Azure - AZ-900 - Part 6

How many minutes per month downtime is 99.99% availability?

4

What type of documents does the Microsoft Service Trust Portal provide?

A list of standards that Microsoft follows, pen test results, security assessments, white papers, faqs, and other documents that can be used to show Microsoft's compliance efforts.

What software is used to synchronize your on premises AD with your Azure AD?

AD Connect

What advantage does an Application Gateway have over a Load Balancer?

Application gateway understands the HTTP protocol and can interpret the URL and make decisions based on the URL

Which of the following are one of the advantages of running your cloud in a private cloud?

Assurance that your code, data and applications are running on isolated hardware, and on an isolated network.

__________ is a command-line utility that you can use to copy blobs or files to or from a storage account.

AzCopy

Which Azure management tool analyzes your usage of Azure and makes suggestions specifically targeted to help you optimize your usage of Azure regarding cost, security and performance?

Azure Advisor

Which tool within the Azure Portal will make specific recommendations based on your actual usage for how you can improve your use of Azure?

Azure Advisor

____________ allows you to use your own domain names for your internal, private Azure virtual machines.

Azure DNS Private Zones

Which type of Azure storage supports the Server Message Block (SMB) protocol and the Network File System (NFS) protocol for accessing files?

Azure File Storage

Which of the following services would NOT be considered Infrastructure as a Service?

Azure Functions App

If you wanted to get an alert every time a new virtual machine is created, where could you create that?

Azure Monitor

Which Azure governance tool allows you to implement compliance audits to find instances of Azure resources that do not follow the company policy, or even prevent those resources from being created?

Azure Policy

Which feature within Azure alerts you to service issues that happen in Azure itself, not specifically related to your own resources?

Azure Service Health

What software, using an intuitive interface, can be downloaded for Windows, macOS or Linux that helps you manage your Azure cloud storage resources from your desktop?

Azure Storage Explorer

_______________ is a service that offers a Windows 10 or Windows 11 virtual machine that runs in the cloud for use as your workstation.

Azure Virtual Desktop

What does it mean that security is a <b>shared model<b> in Azure?

Both users and Azure have responsibilities for security

Which feature of Azure AD allows you to restrict access to a resource based on the geographical location of the user?

Conditional Access

Paying per GB for an unmanaged storage account is an example of what type of cloud pricing model?

Consumption model

What is the advantage of "passwordless authentication" over "password plus multi-factor authentication"?

Convenience

____________ is the strategy of layering multiple security defenses on top of each other to provide stronger protection than any single defensive mechanism alone.

Defense in depth

TRUE OR FALSE: Through Azure Active Directory one can control access to an application but not the resources of the application.

FALSE

True or false: Azure PowerShell scripts and Command Line Interface (CLI) scripts are entirely compatible with each other?

FALSE

What is the most common and recommended type of storage account?

General Purpose V2

The __________ model of cloud computing mixes resources in the Azure cloud with resources in your own data center.

Hybrid Cloud

Which style of computing is easiest when migrating an existing hosted application from your own data center into the cloud?

IaaS

How do you invite a person who is not an employee of your company to use one of your applications protected by Azure Active Directory?

Invite them as a Guest user

What is an Azure Subscription?

It is the level at which services are billed. All resources created under a subscription are billed to that subscription.

How does Multi-Factor Authentication make a system more secure?

It requires the user to have access to their verified phone in order to log in.

When deploying a virtual machine into an availability set, how does Azure treat that VM differently?

It will place the VM on a physically separate server and roll out Azure updates to it in a staggered manner.

What data format are ARM templates created in?

JSON

Which of the following resources are not considered Compute resources?

Load Balancer

Which two features does Virtual Machine Scale Sets provide as part of the core product? Pick two.

Load balancing between virtual machines, Autoscaling of virtual machines.

What are groups of subscriptions called?

Management Groups

How do you control the traffic flowing between two subnets on the same virtual network?

Network Security Group

Deploying Azure App Services applications consists of what two components? Pick two.

Packaged code, Configuration

Which Azure service can be enabled to enable Multi-Factor Authentication for administrators but not require it for regular users?

Privileged Identity Management

Why should you divide your application into multiple subnets as opposed to having all your web, application and database servers running on the same subnet?

Separating your application into multiple subnets allows you to have different NSG security rules for each subnet, which can make it harder for a hacker to get from one compromised server onto another

On which Azure website are you likely to find the results of Pen Tests and Security Assessments conducted by third-parties regarding Azure?

Service Trust Portal

Which of the following is NOT one of the factors of Multi-Factor Authentication (MFA)?

Something you can do.

TRUE OR FALSE: Azure Tenant is a dedicated and trusted instance of Azure Active Directory that's automatically created when your organization signs up for a Microsoft cloud service subscription.

TRUE

True or false: Azure Monitor allows you to monitor activity logs from Azure Active Directory.

TRUE

With Azure public cloud, anyone with a valid credit card can sign up and get services immediately, subject to geography restrictions

TRUE

Where can you go to see what standards Microsoft is in compliance with?

Trust Center

What operating systems does an Azure Virtual Machine support?

Windows and Linux

What two advantages does cloud computing elasticity give to you? Pick two.

You can save money, you can serve users better during peak traffic periods by automatically adding more capacity.

What is the significance of the Azure region? Why is it important?

You must select a region when creating most resources, and the region is the area of the world where those resources will be physically located.

What is the core problem that you need to solve in order to have a high-availability application?

You need to avoid single points of failure.

What happens if Azure does not meet its own Service Level Agreement guarantee (SLA)?

You will be financially refunded a small amount of your monthly fee.

What are resource groups?

a folder structure in Azure in which you organize resources like databases, virtual machines, virtual networks, or almost any resource