AZ-900
You plan to deploy a critical line-of-business application to Azure.The application will run on an Azure virtual machine.You need to recommend a deployment solution for the application. The solution must provide a guaranteed availability of 99.99 percent.What is the minimum number of virtual machines and the minimum number of availability zones you should recommend for the deployment? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area: Minimum Number of virtual Machines 1 2 3 Minimum number of availability zones 1 2 3
2,2
An Azure Policy initiative definition is a ... A. collection of policy definitions B. collection of Azure Policy definition assignments C. group of Azure Blueprints definitions group of role-based D. access control (RBAC) role assignments
A
An Azure service is available to all Azure customers when is in A. public preview B. private preview C. development an Enterprise Agreement (EA) subscription
A
What is an Apache Spark-based analytics service.? A. Azure Databricks B. Azure Data Factory C. Azure DevOps Azure HDlnsight
A
Which service provides network traffic filtering across multiple Azure subscriptions and virtual networks? A. Azure Firewall B. an application security group C. Azure DDoS protection D. a network security group (NSG)
A
You can change the Active Directory (Azure AD) tenant to which an Azure subscription is associated. A. Yes B. No
A
You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system.Solution: You use Bash in Azure Cloud Shell.Does this meet the goal? A. Yes B. No
A
You have an application that is comprised of an Azure web app that has a Service Level Agreement (SLA) of 99.95 percent and an Azure SQL database that has an SLA of 99.99 percent. The composite SLA for the application is A. the product of both SLAB, which equals 99.94 percent B. the lowest SLA associated to the application, which is 99.95 percent C. the highest SLA associated to the application, which is 99.99 percent D. the difference between the two SLAv, which is 0.05 percent
A
You need to identify which blades in the Azure portal must be used to perform the following tasks: Monitor the health of Azure services: A. Monitor B. Subscriptions C. Marketplace D. Advisor
A
You plan to create an Azure virtual machine.You need to identify which storage service must be used to store the unmanaged data disks of the virtual machine.What should you identify? To answer, select the appropriate service in the answer area. A. Containers B. File shares C. Tables D. Queues
A
Your company plans to deploy several web servers and several database servers to Azure.You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers.What should you include in the recommendation? A. network security groups (NSGs) B. Azure Service Bus C. a local network gateway D. a route filter
A
Your company's on-premises network includes a large number of servers.They would like to make extra resources available to their users, while keeping capital and operational overheads to a minimum.You are required to make recommendations that should be included in the overall solution.Solution: You should indorse the use of a private cloud as part of the solution. A. You should indorse the use of a private cloud as part of the solution. B. You should indorse the use of a hybrid cloud as part of the solution. C. You should indorse the use of an added data center as part of the solution.
A
Your companyג€™s Azure subscription includes a Basic support plan.They would like to request an assessment of an Azure environmentג€™s design from Microsoft. This is, however, not supported by the existing plan.You want to make sure that the company subscribes to a support plan that allows this functionality, while keeping expenses to a minimum.Solution: A. You recommend that the company subscribes to the Premier support plan. B. You recommend that the company subscribes to the Professional Direct support plan. C. You recommend that the company subscribes to the Standard support plan.
A
You have an Azure environment that contains multiple Azure virtual machines.You plan to implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines.You need to recommend which Azure resources must be created for the planned solution.Which two Azure resources should you include in the recommendation? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point. A. a virtual network gateway B. a load balancer C. an application gateway D. a virtual network E. a gateway subnet
A,E
... can calculate cost savings due to reduced electricity consumption as a result of migrating on-premises Microsoft SQL servers to Azure. A. The Azure Migrate: Server Assessment tool B. The Azure Total Cost of Ownership (TCO) calculator C. The Database Migration Assistant D. The pricing calculator in Azure
B
What can Azure Information Protection encrypt? A. network traffic B. documents and email messages C. an Azure Storage account D. an Azure SQL database
B
You are planning a strategy to deploy numerous web servers and database servers to Azure.This strategy should allow for connection types between the web servers and database servers to be controlled.Solution: A. You configure the use of Azure AD Privileged Identity Management. B. You include network security groups (NSGs) in your strategy. C. You include a local network gateway in your strategy.
