Unlock Your Azure Career with the AZ900 Practice Exam: A Comprehensive Guide

Unlock your Azure career potential with the Microsoft AZ900 Exam. Learn the essentials and master your skills using an AZ900 practice exam.

Are you embarking on a career in Azure Cloud?

Dive into the world of Microsoft Azure with the AZ900 certification. This blog post provides an in-depth look at what the Microsoft AZ900 exam entails, the skills you need to succeed, and how to effectively prepare using AZ900 practice exams. Whether you are a tech professional aiming to pivot into cloud computing or looking to solidify your foundational knowledge, this guide will steer you toward success in your Azure journey.

What is Microsoft AZ900?

The Microsoft AZ900, also known as the Microsoft Azure Fundamentals certification, is designed for individuals starting their journey in cloud computing. It is an entry-level certification that provides a foundational understanding of Azure services, core cloud concepts, security, privacy, compliance, and trust. Whether you’re a tech professional looking to pivot into cloud technology or just beginning your career, the AZ900 exam is a great starting point.

how do know course details and schedule AZ900 exams?

Skills Required for the Exam

The AZ900 exam covers a range of topics that require you to have a basic understanding of:

1. Cloud Concepts: Understanding cloud computing principles and how Azure implements these concepts.
2. Core Azure Services: Familiarity with the primary Azure services and solutions.
3. Security, Privacy, Compliance, and Trust: Knowledge of security features and compliance standards in Azure.
4. Azure Pricing and Support: Understanding Azure’s pricing models and support options.

Preparation Tips with AZ900 Practice Test

To excel in the AZ900 exam, consistent practice is key. Utilize an AZ900 practice test to familiarize yourself with the exam format and the types of questions you will encounter. While AZ900 dumps and AZ900 dump files may seem tempting, they might not provide the comprehensive understanding needed to grasp the material. Instead, focus on an AZ900 practice exam to test your knowledge and identify areas for improvement.

AZ900 Practice Test – Q1-250 Real and Latest Questions

Microsoft AZ900 Practice Test – Real and Latest Questions

Q251. Which two types of customers are eligible to use Azure Government to develop a cloud solution?

1. a Canadian government contractor
2. a European government contractor
3. a United States government entity
4. a United States government contractor
5. a European government entity

Correct Answer

3. a United States government entity
4. a United States government contractor

References:
https://docs.microsoft.com/en-us/learn/modules/intro-to-azure-government/2-what-is-azure-government

Q252. To implement an Azure Multi-Factor Authentication(MFA) solution you must sync on-premises identities to the cloud. ____
Two valid methods for Azure Multi-Factor Authentication(MFA) are picture identification and a passport number. ____
Azure Multi-Factor Authentication(MFA) can be required for administrative and non-administrative user accounts. ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-getstarted
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods

Q253. After you create a virtual machine you need to modify the ____ to allow connections to TCP port 8080 on the virtual machine.

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

Q254. A company is evaluating Microsoft Azure Conditional Access policies.
You need to determine which scenarios Conditional Access policies support.
Which three scenarios should you select?

1. Multi-factor authentication
2. Self-service password reset capabilities
3. Hybrid Azure Active Directory joined the device
4. Blocked access to Microsoft 365 services for unverified users
5. BitLocker deployment

Correct Answer

1. Multi-factor authentication
3. Hybrid Azure Active Directory joined device
4. Blocked access to Microsoft 365 services for unverified users

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-conditions

Q255. You have an Azure environment that contains 10 virtual networks and 100 virtual machines.
You need to limit the amount of inbound traffic to all the Azure virtual networks.
What should you create?

1. one application security group (ASG)
2. 10 virtual network gateways
3. 10 Azure ExpressRoute circuits
4. one Azure firewall

Correct Answer

4. one Azure firewall

References:
https://docs.microsoft.com/en-us/azure/firewall/overview

Q256.Azure Germany can be used by legal residents of Germany only.

1. no change is needed
2. only enterprises that are registered in Germany
3. only enterprises that purchase their azure licenses from a partner based in Germany
4. any user or enterprise that requires its data to reside in Germany

Correct Answer

4. any user or enterprise that requires its data to reside in Germany

References:
https://docs.microsoft.com/en-us/azure/germany/germany-welcome?toc=%2fazure%2fgermany%2ftoc.json
https://docs.microsoft.com/en-us/azure/germany/germany-overview-data-trustee

Q257. You plan to deploy several Azure virtual machines.
You need to control the ports that devices on the Internet can use to access the virtual machines.
What should you use?

1. a network security group (NSG)
2. an Azure Active Directory (Azure AD) role
3. an Azure Active Directory group
4. an Azure key vault

Correct Answer

1. a network security group (NSG)

References:
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

Q258. Azure Active Directory(Azure AD) requires the implementation of domain controllers on Azure virtual machines. ____
Azure Active Directory(Azure AD) provides authentication services for resources hosted in Azure and Microsoft 365. ____
Each user account in Azure Active Directory(Azure AD) can be assigned only one license. ____

Correct Answer

Q259. You can create custom Azure roles to control access to resources. ____
A user account can be assigned to multiple Azure roles. ____
A resource group can have the Owner role assigned to multiple users. ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#owner

Q260. You can associate a network security group(NSG) to a virtual network subnet. ____
You can associate a network security group(NSG) to a virtual network. ____
You can associate a network security group(NSG) to a network interface. ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/network-security-group-how-it-works

Q261. Your company implements ____ automatically add a watermark to Microsoft Word documents that contain credit card information.

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/information-protection/what-is-information-protection
https://docs.microsoft.com/en-us/azure/information-protection/infoprotect-quick-start-tutorial

Q262. Identities stored in an on-premises Active Directory can be synchronized to Azure Active Directory(Azure AD). ____
Identities stored in Azure Active Directory(Azure AD), third-party cloud services, and on-premises Active Directory can be used to access Azure resources. ____
Azure has built-in authentication services that provide secure access to Azure resources. ____

Correct Answer

References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-whatis
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed
https://docs.microsoft.com/en-us/azure/active-directory/develop/authentication-scenarios

Q263. You can view your company’s regulatory compliance report from ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/security-center/security-center-intro

Q264. What should you use to evaluate whether your company’s Azure environment meets regulatory requirements?

1. Azure Service Health
2. Azure Knowledge Center
3. Azure Security Center
4. Azure Advisor

Correct Answer

3. Azure Security Center

Reference:
https://docs.microsoft.com/en-us/azure/security-center/security-center-intro

Q265. You need to collect and automatically analyze security events from Azure Active Directory (Azure AD).
What should you use?

1. Azure Sentinel
2. Azure Synapse Analytics
3. Azure AD Connect
4. Azure Key Vault

Correct Answer

1. Azure Sentinel

Reference:
https://docs.microsoft.com/en-us/azure/sentinel/overview

Q266. Your company plans to automate the deployment of servers to Azure.
Your manager is concerned that you may expose administrative credentials during the deployment.
You need to recommend an Azure solution that encrypts the administrative credentials during the deployment.
What should you include in the recommendation?

1. Azure Multi-Factor Authentication (MFA)
2. Azure Information Protection
3. Azure Security Center
4. Azure Multi-Factor Authentication (MFA)

Correct Answer

1. Azure Multi-Factor Authentication (MFA)

References:
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview

Q267. Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
Solution: You modify a network security group (NSG).
Does this meet the goal?

