AZ-900 Practice
You can monitor health and availability of your Azure Kubernetes Service (AKS) cluster with:
Azure Monitor
Which of the following describes authentication?
Validates that a user is who they claim to be
Which aspect of an Azure service are guaranteed in an Azure Service Level Agreement?
Varies by service
Are Azure services in Public Preview available to all customers?
Yes
Contoso Financial Services hosts an application that stores customer data in json format in MongoDB. They want to migrate the application to Azure, and want to minimize code updates. Which Azure database platform will best meet their requirements?
Cosmos DB
Contoso's customer profiling app stores custom data in JSON format. Customers use a mobile app to access their profile data around the world. This data should be available anywhere in the world with minimal latency. Which services should Contoso choose?
Cosmos DB
You are responsible for creating Azure resources at Contoso using ARM templates. You need to ensure Azure resources are only created in approved regions. What should you use to enforce this requirement?
Azure Policy
You need to identify and enforce Contoso's corporate standards across new and existing Azure deployments. Which service would you choose to achieve this requirement?
Azure Policy
Contoso IT has deployed multiple Azure VM across 15 virtual networks. How can you most securely limit inbound traffic and protect these VMs from unwanted inbound requests?
Deploy an Azure Firewall
The Contoso Applications team needs a no-code tool to build and test a predictive analytics solution using machine learning models. Which should they choose?
Azure Machine Learning Studio
You run a small accounting business and need to host a custom WordPress site. You would like to host this in Azure. Where can you find an offering to quickly deploy a solution?
Azure Marketplace
The Contoso IT Operations team needs to aggregate events from a large number of resources hosted in Azure for correlation, alerting, and reporting. Which Azure service would you use to centrally collect, store, and act on events?
Azure Monitor
You can monitor health and performance of microservices applications running on Azure Kubernetes Service (AKS) with
Azure Monitor
You need to alert on service failures in you Azure services, such as web app instances hosted in App Service, and Azure VMs that stop running for any reason. Which tool should you use?
Azure Monitor
You need to calculate the estimated cost of a set of Azure resources before you deploy them. Which service or tool will you use?
Azure Pricing Calculator
As a cost of a migration of on-premises VM workloads to Azure VMs, Contoso wants to minimize costs. Since the VMs will be running in Azure for an extended period of time, what option should they consider to reduce hosting costs?
Azure Reservations
Contoso IT Needs to ensure deployments of like Azure resources are the same for every deployment. Which of the following could be used to automate resource development?
Azure Resource Manager (ARM) Templates
The Field Services business unit needs a solution to analyze locally on field devices. The goal is to speed event response and reduce data sent to the cloud. Which solution best addresses this need?
Azure IoT Edge
An application developer at Contoso has asked you to deploy a web application and SQL database to Azure. You need to store the password in a secure location. Which service will you use?
Azure Key Vault
You need to determine if the Azure platform meets a particular regulatory standard. How can you find the right answer to this question?
The Microsoft Trust Center
You attempt to create several Azure SQL Database instances and receive a message that you must increases the limits in your Azure subscription. What should you do?
Open a support request
What is the standard lifecycle for Azure services released by Microsoft?
Private Preview, Public Preview, General Availability
Contoso IT Operations has been tasked with providing recommendations on how to reducing cost of running Azure VMs. Which service should they use to gather recommendations?
Azure Advisor
Contoso IT has deployed a group of VMs in Azure. They want to identify recommendations on how to reduce the cost of running these VMs. Which tool should they use?
Azure Advisor
You are responsible for recommending infrastructure architectures for applications at Contoso. Which solution would you recommend for load balancing HTTPS traffic to a web farm in a single Azure region?
Azure App Gateway
Contoso IT are frequently early adopters of new Azure features. They are trying a feature currently in Public Preview. Do services in Public Preview include an SLA?
No
As a part of a hybrid cloud deployment at Contoso, you need to connect Contoso's on-premises datacenter to Azure. The solution you choose should minimize the low-scale pilot deployment. Which option will you choose?
