AZ - 900 Azure Fundamentals (2)

How should you calculate the monthly uptime percentage?

(Maximum Available Minutes - Downtime in Minutes) + (Maximum Available Minutes ) x 100

Which two types of customers are eligible to use Azure Government to develop a cloud solution?

A United States government entity, A United States government contractor

You plan to map a network drive from several computers that run Windows 10 to Azure Storage. You need to create a storage solution in Azure for the planned mapped drive. What should you create?

A file service in a storage account

Your company plans to move several servers to Azure. The company's compliance policy states that a server named FinServer must be on a separate network segment. You are evaluating which Azure services can be used to meet the compliance policy requirements. Which Azure solution should you recommend?

A virtual network for FinServer and another virtual network for all the other servers

Azure Germany can be used by legal residents of Germany only.

Any user or enterprise that requires its data to reside in Germany

Authorization is the process of verifying a user's credentials.

Authentication

You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the internet by using an anonymous IP address, the users are prompted automatically to change their password. Which Azure service should you use?

Azure AD Identity Protection

To what should an application connect to retrieve security tokens?

Azure Active Directory (Azure AD)

From Azure Monitor, you can view which user turned off a specific virtual machine during the last 14 days.

Azure Activity Log

You plan to implement several security services for an Azure environment. You need to identify which Azure services must be used to meet the following security requirements: - Monitor threats by using sensors - Enforce azure Multi-Factor Authentication (MFA) based on a condition. Which Azure service should you identify for each requirement?

Azure Advance Threat Protection (ATP), Azure Active Directory (Azure AD) Identity Protection

You plan to implement an Azure database solution. You need to implement a database solution that meets the following requirements: - Can add data concurrently from multiple regions - Can store JSON documents Which database service should you deploy?

Azure Cosmos DB

Your company plans to deploy several million sensors that will upload data to Azure. You need to identify which Azure resources must be created to support the planned solution. Which two Azure resources should you identify?

Azure Data Lake, Azure IoT Hub

A team of developers at your company plans to deploy, and then remove, 50 virtual machines each week. All the virtual machines are configured by using Azure Resource Manager templates. You need to recommend which Azure service will minimize the administrative effort required to deploy and remove the virtual machines. What should you recommend?

Azure DevTest Labs

Which service provides network traffic filtering across multiple Azure subscriptions and virtual networks?

Azure Firewall

Which service provides serverless computing in Azure?

Azure Functions

Your company implements Azure policies to automatically add a watermark to Microsoft Word documents that contain credit card information.

Azure Information Protection

Which Azure service should you use to store certificates?

Azure Key Vault

Your company plans to automate the deployment of servers to Azure. Your manager is concerned that you may expose administrative credentials during the deployment. You need to recommend an Azure solution that encrypts the administrative credentials during the deployment. What should you include in the recommendation?

Azure Key Vault

Resource groups provide organizations with the ability to manage the compliance of Azure resources across multiple subscriptions.

Azure Policies

You have a resource group named RG1. You plan to create virtual networks and app services in RG1. You need to prevent the creation of virtual machines only in RG1. What should you use?

Azure Policy

Your company has an Azure environment that contains resources in several regions. A company policy state that administrators must only be allowed to create additional Azure resources in a region in the country where their office is located. You need to create the Azure resource that must be used to meet the policy requirement. What should you create?

Azure Policy

You have an Azure web app. You need to manage the settings of the web app from an iPhone. What are two Azure management tools that you can use?

Azure Portal, Azure Cloud Shell

Which Azure service provides a set of version control tools to manage code?

Azure Repos

A support plan solution that gives you best practice information, health status and notifications, and 24/7 access to billing information at the lowest possible cost is a Standard support plan.

Basic support plan

You plan to create an Azure virtual machine. You need to identify which storage service must be used to store the data disks of the virtual machine. What should you identify?

Blobs

You can use Advisor recommendations in Azure to send email alerts when the cost of the current billing period for an Azure subscription exceeds a specified limit.

Budget Alerts

From Azure Cloud Shell, you can track your company's regulatory standards and regulations, such as ISO 27001.

Compliance Manager

What should you use to evaluate whether your company's Azure environment meets regulatory requirements?

Compliance Manager from the Security Trust Portal

You attempt to create several managed Microsoft SQL Server instances in an Azure environment and receive a message that you must increase your Azure subscription limits. What should you do to increase the limits?