1. Yes
2. No

Correct Answer

1. Yes

References:
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

Q268. Azure Key Vault is used to store secrets for Azure Active Directory (Azure AD) user accounts.

1. No change is needed
2. Azure Active Directory (Azure AD) administrative accounts
3. Personally Identifiable Information (PII)
4. server applications

Correct Answer

4. server applications

Reference:
https://docs.microsoft.com/en-us/learn/modules/manage-secrets-with-azure-key-vault/2-what-is-key-vault
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview
https://docs.microsoft.com/en-us/learn/modules/manage-secrets-with-azure-key-vault/

Q269. You can enable just-in-time (JIT) vm access by using ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time?tabs=jit-config-asc%2Cjit-request-asc

Q270. Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
Solution: You modify a DDoS protection plan.
Does this meet the goal?

1. Yes
2. No

Correct Answer

2. No

References:
https://docs.microsoft.com/en-us/azure/virtual-network/ddos-protection-overview

Q271. You can configure the Azure Active Directory(Azure AD) activity logs to appear in Azure Monitor. ____
From Azure Monitor, you can monitor resources across multiple Azure subscriptions. ____
From Azure Monitor, you can create alerts. ____

Correct Answer

References:
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-activity-logs-azure-monitor
https://docs.microsoft.com/en-us/azure/azure-monitor/overview

Q272. You create a resource group named RG1 in Azure Resource Manager.
You need to prevent the accidental deletion of the resources in RG1.
Which setting should you use?

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

Q273. To what should an application connect to retrieve security tokens?

1. an Azure Storage account
2. Azure Active Directory (Azure AD)
3. a certificate store
4. an Azure key vault

Correct Answer

4. an Azure key vault

Reference:
https://docs.microsoft.com/en-us/learn/modules/manage-secrets-with-azure-key-vault/2-what-is-key-vault
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview

Q274. You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted automatically to change their password.
Which Azure service should you use?

1. Azure AD Connect Health
2. Azure AD Privileged Identity Management
3. Azure Advanced Threat Protection (ATP)
4. Azure AD Identity Protection

Correct Answer

4. Azure AD Identity Protection

References:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-risk-policy

Q275. What should you use to evaluate whether your company’s Azure environment meets regulatory requirements?

1. Azure Service Health
2. Azure Knowledge Center
3. Microsoft Defender for Cloud
4. Azure Advisor

Correct Answer

3. Microsoft Defender for Cloud

Reference:
https://docs.microsoft.com/en-us/azure/defender-for-cloud/regulatory-compliance-dashboard

Q276. Requiring a user to enter a password and answer a security question when signing in to Azure Active Directory(Azure AD) is an example of ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

Q277. ____ Describes which personal data is collected how the data is used and what the data is used for.
____ A legal agreement that details the obligations between Microsoft and a customer regarding the processing and security of customer data and personal data.
____ Defines the data processing and security terms for online services, including the disclosure of processed data and the transfer, retention, and deletion of data.

Correct Answer

Reference:
https://azure.microsoft.com/en-us/support/legal/

Q278. You have an Azure virtual network named VNET1 in a resource group named RG1.
You can assign the Azure Policy definition of Not Allowed Resource. Type and specify that virtual networks are not an allowed resource type in RG1. VNET1 ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/governance/policy/overview
https://docs.microsoft.com/en-us/azure/governance/policy/assign-policy-portal

Q279. What can Azure Information Protection encrypt?

1. network traffic
2. documents and email messages
3. an Azure Storage account
4. an Azure SQL database

Correct Answer

2. documents and email messages

References:
https://docs.microsoft.com/en-us/azure/information-protection/what-is-information-protection
https://docs.microsoft.com/en-us/azure/information-protection/quickstart-label-dnf-protectedemail

Q280. Azure Active Directory(Azure AD) can be used to manage access to on-premises applications. ____
Azure Active Directory(Azure AD) provides single sign-on(SSO). ____
iOS devices can be registered in Azure Active Directory(Azure AD). ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-whatis
https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-single-sign-on
https://docs.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-register

Q281. What should you use to evaluate whether your company’s Azure environment meets regulatory requirements?

1. the Knowledge Center website
2. the Advisor blade from the Azure portal
3. Compliance Manager from the Service Trust Portal
4. the Solutions blade from the Azure portal

Correct Answer

3. Compliance Manager from the Service Trust Portal

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-service-trust-portal?view=o365-worldwide

Q282. ____ An organization that defines international standards across all industries.
____ An organization that defines standards used by the United States government.
____ A European policy that regulates data privacy and data protection.
____ A dedicated public cloud for federal and state agencies in the United States.

Correct Answer

References:
https://en.wikipedia.org/wiki/National_Institute_of_Standards_and_Technology
https://en.wikipedia.org/wiki/General_Data_Protection_Regulation
https://docs.microsoft.com/en-us/azure/azure-government/documentation-government-welcome

Q283. Your network contains an Active Directory forest. The forest contains 5,000 user accounts.
Your company plans to migrate all network resources to Azure and to decommission the on-premises data center.
You need to recommend a solution to minimize the impact on users after the planned migration.
What should you recommend?

1. Implement Azure Multi-Factor Authentication (MFA)
2. Sync all the Active Directory user accounts to Azure Active Directory (Azure AD)
3. Instruct all users to change their password
4. Create a guest user account in Azure Active Directory (Azure AD) for each user

Correct Answer

2. Sync all the Active Directory user accounts to Azure Active Directory (Azure AD)

References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-whatis

Q284. You have an Azure subscription and 100 Windows 10 devices.
You need to ensure that only users whose devices have the latest security patches installed can access Azure Active Directory (Azure AD)-integrated applications.
What should you implement?

1. a conditional access policy
2. Azure Bastion
3. Azure Firewall
4. Azure Policy

Correct Answer

1. a conditional access policy

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-policies

Q285. ____ enables users to authenticate to multiple applications by using single sign-on(SSO).

Correct Answer

Q286. Trust Center is part of the Azure Security Center. ____
Trust Center can only be accessed by users that have an Azure subscription. ____
Trust Center provides information about the Azure compliance offerings. ____

Correct Answer

Reference:
https://www.microsoft.com/en-us/trust-center

Q287. You can use Azure Policy to apply tags to resources. ____
You can add multiple tags to the same Azure resource. ____
An Azure resource inherits tags from the resource group to which the resource is deployed. ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/tag-policies
https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/govern-tags
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/tag-resources

Q288. You have an Azure subscription.
Where will you find details on the personal data collected by Microsoft, how Microsoft uses the data, and what the data is used for?

1. the Data Protection Addendum
2. the Microsoft Online Services Terms
3. the Microsoft Privacy Statement
4. Azure Security Center

Correct Answer

3. the Microsoft Privacy Statement

Reference:
https://azure.microsoft.com/en-us/support/legal/

Q289. Azure China ____

Correct Answer

Reference:
https://support.azure.cn/en-us/support/faq/

Q290. You have a resource group named RG1.
You need to prevent the creation of virtual machines in RG1. The solution must ensure that other objects can be created in RG1.
What should you use?

1. a lock
2. an Azure role
3. a tag
4. an Azure policy

Correct Answer

4. an Azure policy

Reference:
https://docs.microsoft.com/en-us/azure/governance/policy/overview

Q291. ____ is the process of verifying a user’s credentials.

