AZ900 Practice

What can you use to restrict the deployment of a virtual machine to a specific location?

- Azure Policy Azure Policy can help to create a policy for allowed regions, which enables you to restrict the deployment of virtual machines to a specific location.

What provides recommendations to reduce the cost of Azure resources?

- Azure Advisor Azure Advisor analyzes the account usage and makes recommendations based on its set and configured rules.

What can you use to manage servers across cloud platforms and on-premises environments?

- Azure Arc Azure Arc simplifies governance and management by delivering a consistent multi-cloud and on-premises management platform.

What allows you to orchestrate the deployment of resource templates, Azure Policy assignments, and resource groups?

- Azure Blueprints Azure Blueprints simplifies large scale Azure deployments by packaging key environment artifacts, such as Azure Resource Manager (ARM) templates, role-based access controls (RBAC), and policies, into a single blueprint definition. You can easily apply the blueprint to new subscriptions and environments.

You need to ensure that multi-factor authentication (MFA) is enabled on accounts with write permissions in an Azure subscription. What should you implement?

- Azure Policy Azure Policy is a service in Azure that enables you to create, assign, and manage policies that control or audit resources.

You need to recommend a solution for Azure virtual machine deployments. The solution must enforce company standards on the virtual machines. What should you include in the recommendation?

- Azure Policy Azure policies will allow you to enforce company standards on new virtual machines when combined with Azure VM Image Builder and Azure Compute Gallery. By using Azure Policy and role-based access control (RBAC) assignments, enterprises can enforce standards on Azure resources. But on virtual machines, these mechanisms only affect the control plane or the route to the virtual machine.

Which two tools can you use to create a new Azure virtual machine from a mobile device that runs Android? Each correct answer presents complete solution. Select all answers that apply. - the Azure portal - SSH - Remote Desktop - PowerShell in Azure Cloud Shell

- Azure Portal - PowerShell in Azure Cloud Shell The Azure portal can run on devices that have the Android operating system installed. The browser can be any type, such as Internet Explorer 11, Chrome, Firefox, or Safari (all the latest versions). When you visit the portal, you will see Cloud Shell. Users can then access Bash and PowerShell from within Cloud Shell. You can use Bash and PowerShell to create Azure virtual machines.

You plan to build a new solution in Azure that will use platform as a service (PaaS) products. What should you use to estimate the monthly costs?

- Azure Pricing calculator

What can you use to define the resources you want to provision in a declarative JSON format?

- Azure Rescource Manager (ARM templates) By using ARM templates, you can describe the resources you want to use in a declarative JSON format.

Which management layer accepts requests from any Azure tool or API and enables you to create, update, and delete resources in an Azure account?

- Azure Resource Manager (ARM) ARM is the deployment and management service for Azure. It provides a management layer that enables you to create, update, and delete resources in an Azure account.

What can you use to create resources in Azure and includes a validation step to ensure all resources are created in a specific order based on dependencies, in parallel and idempotent?

- Azure Resource Manager (ARM) templates

is the logical container used to combine and organize Azure resources.

- a resource group Resources are combined into resource groups, which act as a logical container into which Azure resources like web apps, databases, and storage accounts, are deployed and managed.

Which two scenarios are common billing use cases for resource tags? Each correct answer presents a complete solution. Select all answers that apply. -categorizing costs by department - associating costs with different environments - resizing underutilized virtual machines - identifying lower cost regions

- categorizing costs by department - associating costs with different environments You can use tags to categorize costs by department, such as human resources, marketing, or finance, or by environment, such as test or production. Resizing underutilized virtual machines is a good cost saving measure and provisioning resources in lower cost regions is a good practice, but resource tags do not help with this.

Which resource can you use to manage access, policies, and compliance across multiple subscription

- management groups Management groups can be used in environments that have multiple subscriptions to streamline the application of governance conditions. Resource groups can be used to organize Azure resources. Administrative units are used to delegate the administration of Azure AD resources, such as users and groups. Accounts are used to provide access to resources

Which Azure component allows you to replicate resources across a geography to ensure business continuity during a natural disaster at the primary site?

- region pairs Region pairs allow the replication of Azure resources across geographies to help ensure that a secondary region is available in case of any disaster at the primary region.

Which two components are created in an Azure subscription? Each correct answer presents a complete solution.

- resource and resource groups Resources can only be associated with a single subscription. Subscriptions may be grouped into management groups. An account may be associated with multiple subscriptions

For which resource does Azure generate separate billing reports and invoices by default?

- subscriptions Azure generates separate billing reports and invoices for each subscription so that you can organize and manage costs. Resource groups can be used to group costs, but you will not receive a separate invoice for each resource group. Management groups are used to efficiently manage access, policies, and compliance for subscriptions. You can set up billing profiles to roll up subscriptions into invoice sections, but this requires customization.