B
You can access Compliance Manager from the A. Azure Active Directory admin center B. Azure portal C. Microsoft 365 admin center D. Microsoft Service Trust Portal
B
Your company has a Software Assurance agreement that includes Microsoft SQL Server licenses.You plan to deploy SQL Server on Azure virtual machines.What should you do to minimize licensing costs for the deployment? A. Deallocate the virtual machines during off hours. B. Use Azure Hybrid Benefit. C. Configure Azure Cost Management budgets. D. Use Azure reservations.
B
Your company is planning to migrate all their virtual machines to an Azure pay-as-you-go subscription. The virtual machines are currently hosted on the Hyper-V hosts in a data center.You are required make sure that the intended Azure solution uses the correct expenditure model. A. You should recommend the use of the scalable expenditure model. B. You should recommend the use of the operationalexpenditure model. C. You should recommend the use of the elastical expenditure model.
B
our companyג€™s Active Directory forest includes thousands of user accounts.You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises data center will be retired.You are required to employ a strategy that reduces the effect on users, once the planned migration has been completed.Solution: A. You plan to require Azure Multi-Factor Authentication (MFA). B. You plan to sync all the Active Directory user accounts to Azure Active Directory (Azure AD). C. You plan to enforce password change.
B
An Azure administrator plans to run a PowerShell script that creates Azure resources.You need to recommend which computer configuration to use to run the script.Which three computers can run the script? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point. A. a computer that runs macOS and has PowerShell Core 6.0 installed. B. a computer that runs Windows 10 and has the Azure PowerShell module installed. C. a computer that runs Linux and has the Azure PowerShell module installed. D. a computer that runs Linux and has the Azure CLI tools installed. E. a computer that runs Chrome OS and uses Azure Cloud Shell.
B,C,E
Resource groups provide organizations with the ability to manage the compliance of Azure resources across multiple subscriptions.Instructions: Review the underlined text. If it makes the statement correct, select ג€No change is neededג€. If the statement is incorrect, select the answer choice that makes the statement correct. A. No change is needed B. Management groups C. Azure policies D. Azure App Service plans
C
What is required to use Azure Cost Management? A. a Dev/Test subscription B. Software Assurance C. an Enterprise Agreement (EA) D. a pay-as-you-go subscription
C
You are planning to migrate a company to Azure. Each of the companyג€™s numerous divisions will have an administrator in place to manage the Azure resources used by their respective division.You want to make sure that the Azure deployment you employ allows for Azure to be segmented for the divisions, while keeping administrative effort to a minimum.Solution: A. You plan to make use of several Azure Active Directory (Azure AD) directories. B. You plan to make use of several resource groups. C. You plan to make use of several subscriptions.
C
You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region. Which Azure service should you use from the Azure portal to view service failure notifications that can affect the availability of VM1? A. Azure Service Fabric B. Azure Monitor C. Azure virtual machines D. Azure Advisor
C
You plan to map a network drive from several computers that run Windows 10 to Azure Storage.You need to create a storage solution in Azure for the planned mapped drive.What should you create? A. an Azure SQL database B. a virtual machine data disk C. a Files service in a storage account D. a Blobs service in a storage account
C
Your company has virtual machines (VMs) hosted in Microsoft Azure. The VMs are located in a single Azure virtual network named VNet1.The company has users that work remotely. The remote workers require access to the VMs on VNet1.You need to provide access for the remote workers.What should you do? A. Configure a Site-to-Site (S2S) VPN. B. Configure a VNet-toVNet VPN. C. Configure a Point-to-Site (P2S) VPN. D. Configure DirectAccess on a Windows Server 2012 server VM. E. Configure a Multi-Site VPN
C
Which two types of customers are eligible to use Azure Government to develop a cloud solution? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point. A. a Canadian government contractor B. a European government contractor C. a United States government entity D. a United States government contractor E. a European government entity
C,D
Azure Key Vault is used to store secrets for ... A. Azure Active Directory (Azure AD) user accounts. B. Azure Active Directory (Azure AD) administrative accounts C. Personally Identifiable Information (PII) D. server applications
D
Data that is stored in the Archive access tier of an Azure Storage account A. can be accessed at any time by using azcopy.exe. B. can only be read by using Azure Backup. C. must be restored before the data can be accessed. D. must be rehydrated before the data can be accessed.
