AZ-900 Questions
The credits provided as part of a free Azure account must be used within _______ days. A. 30 B. 60 C. 90
A. 30
Which of the following would be good to put a resource lock on? A. An ExpressRoute circuit with connectivity back to your on-premises network B. A non-production virtual machine used to test occasional application builds C. A storage account used to temporarily store images processed in a development environment
A. An ExpressRoute circuit with connectivity back to your on-premises network
What is the process of establish what level of access an authenticated person or service has? A. Authorization B. Identification C. Authentication D. None of the Above
A. Authorization
_____________ is a web traffic load balancer that enables you to manage traffic to your web applications. A. Azure Application Gateway B. Availability Set C. Scale Set
A. Azure Application Gateway
__________ maintains relationship with resources even after deployment? A. Azure Blueprint B. Azure Resource Manager Templates C. Both D. None
A. Azure Blueprint
_____________________ is Microsoft's cross-platform command-line experience for managing Azure resources. A. Azure CLI B. Azure PowerShell C. Azure Portal
A. Azure CLI
_____________ allows you to set cost alerts. A. Azure Cost Management B. Budgets C. Azure Cost Analysis
A. Azure Cost Management
You plan to store 20 TB of data in Azure. The data will be accessed infrequently and visualized by using Microsoft Power BI. You need to recommend a storage solution for the data. Which two solutions should you recommend? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. A. Azure Data Lake B. Azure Cosmos DB C. Azure SQL Data Warehouse D. Azure SQL Database E. Azure Database for PostgreSQL
A. Azure Data Lake C. Azure SQL Data Warehouse
_______________________ is an on-demand analytics job service that simplifies big data A. Azure Data Lake Analytics B. HDInsight C. Azure Analytics
A. Azure Data Lake Analytics
A big analysis service for machine learning A. Azure Databricks B. Azure Functions C. Azure App Service D. Azure Application Insights
A. Azure Databricks
____________ is a solution for easily running small pieces of code in the cloud. A. Azure Functions B. Azure App Service C. Web Apps
A. Azure Functions
_____________________ is a cloud service that you use to train, deploy, automate, and manage machine learning models. A. Azure Machine Learning Service B. Azure Machine Learning Studio C. Azure AI
A. Azure Machine Learning Service
___________is a service that is designed to monitor the performance of container workloads? A. Azure Monitor for containers B. Azure Service Health C. Application Insights D. Azure Monitor for VMs
A. Azure Monitor for containers
Which Azure service allows you to create, assign, and, manage policies to enforce different rules and effects over your resources and stay compliant with your corporate standards and service-level agreements (SLAs)? A. Azure Policy B. Azure Blueprints C. Azure Security Center D. Role-based Access Control
A. Azure Policy
______________ allows you to work with the resources in your solution as a group. A. Azure Resource Manager B. Resource Group C. Azure Manager
A. Azure Resource Manager
Your company has several business units. Each business unit requires 20 different Azure resources for daily operation. All the business units require the same type of Azure resources. You need to recommend a solution to automate the creation of the Azure resources. What should you include in the recommendations? A. Azure Resource Manager templates B. virtual machine scale sets C. the Azure API Management service D. management groups
A. Azure Resource Manager templates
_____________ are made up of blocks of data that can be managed individually. A. Block Blobs B. Append Blobs C. Page Blobs
A. Block Blobs
What is a distributed network of servers that can efficiently deliver web content to users? A. CDN (Content Delivery Network) B. HTTP C. Load Balancer D. DNS
A. CDN (Content Delivery Network)
Buying and installing your own datacenter is what kind of solution? A. CapEx Computing Solution B. OpEx - Operating Expense Cloud solution C. None D. Both
A. CapEx Computing Solution
A support engineer plans to perform several Azure management tasks by using the Azure CLI. You install the CLI on a computer. You need to tell the support engineer which tools to use to run the CLI. Which two tools should you instruct the support engineer to use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. A. Command Prompt B. Azure Resource Explorer C. Windows PowerShell D. Windows Defender Firewall E. Network and Sharing Center
A. Command Prompt C. Windows PowerShell
Which is ideal for large distributed data storage? A. Cosmos DB B. SQL database C. Data Lake D. Blob Storage
A. Cosmos DB
There has been an attack on your public-facing website, and the application's resources have been overwhelmed and exhausted, and are now unavailable to users. What service should you use to prevent this type of attack? A. DDoS protection B. Azure Firewall C. Network Security Group D. Application Gateway
A. DDoS protection
Cloud security is a shared responsibility between you and your cloud provider. Which category of cloud services requires the greatest security effort on your part? A. Infrastructure as a service (IaaS) B. Platform as a service (PaaS) C. Software as a service (SaaS)
A. Infrastructure as a service (IaaS)
What distributes traffic evenly among each system in a pool and can help you achieve both high availability and resiliency? A. Load Balancer B. Network Security Group C. Traffic Manager D. Gateway
A. Load Balancer
Microsoft recommends that you use ___________ disks for new VMs. A. Managed B. Unmanaged
A. Managed
Where can you obtain details about the personal data Microsoft processes, how Microsoft processes it, and for what purposes? A. Microsoft Privacy Statement B. Compliance Manager C. Azure Service Health D. Trust Center
A. Microsoft Privacy Statement
What is a Tag in Azure? A. Name/value pairs of text data that you can apply to resources and resource groups B. Name/value pairs of text data that you can apply to resource groups C. A movie D. Name/value pairs of text data that you can apply to resources
A. Name/value pairs of text data that you can apply to resources and resource groups
When planning to migrate a public website to Azure, you must plan to [pay monthly usage costs] Review the [text]. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. A. No change is needed B. Deploy a VPN C. pay to transfer all the website data to Azure D. reduce the number of connections to the website
A. No change is needed
What is an Azure region? A. One or more Azure data centers within a specific geographical location. B. A way of breaking networks into smaller networks. C. Firewall rules which define the flow of traffic in and out of Azure.
