AZ-900

Read and write - Role-based access control, using an allow model, grants all of the permissions assigned in all of the assigned roles.

A user is simultaneously assigned multiple roles that use role-based access control. What are their actual permissions? The role permissions are: Role 1 - read || Role 2 - write || Role 3 - read and write.

Virtual machine scale sets

Azure automates most of that work. Scale sets allow you to centrally manage, configure, and update a large number of VMs in minutes. The number of VM instances can automatically increase or decrease in response to demand, or you can set it to scale based on a defined schedule.

Azure policy lets you create policies and initiatives (groups of policies) that prevent non-compliant resource from being created.

How can you prevent creation of non-compliant resources, without having to manually evaluate each resource?

One

How many resource groups can a resource be in at the same time?

Public IP Addresses

If you wanted to reduce the cost of you azure subscription, what one would you remove?

IaaS consists of virtual machines and networking provided by the cloud provider. The customer is responsible for the OS and applications. The cloud provider is responsible for the OS in PaaS and SaaS.

In which cloud service model is the customer responsible for managing the operating system? Select only one answer. Infrastructure as a service (IaaS) platform as a service (PaaS) software as a service (SaaS)

Scaling horizontally increases compute capacity by adding instances of resources, such as adding virtual machines to the configuration.

Increasing the capacity of an application by adding additional virtual machine is called [answer choice]. Select only one answer. agility high availability horizontal scaling vertical scaling

You scale vertically to increase compute capacity by adding RAM or CPUs to a virtual machine. Scaling horizontally increases compute capacity by adding instances of resources, such as adding virtual machines to the configuration.

Select the answer that correctly completes the sentence. Increasing compute capacity for an app by adding RAM or CPUs to a virtual machine is called [answer choice]. Select only one answer. disaster recovery high availability horizontal scaling vertical scaling

Elasticity refers to the ability to scale resources as needed, such as during business hours, to ensure that an application can keep up with demand, and then reducing the available resources during off-peak hours.

Select the answer that correctly completes the sentence. An example of [answer choice] is automatically scaling an application to ensure that the application has the resources needed to meet customer demands. Select only one answer. agility elasticity geo-distribution high availability

Agility means that you can deploy and configure cloud-based resources quickly as app requirements change.

Select the answer that correctly completes the sentence. Deploying and configuring cloud-based resources quickly as business requirements change is called [answer choice]. Select only one answer. agility elasticity high availability scalability

geography

Select the answer that correctly completes the sentence. In a region pair, a region is paired with another region in the same [answer choice]. Select only one answer. availability zone datacenter geography resource group

geo-location

Select the answer that correctly completes the sentence. In cloud computing, [answer choice] allows you to deploy applications to regional datacenters around the world. Select only one answer. disaster recovery elasticity geo-location high availability

Software as a Service (SaaS)

Subscriber Manages: * Data & Access Cloud Provider Manages: * Applications * Runtime * Operating System * Virtual Machine * Compute * Networking * Storage

Platform as a Service (PaaS)

Subscriber Manages: * Data & Access * Applications Cloud Provider Manages: * Runtime * Operating System * Virtual Machine * Compute * Networking * Storage

Infrastructure as a Service (IaaS)

Subscriber Manages: * Data & Access * Applications * Runtime * Operating System * Virtual Machine Cloud Provider Manages: * Compute * Networking * Storage

Azure Container Apps

They allow you to get up and running right away, they remove the container management piece, and they're a PaaS offering. have extra benefits such as the ability to incorporate load balancing and scaling. These other functions allow you to be more elastic in your design.

Infrastructure as a Service (IaaS)

Virtual Machines are ......

multi-factor authentication (MFA)

What Azure AD feature can you use to configure security authentication that requires users to use their mobile phone to sign in? Select only one answer. Azure Information Protection (AIP) Microsoft Defender for Cloud Microsoft Entra Verified ID multi-factor authentication (MFA)

Tags allow you to associate metadata with a resource to help keep track of resource management, costs and optimization, security, and so on.

What Azure feature can help stay organized and track usage based on metadata associated with resources?

Region pairs

What Azure feature replicates resources across regions that are at least 300 miles away from each other?

The five recommendation categories for Azure Advisor are: Reliability, Security, Performance, Operational Excellence, and Cost.

What are the 5 recommendation categories for Azure Advisor?

Azure CLI and Azure PowerShell

What are two Azure command line tools that are installable on Windows, Mac, and Linux?

