AZ-900 test prep

Which of the following Azure Resources are required in order to have a virtual machine? Only choose services that are required, not ones that are optional. A Storage Account B Network Interface Card (NIC) C Public IP Address D Virtual Network

A B D (A virtual machine needs a network card, storage and a virtual network. It does not need a public IP address. In fact, most Azure VMs are private and are not accessible from the Internet.)

True or false: Azure charges for bandwidth used <b>inbound</b> to Azure FALSE TRUE

false (Ingress bandwidth is free. You pay for egress (outbound).)

How many availability zones are there in each region (for regions that have them)? Unlimited 3 2 1

3 (For regions that support availability zones, you can deploy your resources to zone 1, 2 or 3. There are 3 zones in each region.)

Which of the following is the best approach when you need to copy large amount of files between two Azure Storage accounts? A Storage Explorer B Download the files to your local machine and upload them to the new account C AzCopy D Use Azure API programmatically

C (AzCopy allows you to copy files between two Azure Storage accounts without having to download the files to your local machine. The other options are slower, and more expensive.)

It can be said that most services in Azure have a public endpoint by default. What is a public endpoint? A Provides you a static IP address for which the outside world can use to communicate with your application. B Blocks access to your applications and data from inside Azure. C Provides you a static IP address from which your application always uses to communicate with the outside world. D Enables access to your data or application from outside the virtual network.

D (A public endpoint is effectively a URL that you can use to access data and applications from outside a virtual network. This includes the public Internet. Applications inside Azure can also access this using the public endpoint. Of course, there is often additional security on the application or data to prevent malicious use of this endpoint.)

Which of the following scenarios would Azure Policy be a recommended method for enforcement? A Add an additional prompt when creating a resource without a specific tag to ask the user if they are really sure they want to continue? B Require a virtual machine to always update to the latest security patches C Allow only one specific roles of users to have access to a resource group D Prevent certain Azure Virtual Machine instance types from being used in a resource group

D (Azure Policy can add restrictions on storage account SKUs, virtual machine instance types, and rules relating to tagging of resources and groups. It cannot prompt a user to ask them if they are sure.)

What is the fastest connection type between your on-premesis network and Microsoft Azure, if money was not a concern? A Site-to-Site VPN B Point-to-Site VPN C Private Link D Express Route

D (Express Route is a private connection from your data center to a Microsoft Azure partner, which has a direct fiberoptic connection into Azure. If you're looking for reliable, high-speed connections into Azure, you should be looking at Express Route.)

Which storage redundancy option is the cheapest? A RA-GRS B ZRS C GRS D LRS

D (LRS (Locally Redundant Storage) has the lowest price of all the options.)

Availability Zones

Unique physical locations within an Azure region, made up of one or more data centers; there is a minimum of three zones in each region; you can manually place your resources in an availability zone for highest availability

Which Azure AD licenses (select two) are made available through Azure? A Azure Active Directory Free B Basic C Enterprise Tier 2 D Office 365 E Business Tier 1

a and d (Azure Active Directory provides the following licenses: Free, Office 365, Premium P1, and Premium P2.)

Azure Monitor

a centralized dashboard that collects all the logs, metrics and events from your resources

What affect does using a "read only" resource lock on a Azure Storage Account have? A Only admin users can update the contents of the storage account. B The storage account cannot have its properties altered but it doesn't affect the data itself. C The data on the storage account cannot change. D A resource lock has no affect on a storage account.

b (Resource Locks only affect your ability to make changes to a resource within Azure but do not affect the resource itself. For instance, a resource lock on a virtual machine still allows the VM to operate but will prevent someone from restarting a VM. Similarly, a resource lock on a storage account only affects the Azure properties of the account.)

Which feature within Azure alerts you to service issues that happen in Azure itself, not specifically related to your own resources? A Azure Security Center B Azure Portal Dashboard C Azure Service Health D Azure Monitor

c (Azure Service Health - lets you know about any Azure-related service issues including region-wide downtime)

Which of the following services would NOT be considered Infrastructure as a Service? A Virtual Network B Virtual Machine C Azure Functions App D Virtual Network Interface Card (NIC)

c (Functions are small pieces of code that you give to Azure to run for you, and you have no access to the underlying infrastructure.)

What benefit does Azure Scalesets provide when it comes to virtual machines in Azure? A Physically separates virtual machines so that if one goes down, the others do not go down. B Keeps virtual machines close together, for the fastest communication between them. C Can manage groups of virtual machines as one unit. D Allows you to monitor VM capacity and send alerts to the operations team.

c (Scalesets are groups of virtual machines, managed as a single unit. You can set rules for scaling up or scaling down.)

Which of the following are examples of Azure Sovereign Regions? A Azure Brazil B Azure South Africa C Azure China D Azure US Government

c and d (Azure Soverign Regions are dedicated to specific sovereign entities. They are separate from the main Azure Public Cloud network, and have specific region-level restrictions on them. Azure Australia is also an example of a sovereign region in that it's dedicated to government customers.)

Which of the following are factors in Total Cost of Ownership? Choose all that apply. A. Cost to access the Internet B. Salary costs of employees managing the servers C. Cost of electricity D. Real estate costs E. all of the above

e (All of the above. The total cost of running a server includes not only the cost of the machine (hardware), and the software, but also the costs of hosting that machine including electricity, real estate, Internet, and salaries of the employees needed to manage the machine.)

True of false: Azure Powershell scripts and Command Line Interface (CLI) scripts are entirely compatible with each other? FALSE TRUE

false (No, PowerShell is it's own language, different than CLI)

True or False: An Azure Storage Account can have both a public endpoint and a private endpoint at the same time. FALSE TRUE

true (The public endpoint can be enabled, restricted to certain networks or disabled. Multiple private endpoints can be created. There is no restriction preventing you from having both a public endpoint accessible from the Internet and one or more private endpoints as well.)

True or False: Under the Infrastructure as a Service model, Azure is responsible for managing the physical host, physical network, and physical datacenter. T or F

true (Yes, Azure still manages the hardware itself, the hypervisor and all of the physical elements behind the scenes)