wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

AZ-900 Questions 2

Total questions: 40

Worksheet time: 1hrs 18mins

Name
Class
Date
1.

Your company plans to move several servers to Azure.

The company's compliance policy states that a server named FinServer must be on a separate

network segment.You are evaluating which Azure services can be used to meet the compliance policy

requirements.


Which Azure solution should you recommend?

a)

a resource group for FinServer and another resource group for all the other servers

b)

a virtual network for FinServer and another virtual network for all the other servers

c)

a VPN for FinServer and a virtual network gateway for each other server

d)

one resource group for all the servers and a resource lock for FinServer

2.

Your company plans to migrate all its network resources to Azure.

You need to start the planning process by exploring Azure.

What should you create first?

a)

a subscription

b)

a resource group

c)

a virtual network

d)

a management group

3.

You have an on-premises application that sends email notifications automatically based on a rule.

You plan to migrate the application to Azure.

You need to recommend a serverless computing solution for the application.

What should you include in the recommendation?

a)

a web app

b)

a server image in Azure Marketplace

c)

a logic app

d)

an API app

4.

You plan to deploy a website to Azure. The website will be accessed by users worldwide and will

host large video files.

You need to recommend which Azure feature must be used to provide the best video playback

experience.

What should you recommend?

a)

an application gateway

b)

an Azure ExpressRoute circuit

c)

a content delivery network (CDN)

d)

an Azure Traffic Manager profile

5.

Your company plans to automate the deployment of servers to Azure.

Your manager is concerned that you may expose administrative credentials during the

deployment.

You need to recommend an Azure solution that encrypts the administrative credentials during the

deployment.

a)

Azure Key Vault

b)

Azure Information Protection

c)

Azure Security Center

d)

Azure Multi-Factor Authentication (MFA)

6.

This question requires that you evaluate the underlined text to determine if it is correct.

After you create a virtual machine, you need to modify the network security group (NSG) to allow

connections from TCP port 8080.

Instructions: Review the underlined text. If it makes the statement correct, select "No change is

needed". If the statement is incorrect, select the answer choice that makes the statement correct.

a)

No change is needed

b)

virtual network gateway

c)

virtual network

d)

route table

7.

Which Azure service should you use to store certificates?

a)

Azure Security Center

b)

an Azure Storage account

c)

Azure Key Vault

d)

Azure Information Protection

8.

You have a resource group named RG1.

You plan to create virtual networks and app services in RG1.

You need to prevent the creation of virtual machines only in RG1.

What should you use?

a)

a lock

b)

an Azure role

c)

a tag

d)

an Azure policy

9.

You plan to deploy several Azure virtual machines.

You need to control the ports that devices on the internet can use to access the virtual machines.

What should you use?

a)

an Azure Active Directory (AzureAD) role

b)

an Azure key vault

c)

an Azure Active Directory group

d)

a network security group (NSG)

10.

An Azure administrator plans to run a PowerShell script that creates Azure resources.

You need to recommend which computer configuration to use to run the script.

Which three computers can run the script? Each correct answer presents a complete solution NOTE: Each correct

selection is worth one point.

a)

a computer that runs macOS and has PowerShell Core 6.0 installed

b)

a computer that runs Windows 10 and has the Azure PowerShell module installed

c)

a computer that runs Chrome OS and uses Azure Cloud Shell

d)

a computer that runs Linux and has the Azure CLI tools installed

11.

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named

VM1 is accessible from the Internet over HTTP.

What are two possible solutions? Each correct answer presents a complete solution.

a)

Modify a DDoS protection plan.

b)

Modify an Azure firewall.

c)

Modify an Azure Traffic Manager profile.

d)

Modify a network security group (NGS)

12.

Your company has an Azure subscription that contains the following unused resources:

- 20 user accounts in Azure Active Directory (Azure AD)

- Five groups in Azure AD

- 10 public IP addresses

- 10 network interfaces

You need to reduce the Azure costs for the company.

Which unused resources should you remove?

a)

the user accounts

b)

the network interfaces

c)

the public IP addresses

d)

the groups

13.

Which task can you perform by using Azure Advisor?

a)

Integrate Active Directory and Azure Active Directory (Azure AD).

b)

Estimate the costs of an Azure solution.

c)

Confirm that Azure subscription security follows best practices.

d)

Evaluate which on-premises resources can be migrated to Azure.

14.

Your company uses management groups to manage resources in your Azure tenant more efficiently. User1 should be

able to assign access and assign policies to management groups. You need to determine to which role-based access

control (RBAC) role User1 should be added.

Your solution should follow the principle of least privilege. To which role should you add User1?

a)

User Access Administrator

b)

Owner

c)

Management Group Contributor

d)

Contributor

15.

Which service provides serverless computing in Azure?

a)

Azure Virtual Machines

b)

Azure Functions

c)

Azure storage account

d)

Azure Container Instances

16.

To complete the sentence, select the appropriate option in the answer area: _____ is the process of verifying a user's credentials.

a)

Authorization

b)

Authentication

c)

Federation

d)

Ticketing

17.