Azure Container Instances & Azure Kubernetes Service (AKS)

What are two services that allow you to run applications in containers? Each correct answer presents a complete solution. Select all answers that apply. Azure Container Instances Azure Functions Azure Logic Apps Azure Kubernetes Service (AKS)

a resource lock

What can be applied to a resource to prevent accidental deletion? Select only one answer. a resource lock a resource tag a policy an Azure Reservation

a lock

What can you apply to an Azure virtual machine to ensure that users cannot change or delete the resource? Select only one answer. a lock a tag a user-assigned managed identity Conditional Access

Azure role-based access control (RBAC)

What can you use to allow a user to manage all the resources in a resource group? Select only one answer. Azure Key Vault Azure role-based access control (RBAC) resource locks resource tags

Service endpoints are used to expose Azure services to a virtual network, providing communication between the two

What can you use to connect Azure resources, such as Azure SQL databases, to an Azure virtual network? Select only one answer. ExpressRoute network security groups (NSGs) peering service endpoints

Conditional Access

What can you use to ensure that a user can only access applications from compliant devices? Select only one answer. Conditional Access hybrid identity multi-factor authentication (MFA) single sign-on (SSO)

Azure Service Health

What can you use to find information about planned maintenance for Azure services that are critical to your organization? Select only one answer. Azure Advisor Azure Monitor Azure Service Health Log Analytics

Azure Arc

What can you use to manage servers across cloud platforms and on-premises environments? Select only one answer. Azure Arc Azure CLI Azure Monitor Azure PowerShell

Azure Virtual Desktop

What can you use to provide Mac and Android users with access to a Windows environment that will run Windows-based applications? Select only one answer. Azure Container Instances Azure Functions Azure Logic Apps Azure Virtual Desktop

single sign-on (SSO)

What enables a user to sign in one time and use that credential to access multiple resources and applications from different providers? Select only one answer. Conditional Access device management multi-factor authentication (MFA) single sign-on (SSO)

The setting is applied to current and future resources.

What happens to the resources within a resource group when an action or setting at the Resource Group level is applied?

Software as a Service (SaaS)

What is Microsoft 365?

a resource

What is an Azure Storage account named storage001 an example of? Select only one answer. a resource a resource group a resource manager a subscription

You can scale more quickly.

What is an advantage of cloud computing compared to on-premises deployments? Select only one answer. You can scale more quickly. You can work from multiple workstations. You have full access in case of internet outage. You own your CPUs.

the service-level agreement (SLA) that you choose

What is high availability in a public cloud environment dependent on? Select only one answer. capital expenditures cloud-based backup retention limits the service-level agreement (SLA) that you choose the vertical scalability of an app

data and access

What is the customer responsible for in a software as a service (SaaS) model? Select only one answer. data and access storage runtime virtual machines

Azure Arc, working with Azure Resource Manager, lets you extend your Azure compliance and monitoring to your hybrid and multicloud configurations.

What service helps you manage your Azure, on-premises, and multicloud environments?

a web browser

What should you use to access Azure Cloud Shell? Select only one answer. a web browser Azure Resource Manager (ARM) Microsoft Visual Studio Code the command-line on a local computer

Bicep and ARM Templates allow you to deploy your resource as code.

What two components could you use to implement a "infrastructure as code" deployment?

Software as a Service (SaaS)

What type of cloud service type would a Finance and Expense tracking solution typically be in?

The Total Cost of Ownership calculator lets you input your current infrastructure and requirements and provides you with an estimate for running in the cloud.

What's the best method to estimate the cost of migrating to the cloud while incurring minimal costs?

A resource lock can be used to prevent a resource from accidentally being deleted.

What's the best way to prevent inadvertent deletion of a resource?

Size, Storage, and Networking

When you provision a VM, you'll also have the chance to pick the resources that are associated with that VM, including:

Conditional Access is a tool that Azure Active Directory uses to allow (or deny) access to resources based on identity signals. Conditional Access might challenge you for a second authentication factor if your sign-in signals are unusual or from an unexpected location.

Which Azure Active Directory tool can vary the credentials needed to log in based on signals, such as where the user is located?

The Hot tier is optimized for storing data that is accessed frequently.

Which Azure Blob storage service tier has the highest storage costs and the fastest access times for reading and writing data? Select only one answer. Archive Cool Hot

The Archive storage tier stores data offline and offers the lowest storage costs, but also the highest costs to rehydrate and access data.

Which Azure Blob storage tier stores data offline and offers the lowest storage costs and the highest costs to access data? Select only one answer. Archive Cool Hot

Azure Blobs is a massively scalable object store for text and binary data. Azure Blobs also includes support for big data analytics through Data Lake Storage Gen2.

Which Azure Storage service supports big data analytics, as well as handling text and binary data types?

Availability sets

Which Azure Virtual Machine feature staggers updates across VMs based on their update domain and fault domain?

Azure Virtual Desktop

Which Azure service allows users to use a cloud hosted version of Windows from any location and connect from most modern browsers?

