AZ-900 Test Questions
What is true regarding Azure subscriptions?
1. A single Microsoft account can be used to manage multiple Azure subscriptions 2. A company can use resources from multiple subscriptions
What are the two aspects of Public Cloud?
1. Metered pricing 2. Self-service management
A company has an Azure environment contains multiple Azure virtual machines. They need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. What are two possible solutions?
1. Modify an Azure firewall 2. Modify a network security group (NSG)
A company working with Azure services has a requirement to automate the process of provisioning their cloud environments in a repeatable way. Which Azure service would allow them to implement their cloud resources using infrastructure-as-code?
ARM Templates
A company recently migrated to Azure services and is concerned that their new account may be configured incorrectly, potentially leaving it vulnerable to attackers. Which Azure service will automatically provide them a list of recommended changes to implement on their account to help make it more secure?
Advisor Security Center
A company needs to create a set of resources within Microsoft Azure. For IT Administrators, there is a requirement in which they may only create resources in a certain region. What can help achieve this?
Azure Policies
A company is unfamiliar with Azure's security system and practices. What uses a layered system that provides protection from unauthorized access?
Defense in depth
What compliance program is an organization that defines standards used by the United States government?
The National Institute of Standards and Technology (NIST)
What Azure Support Plans provides access to a guidance manager who can assist you with architectural guidance?
Professional Direct
To which can you associate Azure Blueprints?
Role-based access controls ARM Templates Policies
What type of service is Azure Bot Service?
SaaS
Which of the following provides Azure development best practices from Microsoft workers, partners, and customers, as well as tools and support?
The Microsoft Cloud Adoption Framework for Azure
Azure storage account
Data that is stored in an Azure Storage account automatically has at least three copies
what is the minimum number of Virtual Machines required to ensure 99.99% uptime to host the application?
2 VMs
What is the longest term (years) for a Reserved VM Instance?
3
A company wants to securely move large amounts of data to Azure by shipping the drives using Azure Import/Export service. What two things does the company need to do prepare their drives for an import job?
A driveset CSV file A dataset CSV file
A developer with an application running in a virtual machine environment is planning a migration to Microsoft Azure hosting. Which Azure service will provide them with a platform to host their application?
App Services
What does a customer provide in a software as a service (SaaS) model?
Application Data
A company wants to host a mission critical application on a set of Virtual Machines within Microsoft Azure. They want to ensure they can setup the infrastructure in Azure to guarantee the maximum possible up time for the application. What can you make use of in Azure to fulfill this requirement?
Availability Sets Availability Zones
A company wants to host a mission critical application on a set of Virtual Machines within Microsoft Azure. They want to ensure they can setup the infrastructure in Azure to guarantee the maximum possible up time for the application. What will full fill this requirement?
Availability sets Availability Zones
A company has a requirement that if users try to login from an anonymous IP address, they are then prompted to reset their password. How can a company enforce this security protocol?
Azure AD Identity Protection
A company wants to ensure that whenever users authenticate to Azure, they have to make use of Multi-Factor Authentication (MFA). What services can enforce this security protocol?
Azure AD Identity Protection
A developer has been tasked with configuring the new Microsoft Azure subscription at their company. What Azure service provides an identity and access management service to help employees sign-in and access resources?
Azure Active Directory
A company is considering migrating to Azure, but they want to understand their security solutions better. What cloud solution offers multi-factor authentication, identity protection, and strong role-based access control (RBAC)?
Azure Active Directory (Azure AD)
A company is considering migrating to Azure, but they want to understand their security solutions better. What cloud solutions offers multi-factor authentication, identity protection, and strong role-based access control (RBAC)?
Azure Active Directory (Azure AD)
A company is planning on setting up a solution in Microsoft Azure. The solution would have the following key requirement: A tool that provides guidance and recommendations to improve an Azure environment What would be best suited for this requirement?
