Font size
WorksheetsAZ 900 Challenge
Total questions: 88
Worksheet time: 16mins
Yes, Yes, Yes
Yes, No, Yes
Yes, Yes, No
No, Yes, Yes
YES NO NO
NO YES YES
NO YES NO
NO NO YES
You can use Advisor recommendations in Azure to send email alerts when the cost of the current billing
period for an Azure subscription exceeds a specified limit.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed.” If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed.
Access control (IAM)
Budget alerts
Compliance
You need to request that Microsoft increase a subscription quota limit for your company.
Which blade should you use from the Azure portal? To answer, select the appropriate blade in the answer
area.
Help + Support
All Resources
Storage Accounts
Azure Active Directory
Which statement accurately describes the Modern Lifecycle Policy for Azure services?
Microsoft provides mainstream support for a service for five years.
Microsoft provides a minimum of 12 months’ notice before ending support for a service.
After a service is made generally available, Microsoft provides support for the service for a minimum of
four years.
When a service is retired, you can purchase extended support for the service for up to five years.
YES NO NO
NO YES YES
YES YES NO
NO NO YES
YES NO YES
NO NO YES
YES YES NO
NO YES NO
YES NO YES
NO YES YES
YES YES NO
NO YES NO
YES YES NO
YES NO NO
YES NO YES
NO YES YES
Your company has 10 departments.
The company plans to implement an Azure environment.
You need to ensure that each department can use a different payment option for the Azure services it
consumes.
What should you create for each department?
a reservation
a subscription
a resource group
a container instance
Your company plans to purchase Azure.
The company’s support policy states that the Azure environment must provide an option to access support
engineers by phone or email.
You need to recommend which support plan meets the support policy requirement.
Solution: Recommend a Professional Direct support plan.
Does this meet the goal?
YES
NO
Your Azure trial account expired last week. You are now unable to create additional Azure Active Directory
(Azure AD) user accounts.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
start an existing Azure virtual machine
access your data stored in Azure
access the Azure portal
What is required to use Azure Cost Management?
a Dev/Test subscription
Software Assurance
an Enterprise Agreement (EA)
a pay-as-you-go subscription
YES YES NO
NO YES NO
YES NO NO
NO YES YES
Your company plans to request an architectural review of an Azure environment from Microsoft.
The company currently has a Basic support plan.
You need to recommend a new support plan for the company. The solution must minimize costs.
Which support plan should you recommend?
Premier
Developer
Professional Direct
Standard
Your company plans to purchase Azure.
The company’s support policy states that the Azure environment must provide an option to access support
engineers by phone or email.
You need to recommend which support plan meets the support policy requirement.
Solution: Recommend a Premier support plan.
Does this meet the goal?
YES
NO
Your company plans to purchase Azure.
The company’s support policy states that the Azure environment must provide an option to access support
engineers by phone or email.
You need to recommend which support plan meets the support policy requirement.
Solution: Recommend a Standard support plan.
Does this meet the goal?
YES
NO
Your company plans to purchase Azure.
The company’s support policy states that the Azure environment must provide an option to access support
engineers by phone or email.
You need to recommend which support plan meets the support policy requirement.
Solution: Recommend a Basic support plan.
Does this meet the goal?
YES
NO
An Azure service is available to all Azure customers when it is in public preview.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed.
private preview
development
an Enterprise Agreement (EA) subscription
What is guaranteed in an Azure Service Level Agreement (SLA) for virtual machines?
uptime
feature availability
bandwidth
performance
All Azure services that are in public preview are provided without any documentation.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
only configurable from Azure CLI
excluded from the Service Level Agreements
only configurable from the Azure portal
The Azure Standard support plan is the lowest cost option to receive 24x7 access to support engineers by
phone.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
Developer
Basic
Professional Direct
Your company has an Azure subscription that contains the following unused resources:
20 user accounts in Azure Active Directory (Azure AD)
Five groups in Azure AD
10 public IP addresses
10 network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused groups.
Does this meet the goal?
YES
NO
You can create an Azure support request from support.microsoft.com.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed.” If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed.
the Azure portal
the Knowledge Center
the Security & Compliance admin center
In which Azure support plans can you open a new support request?
Premier and Professional Direct only
Premier, Professional Direct, and Standard only
Premier, Professional Direct, Standard, and Developer only
Premier, Professional Direct, Standard, Developer, and Basic
A support plan solution that gives you best practice information, health status and notifications, and 24/7
access to billing information at the lowest possible cost is a Standard support plan.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
Developer
Basic
Premier
How should you calculate the monthly uptime percentage? To answer, select the appropriate options in the
answer area.
NOTE: Each correct selection is worth one point.
C C A
A B C
A A B
B C C
Your company has an Azure subscription that contains the following unused resources:
20 user accounts in Azure Active Directory (Azure AD)
Five groups in Azure AD
10 public IP addresses
10 network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused user accounts.
Does this meet the goal?