Azure Advisor

Which Azure service evaluates Azure resources and makes recommendations to help improve reliability, security, performance, and cost reduction? Select only one answer. Azure Advisor Azure Monitor Azure Service Health Log Analytics

software as a service (SaaS)

Which cloud service model is used by Microsoft Office 365? Select only one answer. infrastructure as a service (IaaS) platform as a service (PaaS) software as a service (SaaS)

Infrastructure as a Service (IaaS)

Which cloud service type is most suited to a lift and shift migration from an on-premises datacenter to a cloud deployment?

Data Policy

Which feature in the Microsoft Purview governance portal should you use to manage access to data sources and datasets? Select only one answer. Data Catalog Data Estate Insights Data Policy Data Sharing

Azure Resource Manager (ARM)

Which management layer accepts requests from any Azure tool or API and enables you to create, update, and delete resources in an Azure account? Select only one answer. Azure CLI Azure management groups Azure Resource Manager (ARM) Azure Sphere

Management groups can be used in environments that have multiple subscriptions to streamline the application of governance conditions.

Which resource can you use to manage access, policies, and compliance across multiple subscriptions? Select only one answer. administrative units management groups resource groups

connecting an on-premises datacenter to an Azure virtual network

Which scenario is a use case for a VPN gateway? Select only one answer. communicating between Azure resources connecting an on-premises datacenter to an Azure virtual network filtering outbound network traffic partitioning a virtual network's address space

Zero Trust is a security model that assumes the worst case scenario and protects resources with that expectation.

Which security model assumes the worst-case security scenario, and protects resources accordingly?

Geo-redundant storage (GRS) and geo-zone-redundant storage (GZRS) both provide 16 nines of durability.

Which storage redundancy option provides the highest degree of durability, with 16 nines of durability?

Azure Blob storage is an object storage solution that you can use to store massive amounts of unstructured data, such as text or binary data.

Which storage service should you use to store thousands of files containing text and images? Select only one answer. Azure Blob storage Azure Disk Storage Azure Queue Storage Azure Table storage

Azure File Sync maintains a bidirectional synchronization of files between your on-premises and cloud Windows servers.

Which tool automatically keeps files between an on-premises Windows server and an Azure cloud environment updated?

Azure SQL databases & virtual machines

Which two Azure resources can make use of availability zones? Each correct answer presents a complete solution. Select all answers that apply. Azure SQL databases Azure subscriptions resource groups virtual machines

resource usage & location

Which two factors affect Azure costs? Each correct answer presents a complete solution. Select all answers that apply. availability zone selection date and time of use resource location resource usage

Network File System (NFS) & Server Message Block (SMB)

Which two protocols are used to access Azure file shares? Each correct answer presents a complete solution. Select all answers that apply. HTTP FTP Network File System (NFS) Server Message Block (SMB)

associating costs with different environments and categorizing costs by department

Which two scenarios are common billing use cases for resource tags? Each correct answer presents a complete solution. Select all answers that apply. associating costs with different environments categorizing costs by department identifying lower cost regions resizing underutilized virtual machines

serving images or documents directly to a browser & storing data for backup and restore

Which two scenarios are common use cases for Azure Blob storage? Each correct answer presents a complete solution. Select all answers that apply. hosting ASPX files for a website mounting a file storage share to be accessed as a virtual drive on multiple virtual machines serving images or documents directly to a browser storing data for backup and restore

authentication & SSO

Which two services are provided by Azure AD? Each correct answer presents a complete solution. Select all answers that apply. authentication data encryption name resolution single sign-on (SSO)

ExpressRoute connections and Azure VPN Gateway are two services that you can use to connect an on-premises network to Azure.

Which two services can you use to establish network connectivity between an on-premises network and Azure resources? Each correct answer presents a complete solution. Select all answers that apply. Azure Bastion Azure Firewall Azure VPN Gateway ExpressRoute

CLI and Powershell

Which two tools are accessible via Azure Cloud Shell and allows you to write Bash scripts to manage an Azure environment? Select all answers that apply. Azure CLI Azure PowerShell Azure Repos Azure Resource Manager (ARM) templates

PowerShell in Azure Cloud Shell & the Azure portal

Which two tools can you use to create a new Azure virtual machine from a mobile device that runs Android? Each correct answer presents complete solution. Select all answers that apply. PowerShell in Azure Cloud Shell Remote Desktop SSH the Azure portal

Virtual networks are part of the IaaS cloud service.

Which type of cloud service are virtual networks? Select only one answer. infrastructure as a service (IaaS) platform as a service (PaaS) software as a service (SaaS)

software as a service (SaaS)

Which type of cloud service model is typically licensed through a monthly or annual subscription? Select only one answer. Infrastructure as a service (IaaS) platform as a service (PaaS) software as a service (SaaS)

You are only billed for what you use.