Azure Advisor
A tool that provides guidance and recommendations to improve an Azure environment
Azure Advisor
A company needs the ability to detect and diagnose anomalies in web applications.
Azure Application Insights
A tool used to monitor Web applications hosted in production based environments
Azure Application Insights
An Azure administrator must consistently deploy Azure resources across various subscriptions. What is capable of performing this task?
Azure Blueprints
A company needs a way to run analytics on terabytes to petabytes of data.
Azure Data Lake Analytics
A company needs a way to run analytics on terabytes to petabytes of data. What would be best suited for this requirement?
Azure Data Lake Analytics
A company needs to host a big data analysis service for machine learning on Azure. Which of the following Azure cloud service would be best suited for this requirement?
Azure Databricks
A company is planning to migrate their web application environment to Microsoft Azure. Their code base is currently stored inside of a Github repository. Which Azure service can provide them with a continuous integration and delivery toolset, and can integrate directly with their existing repository?
Azure DevOps
A team of developers at a software development company plans to deploy, and then remove, 50 customized virtual machines each week. 30 of the virtual machines run Windows Server 2016 and 20 of the virtual machines run Ubuntu Linux. An Azure service is required to minimize the administrative effort required to deploy and remove the virtual machines. What Azure service best fits the requirement?
Azure DevTest Labs
Which Azure service provides network traffic filtering across multiple Azure subscriptions and virtual networks?
Azure Firewall
Which Azure service implements Apache Spark, a unified analytics engine for big data?
Azure HDInsight
How can you minimize the cost of an SQL database license when migrating into Azure and you already have an SQL license?
Azure Hybrid Benefit
A company is planning on setting up a solution on the Azure platform. The solution has the following main key requirement Provide a managed toolset that could be used to manage and scale container-based applications What would be best suited for this requirement?
Azure Kubernetes
A company wants a cloud solution that can be used to build, train, and deploy predictive analytics solutions.
Azure Machine Learning
A developer is planning to create a WordPress based website hosted on Microsoft Azure. Which Azure service could they use to quickly launch a pre-configured virtual machine environment optimized for WordPress?
Azure Marketplace
A company is planning to migrate its existing web application environment to Microsoft Azure. Based on previous user activity, they already know the approximate memory and bandwidth usage they expect to see in the coming months in their environment. What should they consider when creating their Azure Virtual Machine environments to help optimize costs?
Azure Reservations - commit to one year or three year plans. Which allows for discount and reduce costs up to 72%
A financial organization has recently migrated some of its services to Azure and plans to use Azure to deploy resources. Which Azure service provides a platform for defining resource dependencies so they may be deployed in the proper order?
Azure Resource Manager
Your company has several business units. Each business unit requires 20 different Microsoft Azure Resources for daily operation. All the business units require the same types of Azure resources. You need to recommend a solution to automate the creation of the Azure resources. What should you include in the recommendation?
Azure Resources Manager (ARM) templates
A company has just set up an Azure subscription and an Azure tenant. They want to implement strict policies when it comes to the security of Azure resources. They want to implement the following requirements: "Ensure that the Virtual Machine Administrator team can only deploy virtual machines of a particular size" What could be used to fulfill the below requirement?
Azure Role-Based Access Control
What is a managed relational database service?
Azure SQL Database
An organization is migrating their on-premise web-application to Azure Cloud. The company is looking to save money by only running the right amount of servers to meet the demand of traffic for this web-application while in production. What Azure service would allow them to save costs based on traffic capacity?
Azure ScaleSets
An organization is migrating their on-premise web-application to Azure Cloud. The company is looking to save money by only running the right amount of servers to meet the demand of traffic for this web-application while in production. Which Azure service would allow them to save costs based on traffic capacity?
Azure ScaleSets
What Azure service has the feature to enable just in time (JIT) VM access?
Azure Security Center
A company must be alerted when Microsoft plans to execute maintenance that may affect the resources deployed to an Azure subscription. What Azure service should be used?