A. One or more Azure data centers within a specific geographical location.
Which of the following is Quickly scale able? A. OpEx B. CapEx C. Both D. None
A. OpEx
Which of the following solution is Agile? A. OpEx B. CapEx C. Both D. None
A. OpEx
Microsoft Excel macro is an example of what kind of service? A. PaaS B. DaaS C. SaaS D. IaaS
A. PaaS
Your company plans to request an architectural review of an Azure environment from Microsoft. The company currently has a Basic support plan. You need to recommend a new support plan for the company. The solution must minimize costs. Which support plan should you recommend? A. Premier B. Developer C. Professional Direct D. Standard
A. Premier
Udemy is an example of what kind of service? A. SaaS B. PaaS C. IaaS D. None of the above
A. SaaS
What defines the set of controls that are recommended for resources within that specified subscription or resource group? A. Security Policy B. Azure Monitor C. Azure Watch D. Azure Security Center
A. Security Policy
What is an identity that is used by a service or application? A. Service Principals B. MFA C. SSO D. All of the Above
A. Service Principals
_______________ provides a unique namespace in Azure for your data. A. Storage Account B. Container C. Blob
A. Storage Account
What uses the DNS server that's closest to the user to direct user traffic to a globally distributed endpoint? A. Traffic Manager B. Gateway C. Network security group D. Load balancer
A. Traffic Manager
What helps protect Azure SQL Database and Azure Data Warehouse against the threat of malicious activity? A. Transparent Data encryption (TDE) B. Azure Storage Service Encryption C. Azure Disk Encryption D. All of the above
A. Transparent Data encryption (TDE)
Which of the following situations would yield the most benefits from relocating an on-premises data store to Azure? A. Unpredictable storage demand that increases and decreases multiple times throughout the year. B. Long-term, steady growth in storage demand. C. Consistent, unchanging storage demand.
A. Unpredictable storage demand that increases and decreases multiple times throughout the year.
______________ let you create and manage a group of identical, load balanced VMs. A. VM scale sets B. Load Balancers C. Availability Sets
A. VM scale sets
Which of the following is true about virtual networks? A. You configure virtual networks through software. B. A virtual network accepts network traffic on all ports. You configure the firewall through virtual machines. C. Virtual networks are always reachable from the internet.
A. You configure virtual networks through software.
You have an on-premises network that contains several servers. You plan to migrate all the servers to Azure. You need to recommend a solution to ensure that some of the servers are available if a single Azure data center goes offline for an extended period. What should you include in the recommendation? A. fault tolerance B. elasticity C. scalability D. low latency
A. fault tolerance
An Azure __________ is a defined area of the world that contains at least one Azure Region. A. geography B. datacenter C. region
A. geography
Your company plans to deploy several web servers and several database servers to Azure. You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers. What should you include in the recommendation? A. network security groups (NSGs) B. Azure Service Bus c. a local network gateway D. a route filter
A. network security groups (NSGs)
What are Azure services for Network Security? Virtual network security Azure Application Gateway Azure Application Gateway Azure Firewall All of the above
All of the above
What are the options for a Policy Definition? Allowed VM SKU's Locations Allowed Resource Type Allowed Storage Account SKUs All of the above
All of the above
Which is an Azure Encryption service? Azure Storage Service Encryption Azure Disk Encryption Transparent data encryption (TDE) All of the above
All of the above
A dedicated public cloud for federal and state agencies in the United States -Azure Government -GDPR -ISO -NIST
Azure Government
______________is a suite of experiences that provide personalized guidance and support when issues with Azure services affect you? Azure Service Health Azure Monitor for VMs Application Insights Azure Monitor for Containers
Azure Service Health
What refers to a system's ability to stay operational during abnormal conditions? A. Availability B. Resiliency C. Both D. None
B
A free Azure account includes _________ in Azure credits. A. $100 B. $200 C. $300
B. $200
Managed disks have a maximum capacity of ______________. A. 4TB B. 32TB C. 2TB
B. 32TB
__________ is a high-availability offering that protects your applications and data from datacenter failures. A. Azure Datacenters B. Availability Zones C. Resource Groups
B. Availability Zones
To what should an application connect to retrieve security tokens? A. an Azure Storage account B. Azure Active Directory (Azure AD) C. a certificate store D. an Azure key vault
B. Azure Active Directory (Azure AD)
Which feature identifies VMs with low utilization? A. Azure Cost Management B. Azure Advisor C. Azure Cost Analysis
B. Azure Advisor
__________________ analyzes your resource configuration and usage telemetry and then recommends solutions that can help you improve the cost effectiveness, performance, high availability, and security of your Azure resources. A. Azure Portal B. Azure Advisor C. Azure AZ Module
B. Azure Advisor
____________ allows you to build and host web apps, mobile back ends, and RESTful APIs in the programming language of your choice without managing infrastructure. A. Web Apps B. Azure App Service C. JSON
B. Azure App Service
_____________ is Microsoft's globally distributed, multi-model database service. A. HDInsight B. Azure Cosmos DB C. Hadoop
B. Azure Cosmos DB
What is Azure service to stop Distributed Denial of Service attacks A. Azure Application Gateway B. Azure DDoS Protection C. Azure Firewall
B. Azure DDoS Protection
Which of the following Azure service is accessible thru Service message block(SMB)? A. Cosmos DB B. Azure Files C. Azure files D. Azure Queue E. Disk Storage
B. Azure Files
