Font size
WorksheetsAZ900 Azure Fundamentals
Total questions: 149
Worksheet time: 4hrs 44mins
Your company intends to subscribe to an Azure support plan. The support plan must allow for new support requests to be opened. Which of the following are support plans that will allow this? Select all that apply.
Basic
Developer
Standard
Professional Direct
Premier
Your company has datacenters in Los Angeles and New York. The company has a Microsoft Azure subscription. You are configuring the two datacenters as geo-clustered sites for site resiliency. You need to recommend an Azure storage redundancy option. You have the following data storage requirements:
✑ Data must be stored on multiple nodes.
✑ Data must be stored on nodes in separate geographic locations.
✑ Data can be read from the secondary location as well as from the primary location Which of the following Azure stored redundancy options should you recommend?
Geo-redundant storage
Read-only geo-redundant storage
Zone-redundant storage
Locally redundant storage
Your company’s Azure subscription includes a Basic support plan. They would like to request an assessment of an Azure environment’s design from Microsoft. This is, however, not supported by the existing plan. You want to make sure that the company subscribes to a support plan that allows this functionality, while keeping expenses to a minimum.
Solution: You recommend that the company subscribes to the Professional Direct support plan.
Does the solution meet the goal?
YES
NO
You are tasked with deploying Azure virtual machines for your company.You need to make use of the appropriate cloud deployment solution.Solution: You should make use of Software as a Service (SaaS).Does the solution meet the goal?
YES
NO
You are tasked with deploying Azure virtual machines for your company. You need to make use of the appropriate cloud deployment solution. Solution: You should make use of Platform as a Service (PaaS).Does the solution meet the goal?
YES
NO
You are tasked with deploying Azure virtual machines for your company.You need to make use of the appropriate cloud deployment solution.Solution: You should make use of Infrastructure as a Service (IaaS).Does the solution meet the goal?
YES
NO
Your developers have created 10 web applications that must be host on Azure. You need to determine which Azure web tier plan to host the web apps. The web tier plan must meet the following requirements:
✑ The web apps will use custom domains.
✑ The web apps each require 10 GB of storage.
✑ The web apps must each run in dedicated compute instances.
✑ Load balancing between instances must be included.
✑ Costs must be minimized.
Which web tier plan should you use?
Standard
Free
Basic
Shared
You are planning to migrate a company to Azure. Each of the company’s numerous divisions will have an administrator in place to manage the Azure resources used by their respective division.You want to make sure that the Azure deployment you employ allows for Azure to be segmented for the divisions, while keeping administrative effort to a minimum.Solution: You plan to make use of several Azure Active Directory (Azure AD) directories.Does the solution meet the goal?
YES
NO
Your developers have created a portal web app for users in the Miami branch office. The web app will be publicly accessible and used by the Miami users to retrieve customer and product information. The web app
is currently running in an on-premises test environment. You plan to host the web app on Azure. You need to determine which Azure web tier plan to host the web app. The web tier plan must meet the following requirements:
✑ The website will use the miami.weyland.com URL.
✑ The website will be deployed to two instances.
✑ SSL support must be included.
✑ The website requires 12 GB of storage.
✑ Costs must be minimized.
Which web tier plan should you use?
Standard
Basic
Free
Shared
Your company is planning to migrate all their virtual machines to an Azure pay-as-you-go subscription. The virtual machines are currently hosted on the Hyper-V hosts in a data center.You are required make sure that the intended Azure solution uses the correct expenditure model.Solution: You should recommend the use of the elastic expenditure model.Does the solution meet the goal?
yes
no
HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:
a
b
c
d
You have an Azure application that uses the services shown in the table.
How should you calculate the composite SLA for the application?
0.999 * 0.9999 = 0.9989001 = 99.89001%
0.999 / 0.9999 = 0.9991 = 99.91%
Max(0.999, 0.9999) = 0.9999 = 99.99%
Min(0.999, 0.9999) = 0.999 = 99.9%
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
y y n
n n n
n n y
n y n
Which task can you perform by using Azure Advisor?
Integrate Active Directory and Azure Active Directory (Azure AD).
Estimate the costs of an Azure solution.
Confirm that Azure subscription security follows best practices.
Evaluate which on-premises resources can be migrated to Azure.
