Microsoft Azure Fundamentals (AZ-900) - Practice Exam - 5

What is the name of the Azure feature that allows you to sign in to third-party applications using your Azure AD credentials?

• Single Sign On (SSO)

• Azure Policy

• Conditional Access policy

• Azure AD Connect

What type of service model is the Azure Cosmos DB service?

• SaaS (software as a service)

• PaaS (platform as a service)

• On-premises application

• IaaS (infrastructure as a service)

You are creating a new storage account for relatively non-critical business data that does not need high availability. You need to choose a redundancy option that will cost the least. Which redundancy option should you choose?

• Geo-zone-redundant storage (GZRS)

• Locally redundant storage (LRS)

• Zone-redundant storage (ZRS)

• Geo-redundant storage (GRS)

Which of the following recommendations is provided by Azure Advisor?

(Choose3)

• Azure App Service security

• Azure virtual machine IP configuration

• Azure resource costs

• Storage performance and reliability

When choosing between Azure Storage redundancy options, which of the following is true for the zone-redundant storage (ZRS) option?

• ZRS provides protection if an entire region becomes unavailable.

• ZRS creates six copies of replicated data in Azure Storage.

• ZRS is the least expensive redundancy option.

• ZRS protects against the failure of an entire zone in a region.

Which of the following are characteristic of private clouds?

(Choose2)

• Lower costs

• Limited flexibility

• High scalability

• Improved security

What are security policies used for in Azure?

• Rules used to restrict and validate access to files and documents hosted on Azure.

• To connect to outside security services that aren't part of the Azure Trusted Providers program.

• A set of rules that Azure can use to evaluate if your configuration of a service is secure and complies with your organization's security guidelines.

• A set of rules that Azure uses to validate user access and permissions to Azure resources.

Your company is beginning the process of migrating their existing applications to Azure. A business-critical accounting application requires authentication with the NTLM protocol. This application will be migrated to a virtual machine in Azure. Any authentication solution must integrate into your existing on-premises Active Directory domain. What options are available for hosting this application in Azure while still authenticating with Active Directory?

(Choose2)

• Continue using your on-premises AD server, and synchronize the server with Azure AD over Azure AD Connect. Configure the application to authenticate with your on-premises AD server.

• Configure an Azure VM with Windows Server, and operate as an Active Directory domain controller. Configure the application to authenticate with your VM-hosted AD server.

• Configure the Azure Active Directory Domain Services (Azure AD DS) service to act as an extension of your existing on-premises Active Directory domain. Configure the application to authenticate with your Azure AD DS managed service.

• Configure the application to authenticate using Azure AD credentials over single sign-on (SSO).

Which of the below services can you use to deploy image service instances that provide on-demand and scalable computing resources with usage-based pricing?

• Azure Virtual Network

• Azure Virtual Machines

• Redis Cache

• Cloud Services

What is the purpose of Conditional Access?

• Proactive notifications of errors in your Azure resources to enable quick resolution.

• A feature to allow external users access to your Azure environment using their existing account/identity provider.

• Managed instance of classic Active Directory (AD DS) to authenticate legacy enterprise applications.

• Centralized identity access that goes beyond username/password, and providing conditions that must be met for access.