Correct Answer

Q292. You can create Group Policies in Azure Active Directory(Azure AD). ____
You can join Windows 10 devices to Azure Active Directory(Azure AD). ____
You can join Android devices to Azure Active Directory(Azure AD). ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy
https://docs.microsoft.com/en-us/azure/active-directory/devices/azureadjoin-plan

Q293. The ____ explains what data Microsoft processes how Microsoft processes the data and the purpose of processing the data.

Correct Answer

Reference:
https://privacy.microsoft.com/en-us/privacystatement

Q294. The Microsoft Service Trust Portal can be accessed by using a Microsoft cloud services account. ____
Compliance Manager can be used to track your company’s regulatory compliance activities related to Microsoft cloud services. ____
The My Library feature can be used to save Microsoft Service Trust Portal documents and resources in a single location. ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-service-trust-portal?view=o365-worldwide

Q295. Azure China is operated by Microsoft. ____
Azure Government is operated by Microsoft. ____
Azure Government is available only to US government agencies and their partners. ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/china/overview-operations
https://docs.microsoft.com/en-us/azure/azure-government/documentation-government-welcome

Q296. An Azure service is available to all Azure customers when it is in ____

Correct Answer

Q297. You can review audit reports and compliance-related information for Azure services from ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-service-trust-portal

Q298. Your company plans to migrate all on-premises data to Azure.
You need to identify whether Azure complies with the company’s regional requirements.
What should you use?

1. the Knowledge Center
2. Azure Marketplace
3. the MyApps portal
4. the Trust Center

Correct Answer

4. the Trust Center

Reference:
https://azure.microsoft.com/en-gb/overview/trusted-cloud/compliance/
https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-service-trust-portal

Q299. Single sign-on(SSO) requires that all users sign in by using the Microsoft Authenticator app. ____
Authentication is the process of establishing which level of access an authenticated uses or service has. ____
Conditional Access uses signals collected from a user during the sign-in process to decide whether to allow or deny access requests. ____

Correct Answer

Q300. ____ is the process of establishing the identity of a user or service that wants to access a resource.

Correct Answer

Q301. A company plans to deploy Azure Active Directory (Azure AD).
The company needs to purchase the appropriate Azure AD license or licenses while minimizing the cost.
Match each Azure AD license to its requirements.

Correct Answer

Reference:
https://azure.microsoft.com/en-gb/pricing/details/active-directory/

Q302. Authorization to access Azure resources can be provided only to Azure Active Directory(Azure AD) users.
Identities stored in Azure Active Directory(Azure AD), third-party cloud services, and on-premises Active Directory can be used to access Azure resources.
Azure has built-in authentication and authorization services that provide secure access to Azure resources.

Correct Answer

References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed
https://docs.microsoft.com/en-us/azure/active-directory/develop/authentication-scenarios

Q303. An Azure Policy initiative definition is a ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/governance/policy/overview

Q304. Your company has an Azure subscription that contains resources in several regions.
You need to create the Azure resource that must be used to meet the policy requirement.
What should you create?

1. a read-only lock
2. an Azure policy
3. a management group
4. a reservation

Correct Answer

2. an Azure policy

Reference:
https://docs.microsoft.com/en-us/azure/governance/policy/overview

Q305. ____ provide organizations with the ability to manage the compliance of Azure resources across multiple subscriptions.

Correct Answer

References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources

Q306. An Azure resource can have multiple Delete locks. ____
An Azure resource inherits locks from its resource group. ____
If an Azure resource has a Read-only lock, you can add a Delete lock to the resource. ____

Correct Answer

References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources

Q307. What is guaranteed in an Azure Service Level Agreement (SLA) for virtual machines?

1. uptime
2. feature availability
3. bandwidth
4. performance

Correct Answer

1. uptime

Q308. You can add an Azure Resource Manager template to an Azure blueprint. ____
You can assign an Azure blueprint to a resource group. ____
You can use Azure Blueprints to grant permissions to a resource. ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/governance/blueprints/overview

Q309. From Azure Cloud Shell, you can track your company’s regulatory standards and regulations, such as ISO 27001.

1. No change is needed.
2. the Microsoft Cloud Partner Portal
3. Compliance Manager
4. the Trust Center

Correct Answer

3. Compliance Manager

References:
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-overview
https://docs.microsoft.com/en-us/azure/cloud-shell/overview

Q310. If a resource group named RG1 has a delete lock, ____ can delete RG1.

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

Q311. What is required to use Azure Cost Management?

1. a Dev/Test subscription
2. Software Assurance
3. an Enterprise Agreement (EA)
4. a pay-as-you-go subscription

Correct Answer

3. an Enterprise Agreement (EA)

Reference:
https://docs.microsoft.com/en-gb/azure/cost-management/overview-cost-mgt

Q312. Which statement accurately describes the Modern Lifecycle Policy for Azure services?

1. Microsoft provides mainstream support for a service for five years.
2. Microsoft provides a minimum of 12 months’ notice before ending support for a service.
3. After a service is made generally available, Microsoft provides support for the service for a minimum of four years.
4. When a service is retired, you can purchase extended support for the service for up to five years.

Correct Answer

2. Microsoft provides a minimum of 12 months’ notice before ending support for a service.

Reference:
https://support.microsoft.com/en-us/help/30881/modern-lifecycle-policy

Q313. The cost of Azure resources can vary between regions. ____
An Azure reservation is used to reserve server capacity at a specific data center. ____
You can stop an Azure SQL Database instance to decrease costs. ____

Correct Answer

Q314. You can use ____ in Azure to send email alerts when the cost of the current billing period for an Azure subscription exceeds a specified limit.

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/cost-mgt-alerts-monitor-usage-spending

Q315. You have an application that is comprised of an Azure web app that has a Service Level Agreement of 99.95 percent and an Azure SQL database that has an SLA of 99.99 percent.
The composite SLA for the application is ____

Correct Answer

Q316. Your company has a Software Assurance agreement that includes Microsoft SQL Server licenses.
You plan to deploy SQL Server on Azure virtual machines.
What should you do to minimize licensing costs for the deployment?

1. Deallocate the virtual machines during off hours.
2. Use Azure Hybrid Benefit.
3. Configure Azure Cost Management budgets.
4. Use Azure reservations.

Correct Answer

2. Use Azure Hybrid Benefit.

Reference:
https://azure.microsoft.com/en-us/pricing/hybrid-benefit/

Q317. With a consumption-based plan you pay a fixed rate for all data sent to or from virtual machines hosted in the cloud. ____
With a consumption-based plan, you reduce overall costs by paying only for extra capacity when it is required. ____
Serverless computing is an example of a consumption-based plan. ____

Correct Answer

Q318. Your company plans to purchase an Azure subscription.
The company’s support policy states that the Azure environment must provide an option to access support engineers by phone or email.
You need to recommend which support plan meets the support policy requirement.
Solution: Recommend a Premier support plan.
Does this meet the goal?

1. Yes
2. No

Correct Answer

1. Yes

Reference:
https://azure.microsoft.com/en-gb/support/plans/

Q319. Your company plans to purchase an Azure subscription.
The company’s support policy states that the Azure environment must provide an option to access support engineers by phone or email.
You need to recommend which support plan meets the support policy requirement.
Solution: Recommend a Standard support plan.
Does this meet the goal?