_____________ offers fully managed file shares in the cloud. A. Blob Storage B. Azure Files C. Storage Account
B. Azure Files
Provides the Platform for serverless code A. Azure Databricks B. Azure Functions C. Azure App Service D. Azure Application Insights
B. Azure Functions
____________ is a Hadoop service offering hosted in Azure that enables clusters of managed hadoop instances. A. Data Lake Analytics B. Azure HD Insight C. CosmosDB
B. Azure HD Insight
______________ is a fully managed IoT Software-as-a-Service solution that makes it easy to create products that connect the physical and digital worlds. A. IoT Hub B. Azure IoT Central C. HDInsight
B. Azure IoT Central
_________________ is a cloud service that helps you automate and orchestrate tasks, business processes, and workflows. A. Azure Functions B. Azure Logic Apps C. HDInsight
B. Azure Logic Apps
Your company plans to deploy an Artificial Intelligence (AI) solution in Azure. What should the company use to build, test, and deploy predictive analytics solutions? A. Azure Logic Apps B. Azure Machine Learning Studio C. Azure Batch D. Azure Cosmos DB
B. Azure Machine Learning Studio
_______________________ provides a set of cmdlets that use the Azure Resource Manager model for managing your Azure resources. A. Azure CLI B. Azure PowerShell C. Azure Portal
B. Azure PowerShell
Which of the following is designed for decoupled data transfer? A. Azure Files B. Azure Queue C. Cosmos DB
B. Azure Queue
What is the way to encrypt data at rest? A. Client-side encryption B. Azure Storage Service Encryption (SSE) C. Both D. None of the above
B. Azure Storage Service Encryption (SSE)
_________________ is optimized for storing massive amounts of unstructured data. A. Azure Files B. Blob Storage C. Archive Storage
B. Blob Storage
Which of the following would be the most efficient way to ensure a naming convention was followed across your subscription? A. Send out an email with the details of your naming conventions and hope it is followed B. Create a policy with your naming requirements and assign it to the scope of your subscription C. Give all other users except for yourself read-only access to the subscription. Have all requests to create resources sent to you so you can review the names being assigned to resources, and then create them.
B. Create a policy with your naming requirements and assign it to the scope of your subscription
What Assigns user friendly name to IP address? A. CDN (Content Delivery Network) B. DNS C. HTTP D. Load Balancer
B. DNS
What is the most flexible category of cloud services? A. PaaS B. IaaS C. DaaS D. SaaS
B. IaaS
How does Azure Traffic Manager reduce latency? A. It chooses only the fastest networks between endpoints. B. It chooses the endpoint that's closest to the user's DNS server. C. It caches content, similar to how content delivery networks work.
B. It chooses the endpoint that's closest to the user's DNS server.
Allows you to scale your applications and create high availability for your services. A. Availability Zone B. Load Balancer C. vNet
B. Load Balancer
Which Microsoft-affiliated forum is a good resource for Azure support, outside of support plan channels? A. Stack Overflow B. MSDN C. Experts Exchange
B. MSDN
______________explains what personal data Microsoft processes, how Microsoft processes it, and for what purposes? A. Compliance Manager B. Microsoft Privacy Statement C. Microsoft Trust Center D. Service Trust Portal
B. Microsoft Privacy Statement
________ is a website resource containing information and details about how Microsoft implements and supports security, privacy, compliance, and transparency in all Microsoft cloud products and services. A. Microsoft Privacy Statement B. Microsoft Trust Center C. Compliance Manager D. Service Trust Portal
B. Microsoft Trust Center
Your company is experimenting with a new solution with high risk of failure. What is preferred way to go? A. CapEx B. OpEx C. Both D. None
B. OpEx
Azure SQL Database is what kind of service? A. SaaS B. PaaS C. IaaS D. None of the above
B. PaaS
Suppose you have limited budget, How does Azure helps in terms of storage? A. Secures your data B. Pay As You go is cheaper than setting up own data center C. Helps with buying hardware D. All of the above
B. Pay As You go is cheaper than setting up own data center
A _________________ lets you create a secure connection to your virtual network from an individual client computer. A. Site-to-Site VPN B. Point-to-Site VPN C. ExpressRoute
B. Point-to-Site VPN
What are the valid ways to create a resource group? A. Portal, PowerShell, templates & SDK B. Portal, CLI, PowerShell, templates, SDK C. Portal, CLI, PowerShell & SDK D. Portal, CLI, PowerShell, templates
B. Portal, CLI, PowerShell, templates, SDK
Your company maintains and stores legal information and needs to follow security norms and procedure which is far more aggressive then the industry standards. What is an optimal solution? A. Wait for next gen cloud B. Private Cloud C. Hybrid cloud D. Public Cloud - Azure, AWS, etc
B. Private Cloud
A _________ is a set of datacenters deployed within a latency-defined perimeter and connected through a dedicated regional low-latency network. A. Paired Region B. Region C. Resource group
B. Region
Application security is a ________? A. User Responsibility B. Shared Responsibility C. Azure Responsibility D. Government Responsibility
B. Shared Responsibility
Which support plan guarantees Sev A response times of less than 1 hour? A. Basic B. Standard C. Developer
B. Standard
___________ disks are the recommended deployment option for most workloads. A. Standard HDD B. Standard SSD C. Premium SSD
B. Standard SSD
In which format does the data adheres to a schema? A. Unstructured data B. Structured data C. Semi-structure data D. None of the above
B. Structured data
Your network contains an Active Directory forest. The forest contains 5,000 user accounts. Your company plans to migrate all network resources to Azure and to decommission the on-premises data center. You need to recommend a solution to minimize the impact on users after the planned migration. What should you recommend? A. Implement Azure Multi-Factor Authentication (MFA) B. Sync all the Active Directory user accounts to Azure Active Directory (AD) C. Instruct all users to change their password D. Create a guest user account in Azure Active Directory (Active AD) for each user
