AZ900 - Additional Questions

Which of the following is the organization that defines standards used by the United States government?

(NIST) - The National Institute of Standards and Technology (NIST) promotes and maintains measurement standards and guidance to help organizations assess risk. It defines the standards that are used by the United States government as well as the US Department of Defense (DoD). National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) - Microsoft Compliance | Microsoft Docs

You are planning on purchasing Azure AD Premium for your Azure subscription. What is the SLA for this product?

99.99%

You need to create an Azure storage solution that will store messages created by an Azure web role. The messages will then be processed by an Azure worker role. What type of storage solution should you create?

A Queue service in a storage account

Select the cloud concept that is defined by: - Ability to rapidly deploy infrastructure with minimum amount of effort - Enabling rapid application testing and development to drive growth

Agility

You are managing multiple types of virtual machines on your Azure Virtual Network. You are managing network access to your VMs using Network Security Groups (NSG). You need to be able to "group" different VM types together for the purpose of easily assigning a single NSG policy to that group and have the policy then apply to all declared machines. Which Azure feature should you use to accomplish this task?

Application Security Groups

You need to prevent any modifications to the configuration of a critical VM in an Azure resource group such as changing the VM size. You also need to prevent any accidental deletion of the VM. What should you use to accomplish this task?

Apply a read-only lock on the VM. A read-only lock prevents both deletion AND modification of our locked resource.

Your company is in the initial planning states of its latest product in llama monitoring equipment called the Llama Camera. Since your company does not have a full staff of experienced IoT engineers, you are looking for a "turnkey" all-in-one Internet of Things (IoT) solution that provides both hardware with Azure certified microcontroller units (MCUs) and software solution that can easily connect to a fully managed IoT management service. Which Azure service/solution should you use for these requirements?

Azure Sphere

You are designing a big data solution infrastructure to analyze metrics and customer feedback on your website. This solution must query petabytes of data using massively parallel processes and provide reports for data analysis. Which Azure service should you use for this task?

Azure Synapse Analytics

You have a requirement to select the optimal Azure service for storing large amounts of directly-accessible data, including image files, videos, and backup files. Which service should you choose?

Blob storage in a storage account

What is the purpose of Microsoft Defender for Identity (formerly Azure Advanced Threat Protection)?

Cloud-based security solution that works with on-premises Active Directory to detect threats Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as Azure ATP) is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.

You are beginning to extend your on-premises data center into Azure. You have created a new Azure subscription and resource group called RG-One. You deploy two virtual machines into RG-One with the intent of promoting these to Active Directory domain controllers. What kind of cloud service would this be considered?

Infrastructure-as-a-Service (IaaS)

Which of the following are characteristic of public clouds?

Lower costs High scalability

Which application programming interface (API) types can be hosted on Cosmos DB? Choose all that apply.

MongoDB Cassandra SQL

Which of the following statements best describes a Network Security Group?

Network Security Groups contain inbound and outbound security rules enabling traffic to be filtered.

What is the purpose of Azure Cognitive Services?

Provides a variety of pretrained machine learning APIs to perform machine learning tasks on your data Azure Cognitive Services provides pretrained machine learning models via an API call that can be used to identify images, convert speech to text, and much more.

Which of the following statements are true for IaaS cloud services?

The client is responsible for all guest VM OS and application updates. Services can be scaled automatically to support system load.

Which Azure Support Plan offers a response time for critical business impact events of less than 1 hour, at the lowest cost?

Standard

Which Azure support plans can open technical support cases?

Standard Professional Direct Developer

Your company has several internal departments. Each department is responsible for purchasing its own IT equipment and services. The company plans to implement an Azure environment. You need to ensure that each department can use a different payment option for the Azure services it consumes. What should you create for each department?

Subscription

You've been given the task of creating a company-owned Azure network infrastructure that establishes a secure, private connection to all resources in those networks using only Azure's private network backbone. Your Azure resources are located in 2 different regions. What Azure services should you use to accomplish this task?

Create a virtual network in each region, and connect both networks with network peering.

You are deploying an application to Azure Virtual Machines. You want to ensure that the application will remain available in the event of a hardware failure or an OS update. What Azure concept will help most in this task?

Availability set An Availability set consists of 2 or more virtual machines in the same physical location within an Azure datacenter. This configuration ensures that only a subset of the virtual machines in an availability set will be affected in the event of hardware failure, OS update, or a complete data center outage; whereas, availability zones protect applications from complete Azure datacenter failures, which was not a requirement in this scenario.

Which Azure DevOps tool would you use to share applications and code libraries?

Azure Artifacts.

Which of the following tools can be used to manage Azure resources on a Google Chromebook?

Azure Cloud Shell Azure portal

Select which Azure service you should choose to run an application with the following requirements: - All software dependencies are bundled with the application source code - Bundled application is portable - Provision and run compute only when needed to save costs - Minimal management overhead

Azure Container Instances

Which Azure service can provide big data analysis for machine learning?

Azure Databricks

Your company wants to use Azure to manage all of their IoT devices. They are going to create the infrastructure themselves, but need a backend in Azure to manage the flow of data, and to ensure security as well as ease of deployment of new devices. Which Azure product or solution would be suitable?

Azure IoT Hub provides a managed and secure backend for millions of IoT devices.

Your company is planning to create a large, complex application using multiple types of microservices that will be deployed on Azure. You need to choose an Azure service that can orchestrate multiple containerized microservices with minimal management overhead. Which Azure service should you choose?