YES
NO
Your company has an Azure subscription that contains the following unused resources:
20 user accounts in Azure Active Directory (Azure AD)
Five groups in Azure AD
10 public IP addresses
10 network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused public IP addresses.
Does this meet the goal?
YES
NO
Your company has an Azure subscription that contains the following unused resources:
20 user accounts in Azure Active Directory (Azure AD)
Five groups in Azure AD
10 public IP addresses
10 network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused network interfaces.
Does this meet the goal?
YES
NO
YES YES NO
NO NO YES
YES NO YES
NO YES NO
NO YES NO
YES NO YES
YES YES NO
NO YES YES
If Microsoft plans to end support for an Azure service that does NOT have a successor service, Microsoft will
provide notification at least 12 months before.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed.
6 months
90 days
30 days
Your company plans to migrate to Azure. The company has several departments. All the Azure resources
used by each department will be managed by a department administrator.
What are two possible techniques to segment Azure for the departments? Each correct answer presents a
complete solution.
NOTE: Each correct selection is worth one point.
multiple subscriptions
multiple Azure Active Directory (Azure AD) directories
multiple regions
multiple resource groups
YES NO YES
NO YES NO
YES NO NO
YES YES NO
NO NO YES
YES NO YES
YES YES NO
NO YES NO
You deploy an Azure resource. The resource becomes unavailable for an extended period due to a service
outage. Microsoft will automatically refund your bank account.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed.
automatically migrate the resource to another subscription
automatically credit your account
send you a coupon code that you can redeem for Azure credits
YES YES NO
YES NO YES
NO YES YES
NO YES NO
Your company has 10 offices. You plan to generate several billing reports from the Azure portal. Each report
will contain the Azure resource utilization of each office.
Which Azure Resource Manager feature should you use before you generate the reports?
tags
templates
locks
policies
YES NO NO
NO YES YES
NO YES NO
YES NO YES
YES NO NO
NO NO YES
NO YES NO
YES NO YES
You attempt to create several managed Microsoft SQL Server instances in an Azure environment and
receive a message that you must increase your Azure subscription limits.
What should you do to increase the limits?
Create a service health alert
Upgrade your support plan
Modify an Azure policy
Create a new support request
You have several virtual machines in an Azure subscription. You create a new subscription. The virtual
machines cannot be moved to the new subscription.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
The virtual machines can be moved to the new subscription
The virtual machines can be moved to the new subscription only if they are all in the same resource
group
The virtual machines can be moved to the new subscription only if they run Windows Server 2016.
YES YES YES
NO NO NO
NO YES NO
YES NO YES
YES NO YES
NO YES NO
YES YES YES
NO NO NO
The Microsoft Online Services Privacy Statement explains what data Microsoft processes, how Microsoft
processes the data, and the purpose of processing the data.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed.” If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed.
Microsoft Online Services Terms
Microsoft Online Service Level Agreement
Online Subscription Agreement for Microsoft Azure
NO YES NO
YES NO YES
YES YES NO
NO NO YES
From Azure Cloud Shell, you can track your company’s regulatory standards and regulations, such as ISO
27001.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed.” If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed.
the Microsoft Cloud Partner Portal
Compliance Manager
the Trust Center
Your company has an Azure environment that contains resources in several regions.
A company policy states that administrators must only be allowed to create additional Azure resources in a
region in the country where their office is located.
You need to create the Azure resource that must be used to meet the policy requirement.
What should you create?
a read-only lock
an Azure policy
a management group
a reservation
YES NO
YES YES
NO NO
NO YES
You have an Azure virtual network named VNET1 in a resource group named RG1.
You assign an Azure policy specifying that virtual networks are not an allowed resource type in RG1. VNET1
is deleted automatically.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
is moved automatically to another resource group
continues to function normally
is now a read-only object
From Azure Monitor, you can view which user turned off a specific virtual machine during the last 14 days.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
Azure Event Hubs
Azure Activity Log
Azure Service Health
Your company implements Azure policies to automatically add a watermark to Microsoft Word documents
that contain credit card information.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed.
DDoS protection
Azure Information Protection
Azure Active Directory (Azure AD) Identity Protection
NO YES YES
YES YES NO
YES NO YES
NO NO NO
What should you use to evaluate whether your company’s Azure environment meets regulatory
requirements?
the Knowledge Center website
the Advisor blade from the Azure portal
Compliance Manager from the Security Trust Portal
the Security Center blade from the Azure portal
What can Azure Information Protection encrypt?
network traffic
documents and email messages
an Azure Storage account
an Azure SQL database
You have a resource group named RG1.
You plan to create virtual networks and app services in RG1.
You need to prevent the creation of virtual machines only in RG1.
What should you use?
a lock
an Azure role
a tag
an Azure policy
Which Azure service should you use to store certificates?
Azure Security Center
an Azure Storage account
Azure Key Vault
Azure Information Protection
You create a resource group named RG1 in Azure Resource Manager.
You need to prevent the accidental deletion of the resources in RG1.
Which setting should you use? To answer, select the appropriate setting in the answer area.