Why is cloud computing often less expensive than on-premises datacenters? Each correct answer presents a complete solution. Select only one answer. Cloud service offerings have limited functionality. Network bandwidth is free. Services are only offered in a single geographic location. You are only billed for what you use.

Total Cost of Ownership (TCO) Calculator

You need to compare the costs of running an application in an on-premises datacenter with the costs of running the application in Azure. What should you use to assist you? Select only one answer. Azure Advisor Azure Cost Management Azure Pricing calculator Total Cost of Ownership (TCO) Calculator

Azure Monitor is a platform that collects metric and logging data, such as CPU percentages. The data can be used to trigger autoscaling.

You need to create a custom solution that uses thresholds to trigger autoscaling functionality to scale an app up or down to meet user demand. What should you include in the solution? Select only one answer. Application insights Azure Advisor Azure Monitor Azure Service Health

Azure Policy

You need to recommend a solution for Azure virtual machine deployments. The solution must enforce company standards on the virtual machines. What should you include in the recommendation? Select only one answer. Azure Blueprints Azure Cost Management Azure Lock Azure Policy

Azure Service Health

You need to review the root cause analysis (RCA) report for a service outage that occurred last week. Where should you look for the report? Select only one answer. Azure Advisor Azure Monitor Azure Service Health Log Analytics

Azure Pricing calculator

You plan to build a new solution in Azure that will use platform as a service (PaaS) products. What should you use to estimate the monthly costs? Select only one answer. Azure Advisor Azure Cost Management Azure Pricing calculator Total Cost of Ownership (TOC) Calculator

Resource Health is a tailored view of your actual Azure resources. It provides information about the health of your individual cloud resources

You receive an email notification that virtual machines (VMs) in an Azure region where you have VMs deployed is experiencing an outage. Which component of Azure Service Health will let you know if your application is impacted?

platform as a service (PaaS)

Your organization is building a custom application. You need to focus on application development rather than configuration and management of servers. Which cloud service model should you use? Select only one answer. infrastructure as a service (IaaS) platform as a service (PaaS) software as a service (SaaS)

Azure Reservations

Your organization plans to deploy several production virtual machines that will have consistent resource usage throughout the year. What can you use to minimize the costs of the virtual machines without reducing the functionality of the virtual machines? Select only one answer. Azure Monitor alerts Azure Reservations spending limits

Hybrid cloud

a combination of public cloud and private cloud, using both datacenters dedicated solely to one customer and datacenters that are shared with the public.

Azure Virtual Desktop

a desktop and application virtualization service that runs on the cloud. It enables you to use a cloud-hosted version of Windows from any location. works across devices and operating systems, and works with apps that you can use to access remote desktops or most modern browsers.

Azure Functions

an event-driven, serverless compute option that doesn't require maintaining virtual machines or containers

Virtual machine availability sets

are designed to ensure that VMs stagger updates and have varied power and network connectivity, preventing you from losing all your VMs with a single network or power failure.

Virtual machine scale sets

automatically deploy a load balancer to make sure that your resources are being used efficiently.

Virtual Machines

can group together to provide high availability, scalability, and redundancy. Azure can also manage the grouping of these for you with features such as scale sets and availability sets.

Azure virtual networks and virtual subnets

enable Azure resources, such as VMs, web apps, and databases, to communicate with each other, with users on the internet, and with your on-premises client computers.

Azure App Service

enables you to build and host web apps, background jobs, mobile back-ends, and RESTful APIs in the programming language of your choice without managing infrastructure. It offers automatic scaling and high availability.

Point-to-site virtual private network connections

from a computer outside your organization back into your corporate network. In this case, the client computer initiates an encrypted VPN connection to connect to the Azure virtual network.

Horizontal scaling

involves adding or removing resources (such as virtual machines or containers) to meet demand

Azure Kubernetes Service

is a container orchestration service. An orchestration service manages the lifecycle of containers. When you're deploying a fleet of containers, can make fleet management simpler and more efficient.

Reliability

is the ability of a system to recover from failures and continue to function, and it is one of the pillars of the Microsoft Azure Well-Architected Framework.

Cloud computing

is the delivery of computing services over the internet

Virtual machine scale sets

let you create and manage a group of identical, load-balanced VMs

Site-to-site virtual private networks

link your on-premises VPN device or gateway to the Azure VPN gateway in a virtual network. In effect, the devices in Azure can appear as being on the local network. The connection is encrypted and works over the internet.

Azure Container Instances

offer the fastest and simplest way to run a container in Azure; without having to manage any virtual machines or adopt any additional services. a platform as a service (PaaS) offering. allow you to upload your containers and then the service will run the containers for you.

Infrastructure as a Service (IaaS)

places the most responsibility on the consumer, with the cloud provider being responsible for the basics of physical security, power, and connectivity.

Azure ExpressRoute

provides a dedicated private connectivity to Azure that doesn't travel over the internet.