Create a new support request

You need to configure an Azure solution that meets the following requirements: - Secures websites from attacks - Generates reports that contain details of attempted attacks What should you include in the solution?

DDoS protection

Drag and drop 1. An organization that defines all international standards across all industries 2. An organization that defines the standards used by the US govt 3. A European policy that defines data privacy and protection 4. A dedicated public cloud for federal/ state agencies in the US

ISO, NIST, GDPR, Azure Government

Your company plans to deploy several custom applications to Azure. The applications will provide invoicing services to the customers of the company. Each application will have several prerequisite applications and services installed. You need to recommend a cloud deployment solution for all the applications. What should you recommend?

IaaS

You create a resource group named RG1 in Azure Resource Manager. You need to prevent the deletion of the resources in RG1.Which setting should you use?

Lock/ Delete Lock

Which statement accurately describes the Modern Lifecycle Policy for Azure services?

Microsoft provides a minimum of 12 months' notice before ending support for a service.

Your company plans to migrate to Azure. The company has several departments. All the Azure resources used by each department will be managed by a department administrator .You need to recommend an Azure deployment that provides the ability to segment Azure for the departments. The solution must minimize administrative effort.

Multiple subscription

You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 -- imageUbuntuLTS --generate-ssh-keys -You need to create VM1 in Subscription1 by using the command. Solution: From a computer that runs Windows 10, install Azure CLI. From PowerShell, sign in to Azure and then run the command. Does this meet the goal?

No

You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 -- imageUbuntuLTS --generate-ssh-keys -You need to create VM1 in Subscription1 by using the command. Solution: From a computer that runs Windows 10, install Azure CLI. From a command prompt, sign in to Azure and then run the command. Does this meet the goal?

No

You plan deploy several Azure virtual machines. You need to ensure that the services running on the virtual machines are available if a single data center fails. Solution: You deploy the virtual machines to two or more resource groups. Does this meet goal?

No

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify a DDoS protection plan. Does this meet the goal?

No

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify an Azure Traffic Manager profile. Does this meet the goal?

No

Your company has an Azure subscription that contains the following unused resources: - 20 user accounts in Azure Active Directory (Azure AD)✑ Five groups in Azure AD - 10 public IP addresses - 10 network interfaces You need to reduce the Azure costs for the company. Solution: You remove the unused groups. Does this meet the goal?

No

Your company has an Azure subscription that contains the following unused resources: - 20 user accounts in Azure Active Directory (Azure AD)✑ Five groups in Azure AD - 10 public IP addresses - 10 network interfaces You need to reduce the Azure costs for the company. Solution: Solution: You remove the unused user accounts. Does this meet the goal?

No

Your company has an Azure subscription that contains the following unused resources: - 20 user accounts in Azure Active Directory (Azure AD)✑ Five groups in Azure AD - 10 public IP addresses - 10 network interfaces You need to reduce the Azure costs for the company. Solution: You remove the unused network interfaces. Does this meet the goal?

No

Your company plans to purchase Azure. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Basic support plan .Does this meet the goal?

No

After you create a virtual machine, you need to modify the network security group (NSG) to allow connections from TCP port 8080 to the virtual machine.

No change is needed

An Azure service is available to all Azure customers when it is in public preview.

No change is needed

Azure Key Vault is used to store secrets for Azure Active Directory (Azure AD) user accounts.

No change is needed

If Microsoft plans to end support for an Azure service that does NOT have a successor service, Microsoft will provide notification at least 12 months before.

No change is needed

The Azure Standard support plan is the lowest cost option to receive 24x7 access to support engineers by phone.

No change is needed

The Microsoft Online Services Privacy Statement explains what data Microsoft processes, how Microsoft processes the data, and the purpose of processing the data.

No change is needed

You have an application that is comprised of an Azure web app that has Service Level Agreement (SLA) of 99.95 percent and an Azure SQL database that has an SLA of 99.99 percent. The composite SLA for the application is the product of both SLAs, which equals 99.94 percent.

No change is needed

Hotspot: 1. Azure Advisor can generate a list of Azure virtual machines that are protected by Azure Backup. 2. If you implement the security recommendation provided by Azure Advisor, your company's secure score will decrease. 3. To maintain Microsoft support, you must implement the security recommendations provided by Azure Advisor within a period of 30 days

No, No, No

Hotspot: 1. Azure Firewall will encrypt all the network traffic sent from Azure to the internet 2. A network security group (NSG) will encrypt all the network traffic sent from Azure to the internet. 3. Azure virtual machines that run Windows Server 2016 can encrypt the network traffic sent from the virtual machines to a host on the internet.