Azure Kubernetes Service (AKS)

Which Azure service provides Azure-native version control to manage your code?

Azure Repos Azure Repos is an Azure-native version control (or source control) service that exists inside of an Azure DevOps organization.

You are the system administrator for T-Bones Restaurant Group, Inc. You currently have an on-premises data center that consists of 50 Windows servers running IIS and SQL Server. IT management has dictated that all systems should be moved to Azure in the coming year. They also state that only platform-as-a-service (PaaS) solutions should be implemented. Which of the following meet these requirements?

Azure SQL Database Azure App Service

Which of the following are characteristic of private clouds?

High scalability [Limited] Improved security

You are beginning to extend your on-premises data center into Azure. You have created a new Azure subscription and resource group called RG-One. You deploy two virtual machines into RG-One with the intent of promoting these to Active Directory domain controllers. What kind of cloud service would this be considered?

Infrastructure-as-a-Service (IaaS) (Infrastructure-as-a-Service (IaaS)) - Infrastructure as a service (IaaS) is the use of on-demand computing infrastructure which is provisioned and managed over the internet. Deploying virtual machines into an Azure subscription would be considered an IaaS service.

You are the systems administrator for Highlander Cutlery, Inc. Your company has an on-premises network that contains multiple servers. As part of a headcount reduction, the company plans to reduce the following administrative responsibilities of network administrators. Backing up application data. Replacing failed server hardware. Managing physical server security. Updating server operating systems. Managing permissions to shared documents. The company plans to migrate several servers to Azure virtual machines. Which administrative responsibilities will be reduced after the planned migration?

Managing physical server security Replacing failed server hardware

Which of the following statements are true for IaaS cloud services?

The client is responsible for all guest VM OS and application updates. Services can be scaled automatically to support system load.

You are in the early stages of building your AI World Domination application. Which is the best Azure tool for managing your models, projects, data sets and more for the application?

Azure Machine Learning.

Which of the following are Platform-as-a-Service (PaaS) database offerings on Azure?

Azure SQL Database Cosmos DB

You need to implement a repeatable method of creating multiple Azure subscriptions that share the same policies, role assignments, and deployed resources across each subscription. The process of creating the above components must be automated. What Azure feature is able help with this task?

Azure Blueprints

You need to recommend an Azure service to support your company's machine learning initiatives. You need to recommend a fully managed service that can analyze data for machine learning models. This service must be familiar to employees who work with the Apache Spark framework and tools. Which service should you recommend?

Azure Databricks

Your company is starting development work on a large and very high-priority project. For this project, your team needs to quickly create temporary test environments that can be repeatably and easily deployed. You need to set limits on the amount of resources any team member can create in these temporary environments. What Azure feature or service should you use for this task?

Azure DevTest Labs

You are designing a hybrid network in which your Azure virtual network will need to establish a secure and private connection to your on-premises network via a high-speed leased line that directly connects to Azure. This connection cannot traverse the public internet. Which Azure service should you use to accomplish this task?

Azure ExpressRoute Azure ExpressRoute fulfills the requirement to establish a private connection from on-premises to Azure, and it does so by leasing a dedicated line to an Azure datacenter and does not use the public internet.

Which of the following statements regarding Azure Virtual Machines is true?

Deleted virtual machines will still incur charges for storage. ( Deleted virtual machines will still incur charges for storage ) - When a virtual machine is deleted, its managed disk remains in the Azure portal and can be used to create a new virtual machine. Until this disk is manually removed, you will incur charges for the disk whether it is in use or not.

What is the purpose of Azure Privileged Identity Management?

Manage, control, and monitor access to important resources in your organization Azure Privileged Identity Management (PIM) is a service in Azure Active Directory (Azure AD) that enables you to manage, control, and monitor access to important resources in your organization.

Which of the following is true in relation to Azure Management Groups?

Management Groups allow you to apply policies with flexible hierarchies to multiple subscriptions.

Your company, A Llama Guru, has increased its usage of Azure services over time. They are now using multiple subscriptions across various sectors of the company for a wide range of projects. As the number of subscriptions has increased, managing access and permissions across your numerous subscriptions has become quite cumbersome. What would you recommend to easily manage multiple subscriptions from a single source?

Management groups

You are looking to build and host your website on Azure without needing to manage the underlying infrastructure. Which type of Cloud service should you choose?

PaaS

What kind of service architecture is Azure DevOps?

SaaS

Which types of customers are eligible to use Azure Government to develop a cloud solution?

United States government entity United States government contractor Alabama Coushatta Tribe of Texas

You have a web application on Azure with a number of virtual machines to run various processes. One of these virtual machines is in charge of processing images. Which Azure service could you use to route all requests for the "/image/" URLs to this specific VM?

Use an Application Gateway to route URLs containing the "/image/" path.

Choose all components that are required to create a secure IPsec tunnel over the public internet from an Azure virtual network to an on-premises location.

VPN device Virtual network gateway Gateway subnet

You are designing an Azure infrastructure solution for your company's application. This solution must continue to function if a single datacenter goes offline. For compliance reasons, your infrastructure and data must reside in the same general location. How should you design this infrastructure?

Within a single region, replicate your infrastructure across multiple availability zones in that region. Availability zones provide a level of fault tolerance within a single region (or general location). Each availability zone is a self-contained datacenter. By replicating resources across multiple availability zones, if 1 zone (or datacenter) goes offline, the other availability zones in the same region can continue to host your application.