AZ-900 Practice 3

Which two features does Virtual Machine Scale Sets provide as part of the core product? Pick two.

- Load balancing between virtual machines - Autoscaling of virtual machines

Deploying Azure App Services applications consists of what two components? Pick two.

- Packaged code - Configuration

What two advantages does cloud computing elasticity give to you? Pick two.

- You can save money - You can serve users better during peak traffic periods by automatically adding more capacity

How many minutes per month downtime is 99.99% availability?

4 minutes

How many hours are available free when using the Azure B1S General Purpose Virtual Machines under a Azure free account in the first 12 months?

750 hours

What is the service level agreement for two or more Azure Virtual Machines that have been placed into the same Availability Set in the same region?

99.95%

What are resource groups?

A folder structure in Azure in which you organize resources like databases, virtual machines, or almost any resource

What type of documents does the Microsoft Service Trust Portal provide?

A list of standards that Microsoft follows, pen test results, security assessments, white papers, FAQs, and other documents that can be used to show Microsoft's compliance efforts

Which of the following would be an example of an Internet of Things (IoT) device?

A refrigerator that monitors how much milk you have left and sends you a text message when you are running low

What software is used to synchronize your on premises AD with your Azure AD?

AD Connect

If you have an Azure free account, with a $200 credit for the first month, what happens when you reach the $200 limit?

All services are stopped and you must decide whether you want to convert to a paid account or not

What is the name of the open source project run by the Apache foundation that maps to the HDInsight tools within Azure?

Apache Hadoop

What advantage does an Application Gateway have over a Load Balancer?

Application gateway understands the HTTP protocol and can interpret the URL and make decisions based on the URL

Which of the following are one of the advantages of running your cloud in a private cloud?

Assurance that your code, data and applications are running on isolated hardware, and on an isolated network

Which tool within the Azure Portal will make specific recommendations based on your actual usage for how you can improve your use of Azure?

Azure Advisor Azure Advisor - a tool that will analyze your use of Azure and make you specific recommendations based on your usage across availability, security, performance, and cost categories

Which Azure service, when enabled, will automatically block traffic to or from known malicious IP addresses and domains?

Azure Firewall Azure Firewall has a threat-intelligence option that will automatically block traffic to/from bad actors on the Internet

Which of the following services would NOT be considered Infrastructure as a Service?

Azure Functions App

What is the recommended way within Azure to store secrets such as private cryptographic keys?

Azure Key Vault Azure Key Vault - the modern way to store cryptographic keys, signed certificates, and secrets in Azure

If you wanted to get an alert every time a new virtual machine is created, where could you create that?

Azure Monitor

Which feature within Azure alerts you to service issues that happen in Azure itself, not specifically related to your own resources?

Azure Service Health

What does it mean that security is a "shared model" in Azure?

Both users and Azure have responsibilities for security

What is the name of the collective set of APIs that provide machine learning and artificial intelligence services to your own applications like voice recognition, image tagging, and chat bot?

Cognitive Services

Which database product offers "sub 5 millisecond" response times as a feature?

Cosmos DB Cosmos DB is low latency, and even offers sub 5-ms response times at some levels

TRUE OR FALSE: Through Azure Active Directory one can control access to an application but not the resources of the application.

False Azure AD an control access of both the apps and the app resources

True or false: Azure PowerShell scripts and Command Line Interface (CLI) scripts are entirely compatible with each other?

False PowerShell is it's own language, different than CLI

TRUE OR FALSE: If you wanted to deploy a virtual machine to China, you would just choose the China region from the drop down.

False Some regions of the world require special contracts with the local provider such as Germany and China

Which style of computing is easiest when migrating an existing hosted application from your own data center into the cloud?

IaaS

How do you stop your Azure account from incurring costs above a certain level without your knowledge?

Implement the Azure spending limit in the Account Center

What is an Azure Subscription?

It is the level at which services are billed. All resources created under a subscription are billed to that subscription

How does Multi-Factor Authentication make a system more secure?

It requires the user to have access to their verified phone in order to log in

What data format are ARM templates created in?

JSON

Which of the following resources are not considered Compute resources?

Load Balancer This is a networking product, it does not execute your code

What are groups of subscriptions called?

Management Groups

For tax optimization, which type of expense is preferable?

OpEx You can fully deduct expenses when they are incurred

Which Azure service can be enabled to enable Multi-Factor Authentication for administrators but not require it for regular users?

Privileged Identity Management Can be used to ensure privileged users have to jump through additional verification because of their role

What does the letter R in RBAC stand for?

Role

Which of the following elements is considered part of the "network" layer of network security?

Separate servers into distinct subnets by role

Why should you divide your application into multiple subnets as opposed to having all your web, application and database servers running on the same subnet?

Separating your application into multiple subnets allows you to have different NSG security rules for each subnet, which can make it harder for a hacker to get from one compromised server onto another

What is a policy initiative in Azure?

The ability to group policies together

What is the goal of a DDoS attack?

To overwhelm and exhaust the application resources

TRUE OR FALSE: Azure Tenant is a dedicated and trusted instance of Azure Active Directory that's automatically created when your organization signs up for a Microsoft cloud service subscription.

True

True or false: If your feature is in the General Availability phase, then your feature will receive support from all Microsoft support channels.

True

With Azure public cloud, anyone with a valid credit card can sign up and get services immediately

True Public cloud is open to the public in all countries that Azure supports

Where can you go to see what standards Microsoft is in compliance with?

Trust Center

Where is Azure's region in the Middle East located?

UAE

What operating systems does an Azure Virtual Machine support?

Windows and Linux

What does it mean if a service is in Private Preview mode?

You must apply to get selected in order to use that service

What is the significance of the Azure region? Why is it important?

You must select a region when creating most resources, and the region is the area of the world where those resources will be physically located

What is the core problem that you need to solve in order to have a high-availability application?

You need to avoid single points of failure

What happens if Azure does not meet its own Service Level Agreement guarantee (SLA)?

You will financially refunded a small amount of your monthly fee Microsoft offers a refund of 10% or 25% depending on how badly they miss your service guarantee