B. Sync all the Active Directory user accounts to Azure Active Directory (AD)
Which calculator is used to estimate cost savings by migrating to Azure? A. Azure Price Calculator B. TCO Calculator
B. TCO Calculator
Suppose you work at a startup with limited funding. Why might you prefer Azure data storage over an on-premises solution? A. To ensure you run on a specific brand of hardware which will let you to form a marketing partnership with that hardware vendor. B. The Azure pay-as-you-go billing model lets you avoid buying expensive hardware. C. To get exact control over the location of your data store.
B. The Azure pay-as-you-go billing model lets you avoid buying expensive hardware.
You have several virtual machines in an Azure subscription. You create a new subscription. [The virtual machines cannot be moved to the new subscription.] Review the [text]. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. A. No change is needed B. The virtual machines can be moved to the new subscription C. The virtual machines can be moved to the new subscription only if they are all in the same resource group D. The virtual machines can be moved to the new subscription only if they run Windows Server 2016.
B. The virtual machines can be moved to the new subscription
Which of the following is not a Data Storage tier? A. Archived B. Warm C. Hot D. Cold
B. Warm
A combination of a fault domain and an update domain is called ______________________. A. a Resource Group B. an Availability Zone C. a redundant datacenter
B. an Availability Zone
Your company plans to deploy several web servers and several database servers to Azure. You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers. What should you include in the recommendation? A. Azure Service Bus B. network security groups (NSGs) C. a local network gateway D. a route filter
B. network security groups (NSGs)
You plan to migrate a web application to Azure. The web application is accessed by external users. You need to recommend a cloud deployment solution to minimize the amount of administrative effort used to manage the web application. What should you include in the recommendation? A. software as a service (SaaS) B. platform as a service (PaaS) C. infrastructure as a service (IaaS) D. database as a service (DaaS)
B. platform as a service (PaaS)
What is the maximum of Tag on an Resource 10 25 20 15
15
All Azure virtual machines have at least ________ disk(s). 1 2 3
2
You company is running an extremely predictable solution with known workload for foreseen long turn future. What can be a viable solution? A CapEx Computing Solution B OpEx - Operational Expense cloud solution C Both D None
A CapEx Computing Solution
You hold the most technical responsibility in what kind of solution? A On Premises B SaaS C IaaS D PaaS
A On Premises
What can be used to enforce standards? A Policies B Resource Group C Tags D All of the Above
A Policies
What is a logical container for resources deployed on Azure? A Resource Group B Resource Manager C Tags D Azure Group
A Resource Group
In which solution requires the least amount of management for users? A SaaS B IaaS C DaaS D PaaS
A SaaS
You don't need to manage the application in what kind of service? A SaaS B PaaS C On-Premises D IaaS
A SaaS
Each policy definition in Azure Policy has a what kind of effect? A Single B Mutliple C Double D None
A Single
Azure SQL database is designed to support what type of database? A Structured data B Semi-structured data C Unstructured data D None of the above
A Structured data
What is a service in Azure that you use to define, assign, and, manage standards for resources in your environment? A Azure DevOps B Azure Locations C Azure Policy D Azure Police
C Azure Policy
Azure Security Center is available with what options? A Standard B Free C Both D None
C Both
Option of SSD and HDD is an option for what kind of Azure database service? A Data Lake B Azure Queue C Disk Storage D Azure Files E Cosmos DB
C Disk Storage
Which service allows or denies inbound network traffic to your Azure resources? A Load Balancer B Gateway C Network security group D Traffic manager
C Network security group
What is the logical breakup of Virtual Network known as? A Hyper - V B VM Ware C SubNet D NoNet
C SubNet
A Video file is an example of what kind of data type? A Semi-structured data B Structured data C Unstructured data D None of the above
C Unstructured data
The max throughput for a VpnGw3 VPN gateway is _______________. A. 100Mbps B. 1Gbps C. 1.25Gbps
C. 1.25Gbps
What is the cost effective way to store your rarely used data? A. Cold B. Hot C. Archived D. Warm
C. Archived
Hosts web apps A. Azure Databricks B. Azure Functions C. Azure App Service D. Azure Application Insights
C. Azure App Service
A team of developers at your company plans to deploy, and then remove, 50 customized virtual machines each week. Thirty of the virtual machines run Windows Server 2016 and 20 of the virtual machines run Ubuntu Linux. You need to recommend which Azure service will minimize the administrative effort required to deploy and remove the virtual machines. What should you recommend? A. Azure Reserved Virtual Machines (VM) Instances B. Azure virtual machine scale sets C. Azure DevTest Labs D. Microsoft Managed Desktop
C. Azure DevTest Labs
______________ connections are private. Traffic does not go over the internet. A. Site-to-Site VPN B. Point-to-site VPN C. Azure ExpressRoute
C. Azure ExpressRoute
You want to store certificates in Azure to centrally manage them for your services. Which Azure service should you use? A. MSIP B. Azure AD C. Azure Key Vault D. Azure ATP
C. Azure Key Vault
Which is true about Azure Load Balancer? A. You must use Azure Load Balancer if you want to distribute traffic among your virtual machines running in Azure. B. Azure Load Balancer works with internet-facing traffic only. C. Azure Load Balancer distributes traffic among similar systems, making your services more highly available.