1. Yes
2. No

Correct Answer

1. Yes

Reference:
https://azure.microsoft.com/en-gb/support/plans/

Q320. The Service Level Agreement(SLA) guaranteed uptime for paid Azure services is at least 99.9 percent. ____
Companies can increase the Service Level Agreement(SLA) guaranteed uptime by adding Azure resources to multiple regions. ____
Companies can increase the Service Level Agreement(SLA) guaranteed uptime by purchasing multiple subscriptions. ____

Correct Answer

Q321. An Azure free account has a spending limit. ____
An Azure free account has a limit of 2TB of data that can be uploaded to Azure. ____
An Azure free account can contain an unlimited number of web apps. ____

Correct Answer

Reference:
https://azure.microsoft.com/en-us/free/
https://azure.microsoft.com/en-us/free/free-account-faq/
https://docs.microsoft.com/en-us/azure/billing/billing-avoid-charges-free-account

Q322. You need to request that Microsoft increase a subscription quota limit for your company.
Which blade should you use from the Azure portal?

Correct Answer

Request a standard quota increase from Help + support

Reference:
https://docs.microsoft.com/en-us/azure/azure-portal/supportability/per-vm-quota-requests

Q323. Your company plans to purchase an Azure subscription.
The company’s support policy states that the Azure environment must provide an option to access support engineers by phone or email.
You need to recommend which support plan meets the support policy requirement.
Solution: Recommend a Professional Direct support plan.
Does this meet the goal?

1. Yes
2. No

Correct Answer

1. Yes

Reference:
https://azure.microsoft.com/en-gb/support/plans/

Q324. An Azure service in private preview is released to all Azure customers. ____
An Azure service in public preview is released to all Azure customers. ____
An Azure service in general availability is released to a subset of Azure customers. ____

Correct Answer

Reference:
https://azure.microsoft.com/en-us/support/legal/preview-supplemental-terms/

Q325. Your Azure trial account expired last week. You are now unable to ____

Correct Answer

Q326. Most Azure services are introduced in private preview before being introduced in public preview and then in general availability. ____
Azure services in public preview can be managed only by using the Azure CLI. ____
The cost of an Azure service in private preview decreases when the service becomes generally available. ____

Correct Answer

Q327. Your company has 10 departments.
The company plans to implement an Azure environment.
You need to ensure that each department can use a different payment option for the Azure services it consumes.
What should you create for each department?

1. a reservation
2. a subscription
3. a resource group
4. a container instance

Correct Answer

2. a subscription

Reference:
https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/create-subscription

Q328. From the Azure portal you can distinguish between services that are generally available and services that are in public preview. ____
After an Azure portal, you can distinguish between services that are generally available, the service is no longer updated with new features. ____
When you create Azure resources for a service in public preview, you must recreate the resources once the service becomes generally available. ____

Correct Answer

Reference:
https://azure.microsoft.com/en-us/support/legal/preview-supplemental-terms/

Q329. Your company plans to request an architectural review of an Azure environment from Microsoft.
The company currently has a Basic support plan.
You need to recommend a new support plan for the company. The solution must minimize costs.
Which support plan should you recommend?

1. Premier
2. Developer
3. Professional Direct
4. Standard

Correct Answer

1. Premier

Reference:
https://azure.microsoft.com/en-gb/support/plans/

Q330. Your company plans to purchase an Azure subscription.
The company’s support policy states that the Azure environment must provide an option to access support engineers by phone or email.
You need to recommend which support plan meets the support policy requirement.
Solution: Recommend a Basic support plan.
Does this meet the goal?

1. Yes
2. No

Correct Answer

2. No

Reference:
https://azure.microsoft.com/en-gb/support/plans/

Q331. Your company has an Azure subscription that contains the following unused resources:
-> 20 user accounts in Azure Active Directory (Azure AD)
-> Five groups in Azure AD
-> 10 public IP addresses
-> 10 network interfaces
You need to reduce the Azure costs for the company.
Which unused resources should you remove?

1. the network interfaces
2. the public IP addresses
3. the groups
4. the user accounts

Correct Answer

2. the public IP addresses

Reference:
https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations#reduce-costs-by-deleting-or-reconfiguring-idle-virtual-network-gateways

Q332. If an Azure virtual machine has a status of stopped(deallocated) you will continue to pay for ____

Correct Answer

Q333. You deploy an Azure resource. The resource becomes unavailable for an extended period due to a service outage. Microsoft will ____

Correct Answer

Q334. To save on the costs of an unused Azure virtual machine that runs Windows 10, you should ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations

Q335. If your company uses an Azure free account you will only be able to use a subset of Azure services. ____
All Azure free accounts expire after a specific period. ____
You can create up to 10 Azure free accounts by using the same Microsoft account. ____

Correct Answer

Reference:
https://azure.microsoft.com/en-gb/free/

Q336. You can access Compliance Manager from the ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-setup

Q337. When using an Azure ExpressRoute connection inbound data traffic from an on-premises network to Azure is always free. ____
Outbound data traffic from Azure to an on-premises nework is always free. ____
Data traffic between Azure services within the same Azure region is always free. ____

Correct Answer

Reference:
https://azure.microsoft.com/en-us/pricing/details/expressroute/
https://azure.microsoft.com/en-us/pricing/details/bandwidth/

Q338. If an Azure virtual machine has a status of stopped(deallocated), you will continue to pay for ____

Correct Answer

Q339. Which task can you perform by using Azure Advisor?

1. Integrate Active Directory and Azure Active Directory (Azure AD).
2. Estimate the costs of an Azure solution.
3. Confirm that Azure subscription security follows best practices.
4. Evaluate which on-premises resources can be migrated to Azure.

Correct Answer

3. Confirm that Azure subscription security follows best practices.

Q340. The ____ explains what data Microsoft processes how Microsoft processes the data and the purpose of processing the data.

Correct Answer

Reference:
https://privacy.microsoft.com/en-us/privacystatement

Q341. Who can use the Azure Total Cost of Ownership (TCO) calculator?

1. billing readers for an Azure subscription only
2. owners for an Azure subscription only
3. anyone
4. all users who have an account in Azure Active Directory (Azure AD) that is linked to an Azure subscription only

Correct Answer

3. anyone

Reference:
https://docs.microsoft.com/en-us/learn/modules/plan-manage-azure-costs/2-compare-costs-tco-calculator

Q342. You have an Azure application that uses the services shown in the following table.

How should you calculate the composite SLA for the application?

1. 0.999 * 0.9999 = 0.9989001 = 99.89001%
2. 0.999 / 0.9999 = 0.9991 = 99.91%
3. Max(0.999, 0.9999) = 0.9999 = 99.99%
4. Min(0.999, 0.9999) = 0.999 = 99.9%

Correct Answer

1. 0.999 * 0.9999 = 0.9989001 = 99.89001%

Q343. Adding resource groups in an Azure subscription generates additional costs. ____
Copying 10GB of data to Azure from an on-premises network over a VPN generates additional Azure data transfer costs. ____
Copying 10GB of data from Azure to an on-premises network over a VPN generates additional Azure data transfer costs. ____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/manage-resource-groups-portal
https://azure.microsoft.com/en-us/pricing/details/bandwidth/

Q344. ____ provide access to unused Azure compute capacity at deep discounts.