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
a
b
c
d
Who can use the Azure Total Cost of Ownership (TCO) calculator?
billing readers for an Azure subscription only
owners for an Azure subscription only
anyone
all users who have an account in Azure Active Directory (Azure AD) that is linked to an Azure subscription only
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
Y N N
N N Y
N Y N
Y Y N
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
Y N Y
Y Y Y
N Y Y
N Y N
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Hot Area:
N N N
Y Y Y
Y N N
N N Y
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
A
B
C
D
Your company has an Azure subscription that contains the following unused resources:
✑ 20 user accounts in Azure Active Directory (Azure AD)
✑ Five groups in Azure AD
✑ 10 public IP addresses
✑ 10 network interfaces
You need to reduce the Azure costs for the company. Which unused resources should you remove?
the network interfacesthe public IP addresses
the public IP addresses
the groups
the user accounts
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
y n y
n y n
n y y
y y n
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
y n n
n y y
n y n
y n y
HOTSPOT -To complete the sentence, select the appropriate option in the answer area.Hot Area:
a
b
c
d
HOTSPOT - You need to request that Microsoft increase a subscription quota limit for your company. Which blade should you use from the Azure portal? To answer, select the appropriate blade in the answer area. Hot Area:
Help + Support
Security Center
Advisor
Monitor
Which statement accurately describes the Modern Lifecycle Policy for Azure services?
Microsoft provides mainstream support for a service for five years.
Microsoft provides a minimum of 12 months’ notice before ending support for a service.
After a service is made generally available, Microsoft provides support for the service for a minimum of four years.
When a service is retired, you can purchase extended support for the service for up to five years.
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
y y n
n y n
y y y
y n y
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
a
b
c
d
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
y y n
n y y
y n y
n y n
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
N Y Y
Y Y N
Y N Y
N Y N
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
N Y N
Y N Y
Y Y Y
N N Na
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
Y N N
N N Y
Y N Y
N Y N
Your company has a Software Assurance agreement that includes Microsoft SQL Server licenses. You plan to deploy SQL Server on Azure virtual machines. What should you do to minimize licensing costs for the deployment?
Deallocate the virtual machines during off hours.
Use Azure Hybrid Benefit.
Configure Azure Cost Management budgets.
Use Azure reservations.
Your company plans to purchase an Azure subscription.The company’s support policy states that the Azure environment must provide an option to access support engineers by phone or email.You need to recommend which support plan meets the support policy requirement.Solution: Recommend a Professional Direct support plan.Does this meet the goal?
YES
NO
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
A
B
C
D
What is required to use Azure Cost Management?
a Dev/Test subscription
Software Assurance
an Enterprise Agreement (EA)
a pay-as-you-go subscription
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
Y N N
Y N Y
N Y Y
N N N
Your company plans to request an architectural review of an Azure environment from Microsoft. The company currently has a Basic support plan. You need to recommend a new support plan for the company. The solution must minimize costs. Which support plan should you recommend?
Premier
Developer
Professional Direct
Standard
Your company plans to purchase an Azure subscription.The company’s support policy states that the Azure environment must provide an option to access support engineers by phone or email.You need to recommend which support plan meets the support policy requirement.Solution: Recommend a Premier support plan.Does this meet the goal?
YES
NO
Your company plans to purchase an Azure subscription.The company’s support policy states that the Azure environment must provide an option to access support engineers by phone or email.You need to recommend which support plan meets the support policy requirement.Solution: Recommend a Standard support plan.Does this meet the goal?
YES
NO
Your company plans to purchase an Azure subscription.The company’s support policy states that the Azure environment must provide an option to access support engineers by phone or email.You need to recommend which support plan meets the support policy requirement.Solution: Recommend a Basic support plan.Does this meet the goal?
YES
NO
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
A
B
C
D
What is guaranteed in an Azure Service Level Agreement (SLA) for virtual machines?
uptime
feature availability
bandwidth
performance
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
A
B
C
D
This question requires that you evaluate the underlined text to determine if it is correct. The Azure Standard support plan is the lowest cost option to receive 24x7 access to support engineers by phone. Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
Developer
Basic
Professional Direct
Your company has an Azure subscription that contains the following unused resources:✑ 20 user accounts in Azure Active Directory (Azure AD)✑ Five groups in Azure AD✑ 10 public IP addresses✑ 10 network interfacesYou need to reduce the Azure costs for the company.Solution: You remove the unused groups.Does this meet the goal?
YES
NO
This question requires that you evaluate the underlined text to determine if it is correct. You can create an Azure support request from support.microsoft.com. Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed.” If the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed.
the Azure portal
the Knowledge Center
the Security & Compliance admin center
In which Azure support plans can you open a new support request?