C. Azure Load Balancer distributes traffic among similar systems, making your services more highly available
________helps you diagnose and obtain support when an Azure service issue affects your resources? A. Azure Status B. Resource Health C. Azure Monitor D. Azure Service Health
C. Azure Monitor
"Azure Policies" provide a common platform for deploying objects to a cloud infrastructure and for implementing consistency across the environment. Is the quoted text correct or does it need to be changed? A. No Change is needed B. Resource groups provide C. Azure Resource Manager provides D. Management groups provides
C. Azure Resource Manager provides
Which is an example of Azure unstructured data storage? A. Cosmos DB B. SQL Database C. BLOB storage D. Data lake
C. BLOB storage
A ______________ is a distributed network of servers that can efficiently deliver web content to users. A. Load Balancer B. Application Gateway C. Content Delivery Network
C. Content Delivery Network
Almost all attackers are after? A. Firewall B. Network C. Data D. Compute
C. Data
What Azure service is used to move data to the cloud? A. Data immigration service B. Data backup service C. Data Migration Service D. All of the above
C. Data Migration Service
What kind of data storage is most beneficial in Azure? A. Predictable Data B. Consistent small data C. Data that fluctuates significantly with demand D. None of the above
C. Data that fluctuates significantly with demand
Which of these is the strongest way to protect sensitive customer data? A. Encrypt data as it sits in your database B. Encrypt data as it travels over the network C. Encrypt data both as it sits in your database and as it travels over the network
C. Encrypt data both as it sits in your database and as it travels over the network
Which is the most expensive data storage type? A. Archived B. Cold C. Hot D. Warm
C. Hot
What is the process of managing and assigning policy definitions by grouping a set of policies into a single item? A. Grouping B. Cluster C. Initiative D. Startup
C. Initiative
_________________ is a managed service, hosted in the cloud, that acts as a central message hub for bi-directional communication between your IoT application and the devices it manages. A. IoT Central B. App Service C. IoT Hub
C. IoT Hub
What option will you use to protect credit card information in document? A. Azure Firewall B. Azure Disk Encryption C. MSIPE - MS Azure Information Protection D. Azure Application Gateway
C. MSIPE - MS Azure Information Protection
What is the right formation? A. Management Group > Policy > Initiative B. Initiative > Management Group > Policy C. Management Group > Initiative > Policy D. Policy > Management Group > Initiative
C. Management Group > Initiative > Policy
What is a complete development and deployment environment in the cloud, with resources that enable organizations to deliver everything from simple cloud-based apps to sophisticated cloud-enabled enterprise applications? A. SaaS B. DaaS C. PaaS D. IaaS
C. PaaS
You want to deploy your own web application quickly without taking any responsibility of Operating System, Web server or system updates. What is the right solution for you? A. DaaS B. SaaS C. PaaS D. IaaS
C. PaaS
What is a service you can use to create, assign, and manage policies. These policies apply and enforce rules that your resources need to follow A. Tags B. Azure Manager C. Policies D. Resource Group
C. Policies
Which support plan is best for organizations with substantial dependence on Azure across multiple products? A. Standard B. Professional C. Premier
C. Premier
You want to setup a website or blog quickly. What could be an optimal solution? A. Hybrid B. Private Cloud C. Public Cloud D. Wait for the next gen cloud
C. Public Cloud
A ____________ is a container that holds related resources for an Azure solution. A. Resource Set B. Paired Datacenter C. Resource Group
C. Resource Group
Which of the following is not a feature of resource groups? A. Resources can be in only one resource group. B. Resources can be moved from one resource group to another resource group. C. Resource groups can be nested. D. Role based access control can be applied to the resource group.