Correct Answer

Reference:
https://docs.microsoft.com/en-us/shows/azure-videos/virtual-spot-machines-overview

Q345. A company has complete control of the resources and security for its private cloud. _____
A hybrid cloud solution enables a company to control whether its applications run on-premises or in the cloud. _____
Companies are responsible for capital expenditure when they scale up a virtual machine hosted in a public cloud. _____

Correct Answer

Q346. ____ is an Apache Spark-based analytics service.

Correct Answer

Q347. Storing 1 TB of data in Azure Blob storage will always cost the same regardless of the Azure region in which the data is located. _____
When you use a general-purpose v2 Azure Storage account, you are only charged for the amount of data that is stored. All read and write operations are free. _____
Transferring data between Azure Storage accounts in different Azure regions is free. _____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview
https://azure.microsoft.com/en-gb/pricing/details/storage/blobs/

Q348. Only one tag can be assigned to an Azure resource. _____
Tags can be assigned to Azure resources by using Azure Resource Manager(ARM) templates. _____
Tags can be used to enforce naming standards for Azure resources. _____

Correct Answer

Q349. You have 1,000 virtual machines hosted on the Hyper-V hosts in a data center.
You plan to migrate all the virtual machines to an Azure pay-as-you-go subscription.
You need to identify which expenditure model to use for the planned Azure solution.
Which expenditure model should you identify?

1. scalable
2. operational
3. elastic
4. capital

Correct Answer

2. operational

Q350. All Azure services that are in public preview are _____

Correct Answer

Reference:
https://azure.microsoft.com/en-us/support/legal/preview-supplemental-terms
https://azure.microsoft.com/en-us/overview/what-is-saas/

Q351. You are in the process of carrying out feature engineering on a dataset.
You want to add a feature to the dataset and fill the column value.
Recommendation: You must make use of the Group Categorical Values Azure Machine Learning Studio module.
Will the requirements be satisfied?

1. Yes
2. No

Correct Answer

2. No

Q352. Which Service Level Agreement (SLA) is provided for Azure services in public preview?

1. Each service defines its own SLA
2. The SLA will be 99%
3. The SLA will be 1% less than the general availability (GA) SLA
4. The SLA will be 99.95%

Correct Answer

1. Each service defines its own SLA

Q353. Pay-As-You-Go is a consumption based model. _____
Payments to cloud service providers are considered capital expenditures(CapEx). _____
The services provided through a consumption-based model are considered operational expenditures(OpEx). _____

Correct Answer

Reference:
https://azure.microsoft.com/en-us/pricing/purchase-options/pay-as-you-go/

Q354. A user who is assigned the Owner role can transfer ownership of an Azure subscription. _____
You can convert the Azure subscription of your company from Free Trial to Pay-As-You-Go. _____
The Azure spending limit is fixed and cannot be increased or decreased. _____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/billing/billing-add-change-azure-subscription-administrator
https://docs.microsoft.com/en-us/azure/billing/billing-upgrade-azure-subscription
https://docs.microsoft.com/en-us/azure/billing/billing-spending-limit

Q355. With Azure Reservations you pay less for virtual machines than with pay-as-you-go pricing. _____
Two Azure virtual machines that use the B2S size have the same monthly costs. _____
When an Azure virtual machine is stopped, you continue to pay storage costs for the virtual machine. _____

Correct Answer

Reference:
https://azure.microsoft.com/en-us/reservations/
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/b-series-burstable

Q356. All Azure services in private preview must be accessed by using a separate Azure portal. ____
Azure services in public preview can be used in production environments. ____
Azure services in public preview are subject to a Service Level Agreement(SLA). ____

Correct Answer

Q357. You can create an Azure support request from support.microsoft.com

1. No change is needed.
2. the Azure portal
3. the Knowledge Center
4. the Security & Compliance admin center

Correct Answer

2. the Azure portal

Reference:
https://docs.microsoft.com/en-us/azure/azure-supportability/how-to-create-azure-support-request

Q358. If Microsoft plans to end support for an Azure service that does NOT have a successor service, Microsoft will provide notification at least 12 months before.

1. No change is needed.
2. 6 months
3. 90 days
4. 30 days

Correct Answer

1. No change is needed.

Reference:
https://support.microsoft.com/en-us/help/30881

Q359. Your company has an Azure subscription that contains the following unused resources:
-> 20 user accounts in Azure Active Directory (Azure AD)
-> Five groups in Azure AD
-> 10 public IP addresses
-> 10 network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused user accounts.
Does this meet the goal?

1. Yes
2. No

Correct Answer

2. No

Reference:
https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations#reduce-costs-by-deleting-or-reconfiguring-idle-virtual-network-gateways

Q360. Your company has an Azure subscription that contains the following unused resources:
-> 20 user accounts in Azure Active Directory (Azure AD)
-> Five groups in Azure AD
-> 10 public IP addresses
-> 10 network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused groups.
Does this meet the goal?

1. Yes
2. No

Correct Answer

2. No

Reference:
https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations#reduce-costs-by-deleting-or-reconfiguring-idle-virtual-network-gateways

Q361. A support plan solution that gives you best practice information, health status and notifications, and 24/7 access to billing information at the lowest possible cost is a Standard support plan.

1. No change is needed
2. Developer
3. Basic
4. Premier

Correct Answer

3. Basic

Reference:
https://azure.microsoft.com/en-us/support/plans/

Q362. Your company has 10 offices. You plan to generate several billing reports from the Azure portal. Each report will contain the Azure resource utilization of each office.
Which Azure Resource Manager feature should you use before you generate the reports?

1. tags
2. templates
3. locks
4. policies

Correct Answer

1. tags

References:
https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/decision-guides/resource-tagging/

Q363. Your company has an Azure subscription that contains the following unused resources:
-> 20 user accounts in Azure Active Directory (Azure AD)
-> Five groups in Azure AD
-> 10 public IP addresses
-> 10 network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused network interfaces.
Does this meet the goal?

1. Yes
2. No

Correct Answer

2. No

Reference:
https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations#reduce-costs-by-deleting-or-reconfiguring-idle-virtual-network-gateways

Q364. How should you calculate the monthly uptime percentage?

Correct Answer

Q365. A standard support plan is included in an Azure free account. _____
A Premier support plan can only be purchased by companies that have an Enterprise Agreement(EA). _____
Support from MSDN forums is only provided to companies that have a pay-as-you-go subscription. _____

Correct Answer

References:
https://azure.microsoft.com/en-us/support/plans/

Q366. By creating additional resource groups in an Azure subscription additional costs are incurred. _____
By copying several gigabits of data to Azure from an on-premises network over a VPN, additional data transfer costs are incurred. _____
By copying several GB of data from Azure to an on-premises network over a VPN, additional data transfer costs are incurred. _____

Correct Answer

Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/manage-resource-groups-portal
https://azure.microsoft.com/en-us/pricing/details/bandwidth/
https://azure.microsoft.com/en-us/pricing/details/bandwidth/

Q367. Your company has an Azure subscription that contains the following unused resources:
-> 20 user accounts in Azure Active Directory (Azure AD)
Five groups in Azure AD –
-> 10 public IP addresses
-> 10 network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused public IP addresses.
Does this meet the goal?