Premier, Professional Direct, and Standard only
Premier and Professional Direct only
Premier, Professional Direct, Standard, and Developer only
Premier, Professional Direct, Standard, Developer, and Basic
This question requires that you evaluate the underlined text to determine if it is correct. A support plan solution that gives you best practice information, health status and notifications, and 24/7 access to billing information at the lowest possible cost is a Standard support plan. Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
Developer
Basic
Premier
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
N N Y
Y Y N
N Y N
Y N Y
Your company has an Azure subscription that contains the following unused resources:
✑ 20 user accounts in Azure Active Directory (Azure AD)
✑ Five groups in Azure AD
✑ 10 public IP addresses
✑ 10 network interfacesYou need to reduce the Azure costs for the company.
Solution: You remove the unused user accounts.
Does this meet the goal?
YES
NO
Your company has an Azure subscription that contains the following unused resources:
✑ 20 user accounts in Azure Active Directory (Azure AD)
✑ Five groups in Azure AD
✑ 10 public IP addresses
✑ 10 network interfacesYou need to reduce the Azure costs for the company.
Solution: You remove the unused public IP addresses.
Does this meet the goal?
YES
NO
Your company has an Azure subscription that contains the following unused resources:
✑ 20 user accounts in Azure Active Directory (Azure AD)
✑ Five groups in Azure AD
✑ 10 public IP addresses
✑ 10 network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused network interfaces.
Does this meet the goal?
YES
NO
HOTSPOT -For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Y N Y
N Y N
N N N
Y Y Y
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
N Y Y
N N N
Y Y Y
Y N Y
This question requires that you evaluate the underlined text to determine if it is correct. If Microsoft plans to end support for an Azure service that does NOT have a successor service, Microsoft will provide notification at least 12 months before. Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed.
6 months
90 days
30 days
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
N Y N
Y N Y
N N Y
Y Y N
Your company has 10 offices. You plan to generate several billing reports from the Azure portal. Each report will contain the Azure resource utilization of each office. Which Azure Resource Manager feature should you use before you generate the reports?
tags
templates
locks
policies
HOTSPOT -For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
N Y N
N N Y
Y N N
Y N Y
HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:
A
B
C
D
HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:
A
B
C
D
DRAG DROP -Match the resources to the appropriate descriptions.To answer, drag the appropriate resource from the column on the left to its description on the right. Each resource may be used once, more than once, or not at all.NOTE: Each correct match is worth one point.Select and Place:
MS Privacy Statement, Data Protection Addendum, Online Services Terms
Data Protection Addendum, Online Services Terms, MS Privacy Statement
Online Services Terms, MS Privacy Statement, Data Protection Addendum
MS Privacy Statement, Online Services Terms, Data Protection Addendum
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
y y n
n n y
y n y
n y n
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
n n y
y y n
y n y
n y n
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
A
B
C
D
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
Y Y Y
N N N
Y N Y
N Y N
You have an Azure subscription. Where will you find details on the personal data collected by Microsoft, how Microsoft uses the data, and what the data is used for?
the Data Protection Addendum
the Microsoft Online Services Terms
the Microsoft Privacy Statement
Azure Security Center
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
A
B
C
D
What should you use to evaluate whether your company’s Azure environment meets regulatory requirements?
the Knowledge Center website
the Advisor blade from the Azure portal
Compliance Manager from the Service Trust Portal
the Solutions blade from the Azure portal
What can Azure Information Protection encrypt?
network traffic
documents and email messages
an Azure Storage account
an Azure SQL database
You have an Azure subscription and 100 Windows 10 devices. You need to ensure that only users whose devices have the latest security patches installed can access Azure Active Directory (Azure AD)-integrated applications. What should you implement?
a conditional access policy
Azure Bastion
Azure Firewall
Azure Policy
You have a resource group named RG1. You need to prevent the creation of virtual machines in RG1. The solution must ensure that other objects can be created in RG1. What should you use?
a lock
an Azure role
a tag
an Azure policy
HOTSPOT - You create a resource group named RG1 in Azure Resource Manager. You need to prevent the accidental deletion of the resources in RG1. Which setting should you use? To answer, select the appropriate setting in the answer area. Hot Area:
LOCKS
POLICIES
EXPORT TEMPLATE
PROPERTIES
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
Y Y Y
N N N
N Y Y
N N Y
Your network contains an Active Directory forest. The forest contains 5,000 user accounts. Your company plans to migrate all network resources to Azure and to decommission the on-premises data center. You need to recommend a solution to minimize the impact on users after the planned migration. What should you recommend?