C. Resource groups can be nested.
What does RBAC stands for in Azure? A. Role-based Azure control B. Role-based access commitment C. Role based access control D. Retro based access control
C. Role based access control
_____________ is a cloud-based EDW that leverages Massively Parallel Processing (MPP) to quickly run complex queries across petabytes of data. A. HDInsight B. CosmosDB C. SQL Data Warehouse
C. SQL Data Warehouse
Which of the following service is DaaS(Database as a Service) and based on MS SQL server? A. BLOB Storage B. Data Lake C. SQL database D. Cosmos DB
C. SQL database
Azure VMs are billed by the __________. A. Hour B. Minute C. Second
C. Second
A NoSQL data is an example of what kind of data type? A. Unstructured data B. Structured data C. Semi-structured data D. None of the above
C. Semi-structured data
_______ hosts the Compliance Manager service, and is the Microsoft public site for publishing audit reports and other compliance-related information relevant to Microsoft cloud services. A. Microsoft Trust Center B. Compliance Manager C. Service Trust Portal D. Microsoft Privacy Statement
C. Service Trust Portal
What is network latency? A. The amount of data that can fit on the connection. B. The distance data must travel to reach its destination. C. The time it takes for data to travel over the network.
C. The time it takes for data to travel over the network.
Which of these helps you most easily disable an account when an employee leaves your company? A. Enforce multi-factor authentication (MFA) B. Monitor sign-on attempts C. Use single sign-on (SSO)
C. Use single sign-on (SSO)
Sends encrypted traffic between an Azure virtual network and an on-premises location over the public Internet. A. Public Load Balancer B. Internal Load Balancer C. VPN Gateway
C. VPN Gateway
You plan to map a network drive from several computers that run Windows 10 to Azure Storage. You need to create a storage solution in Azure for the planned mapped drive. What should you create? A. an Azure SQL database B. a virtual machine data disk C. a Files service in a storage account D. a Blobs service in a storage account
C. a Files service in a storage account
Which two types of customers are eligible to use Azure Government to deploy a cloud solution? A. a Canadian government contractor B. a European government contractor C. a United States government entity D. a United States government contractor E. a European government entity
C. a United States government entity D. a United States government contractor
You have an on-premises network that contains 100 servers. You need to recommend a solution that provides additional resources to your users. The solution must minimize capital and operational expenditure costs. What should you include in the recommendation? A. a complete migration to the public cloud B. an additional data center C. a private cloud D. a hybrid cloud
C. a private cloud
Your Azure trial account expired last week. You are now unable to [create additional Azure Active Directory (Azure AD) user accounts.] Review the [text]. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. A. No change is needed B. start an existing Azure virtual machine C. access your data stored in Azure D. access the Azure portal
C. access your data stored in Azure
What is required to use Azure Cost Management? A. a Dev/Test subscription B. Software Assurance C. an Enterprise Agreement (EA) D. a pay-as-you-go subscription
C. an Enterprise Agreement (EA)
Your company hosts an accounting named App1 that is used by all the customers of the company. App1 has low usage during the first three weeks of each month and very high usage during the last week of each month. Which benefit of Azure Cloud Services supports cost management for this type of usage pattern? A. high availability B. high latency C. elasticity D. load balancing
C. elasticity
An organization that hosts its infrastructure [in a private cloud] can decommission its data center. Review the [text]. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. A. No change is needed. B. in a hybrid cloud C. in the public cloudD. on a Hyper-V host
C. in the public cloudD. on a Hyper-V host
Which support plan is best for organizations with substantial dependence on Azure across multiple products? A.Standard B.Professional C.Premier
C.Premier
__________is a service that monitors the availability, performance, and usage of your web applications, whether they're hosted in the cloud or on-premises? A Azure Service Health B Azure Monitor C Compliance Manager D Application Insights
D Application Insights
______________ is a workflow-based risk assessment dashboard within the Trust Portal that enables you to track, assign, and verify your organization's regulatory compliance activities related to Microsoft professional services and Microsoft cloud service? A Service Trust Portal B Microsoft Trust Center C Microsoft Privacy Statement D Compliance Manager
D Compliance Manager
Which of the following is designed for data analytics? A CosmosDB B BLOB Storage C SQL database D Data Lake
D Data Lake
You hold the most technical responsibility in what kind of solution? A DaaS (Database as a Service) B PaaS C SaaS D IaaS
D IaaS
What can be the organizing principle for Resource Groups? A. Organizing for lifecycle B. Organization for Authorization C. Organizing for billing D. All of the above
D. All of the above
Which of the following might be a good usage of tags? A. Using tags to associate a cost center with resources for internal chargeback B. Using tags in conjunction with Azure Automation to schedule maintenance windows C. Using tags to store environment and department association D. All of the above are good ways to use tags
D. All of the above are good ways to use tags
You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted automatically to change their password. Which Azure service should you use? A. Azure AD Connect Health B. Azure AD Privileged Identity Management C. Azure Advanced Threat Protection (ATP) D. Azure AD Identity Protection
D. Azure AD Identity Protection
What is a cloud-based security solution that identifies, detects, and helps you investigate advanced threats, compromised identities, and malicious insider actions directed at your organization? A. Azure Disk Encryption B. Azure Firewall C. MSIPE - Microsoft Azure Information Protection D. Azure Advanced Threat Protection (Azure ATP)
D. Azure Advanced Threat Protection (Azure ATP)