Azure Service Health
You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region. What Azure service should you use from the Azure portal to view service failure notifications that can affect the availability of VM1?
Azure virtual machines
A company hosting their virtual machine environments on Microsoft Azure experienced an extended downtime of their service. Upon investigation, this was caused by an outage in the underlying Azure infrastructure for the Virtual Machine Service, which exceeded the guaranteed threshold promised in the Service Level Agreement (SLA) by Azure. In which way should they expect to be compensated from Microsoft Azure for the downtime in service?
Azure will provide service credits to the customer
What can Cost Management be applied to?
Cost Management can be applied to management groups
You have a VM and want to encrypt its disks. What is the first step?
Create an Azure key vault
Which of the following best describes the ability to scale computing resources in and out automatically during large spikes of traffic while only paying for the resources used?
Elasticity
A company is planning on hosting an application across multiple Virtual Machines on Azure and want to ensure that the application survives a region-wide failure within Azure. Which of the following concept needs to be considered to fulfill this requirement?
Fault Tolerance
Which of the following compliance programs deals with how cryptographic keys should be stored and handled?
Federal Information Processing Standard (FIPS) 140-2
Which of the following categories does Azure Advisor make recommendations for?
High Availability Cost Security Performance
What categories does Azure Advisor make recommendations for?
High Availability Cost Security Performance Operational Excellence
What resources are included in Network Security Groups (NSG)?
IP Address and Tags
Which type of cloud computing offering is provided by the Azure Virtual Machine Service?
IaaS
A company wants to monitor and control billions of Internet of Things (IoT) assets.
IoT Central
A company is working with sensitive workloads on Azure. They are concerned that multiple sets of administrative credentials used during deployments may potentially be exposed to attackers. Which Azure service will allow them to store these credentials as encrypted secrets that can be read securely during deployment?
Key Vault
A company needs a VPN site-to-site connection from their on-premise network to Azure account. What network components represents the VPN device in your local network and used to set up a site-to-site VPN connection?
Local Network Gateway
A developer building a service on Microsoft Azure - has a requirement to create complex workflows coordinating a number of different Azure services and user driven events. What Azure service should they use to best meet this requirement?
Logic Apps
A company wants to have the ability to efficiently manage access, policies, and compliance for their subscriptions in a hierarchal structure.
Management Groups
Your organization plans to migrate to Microsoft Azure. The organization has many departments. All the Azure resources used by each department will be managed by a department administrator. What are two possible techniques to segment Azure for the departments?
Multiple subscriptions Multiple resource groups
DDoS protection is an example of a service that protects the ______ layer?
Network Layer
A company is planning on deploying a web server and database server on Azure. You have to ensure that traffic restrictions are in place so that the database server can only communicate with the webserver. What implements these restrictions?
Network security groups (NSGs)
A company is planning on using the Azure Firewall service. Would the Azure firewall service encrypt all network traffic sent from Azure to the Internet?
No
A digital media company is planning to use Azure Blob Storage to store 5TB of data. Would the cost of data storage be the same regardless of the location of the data?
No
A virtual machine can be in multiple resource groups Is this statement correct?
No
All the Azure resources deployed to a resource group must use the same Azure region Is this statement true?
No
Your company wants to provision a set of Azure virtual machines. An application will be installed on these virtual machines. The company wants to ensure that the user traffic is distributed across the virtual machines. You decide to use the Azure VPN Gateway service for traffic distribution. Would this full fill the requirement?
No
A communications company has recently migrated to Azure and created an Azure account. They have resources deployed in their on-premise data center. The company aims to connect its Azure virtual network to its on-premises data center. They decide to use Azure virtual network peering for this task. Will this meet the requirement?
No - Site-to-Site VPN connection or Azure ExpressRoute for this task.
What type of service is a Microsoft SQL Server database hosted in the cloud and has updates managed by Azure?
