Azure AZ900 Exam Prep

Azure AZ900 Exam Prep

JDA

Review: Azure AZ900 Concepts

Sections 1-6

Poll

How well do you feel you've grasped the Azure content?

• Really Well

• Well

• Not Sure

• Not as Well as I'd Hoped

Questions on all sections will be asked randomly.

Chose the best answer. Try not to use your notes.

Multiple Choice

This term refers to a level of operational performance, usually described as uptime, that is higher than normal period.

• high availability

• scalability

• elasticity

Multiple Select

An Azure Load Balancer can provide high availability for your services.

• True

• False

Multiple Choice

A system in which every application or piece of infrastructure can be expanded to handle an increased load is known to be:

• highly available

• scalable

• elastic

Scalable vs. Elastic

The purpose of elasticity is to match the resources allocated with actual amount of resources needed at any given point in time. Scalability handles the changing needs of an application within the confines of the infrastructure via statically adding or removing resources to meet applications demands if needed.

Multiple Select

When scaling a system vertically, you add more power or resources to an existing instance.

• true

• false

Multiple Choice

Which Azure feature is most helpful when trying to incorporate elasticity in a solution?

• load balancer

• availability set

• autoscale

Multiple Select

When scaling a system horizontally, you add more power or resources to an existing instance.

• true

• false

Scaling

With vertical scaling (a.k.a. “scaling up”), you're adding more power to your existing machine. In horizontal scaling (a.k.a. “scaling out”), you get the additional resources into your system by adding more machines to your network, sharing the processing and memory workload across multiple devices.

Multiple Choice

Which Azure service helps ensure business continuity in the event of a site failure?

• load balancer

• availability set

• site recovery service

Multiple Choice

Which cloud model is considered the most common way of deploying cloud computing?

• private cloud

• public cloud

• hybrid cloud

Multiple Choice

Consists of computer resources used exclusively by one business or organization:

• public cloud

• private cloud

• hybrid cloud

Clouds

- A private cloud consists of cloud computing resources used exclusively by one business or organization.

- Public clouds' resources are owned and operated by a third-party cloud service provider and delivered over the Internet.

- A hybrid cloud is a type of cloud computing that combines on-premises infrastructure – or a private cloud – with a public cloud.

Multiple Choice

Which Azure feature is intended to provide fault tolerance for VM resources?

• availability set

• scale set

• vNet peer

Multiple Choice

A ___________ is a set of datacenters deployed within a latency-defined perimeter and connected through a dedicated regional low-latency network.

• paired region

• region

• resource group

Multiple Choice

An Azure _________ is a defined area of the world that contains at least one Azure Region.

• georgraphy

• data center

• region

Region vs. Geography

An Azure region consists of a set of data centers deployed within a latency-defined perimeter and connected through a dedicated low-latency network. This ensures that Azure services within an Azure region offer the best possible performance and security. An Azure geography is an area of the world that contains at least one Azure region. For example, India is a geography. Similarly United States and United Kingdom are geographies.

Multiple Choice

___________ is a high-availability offering that protects your applications and data from datacenter failures.

• Azure Datacenters

• availability groups

• resource groups

Multiple Choice

A combination of a fault domain and an update domain is called ________.

• a resource group

• an availability zone

• a redundant data center

Multiple Choice

A ____________ is a container that holds related resources for an Azure solution.

• resource set

• paired data center

• resource group

Multiple Select

A virtual network is scope to a single region.

• true

• false

Open Ended

What sends encrypted traffic between Azure virtual network and an on-premise location over the public Internet?

VPN

A VPN gateway is a specific type of virtual network gateway that is used to send encrypted traffic between an Azure virtual network and an on-premises location over the public Internet. You can also use a VPN gateway to send encrypted traffic between Azure virtual networks over the Microsoft network.

Multiple Select

Microsoft recommends that you use ___________ disks for new VMs.