No, No, No

Hotspot: 1. Storing 1 TB of data in Azure Blob storage will always cost the same, regardless of the Azure region in which data is located. 2. When you use a general-purpose v2 Azure Storage account, you are only charged for the amount of data that is stored. All read and write operations are free. 3. Transferring data between Azure Storage accounts in different Azure regions is free.

No, No, No

Hotspot: 1. All Azure services in private preview must be accessed by using a separate Azure portal 2. Azure services in public preview can be used in production environments 3. Azure services in public preview are subject to a Service Level Agreement

No, No, No

Hotspot: 1. Each Azure subscription can contain multiple account administrators 2. Each Azure subscription can be managed by using a Microsoft account only 3. An Azure resource group contains multiple Azure subscription

No, No, No

Hotspot: 1. By creating additional resource groups in an Azure Subscription, additional costs are incurred. 2. By copying several gigabits of data to Azure from an on-premises network over a VPN, additional data transfer costs are incurred 3. By copying several GB of data from Azure to an on-premises network over a VPN, additional data transfer costs are incurred

No, No, Yes

Hotspot: 1. To implement an Azure Multi-Factor Authentication(MFA) solution, you must deploy a federation solution or sync on-premises identities to the cloud. 2. Two valid methods for Azure Multi-Factor Authentication (MFA) are picture identification and a passport number. 3. Azure Multi-Factor Authentication (MFA) can be required for administrative and non-administrative user accounts.

No, No, Yes

Hotspot: 1. A Standard support plan is included in an Azure free account 2. A Premier support plan can only be purchased by companies that have an Enterprise Agreement (EA) 3. Support from MSDN forums is only provided to companies that have a pay-as-you-go subscription

No, Yes, No

Hotspot: 1. An Azure service in private preview is released to all Azure customers 2. An Azure service in public preview is released to all Azure customers 3. An Azure service in general availability is released to a subset of Azure customers

No, Yes, No

Hotspot: 1. If your company uses an Azure free account, you will only be exposed to a subset of Azure services 2. All Azure free accounts expire after a specific period 3. You can create up to 10 Azure free accounts by using the same Microsoft account

No, Yes, No

Hotspot 1. Authorization to access Azure resources can be provided only to Azure Active Directory (Azure AD) users 2. Identities stored in Azure Active Directory (Azure AD), third-party cloud services, and on-premises Active Directory can be used to access Azure resources 3. Azure has built-In authentication and authorization services that provide secure access to Azure resources

No, Yes, Yes

Your company plans to request an architectural review of an Azure environment from Microsoft. The company currently has a Basic support plan. You need to recommend a new support plan for the company. The solution must minimize costs. Which support plan should you recommend?

Premier

In which Azure support plans can you open a new support request?

Premier, Professional Direct, Standard, Developer, and Basic

Your network contains an Active Directory forest. The forest contains 5,000 user accounts. Your company plans to migrate all network resources to Azure and to decommission the on-premises data center. You need to recommend a solution to minimize the impact on users after the planned migration. What should you recommend?

Sync all the Active Directory user accounts to Azure Active Directory (Azure AD)

Your company has 10 offices. You plan to generate several billing reports from the Azure portal. Each report will contain the Azure resource utilization of each office. Which Azure Resource Manager feature should you use before you generate the reports?

Tags

Your company plans to migrate all on-premises data to Azure. You need to identify whether Azure complies with the company's regional requirements. What should you use?

The Trust Center

If a resource group named RG1 has a delete lock, only a member of the global administrators' group can delete RG1.

The delete lock must be removed before an administrator

You have several virtual machines in an Azure subscription. You create a new subscription. The virtual machines cannot be moved to the new subscription.

The virtual machines can be moved to the new subscription

You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 -- imageUbuntuLTS --generate-ssh-keys -You need to create VM1 in Subscription1 by using the command. Solution: From the Azure portal, launch Azure Cloud Shell and select PowerShell. Run the command in Cloud Shell. Does this meet the goal?

Yes

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify an Azure firewall. Does this meet the goal?

