AZ-900: Microsoft Azure Fundamentals Knowledge

Which is not one of the recommendation categories for Azure Advisor? -Reliability -Capacity -Cost

Capacity -The five recommendation categories for Azure Advisor are: Reliability, Security, Performance, Operational Excellence, and Cost.

Which Azure Active Directory tool can vary the credentials needed to log in based on signals, such as where the user is located? -Conditional Access -Guest access -Passwordless

Conditional Access -Conditional Access is a tool that Azure Active Directory uses to allow (or deny) access to resources based on identity signals. Conditional Access might challenge you for a second authentication factor if your sign-in signals are unusual or from an unexpected location.

What is cloud computing? -Deliver of computing services over the internet. -Delivery of storage services over the internet. -Delivery of websites accessible via the internet.

Deliver of computing services over the internet. -Cloud computing is the delivery of computing services over the internet.

Which storage redundancy option provides the highest degree of durability, with 16 nines of durability? -Locally redundant storage -Zone-redundant storage -Geo-zone-redundant-storage

Geo-zone-redundant-storage -Geo-redundant storage (GRS) and geo-zone-redundant storage (GZRS) both provide 16 nines of durability.

Which type of scaling involves adding or removing resources (such as virtual machines or containers) to meet demand? -Vertical scaling -Horizontal scaling -Direct scaling

Horizontal scaling -Horizontal scaling is adding or subtracting the number of resources.

Which cloud model uses some datacenters focused on providing cloud services to anyone that wants them, and some data centers that are focused on a single customer? -Public cloud -Hybrid cloud -Multi-cloud

Hybrid cloud -The hybrid cloud model is a combination of public cloud and private cloud, using both datacenters dedicated solely to one customer and datacenters that are shared with the public.

According to the shared responsibility model, which cloud service type places the most responsibility on the customer? -Infrastructure as a Service (IaaS) -Software as a Service (SaaS) -Platform as a Service (PaaS)

Infrastructure as a Service (IaaS) -IaaS places the most responsibility on the consumer, with the cloud provider being responsible for the basics of physical security, power, and connectivity.

Which cloud service type is most suited to a lift and shift migration from an on-premises datacenter to a cloud deployment? -Infrastructure as a Service (IaaS) -Platform as a Service (PaaS) -Software as a Service (SaaS)

Infrastructure as a Service (IaaS) -With an IaaS service type, you can approximate your on-premises environment, making a lift-and-shift transition to the cloud relatively straightforward.

How many resource groups can a resource be in at the same time? -One -Two -Three

One -A resource can only be in one group at a time.

A user is simultaneously assigned multiple roles that use role-based access control. What are their actual permissions? The role permissions are: Role 1 - read || Role 2 - write || Role 3 - read and write. -Read only -Write only -Read and write

Read and write -Role-based access control, using an allow model, grants all of the permissions assigned in all of the assigned roles.

What Azure feature replicates resources across regions that are at least 300 miles away from each other? -Region pairs -Availability Zones -Sovereign regions

Region pairs -Most Azure regions are paired with another region within the same geography (such as US, Europe, or Asia) at least 300 miles away.

What is characterized as the ability of a system to recover from failures and continue to function? -Reliability -Predictability -Scalability

Reliability -Reliability is the ability of a system to recover from failures and continue to function, and it is one of the pillars of the Microsoft Azure Well-Architected Framework.

You receive an email notification that virtual machines (VMs) in an Azure region where you have VMs deployed is experiencing an outage. Which component of Azure Service Health will let you know if your application is impacted? -Azure status -Service health -Resource health

Resource health -Resource Health is a tailored view of your actual Azure resources. It provides information about the health of your individual cloud resources

What type of cloud service type would a Finance and Expense tracking solution typically be in? -Infrastructure as a Service (IaaS) -Platform as a Service (PaaS) -Software as a Service (SaaS)

Software as a Service (SaaS) -SaaS provides access to software solutions, such as finance and expense tracking, email, or ticketing systems.

What Azure feature can help stay organized and track usage based on metadata associated with resources? -Tags -Tracers -Values

Tags -Tags allow you to associate metadata with a resource to help keep track of resource management, costs and optimization, security, and so on.

What happens to the resources within a resource group when an action or setting at the Resource Group level is applied? -Current resources inherit the setting, but future resources don't. -Future resources inherit the setting, but current ones don't. -The setting is applied to current and future resources.

The setting is applied to current and future resources. -Resources inherit permissions from their resource group.

What's the best method to estimate the cost of migrating to the cloud while incurring minimal costs? -Migrate a small sample to the cloud and track costs over time. -Use the Total Cost of Ownership calculator to estimate expected costs. -Migrate to the cloud, but track usage closely using tags to rapidly understand costs.

Use the Total Cost of Ownership calculator to estimate expected costs. -The Total Cost of Ownership calculator lets you input your current infrastructure and requirements and provides you an estimate for running in the cloud.

Which security model assumes the worst-case security scenario, and protects resources accordingly? -Zero trust -Defense-in-depth -Role-based access control

Zero trust -Zero Trust is a security model that assumes the worst case scenario and protects resources with that expectation.

How many parameters does an Azure Blueprint Artifact need to be valid? -0 -1 -2

0 - It is possible for artifacts to have no additional parameters. An example is the Deploy threat detection on SQL servers policy, which requires no additional configuration.

Which Azure service allows users to use a cloud hosted version of Windows from any location and connect from most modern browsers? -Azure Virtual Desktop -Azure Virtual Machines -Azure Container Instances

Azure Virtual Desktop -Azure Virtual Desktop provides access to a cloud-hosted version of Windows, and it works with most modern browsers.

How can you prevent non-compliant resources from being created, without having to manually evaluate each resource as it's created? -Azure Policy -Azure Blueprints -Azure Resource Monitor

Azure Policy -Azure policy lets you create policies and initiatives (groups of policies) that prevent non-compliant resource from being created.

Which Azure Virtual Machine feature staggers updates across VMs based on their update domain and fault domain? -Availability sets -Scale sets -Update sets

Availability sets -Availability sets stagger VM updates based on their update and fault domains.

What service helps you manage your Azure, on-premises, and multi-cloud environments? -Azure Arc -Azure Policy -Azure Cloud Manager

Azure Arc - Azure Arc, working with Azure Resource Manager, lets you extend your Azure compliance and monitoring to your hybrid and multi-cloud configurations.

Which Azure Storage service supports big data analytics, as well as handling text and binary data types? -Azure Blobs -Azure Files -Azure Disks

Azure Blobs -Azure Blobs is a massively scalable object store for text and binary data. Azure Blobs also includes support for big data analytics through Data Lake Storage Gen2.

What two components could you use to implement a "infrastructure as code" deployment? -Azure Blueprints and ARM Templates -Azure Policy and Azure Arc -Azure Monitor and Azure Arc

Azure Blueprints and ARM Templates -Azure Blueprints applies policies in an automated fashion and ARM Templates allow you to deploy your resource as code. Using the two together helps ensure that you're deploying consistent, compliant resources.

Which tool automatically keeps files between an on-premises Windows server and an Azure cloud environment updated? -Azure File Sync -Azure Storage Explorer -AzCopy

Azure File Sync -Azure File Sync maintains a bidirectional synchronization of files between your on-premises and cloud Windows servers.