• managed

• unmanaged

Benefits of Managed Disks

• simple and scalable

• better reliability for Availability Sets

• highly durable

• granular access control

• Azure Backup service support

Multiple Select

Data on the temporary disk may be lost during a maintenance event or when you redeploy a VM.

• true

• false

Multiple Select

Azure file shares cannot be mounted concurrently by cloud or on-premises deployments of Windows, Linux, and macOS.

• true

• false

Multiple Select

IoT Hub supports communications both from the device to the cloud and from the cloud to the device.

• true

• false

Multiple Select

Azure Firewall allows you to centrally create, enforce, and log application and network connectivity policies across subscriptions and virtual networks.

• true

• false

Multiple Choice

Azure DDoS protection offers two service tiers. What are they?

• Standard and Advanced

• Free and Basic

• Basic and Standard

Multiple Select

Azure DDoS Protection Standard can provide full layer 3 to layer 7 mitigation capability.

• true

• false

Azure DDoS Protection

A DDoS attack attempts to exhaust an application's resources, making the application unavailable to legitimate users. DDoS attacks can be targeted at any endpoint that is publicly reachable through the internet. Azure DDoS Protection Standard, combined with application design best practices, provides enhanced DDoS mitigation features to defend against DDoS attacks.

Multiple Choice

____________________ enables you to work with the resources in your solution as a group.

• Azure Resource Group

• Azure Subscriptions

• Azure Tenants

Multiple Choice

_______________________ is a comprehensive identity and access management cloud solution.

• Azure MFA

• Azure AD

• Azure Domain Services

Multiple Choice

Which built-in role can create and manage all types of Azure resources but can’t grant access to others?

• owner

• contributor

• reader

Multiple Select

You can have up to _____________ role assignments in each subscription.

• 500

• 1000

• 2000

Multiple Choice

________________ is a customizable dashboard which tracks the health of your Azure services.

• Service Health

• Azure Health Monitor

• Azure Monitor

Multiple Choice

The ______________ addresses the export of personal data outside the EU and EEA areas.

• GDPR

• ISO

• NIST

Multiple Choice

These security controls are generally applicable to US Federal Information Systems.

• GDPR

• ISO

• NIST

Multiple Select

The Trust Center and the Azure Service Trust Portal both refer to the same thing.

• true

• false

Trust Center vs. Azure Service Trust Portal

Trust Center is a website resource containing details about how MS implements and supports security.

The Azure Service Trust Portal (STP) hosts the Compliance Manager service and is the public site for publishing audit reports.

Multiple Select

Of the built-in roles, only Owners are granted the ability to create or delete management locks.

• true

• false

Multiple Select

Azure Government uses same underlying technologies as global Azure.

• true

• false

Multiple Select

When you grant access at a parent scope, those permissions are inherited to the child scopes.

• true

• false

Multiple Select

Microsoft can assist with key recovery if a key that's stored in the Key Vault is lost.

• true

• false

Multiple Select

Azure RBAC is a default allow and explicit deny system.

• true

• false

Multiple Select

An Azure subscription can only trust one directory.

• true

• false

Multiple Select

More than one subscription can trust the same directory.

• true

• false

Multiple Select

Azure pricing is the same, whether you create an Azure account through the Azure website or if you add Azure to a Microsoft Enterprise Agreement.

• true

• false

Multiple Select

A free Azure account includes _________ in Azure credits.

• $100

• $200

• $300

Multiple Choice

The credits provided as part of a free Azure account must be used within _______ days.

• 20

• 30

• 60

• 90

Multiple Choice

Which feature identifies VMs with low utilization?

• Azure Cost Management

• Azure Advisor

• Azure Cost Analysis

Multiple Choice

Which Microsoft-affiliated forum is a good resource for Azure support, outside of support plan channels?

• Stack Overflow

• MSDN

• Experts Exchange

Multiple Select

Preview features are covered by the same SLAs as General Availability features.

• true

• false