Site-to-Site VPN
Contoso IT is planning to migrate all on-premises data to Azure. The Legal Department has asked for verification that Azure complies with Contoso's regulatory obligations, such as HIPPA and PCI DSS. What should you use to answer this request?
The Trust Center
You are the administrator at Tailspin Toys. You have developed an Azure VM hosting a line-of-business web application. You need to provide access to the application over the internet via HTTP/S. You add a security rule to the Network Security Group (NSG) to allow inbound traffic. Does this solution meet the requirement?
Yes
You need to manage your Azure VMs using the Azure portal. Which URL would you use to manage the Azure VMs?
https://portal.azure.com
All resources deployed to Contoso's Azure subscriptions include a tag assigned to the resource. Do resources in a resource group inherit the tag assigned to the resource group?
No
An ___ protects against datacenter-level failures
Availability Zone
An ___ protects against server rack-level failures
Availability Set
An Azure ___ is a set of datacenters deployed within a latency-defined perimeter and connected through a dedicated regional low-latency network
Region
You need to configure access to Office 365 resources for users at Contoso. To group users for assignment of permissions, which of the following options can you use?
Security Group
You need to ensure no one (including administrators) can create additional resources in a Azure resource group. What will you do to achieve this objective?
A lock (read only)
Azure China is available to
Legal entities in China
Contoso Corp is planning to move their custom web applications in the cloud. The cloud provider platform must provide the ability to scale automatically, and meet the availability SLA of 99%, Will Azure App Service (PaaS) meet these requirements?
Yes
Contoso IT assigns permissions at the resource group level for all resources deployed to Azure. Will resources in the resource group inherit permissions assigned to the resource group?
Yes
Contoso IT has deployed a group of Azure VMs for hosting production. They want best practice recommendations for high availability of their VM resources. Will the Azure Advisor tool provide recommendations for these existing resources?
Yes
Contoso IT wants to configure separate Azure subscriptions for different environments (production, development, test) and products. Can they associate multiple Azure subscriptions to the same Azure Active Directory tenant?
Yes
Kelly, who works in IT Operations, wants to automate a task using script she wrote. She wants to do this with a minimum of expense and maintenance effort. She selected Azure Functions to host the job, instead of Azure Virtual Machines (Iaas) Does this service meet the solution criteria?
Yes
The Contoso Data Services team wants to migrate their relational databases to PaaS. Contoso's cloud architect suggests that Azure SQL Database service. Will this meet the requirement?
Yes
To retire some aging on-premises servers, Contoso is planning to move several SQL databased to Azure SQL database. The CIO asked for a tool to estimate the cost of hosting these resources in Azure. Sally suggests using Azure pricing calculator to estimate costs prior to migration. Does Sally's solution meet the solution criteria?
Yes
You are deploying multiple instances of a custom Contoso web application. The application instances share a common management lifecycle, but will be located in different Azure regions. Can you deploy resources across multiple Azure regions in a single resource group?
Yes
You are testing new software in an Azure VM. When you are done testing, you shut down the VM, which shows a state of "Stopped" in the Azure portal. Will you incur additional costs while the VM is in this state?
Yes
Azure VMs in different virtual networks can communicate by default
False
Contoso has a line-of-business application that requires access to a file share. You need to host this share in Azure with a minimum of cost and administration effort. Which service would best fulfill this requirement.
Azure Files
Implementing Azure MFA (multi-factor authentication) will ensure we know who the user is who they claim to be. This is an example of
Authentication
Using role based access control (RBAC) in Azure, we can determine which resoruces and services a user has access to. This is an example of
Authorization
Which Azure service would you use to correlate events from multiple Azure resources in a central repository?
Azure Log Analytics
To transition to a large capital expenditure (CapEx) to an operation expenditure (OpEx), Contoso's CIO has suggested to the board that the organization move their virtual machine (IaaS) workloads to Azure. The CFO argues that this will result in unpredictable OpEx spending. In this case, what pricing option is available to reduce costs and making predicting future spending easier?
