az-900 sample questions 11-22-22

What can you use to launch the Azure Cloud Shell? A. Azure portal B. Azure PowerShell C. Azure Command Line Interface (CLI) D. Azure Resource Manager (ARM) template

A. Azure Portal - Azure Cloud Shell is an interactive, authenticated, browser-accessible shell for managing Azure resources. It provides the flexibility of choosing the shell experience that best suits the way you work, either Bash or PowerShell.Azure You can access the Cloud Shell in three ways:• Direct link: Open a browser to https://shell.azure.com.• Azure portal: Select the Cloud Shell icon on the Azure portal.• Code snippets: On learn.microsoft.com and Microsoft Learn, select the Try It button

Prevents resources from being accidentally deleted or changed A. Azure Resource Locks B. Azure Blueprints C. Azure Policy

A. Azure Resource locks can be used to prevent resources from being accidentally deleted or changed. Even with role-based access control policies in place there is still a risk that people with the right level of access could delete a critical resource. Azure Resource Manager locks prevent users from accidentally deleting or modifying a critical resource, and can be applied to a subscription, a resource group, or a resource.

Provides servers and virtual machines, storage, networks, and operating systems on a pay-as-you-go basis. A. Infrastructure as a service (IaaS) B. Platform as a service (PaaS) C. Software as a service (SaaS)

A. Infrastructure as a service (IaaS) -Offers necessary compute, storage, and networking assets on demand, on a pay-as-you-go basis.

Match the services on the left to the correct descriptions on the right. Services Descriptions A. Pricing calculator - 1. Estimates workload costs B. TCO calculator - 2. Estimates the cost savings by comparing datacenter costs to running the same workload on Azure C. Cost management - 3. Helps control, analyze, and optimize workload costs

A1, B2, C3

__________ is supported by ExpressRoute for connecting an on-premises network to Azure. A. A Point-to-Site VPN B. A point-to-point Ethernet connection C. A Site-to-Site VPN D. Azure Peering service

B. A Point-to-point Ethernet connection is supported by ExpressRoute for connecting your on-premises network to Azure.The three models that ExpressRoute supports are:• CloudExchange colocation• Point-to-point Ethernet connection• Any-to-any-connection

Rapidly provisions and runs new environments with the knowledge that they are in line with the organization's compliance requirements A. Azure Resource Locks B. Azure Blueprints C. Azure Policy

B. Azure Blueprints provide a way to define a repeatable set of Azure resources. Azure Blueprints enable development teams to rapidly provision and run new environments, with the knowledge that they're in line with the organization's compliance requirements. Teams can also provide Azure resources across several subscriptions simultaneously, meaning they can achieve shorter development times and quicker delivery.

Which Azure serverless computing technology provides the ability to execute workflows to automate business scenarios by using triggers without writing any code? A. Azure Functions B. Azure Logic Apps C. Azure Front Door D. Azure DevOps

B. Azure Logic Apps are designed in a web-based designer and can execute logic triggered by Azure services without writing any code.

Which Azure feature enables you to organize multiple subscriptions in hierarchies for unified policies and compliance? A. Resource groups B. Management groups C. Azure Active Directory (Azure AD) D. Azure Container Instances

B. Management groups help you manage access, policy, and compliance for multiple subscriptions. All subscriptions in a management group automatically inherit the conditions applied to the management group.

Which defense in depth layer uses distributed denial of service (DDoS) protection? A. Physical security layer B. Perimeter layer C. Network layer D. Application layer

B. Perimiter layer - The perimeter layer uses distributed denial of service (DDoS) protection to filter large-scale attacks before they can cause a denial of service for users.

Provides a fully managed environment for developing, testing, delivering, and managing cloud-based applications. A. Infrastructure as a service (IaaS) B. Platform as a service (PaaS) C. Software as a service (SaaS)

B. Platform as a service (PaaS) - Provide complete development and deployment environment in the cloud, with assets that enable to deliver simple cloud-based apps to cloud-enabled enterprise applications.

You use __________ to organize resources in an Azure subscription. A. Azure regions B. Resource groups C. Management groups D. Administrative units

B. Resource groups - Azure resources are combined into resource groups, which act as logical containers into which Azure resources like web apps, databases, and storage accounts are deployed and managed.

Single sign-on (SSO) is __________ method that enables users to sign in the first time and access various applications and resource by using same password. A. a validation B. an authentication C. a configuration D. an authorization

B. Single sign-on is an authentication method that allows users to sign in using one set of credentials to login across applications. Single sign-on makes it easier to manage passwords and increases security capabilities.

