will this meet the requirement?

Yes

You plan to deploy several Azure VMs. The applications running on these VMs should remain available if a single Azure datacenter fails. You opt to deploy VMs to multiple availability zones. Does your solution meet the criteria?

Yes

Storage for Azure VMs is hosted in which Azure Storage type?

Disk

The Contoso IT Operations team needs to monitor their customer-facing web apps for performance anomalies. Which Azure service will best fulfill this need?

Azure Application Insights

You have a web farm that you need to restrict communication for current and future resources with a minimum of administrative effort. Which option should you choose?

Application Security Group (ASG)

The Contoso Corp Data Services team needs a platform to host their big data service, which will serve as a data source for their machine learning algorithms?

Azure Databricks

Contoso needs to automate version updates of their PaaS application hosted in Azure. Which service can best help meet this requirement?

Azure DevOps

You can find recommendations for security best practices security configuration for Azure Kubernetes Service (AKS) with

Azure Security Center

Can users located in countries outside China utilize Azure services deployed in Azure China?

Yes, any authorized user globally

The Contoso Data Services team wants to migrate their NoSQL data to PaaS. Contoso's cloud architect suggests that Azure SQL Database Service. Will this meet the requirement?

Cosmos DB

Contoso's Security team wants to apply standards across deployments in multiple Azure subscriptions. Which of the following can help achieve this requirement?

Management Groups

Contoso needs to select an IoT management platform for Internet-connected devices at their retail locations. They have no IoT expertise, and want a solution that minimizes the need for custom development. Which solution will best meet their requirement?

Azure IoT Central

You need to store, manage, and access SSL?TLS certificates for Contoso's corporate web apps. Which service should you use?

Azure Key Vault

Contoso Electronics is a global retailer. The Contoso Cloud Architecture team needs to simplify deployments of new environments in Azure, including Azure Resource Manager (ARM) templates, role-based access, and policies. Which Azure service enables delivery of templates for repeatable deployment and configuration of new subscriptions and environments?

Azure Blueprints

Azure Germany is available to

Eligible customers and partners globally doing business in the EU/EFTA

You need to implement multi-factor authentication for your Azure Active Directory users. However, you only want to prompt for an additional authentication factor when users are not in a trusted location on an unmanaged device. Which feature should you implement?

Azure AD Conditional Access

Contoso's Security team wants to implement selective use of multi-factor authentication (MFA) based on risk associated with the authentication request. Which service should they implement?

Azure AD Identity Protection

The Contoso Security team has implemented a new security policy. When users connect from an unusual location, they must be prompted for MFA. If accessing from an anonymous IP, they should be forced to reset their password. Which feature will you implement?

Azure AD Identity Protection

Contoso has implemented a hybrid, synchronized identity model, consisting of on-premises Active Directory and Azure Active Directory. They want to more effectively protect their on-premises identities from external threats. Which service should they choose?

Azure Advanced Threat Protection (ATP)

You need to automate and centrally manage various processes in VMs hosted both in Azure and on-premises. Which Azure service is best suited to this task?

Azure Automation

Contoso's Application Development team has been tasked with building a mobile app that can interact with users using spoken and written language. What service should they choose?

Azure Cognitive Services

Contoso has messages from a variety of sources (many Azure services) that need to be relayed to an application. Which Azure service would be best suited to the task?

Azure Event Grid

Contoso wants to migrate a legacy application to Azure that requires an file share accessible on a UNC path. You need to provide SMB file share and secure access. The solution should minimize administrative effort. Which service will you use?

Azure Files

Your company hosts a global web application. You need to ensure users can access the application from any country in the world with minimal latency. Which load balancing options should you use?

Azure Front Door

Contoso IT wants to develop modern application components using a server-less architecture. Which Azure service is best for hosting code as part of a services infrastructure?

Azure Functions

Tailspin Toys relies heavily on Azure Active Directory for cloud identity. They want to more effectively protect their identities from external threats. Which service should they choose?

Azure Identity Protection

Contoso Financial Services regularly creates documents containing sensitive customer data, including personally identifiable information. You need to ensure access is restricted to finance personnel, regardless of where the document travels. Which service should you use to classify and protect these documents?

Azure Information Protection

You need to define a group of Azure policies that defines and enforce corporate standards for new and existing Azure resource deployments in all of Contoso's Azure subscriptions. What should you use to meet this objective?

Azure Initiative

You need to prevent deletion of Azure resources in your subscription. Which feature will meet this requirement?

Azure Locks

The cloud infrastructure team at Contoso Corp is responsible for service recovery in the event of site outage at their on-premises datacenter. Which Azure service is best-suited for this task?

Azure Site Recovery

Contoso has deployed resources across multiple Azure regions for multiple business units. They have a requirement to generate cost and chargeback reporting to track the Azure costs to be charged back to each business unit. Which Azure feature should they use to simplify this task?

Azure Tags

Contoso Field services needs a solution to analyze telemetry data collected from their IoT devices at their retail locations. Their goal is to identify performance anomalies and identify opportunities to refine and improve device operation. Which Azure service will best meet this requirement?

Azure Time Series Insights

Contoso hosts a non-HTTP(S) mobile app available around the world. They need to ensure users can assess the application from any country in the world with minimal latency. Which load balancing options should they use?

Azure Traffic manager

In a Site-to-Site VPN, the ____ is the cross-premises gateway that connects your Azure Virtual Network with your on-premises VPN appliances

Azure Virtual Network Gateway

The Contoso Legal Department has asked Contoso IT to verify whether the Contoso's Azure environment meets regulatory requirements. Which service should you use to answer this question?

Compliance Manager

Contoso plants to implement a hybrid cloud architecture utilizing Azure. They need to connect on-premises application resources. The solution should minimize latency and maximize security. Which option should they choose?

ExpressRoute

Azure container instances provides feature parity for Linux and Windows containers

False

The Contoso Data Platform team wants to deploy an Apache Hadoop cluster in Azure. Which service should they choose?

HDInsight

The Contoso Field Services team is designing an application for monitoring thousands of sensors generation millions of data points daily. Which service can facilitate bi-directional communication with millions of IoT devices?

IoT Hub

Contoso Corp wants to develop an artificial intelligence (AI) app that it will host in Azure. The app will accept request through chat, interpreting requests with natural language processing (NLP). What service should they use for this solution?

Language Understanding (LUIS)

The Contoso Security teams wants to identify unsanctioned apps that may be responsible for data leakage and unwanted SaaS expenses (aka Shadow IT). What service should they use?

Microsoft Cloud App Security

Contoso IT has deployed an Azure VM scale set for a frontend web application. They want guidance on configuring the virtual network for these resources. Will the Azure Advisor tool provide recommendations for these existing resources?

No

Contoso is planning to move several on-premises services to Azure PaaS and IaaS solutions. The CIO has asked for a tool to estimate the cost of hosting these resources in Azure. Tom suggests Azure Cost Management to estimate costs prior to migration. Does Tom's solution meet the solution criteria?

No

To manage service lifecycle with more granularity, Contoso cloud architects have designed a model that involves a large number of resource groups. Will Contoso incur additional costs for the resources groups?

No

Your company is planning to host services in Azure. You want to leverage identities in Azure Active Directory, but still need to support on-premises identities in Active Directory MFA. Can you support single sign-on (SSO) and multi-factor authentication without synchronizing on-premises identities to Azure?

No