Azure Reservations
You need to identify deviations from Microsoft security best practice in your Azure cloud infrastructure. Which service should you use?
Azure Security Center
Are Azure services in Public Preview available in all Azure regions?
No
Azure routes traffic between all subnets within a virtual network, by default. To override Azure's default routing, you can create a(n)
User defined route
Application developers at Contoso need Azure capacity to try some Azure services in the coming months. They plan to sign up for individual Azure Free accounts. Will this meet the requirement?
Yes
You plan to deploy several Azure VMs. The applications running on these VMs should remain available if a single Azure datacenter fails. You opt to deploy VMs to multiple availability zones. Does your solution meet the criteria?
Yes
Storage for Azure VMs is hosted in which Azure Storage type?
Disk
The Contoso IT Operations team needs to monitor their customer-facing web apps for performance anomalies. Which Azure service will best fulfill this need?
Azure Application Insights
You have a web farm that you need to restrict communication for current and future resources with a minimum of administrative effort. Which option should you choose?
Application Security Group (ASG)
The Contoso Corp Data Services team needs a platform to host their big data service, which will serve as a data source for their machine learning algorithms?
Azure Databricks
Contoso needs to automate version updates of their PaaS application hosted in Azure. Which service can best help meet this requirement?
Azure DevOps
You can find recommendations for security best practices security configuration for Azure Kubernetes Service (AKS) with
Azure Security Center
Can users located in countries outside China utilize Azure services deployed in Azure China?
Yes, any authorized user globally
The Contoso Data Services team wants to migrate their NoSQL data to PaaS. Contoso's cloud architect suggests that Azure SQL Database Service. Will this meet the requirement?
Cosmos DB
Contoso's Security team wants to apply standards across deployments in multiple Azure subscriptions. Which of the following can help achieve this requirement?
Management Groups
Contoso needs to select an IoT management platform for Internet-connected devices at their retail locations. They have no IoT expertise, and want a solution that minimizes the need for custom development. Which solution will best meet their requirement?
Azure IoT Central
You need to store, manage, and access SSL?TLS certificates for Contoso's corporate web apps. Which service should you use?
Azure Key Vault
Contoso Electronics is a global retailer. The Contoso Cloud Architecture team needs to simplify deployments of new environments in Azure, including Azure Resource Manager (ARM) templates, role-based access, and policies. Which Azure service enables delivery of templates for repeatable deployment and configuration of new subscriptions and environments?
Azure Blueprints
Azure Germany is available to
Eligible customers and partners globally doing business in the EU/EFTA
You need to implement multi-factor authentication for your Azure Active Directory users. However, you only want to prompt for an additional authentication factor when users are not in a trusted location on an unmanaged device. Which feature should you implement?
Azure AD Conditional Access
Contoso's Security team wants to implement selective use of multi-factor authentication (MFA) based on risk associated with the authentication request. Which service should they implement?
Azure AD Identity Protection
The Contoso Security team has implemented a new security policy. When users connect from an unusual location, they must be prompted for MFA. If accessing from an anonymous IP, they should be forced to reset their password. Which feature will you implement?
Azure AD Identity Protection
Contoso has implemented a hybrid, synchronized identity model, consisting of on-premises Active Directory and Azure Active Directory. They want to more effectively protect their on-premises identities from external threats. Which service should they choose?
Azure Advanced Threat Protection (ATP)
You need to automate and centrally manage various processes in VMs hosted both in Azure and on-premises. Which Azure service is best suited to this task?
Azure Automation
Contoso's Application Development team has been tasked with building a mobile app that can interact with users using spoken and written language. What service should they choose?
Azure Cognitive Services
Contoso has messages from a variety of sources (many Azure services) that need to be relayed to an application. Which Azure service would be best suited to the task?
Azure Event Grid
Contoso wants to migrate a legacy application to Azure that requires an file share accessible on a UNC path. You need to provide SMB file share and secure access. The solution should minimize administrative effort. Which service will you use?