To complete the sentence, select the appropriate option in the answer area: From _____ you can view which user turned off a specific virtual machine during the last 14 days.

a)

Azure Control IAM

b)

Azure Event Hubs

c)

Azure Activity Log

d)

Azure Service Health

18.

To complete the sentence, select the appropriate option in the answer area: If a resource group named RG1 has a delete lock, _____ can delete RG1.

a)

only a member of the global administrators group

b)

the delete lock must be removed before an administrator

c)

an Azure policy must be modified before an administrator

d)

an Azure tag must be added before an administrator

19.

To complete the sentence, select the appropriate option in the answer area: Your company implements _____ to automatically add a watermark to Microsoft Word documents that contain credit card information.

a)

Azure policies

b)

DDos protection

c)

Azure Information Protection

d)

Azure Active Directory (Azure AD) Identity Protection

20.

Yes or No: From Azure Service Health, an administrator can view the health of all the services in an Azure environment.

a)

Yes

b)

No

21.

Yes or No: From Azure Service Health, an administrator can create a rule to be alerted if an Azure service fails.

a)

Yes

b)

No

22.

Yes or No: From Azure Service Health, an administrator can prevent a service failure.

a)

Yes

b)

No

23.

To complete the sentence, select the appropriate option in the answer area: You have an Azure virtual network named VNET1 in a resource group named RG1. You assign the Azure Policy definition of Not Allowed Resource Type and specify that virtual networks are not an allowed resource type in RG1. VNET1_____.

a)

is deleted automatically

b)

is moved automatically to another resource group

c)

continues to function normally

d)

is now a read-only object

24.

Yes or No: An Azure subscription can have multiple account administrators.

a)

Yes

b)

No

25.

Yes or No: An Azure subscription can be managed by using a Microsoft account only.

a)

Yes

b)

No

26.

Yes or No: An Azure resource group can contain multiple Azure subscriptions.

a)

Yes

b)

No

27.

Yes or No: Azure Active Directory Premium P2 guarantees at least 99.9% availability.

a)

Yes

b)

No

28.

Yes or No: The Service Level Agreement (SLA) for Azure Active Directory Premium P2 is the same as the SLA for Azure Active Directory Free.

a)

Yes

b)

No

29.

Yes or No: All paying Azure customers receive a credit if their monthly uptime % is below the guaranteed amount in the Service Level Agreement (SLA).

a)

Yes

b)

No

30.

To complete the sentence, select the appropriate option in the answer area: You deploy an Azure resource. The resource becomes unavailable for an extended period due to a service outage. Microsoft will _____.

a)

refund your bank account

b)

migrate the resources to another subscription

c)

credit your Azure account

d)

send you a coupon code that you can redeem for Azure credits

31.

Yes or No: Adding resource groups in an Azure subscription generates additional costs.

a)

Yes

b)

No

32.

Yes or No: Copying 10 GB of data to Azure from an on-premises network over a VPN generates additional Azure data transfer costs.

a)

Yes

b)

No

33.

Yes or No: Copying 10 GB of data from Azure to an on-premises network over a VPN generates additional Azure data transfer costs.

a)

Yes

b)

No

34.

You have several virtual machines in an Azure subscription. You create a new subscription. Which of the following is true?

a)

The virtual machines cannot be moved to the new subscription.

b)

The virtual machines can be moved to the new subscription.

c)

The virtual machines can be moved to the new subscription only if they are all in the same resource group.

d)

The virtual machines can be moved to the new subscription only if they run Windows Server 2016.

35.

To complete the sentence, select the appropriate option in the answer area: You can enable just in time (JIT) VM access by using _____.

a)

Azure Bastion

b)

Azure Firewall

c)

Azure Front Door

d)

Azure Security Center

36.

You plan to create an Azure virtual machine.

You need to identify which storage service must be used to store the data disks of the virtual machine.

What should you identify? To answer, select the appropriate service in the answer area.

a)

Containers - (Scalable, cost-effective storage for unstructured data)

b)

File Shares - (Serverless SMB file shares)

c)

Tables - (Tabular Data Storage)

d)

Queues - (Effectively scale apps according to traffic)

37.

Yes or No: All the Azure resources deployed to a resource group must use the same Azure region.

a)

Yes.

b)

No.

38.

Yes or No: If you assign a tag to a resource group, all the Azure resources in that resource group are assigned to the same tag.

a)

Yes.

b)

No.

39.

Yes or No: If you assign permissions for a user to manage a resource group, the user can manage all the Azure resources in that resource group.

a)

Yes.

b)

No.

40.

To complete the sentence, select the appropriate option in the answer area: You plan to deploy 20 virtual machines to an Azure environment. To ensure that a virtual machine named VM1 cannot connect to the other virtual machines, VM1 must _____.

a)

be deployed to a separate virtual network

b)

run a different operating system than the other virtual machines

c)

be deployed to a seperate resource group

d)

have 2 network interfaces