1. Yes
2. No

Correct Answer

1. Yes

Reference:
https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations#reduce-costs-by-deleting-or-reconfiguring-idle-virtual-network-gateways

Q368. What is the longest term you can purchase for Azure Reserved VM instances?

1. one year
2. five years
3. four years
4. three years

Correct Answer

4. three years

Reference:
https://docs.microsoft.com/en-us/azure/cost-management-billing/reservations/save-compute-costs-reservations

Q369. The cost of outbound traffic from Azure is the same for all Azure regions. _____
Purchasing Azure services through an Enterprise Agreement(EA) requires you to spend a predetermined amount. _____
Microsoft defines the pricing structure of all third-party services sold through Azure Marketplace. _____

Correct Answer

Q370. In which Azure support plans can you open a new support request?

1. Premier and Professional Direct only
2. Premier, Professional Direct, and Standard only
3. Premier, Professional Direct, Standard, and Developer only
4. Premier, Professional Direct, Standard, Developer, and Basic

Correct Answer

4. Premier, Professional Direct, Standard, Developer, and Basic

Reference:
https://azure.microsoft.com/en-us/support/plans/

Q371. You need to start Azure Cloud Shell. What should you use?

1. the Azure portal
2. Azure Command-Line Interface (CLI)
3. Azure PowerShell
4. an Azure Resource Manager (ARM) template

Correct Answer

1. the Azure portal

Reference:
https://learn.microsoft.com/en-us/azure/cloud-shell/get-started/classic

Q372. What enables a cloud service to adapt quickly to changing requirements?

1. high availability
2. predictability
3. manageability
4. agility

Correct Answer

3. manageability

Q373. What is an example of vertical scaling in a cloud environment?

1. adding an additional CPU to an existing Azure virtual machine
2. adding an additional Azure virtual machine
3. adding an additional Azure Virtual Desktop session host
4. adding an additional Azure App Service instance automatically

Correct Answer

1. adding an additional CPU to an existing Azure virtual machine

Q374. _____ Provide a continuous user experience in the event of a resource failure.
_____ Deploy apps and data to regional data centers that are located close to users.
_____ Compute capacity can be increased dynamically by adding RAM or CPU to a virtual machine.

Correct Answer

Q375. Cloud computing offers lower capital expenditure(CapEx) costs than on-premises deployments. _____
Cloud computing provides the same configuration options as on-premises deployments. _____
Cloud computing can scale when a business requires change. _____

Correct Answer

Q376. Microsoft Defender for Cloud can monitor Azure resources and on-premises resources. _____
All Microsoft Defender for Cloud features are free. _____
For Microsoft Defender for Cloud, you can download a Regulatory Compliance report. _____

Correct Answer

Q377. An organization that hosts its own infrastructure ______ no longer requires a data center.

Correct Answer

Q378. ______ can calculate cost savings due to reduced electricity consumption as a result of migrating on-premises Microsoft SQL servers to Azure.

Correct Answer

Reference:
https://docs.microsoft.com/en-us/learn/modules/plan-manage-azure-costs/2-compare-costs-tco-calculator

Q379. Azure virtual networks deployed to the same azure region are connected by default. _____
Virtual networks created in the same resource group must have unique names. _____
The Azure virtual network’s address space must be unique within a subscription. _____

Correct Answer

Q380. What additional resource is required by an Azure virtual machine?

1. a virtual network
2. a service endpoint
3. Azure Firewall
4. a public IP address

Correct Answer

4. a public IP address

Q381. ____ ensures that you can calculate how much a cloud service will cost.

Correct Answer

Q382. All Azure services that are in public preview are _____

Correct Answer

Reference:
https://azure.microsoft.com/en-gb/support/legal/preview-supplemental-terms/

Q383. Which cloud service model minimizes the management responsibility of a customer?

1. infrastructure as a service (IaaS)
2. platform as a service (PaaS)
3. software as a service (SaaS)

Correct Answer

3. software as a service (SaaS)

Q384. You need to compare a company’s cloud usage to industry standard best practices. What should you use?

1. Azure Monitor
2. Azure Service Health
3. Application Insights in Azure Monitor
4. Azure Advisor

Correct Answer

1. Azure Monitor

Q385. How many copies of data are maintained by an Azure Storage account that uses geo-redundant storage (GRS)?

1. 3
2. 4
3. 6
4. 9

Correct Answer

1. 3

Q386. Azure Functions is an example of a platform as a service(PaaS) cloud service model. _____
Microsoft 365 is an example of a software as a service(SaaS) cloud service model. _____
An Azure virtual machine is an example of an infratructure as a service(IaaS) cloud service model. _____

Correct Answer

Q387. The Azure Standard support plan is the lowest cost option to receive 24×7 access to support engineers by phone.

1. No change is needed
2. Developer
3. Basic
4. Professional Direct

Correct Answer

1. No change is needed

Reference:
https://azure.microsoft.com/en-gb/support/plans/

Q388. What is used to grant permission to Azure Virtual Desktop resources?

1. tags
2. role-based access control (RBAC) roles
3. resource groups
4. application security groups

Correct Answer

2. role-based access control (RBAC) roles

Q389. How many copies of data are maintained by an Azure Storage account that uses locally redundant storage (LRS)?

1. 3
2. 4
3. 6
4. 9

Correct Answer

1. 3

Q390. Extends on-premises networks to the Microsoft cloud via a private connection. _____
Combines two or more Azure virtual networks into a single logical virtual network. _____
Provides an encrypted connection from on-premises networks to Azure via a public network. _____

Correct Answer

Q391. _____ runs application code in Azure without requiring a server.

Correct Answer

Q392. You plan to reduce ongoing Azure expenditures.
You need to identify which factors affect the costs of a resource.
Which three factors should you identify?

1. the volume of outbound data
2. the volume of inbound data
3. the service tier
4. the Azure region
5. the type of processed data

Correct Answer

1. the volume of outbound data
3. the service tier
5. the type of processed data

Reference:
https://azure.microsoft.com/en-in/solutions/cost-optimization

Q393. Which service can replace a resource lock automatically if the lock is removed?

1. Azure Information Protection (AIP)
2. Azure Blueprints
3. Azure Backup
4. Azure Advisor

Correct Answer

2. Azure Blueprints

Q394. You have an Azure web app.
You need to manage the settings of the web app from an iPhone.
What are two Azure management tools that you can use?

1. Windows PowerShell
2. Azure Cloud Shell
3. the Azure portal
4. Azure Storage Explorer

Correct Answer

2. Azure Cloud Shell
3. the Azure portal

Q395. You need to create a new user for an Azure subscription.
What should you use?

Correct Answer

Q396. You plan to collect and analyze event details for five Azure virtual machines.
You need to run queries to compare the event details collected from all the virtual machines.
Which two tools should you use?

1. Azure Service Health
2. Azure Service Bus
3. Azure Monitor
4. Azure Advisor
5. Log Analytics

Correct Answer

3. Azure Monitor
5. Log Analytics

Reference:
https://learn.microsoft.com/en-us/azure/azure-monitor/vm/monitor-virtual-machine-data-collection

Q397. What should you use to track the costs of Azure resources?

1. Azure Quickstart templates
2. tags
3. budgets
4. usage and quotas

Correct Answer

4. usage and quotas

Q398. What should you use to prevent traffic from an Azure virtual network from being routed to an Azure Storage account via the internet?