Detects and diagnoses anomalies in web apps A. Azure Databricks B. Azure Functions C. Azure App Service D. Azure Application Insights
D. Azure Application Insights
What allows you to define a repeatable set of Azure resources that implement and adhere to your organization's standards, patterns, and requirements? A. Management Group B. Initiative C. Azure Resource Manager Templates D. Azure Blueprint
D. Azure Blueprint
Which Azure service should you use to correlate events from multiple resources into a centralized repository? A. Azure Event Hubs B. Azure Analysis Services C. Azure Monitor D. Azure Log Analytics
D. Azure Log Analytics
What delivers a comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments? A. Application Insights B. Compliance Manager C. Azure Service Health D. Azure Monitor
D. Azure Monitor
What is a monitoring service that provides threat protection across all of your services both in Azure, and on-premises A. Azure Watch B. Azure Monitor C. Azure Police D. Azure Security Center
D. Azure Security Center
Which of the following services provides up-to-date status information about the health of Azure services? A. Compliance Manager B. Azure Monitor C. Service Trust Portal D. Azure Service Health
D. Azure Service Health
Which of the following is ideal for Video and Audio streaming? A. SQL Database B. Cosmos DB C. Data Lake D. BLOB storage
D. BLOB storage
Primary services to monitor the health of your apps and resources is/are? A. Azure Monitor B. Azure Service Health C. None D. Both
D. Both
What could be the most efficient way to ensure a naming convention was followed across your subscription? A. Send Memo B. Create Tag C. Run Reports D. Create Policy
D. Create Policy
Which of the following has an upfront cost? A. IaaS B. PaaS C. SaaS D. None of the above
D. None of the above
What is a setting that can be applied to any resource to block modification or deletion? A. Resource Groups B. Tags C. Policies D. Resource Locks
D. Resource Locks
Which Azure service allows you to configure fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs? A. Locks B. Policy C. Initiatives D. Role-based Access Control
D. Role-based Access Control
You plan to migrate several servers from an on-premises network to Azure. You need to identify the primary benefit of using a public cloud service for the servers. What should you identify? A. The public cloud is owned by the public, NOT a private corporation B. The public cloud is a crowd-sourcing solution that provides corporations with the ability to enhance the cloud C. All public cloud resources can be freely accessed by every member of the public D. The public cloud is a shared entity whereby multiple corporations each use a portion of the resources in the cloud
D. The public cloud is a shared entity whereby multiple corporations each use a portion of the resources in the cloud
You need to identify the type of failure for which an Azure availability zone can be used to protect access to Azure services. What should you identify? A. a physical server failure B. an Azure region failure C. a storage failure D. an Azure data center failure
D. an Azure data center failure
When you are implementing a software as a service (SaaS) solution, you are responsible for [configuring high availability] Review the [text]. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct. A. No change is needed. B. defining scalability rules C. installing the SaaS solution D. configuring the SaaS solution
D. configuring the SaaS solution
What are two characteristics of the public cloud? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. A. dedicated hardware B. unsecured connections C. limited storage D. metered pricing E. self-service management
D. metered pricing E. self-service management
You have an Azure environment that contains 10 virtual networks and 100 virtual machines. You need to limit the amount of inbound traffic to all the Azure virtual networks. What should you create? A. one network security group (NSG) B. 10 virtual network gateways C. 10 Azure ExpressRoute circuits D. one Azure firewall
D. one Azure firewall
Which is NOT a feature of Azure Application Gateway? A Web application firewall B URL rule-based routes C SSL termination D Cookie affinity E None of the above
E None of the above
Which of the following is NOT a benefit of storing data in Azure cloud? A. Cost Effective B. Auto backup C. Mutliple data types D. Global replication for safety E. Difficult to analyze
E. Difficult to analyze
What is a feature of Azure Active Directory? A. B2B identity services B. Application management C. Device Management D. Single Sign-On (SSO) E. Authentication F. All of the above
F. All of the above
Azure Machine Learning service does not support open-source technologies. T. True F. False
F. False
Azure file shares cannot be mounted concurrently by cloud or on-premises deployments of Windows, Linux, and macOS. T. True F. False
F. False
Preview features are covered by the same SLAs as General Availability features. T. True F. False
F. False
One resource can be part of many resource group? True or False?
False
Resource Groups can be nested? T or F?
False
T/F A platform as a service (PaaS) solution that hosts web apps in Azure provides full control of the operating systems that host applications.
False
T/F All the Azure resources deployed to a single resource group must share the same Azure region.
False
T/F An Azure service in general availability is released to a subset of Azure customers
False
T/F An Azure service in private preview is released to all Azure customers
False
T/F Azure services in public preview can be managed only by using the Azure CLI
False
T/F Companies can increase the Service Level Agreement (SLA) guaranteed uptime by purchasing multiple subscriptions
False
T/F If you assign a tag to a resource group, all the Azure resources in that resource group are assigned to the same tag.
False
T/F If you create two Azure virtual machines that use the B2S size, each virtual machine will always generate the same monthly costs.
False
T/F The cost of an Azure service in private preview decreases when the service becomes generally available.
False
T/F Two Azure subscriptions can be merged into a single subscription by creating a support request
False
T/F: Azure Advisor provides recommendations on how to configure the network settings on Azure virtual machines.
False
T/F: Azure Advisor provides recommendations on how to improve the security of an Azure Active Directory (Azure AD) environment.