Yes

Your company has an Azure subscription that contains the following unused resources: - 20 user accounts in Azure Active Directory (Azure AD)✑ Five groups in Azure AD - 10 public IP addresses - 10 network interfaces You need to reduce the Azure costs for the company. Solution: You remove the unused public IP addresses. Does this meet the goal?

Yes

Your company plans to purchase Azure. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Premier support plan. Does this meet the goal?

Yes

Your company plans to purchase Azure. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Professional Direct support plan. Does this meet the goal?

Yes

Your company plans to purchase Azure. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Standard support plan. Does this meet the goal?

Yes

Hotspot: 1. Most Azure services are introduced in private preview before being introduced in public preview, and then in general availability 2. Azure services in public preview can be managed only by using the Azure CLI 3. The cost of an Azure service in private preview decreases when the service becomes generally available

Yes, No, No

Hotspot: 1. A single Microsoft account can be used to manage multiple Azure subscriptions. 2. Two Azure subscriptions can be merged into a single subscription by creating a support request. 3. A company can store resources in multiple subscriptions.

Yes, No, Yes

Hotspot: 1. In Azure Active Directory Premium, at least 99.9 percent availability is guaranteed. 2. The Service Level Agreement (SLA) for Azure Activity Directory Basic is the same as the SLA for Azure Activity Directory Free 3. All paying Azure customers can claim a credit if their monthly uptime percentage is below the guaranteed amount in the Service Level Agreement (SLA)

Yes, No, Yes

Hotspot: 1. An Azure free account has a spending limit 2. An Azure free account has a limit for the amount of data that can be uploaded to Azure 3. An Azure free account can contain an unlimited number of web apps

Yes, Yes, No

Hotspot: 1. From Azure Service Health, an administrator can view the health of all the services deployed to an Azure environment and all the other services available in Azure 2. From Azure Service Health, an administrator can create a rule to be alerted if an Azure service fails 3. From Azure Service Health, an administrator can prevent a service failure from affecting a specific virtual machine

Yes, Yes, No

Hotspot: 1. The Service Level Agreement (SLA) guaranteed uptime for paid Azure services is at least 99.9 percent. 2. Companies can increase the Service Level Agreement (SLA) guaranteed uptime by adding Azure resources to multiple regions. 3. Companies can increase the Service Level Agreement (SLA) guaranteed uptime by purchasing multiple subscriptions.

Yes, Yes, No

You plan to deploy a website to Azure. The website will be accessed by users worldwide and will host large video files. You need to recommend which Azure feature must be used to provide the best video playback experience. What should you recommend?

a Content Deliver Network (CDN)

You have an on-premises application that sends email notifications automatically based on a rule. You plan to migrate the application to Azure. You need to recommend a serverless computing solution for the application. What should you include in the recommendation?

a logic app

You plan to deploy several Azure virtual machines. You need to control the ports that devices on the Internet can use to access the virtual machines. What should you use?

a network security group (NSG)

Your company has 10 departments. The company plans to implement an Azure environment. You need to ensure that each department can use a different payment option for the Azure services it consumes. What should you create for each department?

a subscription

Your company plans to migrate all its network resources to Azure. You need to start the planning process by exploring Azure. What should you create first?

a subscription

You plan to provision Infrastructure as a Service (IaaS) resources in Azure. Which resource is an example of IaaS?

an Azure virtual machine

What is required to use Azure Cost Management?

an Enterprise Agreement (EA)

You deploy an Azure resource. The resource becomes unavailable for an extend period due to a service outage. Microsoft will automatically refund your bank account.

automatically credit your account

You have an Azure virtual network named VNET1 in a resource group named RG1. You assign an Azure policy specifying that virtual networks are not an allowed resource group type in RG1. VNET1 is deleted automatically.

continues to function normally

What can Azure Information Protection encrypt?

documents and email messages

What is guaranteed in an Azure Service Level Agreement (SLA)?

feature availability

Your company plans to migrate to Azure. The company has several departments. All the Azure resources used by each department will be managed by a department administrator. What are two possible techniques to segment Azure for the departments? Each correct answer presents a complete solution.

multiple subscriptions, multiple resource groups

Your company plans to deploy several web servers and several database servers to Azure. You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers. What should you include in the recommendation?

network security groups (NSGs)

Your Azure trial account expired last week. You are now unable to create additional Azure Active Directory (Azure AD) user accounts.

start an existing Azure virtual machine

You can create an Azure support request from support.microsoft.com.

the Azure Portal