D
In which Azure support plans can you open a new support request? A. Premier and Professional Direct only B. Premier, Professional Direct, and Standard only C. Premier, Professional Direct, Standard, and Developer only D. Premier, Professional Direct, Standard, Developer, and Basic
D
You can enable just in time (JIT) VM access by using A. Azure Bastion B. Azure Firewall C. Azure Front Door D. Azure Security Center
D
Azure Firewall will encrypt all the network traffic sent from Azure to the Internet. Yes / No A network security group (NSG) will encrypt all the network traffic sent from Azure to the Internet. Yes / No Azure virtual machines that run Windows Server 2016 can encrypt network traffic sent to the Internet. Yes / No
No, No, No
If you have Azure resources deployed to every region, you can implement availability zones in all the regions. Yes / No Only virtual machines that run Windows Server can be created in availability zones. Yes / No Availability zones are used to replicate data and applications to multiple regions. Yes / No
No, No, No
Adding resource groups in an Azure subscription generates additional costs. Yes / No Copying 10 GB of data to Azure from an on-premises network over a VPN generates additional Azure data transfer costs. Yes / No Copying 10 GB of data from Azure to an on-premises network over a VPN generates additional Azure data transfer costs. Yes / No
No, No, Yes
To implement an Azure Multi-Factor Authentication (MFA) solution, you most sync on-premises identities to the cloud. Yes / No Two valid methods for Azure Multi-Factor Authentication (MFA) are picture identification and a passport number. Yes / No Azure Multi-Factor Authentication (MFA) can be required for administrative and non-administrative user accounts. Yes / No
No, No, Yes
Windows Virtual Desktop session host can run Windows 10 only. Yes / No A Windows Virtual Desktop host pool that includes 20 session hosts supports a maximum of 20 simultaneous user connections. Yes / No Windows Virtual Desktop supports desktop and app virtualization. Yes / No
No, No, Yes
Your company has an Azure subscription that contains the following unused resources:✑ 20 user accounts in Azure Active Directory (Azure AD)✑ Five groups in Azure AD✑ 10 public IP addresses✑ 10 network interfacesYou need to reduce the Azure costs for the company.Solution: You remove the unused network interfaces.Does this meet the goal? You remove the unused network interfaces. Yes / No You remove the unused user accounts. Yes / No You remove the unused public IP addresses. Yes / No
No, No, Yes
All Azure services in private preview must be accessed by using a separate Azure portal. Yes / No Azure services in public preview can be used in production environments. Yes / No Azure services in public preview are subject to a Service Level Agreement (SLA). Yes / No
No, Yes, No
An Azure subscription can have multiple account administrators Yes / No An Azure subscription can be managed by using a Microsoft account only Yes / No An Azure resource group can contain multiple Azure subscriptions Yes / No
No, Yes, No
Azure Advisor provides recommendations on how to improve the security of an Azure Active Directory (Azure AD) environment. Yes / No Azure Advisor provides recommendations on how to reduce the cost of running Azure virtual machines. Yes / No Azure Advisor provides recommendations on how to configure the network settings on Azure virtual machines. Yes / No
No, Yes, No
Statements Yes No North America is represented by a single Azure region. Yes / No Every Azure region has multiple datacenters. Yes / No Data transfers between Azure services located in different Azure regions are always free. Yes / No
No, Yes, No
A user who is assigned the Owner role can transfer ownership of an Azure subscription. Yes / No You can convert the Azure subscription of your company from Free Trial to Pay-As-You-Go. Yes / No The Azure spending limit is fixed and cannot be increased or decreased. Yes / No
No, Yes, Yes