Policies
Locks
Automation Script
Quickstart
Which service provides network traffic filtering across multiple Azure subscriptions and virtual networks?
Azure Firewall
an application security group
Azure DDoS protection
a network security group (NSG)
From Access Control (IAM), you can view which user turned off a specific virtual machine during the last 14
days.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
Azure Event Hubs
Azure Activity Log
Azure Service Health
YES NO YES
YES YES NO
NO YES NO
NO NO YES
Your network contains an Active Directory forest. The forest contains 5,000 user accounts.
Your company plans to migrate all network resources to Azure and to decommission the on-premises data
center.
You need to recommend a solution to minimize the impact on users after the planned migration.
What should you recommend?
Implement Azure Multi-Factor Authentication (MFA)
Sync all the Active Directory user accounts to Azure Active Directory (Azure AD)
Instruct all users to change their password
Create a guest user account in Azure Active Directory (Azure AD) for each user
Resource groups provide organizations with the ability to manage the compliance of Azure resources across
multiple subscriptions.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
Management groups
Azure policies
Azure App Service plans
To what should an application connect to retrieve security tokens?
an Azure Storage account
Azure Active Directory (Azure AD)
a certificate store
an Azure key vault
Your company plans to deploy several web servers and several database servers to Azure.
You need to recommend an Azure solution to limit the types of connections from the web servers to the
database servers.
What should you include in the recommendation?
network security groups (NSGs)
Azure Service Bus
a local network gateway
a route filter
1,2,3,4
4,3,1,2
3,4,2,1
2,4,3,1
You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the
Internet by using an anonymous IP address, the users are prompted automatically to change their password.
Which Azure service should you use?
Azure AD Connect Health
Azure AD Privileged Identity Management
Azure Advanced Threat Protection (ATP)
Azure AD Identity Protection
Authorization is the process of verifying a user’s credentials.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
Authentication
Federation
Ticketing
You need to configure an Azure solution that meets the following requirements:
Secures websites from attacks
Generates reports that contain details of attempted attacks
What should you include in the solution?
Azure Firewall
a network security group (NSG)
Azure Information Protection
DDoS protection
You plan to implement several security services for an Azure environment. You need to identify which Azure
services must be used to meet the following security requirements:
Monitor threats by using sensors
Enforce Azure Multi-Factor Authentication (MFA) based on a condition
Which Azure service should you identify for each requirement? To answer, select the appropriate options in
the answer area.
NOTE: Each correct selection is worth one point.
2,3
1,2
3,4
4,3
NO YES NO
YES YES NO
NO NO YES
YES NO YES
Your company plans to migrate all on-premises data to Azure. You need to identify whether Azure complies
with the company’s regional requirements.
What should you use?
the Knowledge Center
Azure Marketplace
the Azure portal
the Trust Center
Azure Key Vault is used to store secrets for Azure Active Directory (Azure AD) user accounts.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
Azure Active Directory (Azure AD) administrative accounts
Personally Identifiable Information (PII)
D. server applications
NO YES YES
YES NO YES
NO NO YES
YES YES NO
Your company plans to automate the deployment of servers to Azure.
Your manager is concerned that you may expose administrative credentials during the deployment.
You need to recommend an Azure solution that encrypts the administrative credentials during the
deployment.
What should you include in the recommendation?
Azure Key Vault
Azure Information Protection
Azure Security Center
Azure Multi-Factor Authentication (MFA)
You plan to deploy several Azure virtual machines.
You need to control the ports that devices on the Internet can use to access the virtual machines.
What should you use?
a network security group (NSG)
an Azure Active Directory (Azure AD) role
an Azure Active Directory group
an Azure key vault
If a resource group named RG1 has a delete lock, only a member of the global administrators group can
delete RG1.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
the delete lock must be removed before an administrator
an Azure policy must be modified before an administrator
an Azure tag must be added before an administrator
Azure Germany can be used by legal residents of Germany only.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
no change is needed
only enterprises that are registered in Germany
only enterprises that purchase their azure licenses from a partner based in Germany
any user or enterprise that requires its data to reside in Germany
After you create a virtual machine, you need to modify the network security group (NSG) to allow
connections to TCP port 8080 on the virtual machine.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If
the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
virtual network gateway
virtual network
route table
Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
Solution: You modify a network security group (NSG).
Does this meet the goal?
YES
NO
YES YES YES
NO NO NO
YES NO YES
NO YES NO
YES YES YES
NO YES YES
NO YES NO
YE NO NO
Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
Solution: You modify a DDoS protection plan.
Does this meet the goal?
YES
NO
Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
Solution: You modify an Azure firewall.
Does this meet the goal?
YES
NO
Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
Solution: You modify an Azure Traffic Manager profile.
Does this meet the goal?
YES
NO
Which two types of customers are eligible to use Azure Government to develop a cloud solution? Each
correct answer presents a complete solution.
a Canadian government contractor
a European government contractor
a United States government entity
a United States government contractor
a European government entity
NO YES YES
YES YES NO
YES NO YES
NO NO YES