False
T/F: If you create two Azure virtual machines that use the B2S size, each virtual machine will always generate the same monthly costs.
False
Tags applied at a resource group level are propagated to resources within the resource group. True False
False
Tags can be applied to any type of resource on Azure True False
False
An European policy that regulates data privacy and data protection -Azure Government -GDPR -ISO -NIST
GDPR
What is a load balancer designed for web applications at a TCP(Transport Level)? Gateway Load Balancer Network security group Traffic Manager
Gateway
An organization that defines international standards across all industries -Azure Government -GDPR -ISO -NIST
ISO
Which option has the maximum responsibility of Customer? IaaS PaaS SaaS Equal in all options
IaaS
You plan to deploy a critical line-of-business application to Azure. The application will run on an Azure virtual machine. You need to recommend a deployment solution for the application. The solution must provide a guaranteed availability of 99.99 percent. What is the minimum number of virtual machines (1-3) and the minimum number of availability zones (1-3) you should recommend for the deployment?
Minimum number of virtual machines: 2 Minimum number of availability zones: 2
An organization that defines standards used by the United States government -Azure Government -GDPR -ISO -NIST
NIST
An Azure administrator plans to run a PowerShell Script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Solution: Run the script from a computer that runs Chrome OS and uses Azure Cloud Shell. Does this meet the goal?
No
An Azure administrator plans to run a PowerShell Script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Solution: Run the script from a computer that runs Linux and has the Azure CLI tools installed. Does this meet the goal?
No
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify a DDoS protection plan. Does this meet the goal?
No
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify an Azure Traffic Manager profile.
No
Your company plans to purchase Azure. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Basic support plan. Does this meet the goal?
No
A virtual network is scoped to a single region. T. True F. False
T. True
Azure SQL Database can be deployed as a single database with its own set of resources managed via a logical server. T. True F. False
T. True
Data on the temporary disk may be lost during a maintenance event or when you redeploy a VM. T. True F. False
T. True
IoT Hub supports communications both from the device to the cloud and from the cloud to the device. T. True F. False
T. True
True or False. When naming a VM, the computer name and the virtual machine name can be different. T. True F. False
T. True
A virtual network allows Azure resources to securely communicate with each other, the internet, and on-premises networks. Yes Y No N
Yes
An Azure administrator plans to run a PowerShell Script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Solution: Run the script from a computer that runs macOS and has PowerShell Core 6.0 installed. Does this meet the goal?
Yes
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify an Azure firewall
Yes
Your company has an Azure subscription that contains the following unused resources" -20 user accounts in Azure Active Directory (Azure AD) -Five groups in Azure AD -10 Public IP addresses -10 network interfaces -You need to reduce the Azure costs for the company. Solution: You remove the unused user accounts. Does this meet the goal?
Yes
Your company plans to purchase Azure. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Premier support plan. Does this meet the goal?
Yes
Your company plans to purchase Azure. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Standard support plan. Does this meet the goal?
Yes
You plan to deploy a critical line-of-business application to Azure. The application will run on an Azure virtual machine. You need to recommend a deployment solution for the application. The solution must provide a guaranteed availability of 99.99 percent. What is the minimum number of virtual machines and the minimum number of availability zones you should recommend for deployment?
minimum number of virtual machines: 1 minimum number of availability zones: 3
An Azure subscription can only trust one directory. True False
True
Azure pricing is the same, whether you create an Azure account through the Azure website or if you add Azure to a Microsoft Enterprise Agreement. True False
True
Multi-factor authentication (MFA) provides additional security for your identities by requiring two or more elements for full authentication? True or False?
True
T/F A company can store resources in multiple subscriptions.
True
T/F A platform as a service (PaaS) solution that hosts web apps in Azure provides professional development services to continuously add features to custom applications.
True
T/F A platform as a service (PaaS) solution that hosts web apps in Azure provides the ability to scale the platform automatically.
True
T/F A single Microsoft account can be used to manage multiple Azure subscriptions.
True
T/F An Azure service in public preview is released to all Azure customers
True
T/F Azure provides flexibility between capital expenditure (CapEx) and operational expenditure (OpEx).
True
T/F Companies can increase the Service Level Agreement (SLA) guaranteed uptime by adding Azure resources to multiple regions
True
T/F If you set permissions to a resource group, all the Azure resources in that resource group inherit the permissions
True
T/F Most Azure services are introduced in a private preview before being introduced in public preview, and then in general availability.
True
T/F The Service Level Agreement (SLA) guaranteed uptime for paid Azure services is at least 99.9 percent
True
T/F When an Azure virtual machine is stopped, you continue to pay storage costs associated to the virtual machine.
True
T/F: Azure Advisor provides recommendations on how to reduce the cost of running Azure virtual machines.
True
T/F: Azure provides flexibility between capital expenditure (CapEx) and operational expenditure (OpEx)
True
T/F: When an Azure virtual machine is stopped, you continue to pay storage costs associated to the virtual machine.
True
Tags can be used for automated actions and organization of Resources? True or False
True
True or false: You can download published audit reports and other compliance-related information related to Microsoft's cloud service from the Service Trust Portal True False
True
While a blob is in Archive storage, it is offline and cannot be read, copied, overwritten, or modified. T. True F. False
True