1. a network security group (NSG)
2. a public endpoint
3. Azure VPN Gateway
4. a service endpoint

Correct Answer

1. a network security group (NSG)

Q399. Azure Resource Manager(ARM) templates use the _____

Correct Answer

Q400. The Archive access tier for Azure Storage can be set at the account level. _____
The Cool access tier offers the lowest costs for storing blobs in Azure Storage. _____
After blobs are uploaded to an Azure Storage container, the access tier of the storage account can be changed. _____

Correct Answer

Q401. _____ Used for reliable messaging between applications.
_____ Can be accessed as a network share from a Windows device.
_____ Can be configured to use the Archive access tier.

Correct Answer

Reference:
https://learn.microsoft.com/en-us/azure/storage/queues/storage-queues-introduction
https://learn.microsoft.com/en-us/azure/storage/files/storage-files-introduction
https://azure.microsoft.com/en-us/products/storage/blobs

Q402. Premium block blobs storage accounts only support _____ redundancy

Correct Answer

Q403. When a cloud app can allocate and release resources, it has _____

Correct Answer

Q404. You can deploy Azure Resource Manager(ARM) templates by using the azure portal. _____
Azure Resource Manager(ARM) templates can define infrastructure by using code. _____
Each Azure resource to be deployed requires a separate Azure Resource Manager(ARM) template. _____

Correct Answer

Q405. You have an Azure subscription. You plan to create a virtual machine.
Where will the virtual machine be placed in Azure?

1. In a storage account
2. In a resource group
3. In an administrative unit
4. In an application group

Correct Answer

2. In a resource group

Q406. Premium storage accounts can be configured as Azure file shares. _____
Premium storage accounts can be configured as block blobs storage. _____
Premium storage accounts can be configured as StorageV2 storage. _____

Correct Answer

Reference:
https://learn.microsoft.com/en-us/azure/storage/common/storage-account-overview

Q407. _____ provides a global view of the status of Azure services regions and specific resources.

Correct Answer

Q408. You need to create a new Azure file share. What should you use?

Correct Answer

Q409. When planning to migrate a public website to Azure, you must plan to _____

Correct Answer

Q410. An Azure SLA is a formal agreement between Microsoft and a customer that defines _____

Correct Answer

Q411. A company plans to implement Microsoft 365 Apps.
The company has the following productivity requirements:
-> Provide feedback on a presenter’s body language.
-> Provide recommendations on spelling and grammar.
You need to recommend the Microsoft 365 feature for each requirement.
Which features should you recommend?

Correct Answer

Q412. You can have two Azure storage accounts that have the same name in the same Azure subscription. _____
You can have two Azure Storage accounts that have the same name in different Azure regions. _____
You can have two Azure Storage accounts that have the same name in two different Azure subscriptions. _____

Correct Answer

Reference:
https://learn.microsoft.com/en-us/azure/storage/common/storage-account-overview

Q413. Your company has an Azure subscription that contains several resources.
You need to identify which department is responsible for the cost of each resource.
What should you use?

1. budgets
2. alerts
3. tags

Correct Answer

1. budgets

Q414. In an Azure virtual machine scale set the virtual machines are configured identically. _____
The number of Azure virtual machines in a virtual machine scale set can increase automatically. _____
The number of Azure virtual machines in a virtual machine scale set can decrease automatically. _____

Correct Answer

Q415. You have on-premises servers that run Windows Server.
What should you implement to manage the servers by using the Azure portal?

1. Azure Kubernetes Service (AKS)
2. Azure Arc
3. Docker
4. role-based access control (RBAC)

Correct Answer

2. Azure Arc

Reference:
https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/manage-vm

Q416. If Windows server or Microsoft SQL server licenses are covered by _____, you can response the licenses on Azure virtual machines.

Correct Answer

Q417. Azure Advisor provides personalized recommendations. _____
Azure Advisor can provide cost recommendations for virtual machines. _____
Azure Advisor can provide recommendations across multiple Azure subscriptions. _____

Correct Answer

Reference:
https://learn.microsoft.com/en-us/azure/advisor/advisor-overview
https://learn.microsoft.com/en-us/azure/advisor/advisor-reference-cost-recommendations

Q418. You can use _____ in Azure to send email alerts when the cost of the current billing period for an Azure subscription exceeds a specified limit.

Correct Answer

Q419. What provides a unified way to project and manage non-Azure resources in Azure Resource Manager (ARM)?

1. Azure Migrate
2. Azure AD Connect
3. Azure Arc
4. Azure Front Door

Correct Answer

3. Azure Arc

Q420. Which two features or services can be integrated with Azure Monitor?

1. Azure status
2. Application Insights
3. Azure Advisor
4. Log Analytics
5. Azure Service Health

Correct Answer

2. Application Insights
4. Log Analytics

Q421. Data that is stored in the Archive access tier of an Azure Storage account _____

Correct Answer

Reference:
https://learn.microsoft.com/en-us/azure/storage/blobs/access-tiers-overview

Q422. Match the security components to the appropriate defense in depth layers.

Correct Answer

Q423. You have a web app that runs in Azure.
You need to identify the amount of time it takes for web pages to load in a user’s browser.
What should you use?

1. Azure Monitor alerts
2. Application Insights in Azure Monitor
3. Log Analytics
4. Azure Network Watcher

Correct Answer

2. Application Insights in Azure Monitor

Q424. You plan to reduce ongoing Azure expenditures.
You need to identify which factors affect the costs of a resource.
Which three factors should you identify?

1. the volume of outbound data
2. the volume of inbound data
3. the service tier
4. the Azure region
5. the type of processed data

Correct Answer

1. the volume of outbound data
3. the service tier
5. the type of processed data

Q425. You can assign an Azure policy to a virtual machine. _____
If an Azure policy is assigned to a resource group, non-compliant resources are removed from the group. _____
If an Azure policy is assigned to a resource group, only compliant resources can be deployed to the group. _____

Correct Answer

Q426. The Hot access tier is available for blob data that uses standard storage. _____
The cool access tier is available for file shares in premium storage. _____
The Cool access tier can be configured at the storage account level. _____

Correct Answer

Reference:
https://learn.microsoft.com/en-us/azure/storage/blobs/access-tiers-overview
https://learn.microsoft.com/en-us/azure/storage/blobs/access-tiers-overview

Q427. AzCopy is a command line utility used to copy blobs or files to or from a storage account. _____
Azure Storage Explorer is a cloud-hosted migration service used to transfer large amounts of data. _____
Azure File Sync syncs files and folders between Azure Files and Windows file servers. _____

Correct Answer

Q428. _____ The ability to dynamically scale the resources available to a cloud app.
_____ The ability to use cloud-based backup services to restore resources in the event of an outage.
_____ The ability to quickly deploy and configure cloud-based resources as app requirements change.

Correct Answer

Q429. Azure Cosmos DB is an example of a _____ offering.

Correct Answer

Reference:
https://azure.microsoft.com/en-in/products/cosmos-db

Q430. _____ ensures access to cloud resources in the event of a service failure.

Correct Answer

Q431. Your company has an Azure subscription and three business units.
You plan to deploy new resources for each business unit.
You need to ensure that the new resources are deployed by using a repeatable and reliable method that applies the same configurations to each resource.
What should you use?

1. Azure Policy
2. Azure Arc
3. a resource group
4. Azure Resource Manager (ARM) templates

Correct Answer

4. Azure Resource Manager (ARM) templates

Q432. ____ extends Azure compliance and monitoring to hybrid and multi-cloud configurations.