Azure China is operated by Microsoft. Yes / No Azure Government is operated by Microsoft. Yes / No Azure Government is available only to US government agencies and their partners. Yes / No
No, Yes, Yes
An Azure free account has a spending limit. Yes / No An Azure free account has a limit of 2TB of data that can be uploaded to Azure. Yes / No An Azure free account can contain an unlimited number of web apps. Yes / No
Yes, No, No
Data that is stored in an Azure Storage account automatically has at least three copies. Yes / No All data that is copied to an Azure Storage account is backed up automatically to another Azure data center. Yes / No An Azure Storage account can contain up to 2 TB of data and up to one million files. Yes / No
Yes, No, No
Azure Security Center can monitor Azure resources and on-premises resources. Yes / No All Azure Security Center features are free. Yes / No From Azure Security Center, you can download a Regulatory Compliance report. Yes / No
Yes, No, Yes
In Azure Active Directory Premium P2, at least 99.9 percent availability is guaranteed. Yes / No The Service Level Agreement (SLA) for Azure Active Directory Premium P2 is the same as the SLA for Azure Active Directory Free. Yes / No Al paying Azure customers receive a credit if their monthly uptime percentage is below the guaranteed amount on the Service Level Agreement (SLA). Yes / No
Yes, No, Yes
To use Azure Active Directory (Azure AD) credentials to sign in to a computer that 0 0 runs Windows 10, the computer must be joined to Azure AD. Yes / No Users in Azure Active Directory (Azure AD) are organized by using resource groups. Yes / No Azure Active Directory (Azure AD) groups support dynamic membership rules. Yes / No
Yes, No, Yes
When using an Azure ExpressRoute connection, inbound data traffic from an on-premises network to Azure is always free. Yes / No Outbound data traffic from Azure to an on-premises network is 0 always free. Yes / No Data traffic between Azure services within the same Azure region is always free. Yes / No
Yes, No, Yes
You can add an Azure Resource Manager template to an Azure blueprint. Yes / No You can assign an Azure blueprint to a resource group. Yes / No You can use Azure Blueprints to grant permissions to a resource. Yes / No
Yes, No, Yes
You can associate a network security group (NSG) to a virtual network subnet. Yes / No You can associate a network security group (NSG) to a virtual network. Yes / No You can associate a network security group (NSG) to a network interface. Yes / No
Yes, No, Yes
The Service Level Agreement (SLA) guaranteed uptime for paid Azure services is at least 99.9 percent. Yes / No Companies can increase the Service Level Agreement (SLA) guaranteed uptime by adding Azure resources to multiple regions. Yes / No Companies can increase the Service Level Agreement (SLA) guaranteed uptime by purchasing multiple subscriptions. Yes / No
Yes, Yes, No
The cost of Azure resources can vary between regions. Yes / No An Azure reservation is used to reserve server capacity at a specific data center. Yes / No You can stop an Azure SQL Database instance to decrease costs. Yes / No
Yes, Yes, No
Azure Monitor can monitor the performance of on-premises computers. Yes / No Azure Monitor can send alerts to Azure Active Directory security groups. Yes / No Azure Monitor can trigger alerts based on data in an Azure Log 0 0 Analytics workspace. Yes / No
Yes, Yes, Yes
Identities stored in an on-premises Active Directory can be synchronized to Azure Active Directory (Azure AD). Yes / No Identities stored in Azure Active Directory (Azure AD), third-party cloud services, and on-premises Active Directory can be used to access Azure resources. Yes / No Azure has huilt-in authentication and authorization services that provide secure access to Azure resources. Yes / No
Yes, Yes, Yes
You can create custom Azure roles to control access to resources. Yes / No A user account can be assigned to multiple Azure roles. Yes / No A resource group can have the Owner role assigned to multiple users. Yes / No
Yes, Yes, Yes