Azure Files
Your company hosts a global web application. You need to ensure users can access the application from any country in the world with minimal latency. Which load balancing options should you use?
Azure Front Door
Contoso IT wants to develop modern application components using a server-less architecture. Which Azure service is best for hosting code as part of a services infrastructure?
Azure Functions
Tailspin Toys relies heavily on Azure Active Directory for cloud identity. They want to more effectively protect their identities from external threats. Which service should they choose?
Azure Identity Protection
Contoso Financial Services regularly creates documents containing sensitive customer data, including personally identifiable information. You need to ensure access is restricted to finance personnel, regardless of where the document travels. Which service should you use to classify and protect these documents?
Azure Information Protection
You need to define a group of Azure policies that defines and enforce corporate standards for new and existing Azure resource deployments in all of Contoso's Azure subscriptions. What should you use to meet this objective?
Azure Initiative
You need to prevent deletion of Azure resources in your subscription. Which feature will meet this requirement?
Azure Locks
The cloud infrastructure team at Contoso Corp is responsible for service recovery in the event of site outage at their on-premises datacenter. Which Azure service is best-suited for this task?
Azure Site Recovery
Contoso has deployed resources across multiple Azure regions for multiple business units. They have a requirement to generate cost and chargeback reporting to track the Azure costs to be charged back to each business unit. Which Azure feature should they use to simplify this task?
Azure Tags
Contoso Field services needs a solution to analyze telemetry data collected from their IoT devices at their retail locations. Their goal is to identify performance anomalies and identify opportunities to refine and improve device operation. Which Azure service will best meet this requirement?
Azure Time Series Insights
Contoso hosts a non-HTTP(S) mobile app available around the world. They need to ensure users can assess the application from any country in the world with minimal latency. Which load balancing options should they use?
Azure Traffic manager
In a Site-to-Site VPN, the ____ is the cross-premises gateway that connects your Azure Virtual Network with your on-premises VPN appliances
Azure Virtual Network Gateway
The Contoso Legal Department has asked Contoso IT to verify whether the Contoso's Azure environment meets regulatory requirements. Which service should you use to answer this question?
Compliance Manager
Contoso plants to implement a hybrid cloud architecture utilizing Azure. They need to connect on-premises application resources. The solution should minimize latency and maximize security. Which option should they choose?
ExpressRoute
Azure container instances provides feature parity for Linux and Windows containers
False
The Contoso Data Platform team wants to deploy an Apache Hadoop cluster in Azure. Which service should they choose?
HDInsight
The Contoso Field Services team is designing an application for monitoring thousands of sensors generation millions of data points daily. Which service can facilitate bi-directional communication with millions of IoT devices?
IoT Hub
Contoso Corp wants to develop an artificial intelligence (AI) app that it will host in Azure. The app will accept request through chat, interpreting requests with natural language processing (NLP). What service should they use for this solution?
Language Understanding (LUIS)
The Contoso Security teams wants to identify unsanctioned apps that may be responsible for data leakage and unwanted SaaS expenses (aka Shadow IT). What service should they use?
Microsoft Cloud App Security
Contoso IT has deployed an Azure VM scale set for a frontend web application. They want guidance on configuring the virtual network for these resources. Will the Azure Advisor tool provide recommendations for these existing resources?
No
Contoso is planning to move several on-premises services to Azure PaaS and IaaS solutions. The CIO has asked for a tool to estimate the cost of hosting these resources in Azure. Tom suggests Azure Cost Management to estimate costs prior to migration. Does Tom's solution meet the solution criteria?
No
To manage service lifecycle with more granularity, Contoso cloud architects have designed a model that involves a large number of resource groups. Will Contoso incur additional costs for the resources groups?
No
Your company is planning to host services in Azure. You want to leverage identities in Azure Active Directory, but still need to support on-premises identities in Active Directory MFA. Can you support single sign-on (SSO) and multi-factor authentication without synchronizing on-premises identities to Azure?
No