Correct Answer

Reference:
https://azure.microsoft.com/en-us/products/azure-arc

Q433. Where does Azure Monitor store event data?

1. an Azure Blob Storage account
2. Azure Storage Queue
3. Azure SQL Database
4. a Log Analytics workspace

Correct Answer

4. a Log Analytics workspace

Reference:
https://learn.microsoft.com/en-us/azure/azure-monitor/overview

Q434. You deploy an Azure resource. The resource becomes unavailable for an extended period due to a service outage. Microsoft will _____

Correct Answer

Q435. The cool access tier is optimized _____

Correct Answer

Q436. Azure Arc can manage physical servers that run Linux. _____
Azure Arc can manage Azure Kubernetes Service(AKS) cluster at scale. _____
Azure Arc can manage a third-party database solution hosted outside of Azure. _____

Correct Answer

Reference:
https://learn.microsoft.com/en-us/azure/azure-arc/servers/overview

Q437. For the Platform as a Service (PaaS) cloud service updating the operating system is the responsibility of the customer. _____
For the Infrastructure as a Service(IaaS) cloud service, network control is the responsibility of Microsoft. _____
For Software as a Service(SaaS) cloud service, identity management is a shared responsibility between the customer and Microsoft. _____

Correct Answer

Q438. ExpressRoute uses Border Gateway Protocol(BGP). _____
ExpressRoute uses the internet to connect an on-premises network to Azure. _____
You can configure multiple ExpressRoute circuits to connect an on-premises datacenter to Azure. _____

Correct Answer

Reference:
https://azure.microsoft.com/en-us/products/expressroute

Q439. In the software as a service (SaaS) cloud service, which responsibility is shared between Microsoft and the customer?

1. identity and directory infrastructure management
2. application management
3. information and data management
4. operating system updates

Correct Answer

1. identity and directory infrastructure management

Q440. You have an Azure Storage account named storage1.
You need to ensure that containers can be created in but not deleted from storage1.
What should you do?

1. Create a ReadOnly lock for storage1.
2. Create a delete lock for storage1.
3. Enable container soft delete.
4. Enable blob soft delete.

Correct Answer

2. Create a delete lock for storage1.

Q441. When planning to migrate a public website to Azure, you must plan to _____

Correct Answer

Q442. You need to identify a customer’s level of shared responsibility based on the cloud service model.
In which order should you list each model from most customer responsibility to least customer responsibility?

Correct Answer

Q443. Azure AD requires domain controllers on Azure virtual machines. _____
Azure AD provides authentication services for Azure and Microsoft 365. _____
Each user account in Azure AD can be assigned only one Microsoft 365 license. _____

Correct Answer

Q444. You have an Azure subscription.
You need to use Azure Cloud Shell to run a deployment script.
What should you use to access Cloud Shell?

1. Azure Resource Manager (ARM)
2. Microsoft Visual Studio
3. a Windows command prompt
4. a web browser

Correct Answer

4. a web browser

Reference:
https://learn.microsoft.com/en-us/azure/cloud-shell/overview

Q445. An Azure administrator plans to run a PowerShell script that creates Azure resources.
You need to recommend which computer configuration to use to run the script.
Which three computers can run the script?

1. a computer that runs Windows 11 and has the Azure CLI tools installed
2. a computer that runs Linux and has the Azure CLI tools installed
3. a computer that runs macOS and has PowerShell Core 6.0 installed
4. a computer that runs Chrome OS and uses Azure Cloud Shell
5. a computer that runs Windows 10 and has the Azure PowerShell module installed

Correct Answer

3. a computer that runs macOS and has PowerShell Core 6.0 installed
4. a computer that runs Chrome OS and uses Azure Cloud Shell
5. a computer that runs Windows 10 and has the Azure PowerShell module installed

Q446. If a resource group named RG1 has a delete lock, _____ can delete RG1

Correct Answer

Q447. _____ is a physical migration service used to transfer large amount of data in a quick inexpensive and reliable way.

Correct Answer

Reference:
https://azure.microsoft.com/en-us/products/databox/data

Q448. _____ a common platform for deploying objects to a cloud infrastructure and for implementing consistency across the Azure environment.

Correct Answer

Q449. In the infrastructure as a service (IaaS) cloud service model, which two components are the responsibility of the cloud service provider?

1. the configuration and maintenance of storage
2. the installation and configuration of the operating system
3. maintaining the hardware
4. the network configuration
5. physical security of the datacenter infrastructure

Correct Answer

3. maintaining the hardware
5. physical security of the datacenter infrastructure

Q450. ______ supports synchronization between on-premises storage and Azure storage.

Correct Answer

Q451. The Total Cost of Ownership(TCO) calculator displays the cost of running workloads in a datacenter. _____
The Total Cost of Ownership(TCO) calculator displays the cost of running workloads in a Azure. _____
The Total Cost of Ownership(TCO) calculator generates graphical reports. _____

Correct Answer

Reference:
https://azure.microsoft.com/en-in/pricing/tco/calculator/

Q452. Creating and configuring a virtual network is part of the platform as a service(PaaS) cloud service model. _____
In the platform as a service(PaaS) cloud service model, updating code for an Azure web app is the customer’s responsibility. _____
Configuring user access to a platform as a service(PaaS) cloud service model is the customer’s responsibility. _____

Correct Answer

Q453. Network security groups(NSGs) can contain multiple inbound and outbound security rules. _____
A VM that performs a particular function such as running a firewall is also called a Network virtual appliance. _____
A user-defined route(UDR) can only control network traffic between subnets of a single virtual network. _____

Correct Answer

Q454. Azure Advisor supports alerts. _____
Azure Advisor recommendations can be filtered by Administrative unit. _____
Azure Advisor provides recommendations on improving the performance of resources. _____

Correct Answer

Reference:
https://learn.microsoft.com/en-us/azure/advisor/advisor-overview

Q455. ______ Provides software emulation of a physical computer.
______ Provides operating system virtualization.

Correct Answer

Q456. Only one tag can be assigned to an Azure resource. ______
Tags can be assigned to Azure resources by using Azure Resource Manager(ARM) templates. ______
Tags can be used to enforce naming standards for Azure resources. ______

Correct Answer

Reference:
https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/tag-resources
https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/tag-resources-templates

Q457. Adding more RAM to a virtual machine is an example of Horizontal scaling. ______
Adding an additional virtual machine based upon demand is an example of Vertical scaling. ______
Horizontal scaling can occur automatically or manually. ______

Correct Answer

Q458. You must install Azure Cloud Shell on your computer before you can use it. ______
The Azure Command-Line Interface(CLI) is installed by default in Windows 11. ______
Azure PowerShell can be used on computers that run Windows, Linux, or macOS. ______

Correct Answer

Reference:
https://techcommunity.microsoft.com/t5/itops-talk-blog/how-to-setup-and-run-azure-cloud-shell-locally/ba-p/1840528

FAQs

Conclusion

In summary, the Microsoft AZ900 certification is your gateway to mastering Azure cloud essentials, boosting your career prospects. Leverage practice tests and dumps to prepare effectively and open doors to a promising future in cloud technology.

With dedication and persistence, you’ll be on your way to becoming an Azure expert.

Happy Reading….