AZ-900 (1)

Select ''no change needed'' if the below statement is correct, otherwise select the correct awnser:

After you create a virtual machine, you need to modify the [ virtual network ] to allow connections to TCP port 8080 on the virtual machine.

• virtual network gateway

• network security group (NSG)

• no change needed

• route table

Answer explanation

Explanation

Correct answer is option network security group (NSG)   

When you create a new Virtual Machine, the next step is to create a Network Security Group (NSG) attached to the network interface assigned to the VM.

A network security group works as a firewall. You can attach a network security group to a virtual network and/or individual subnets within the virtual network. You can also attach a network security group to a network interface assigned to a virtual machine. You can use multiple network security groups within a virtual network to restrict traffic between resources such as virtual machines and subnets.

In this question, we need to add a rule to the Network Security Group to allow the connection to the virtual machine on port 8080.

Reference: https://docs.microsoft.com/en-us/azure/virtual-network/security-overview#network-security-groups

Other options are not correct.

Option No change needed ie. virtual network is incorrect - Azure Virtual Network (VNet) is the fundamental building block for your private network in Azure, which enables many types of Azure resources to securely communicate with each other. You select virtual network at the time of VM creation. Reference: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-overview

Option virtual network gateway is incorrect - Virtual network gateway is used to send encrypted traffic between an Azure Virtual Network and an on-premises location over the public internet. It provides a more secure connection from on-premises to Azure over the internet.

Option route table is incorrect - A route table is used to routes traffic between Azure subnets, virtual networks, and on-premises networks. You can not use it to whitelist port.

Select two correct options:

Which of the following are the most common uses of Hybrid Clouds?

• Government agencies

• Virtualization

• High availability

• Cloud migration

Answer explanation

Explanation

Correct answers are

Option Cloud migration - Cloud migration is a correct use case of the Hybrid cloud, as you will need to manage the private cloud until the migration is completed on the public cloud. So you will need to manage the public cloud & private data center during the migration phase.

Option High availability - High availability can be achieved with a hybrid cloud, by hosting applications in private & public clouds, reducing the risk of failure.

Other options are not correct

Option Virtualization is incorrect - Virtualization does not require a Hybrid cloud modal, it can be achieved in private cloud / public cloud independently.

Option Government agencies is incorrect - Government agencies usually use a private cloud and not a hybrid cloud modal.

Select the correct option:

Which of the following cloud services provides development collaboration tools including high-performance pipelines, free private Git repositories, and configurable Kanban boards?

• Azure DevOps Services

• Azure Event Grid

• Azure DevTest Labs

• Azure HDInsight

Answer explanation

Explanation

Keywords: collaboration tools, pipelines, Git repositories, Kanban boards => Azure DevOps

Correct answer is option Azure DevOps Services

Azure DevOps Services provides development collaboration tools including high-performance pipelines, private Git repositories, configurable Kanban boards, and extensive automated and cloud-based load testing. DevOps services provide the following tools

[Foto hoort hier]

Reference: https://docs.microsoft.com/en-us/azure/devops/user-guide/what-is-azure-devops

Other options are not correct.

Option Azure Event Grid is incorrect - Azure Event Grid allows you to easily build applications with event-based architectures. Reference: https://docs.microsoft.com/en-us/azure/event-grid/overview

Option Azure HDInsight is incorrect - Azure HDInsight is an open-source analytics service for enterprises to process massive amounts of data. HDInsight allows you to run popular frameworks such as Apache Spark, Apache Hadoop, Apache Kafka. Reference: https://docs.microsoft.com/en-us/azure/hdinsight/hadoop/apache-hadoop-introduction

Option Azure DevTest Labs is incorrect - Azure DevTest Labs provides self-service cloud environments (Windows/Linux) for demo/training purposes to speed up the development process. One of the primary scenarios involves using DevTest Labs to host development machines for developers. Reference: https://docs.microsoft.com/en-us/azure/devtest-labs/devtest-lab-overview

For each of the following statements, check the checkbox if the statement is correct:

1. Availability zones can be inplemented in all Azure regions.

2. Only virtual machines that run Windows server can be created in availability zones.

3. Availability zones are used to replicate data and applications to multiple regions.

• All statements are incorrect.

• 1. Availability zones can be inplemented in all Azure regions.

• 2. Only virtual machines that run Windows server can be created in availability zones.

• 3. Availability zones are used to replicate data and applications to multiple regions.

Select the correct option:

What Azure tool gives you the ability to manage the multiple subscriptions into nested hierarchies?

• Resource Groups

• Management Groups

• Azure Active Directory (AD)

• Role-Based Access Control (RBAC)

Answer explanation

Explanation

Keywords: manage, subscriptions, hierarchies => Management Groups

Correct answer is option Management Groups

Management groups are containers that help you manage access, policy, and compliance for multiple subscriptions. All subscriptions in a management group automatically inherit the conditions applied to the management group. Further Details: https://docs.microsoft.com/en-us/azure/governance/management-groups/overview

Other options are not correct.

Option Resource Groups is incorrect - Resource Group allows you to logically group Azure Resources together. Resource groups are created under subscriptions (see the diagram above), so it can't be used to manage subscriptions. Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/overview#resource-groups

Option Azure Active Directory (AD) is incorrect - Azure Active Directory is an access management service, to helps employees of an organization sign in and access resources. ADs are not used to manage subscriptions. Reference: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-whatis

Option Role-Based Access Control (RBAC) is incorrect - Role-based access control provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs. It's not used to manage subscriptions. Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/overview