__________ enables you to scale to thousands of virtual machines for high-performance computing and large-scale parallel jobs. A. An Azure virtual machine scale set B. An availability set C. Azure Batch D. An availability zone

C. Azure Batch allows you to scale to thousands of virtual machines for high-performance computing (HPC) and large-scale parallel jobs. Other Azure functionalities allow you to scale multiple VMs, but only Azure Batch will allow for thousands of VMs for HPC.

__________ is a repeatable set of governance tools that helps development teams quickly build and create new environments while adhering to organizational compliance to speed up development and deployment. A. Azure DevOps B. A Continuous Integration/Continuous Deployment (CI/CD) pipeline configuration C. Azure Blueprints D. Azure Policy

C. Azure Blueprints - Sometimes Cloud environment grow beyond just one subscription, in that case Azure Blueprints help to scale the configuration. Azure Blueprints help with repeatable tasks so that development teams rapidly build and deploy new environments and speed the overall development and deployment phases.Blueprints are a declarative way to orchestrate the deployment of various resource templates.

Enforces standards and assess compliance across your organization. A. Azure Resource Locks B. Azure Blueprints C. Azure Policy

C. Azure Policy is designed to help enforce standards and assess compliance across your organization. Through its compliance dashboard, you can access an aggregated view to help evaluate the overall state of the environment. You can drill down to a per-resource, or per-policy level granularity. You can also use capabilities like bulk remediation for existing resources and automatic remediation for new resources, to resolve issues rapidly and effectively

__________ alerts you when service issues occur in an Azure environment, such as a regional Azure outage that affects all Azure customers. A. Azure Monitor B. Azure Advisor C. Azure Service Health D. Azure Application Insights

C. Azure Service Health alerts you about service issues that happen in Azure itself, such as a regional Azure outage

__________ enables you to provision a group of matching and load-balanced virtual machines in Azure. A. Azure Logic Apps B. An availability set C. An Azure virtual machine scale set D. Azure Load Balancer

C. Azure Virtual machine scale set enables you to provision a group of matching and load-balanced virtual machines in Azure.Imagine you are running a website that enables scientists to upload astronomy images that need to be processed. If you duplicated the VM, you would normally need to configure an additional service to route requests between multiple instances of the website. Virtual machine scale sets could do that work for you.

__________ copies data to a secondary region from the primary region across multiple datacenters that are located many miles apart. A. Premium storage B. Zone redundant storage (ZRS) C. Geo-redundant storage (GRS) D. Locally-redundant storage (LRS)

C. Geo-redundant storage (GRS) -Replicates your data to a secondary region that is in different geographic locations from the primary region.

Which option is used to set the communication between an on-premises VPN device and an Azure VPN gateway through an encrypted tunnel over the internet? A. ExpressRoute B. Point-to-Site (P2S) VPN C. Site-to-Site VPN

C. Site-to-site VPN: Established between on-premises VPN device and an Azure VPN Gateway that is deployed in a virtual network. This connection type allow communication between any on-premises authorize resource to access a virtual network through an encrypted tunnel.

Provides hosting and management of an application and its underlying infrastructure, as well as any maintenance, upgrades, and security patching A. Infrastructure as a service (IaaS) B. Platform as a service (PaaS) C. Software as a service (SaaS)

C. Software as a service (SaaS) Host and manage the software application and underlying infrastructure.

_________in Azure enables you to deploy Azure resources close to the users. A. Elasticity B. Scalability C. Geo-distribution D. High availability

C. geo-distribution you can deploy apps and data to regional datacenters around the globe, thereby ensuring that your customers always have the best performance in their region.

Which cloud approach is used by organizations to take full advantage of on-premises technology investments and allows data and applications to be shared between two environments? A. public cloud B. private cloud C. hybrid cloud D. on-premises datacenter

C. hybrid cloud - A Hybrid cloud is a type of cloud computing that combines on-premises infrastructure or a private cloud with a public cloud. Hybrid clouds allow data and apps to move between the two environments.

Which Azure Directory (Azure AD) features is used to provide access to resources based on organizational policies? A. multi-factor authentication (MFA) B. single sign-on (SSO) C. administrative unitsD. Conditional Access D. Conditional Access

D. Conditional Access is the tool used by Azure Active Directory to allow (or deny) access to resources based on identity signals. Conditional access is a more refined MFA (multifactor authentication) method.