PaaS
Which type of Cloud Computing would Azure Kubernetes Service (AKS) fall under?
PaaS
Which type of cloud computing is focused on providing developers with a place to easily deploy their web applications, without needing to worry about the underlying hardware configurations?
PaaS
What is true when referring to Platform-as-a-Service (PaaS)?
PaaS allows control over the code, and the underlying technology is managed by Azure
Which cloud model can be used to connect to an on-premise server?
Private, Hybrid, and Public
Which type of cloud computing is mainly focused on offering a product to customers as a fully managed service from the provider?
Software as a Service (SaaS)
What types of instances provides the least cost for unused compute power for VMs?
Spot Instances
A developer recently signed up for a Free tier Azure account. Which Azure support subscription is automatically included with their account?
Standard
A company with an on-premise file server is planning a migration to Azure services. Currently, they access their data through mapped SMB (Server Message Block) network drives on their Windows-based computers, and there is a requirement that they maintain this functionality going forward. What Azure services should they use to meet this requirement?
Storage Account - FileStorage
A company is planning on hosting a web application on Azure. The upper management wants to know the Capital Expenditure (CapEx) and Operational Expenditure (OpEx) costs that would incur after the migration. What would occur?
There would a decrease in Capital Expenditure and a possible increase in Operational Expenditure
What does Azure Sentinel use playbooks for?
To help automate and orchestrate your threat response
You are required to delegate permissions to several Azure virtual machines simultaneously. Where must you deploy the Azure virtual machines?
To the same resource group
A company is deciding to move their on-premises data center to Azure. They are unsure of the full cost of completing the migration from on-premises to the Azure cloud environment. Which Azure service could be used to determine the cost savings by migrating their workload to Azure?
Total Cost of Ownership (TCO) Calculator
What does Azure guarantee in their Service Level Agreement (SLA)?
Uptime
You plan to deploy 20 virtual machines to an Azure environment. You need to ensure that a virtual machine named VM1 cannot connect to other virtual machines. What should you do?
VM1 must deployed to a separate virtual network
A company with an on-premise data center is required to implement a secure site-to-site connection from their premise to an Azure Virtual Network. What Azure components must be created as part of this connection?
Virtual Private Network Gateway
A financial institution wants to migrate its data from a set of tables hosted in Azure Table Storage using Table APIs provided by the new destination database to transfer the data. The institution decides on using Cosmos DB. Will this meet the requirement?
Yes
An organization is new to Azure and is having trouble choosing a database for storage. They want to host a collection of relational tables in Azure. They require a service that offers nearly zero administration of the underlying infrastructure and low latency access to data. The organization decides to use Azure SQL Database service Will this meet the requirement?
Yes
If an Azure resource has a Read-only lock, can you add a delete lock to the resource?
Yes
IoT Central is a fully managed software as a service(SaaS) solution to connect, monitor, and manage IoT devices at scale. Is this statement correct?
Yes
You have an Azure environment that contains multiple Azure virtual machines. You plan to implement a solution that allows the client computers on your on-premises network to connect with Azure virtual machines. You must identify which Azure resources are required for the proposed solution. What two Azure resources should be included in your recommendation?
a gateway subnet a virtual network gateway
An Azure engineer has an on-premises application that sends email notifications automatically based on a rule. The engineer plans to migrate the application to Azure. They require a serverless computing solution for the application. What Azure service would meet the requirement?
a logic app
Your organization plans to deploy a large number of Azure virtual machines. They need to control the ports that devices on the Internet can use to access the virtual machines. What should they use?
a network security group (NSG)
Your company intends to migrate a number of servers to Azure. A server named Server1 must be on a separate network segment, according to the company's compliance policy. Which Azure services may be utilized to fullfill the compliance policy's criteria?
a virtual network for Server1 and another virtual network for all the other servers
Microsoft Azure services normally follow which life-cycle?
private preview public preview general availability