Implement Azure Multi-Factor Authentication (MFA)
Sync all the Active Directory user accounts to Azure Active Directory (Azure AD)
Instruct all users to change their password
Create a guest user account in Azure Active Directory (Azure AD) for each user
To what should an application connect to retrieve security tokens?
an Azure Storage account
Azure Active Directory (Azure AD)
a certificate store
an Azure key vault
DRAG DROP - Match the term to the correct definition. Instructions: To answer, drag the appropriate term from the column on the left to its description on the right. Each term may be used once, more than once, or not at all. NOTE: Each correct match is worth one point. Select and Place:
ISO
NIST
GDPR
AZURE GOV
GDPR
AZURE GOV
ISO
NIST
AZURE GOV
ISO
NIST
GDPR
NIST
GDPR
AZURE GOV
ISO
You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted automatically to change their password. Which Azure service should you use?
Azure AD Connect Health
Azure AD Privileged Identity Management
Azure Advanced Threat Protection (ATP)
Azure AD Identity Protection
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
N N Y
Y Y N
N Y Y
Y N Y
Which two types of customers are eligible to use Azure Government to develop a cloud solution? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point
a Canadian government contractor
a European government contractor
a United States government entity
a United States government contractor
a European government entity
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
N Y N
Y N N
Y Y N
N N N
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
A
B
C
D
What should you use to evaluate whether your company’s Azure environment meets regulatory requirements?
Azure Service Health
Azure Knowledge Center
Azure Security Center
Azure Advisor
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
A
B
C
D
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
Y Y Y
N N N
Y Y N
N N Y
This question requires that you evaluate the underlined text to determine if it is correct. Azure Germany can be used by legal residents of Germany only. Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
no change is needed
only enterprises that are registered in Germany
only enterprises that purchase their azure licenses from a partner based in Germany
any user or enterprise that requires its data to reside in Germany
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
A
B
C
D
HOTSPOT -For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
N Y Y
Y N N
N Y N
Y N Y
Your company plans to migrate all on-premises data to Azure. You need to identify whether Azure complies with the company’s regional requirements. What should you use?
the Knowledge Center
Azure Marketplace
the MyApps portal
the Trust Center
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
Y Y Y
N N N
Y N Y
Y Y N
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
N Y Y
Y N N
N Y N
Y N Y
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
Y N Y
N Y N
N N Y
Y Y N
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
Y Y Y
N Y Y
Y N N
Y N Y
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
A
B
C
D
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
A
B
C
D
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
A
B
C
D
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
A
B
C
D
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
Y Y N
N Y N
Y Y N
N N N
This question requires that you evaluate the underlined text to determine if it is correct. From Azure Cloud Shell, you can track your company’s regulatory standards and regulations, such as ISO 27001. Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed.” If the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed.
the Microsoft Cloud Partner Portal
Compliance Manager
the Trust Center
Your company has an Azure subscription that contains resources in several regions. You need to create the Azure resource that must be used to meet the policy requirement. What should you create?
a read-only lock
an Azure policy
a management group
a reservation
You need to configure an Azure solution that meets the following requirements: ✑ Secures websites from attacks ✑ Generates reports that contain details of attempted attacks What should you include in the solution?
Azure Firewall
a network security group (NSG)
Azure Information Protection
DDoS protection
You have an Azure Sentinel workspace. You need to automate responses to threats detected by Azure Sentinel. What should you use?
adaptive network hardening in Azure Security Center
Azure Service Health
Azure Monitor workbooks
adaptive application controls in Azure Security Center
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
A
B
C
D
HOTSPOT -To complete the sentence, select the appropriate option in the answer area.Hot Area:
A
B
C
D
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
A
B
C
D
Which resources can be used as a source for a Network security group inbound security rule?
Service Tags only
IP Addresses, Service tags and Application security groups
Application security groups only
IP Addresses only
You have an Azure virtual machine named VM1. You plan to encrypt VM1 by using Azure Disk Encryption. Which Azure resource must you create first?
an Azure Storage account
an Azure Key Vault
. an Azure Information Protection policy
an Encryption key
DRAG DROP - You need to complete the defense-in-depth strategy used in a datacenter. What should you do? To answer, drag the appropriate layers to the correct positions in the model. Each layer may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:
Physical Security
Perimeter
Application
Application
Physical Security
Perimeter
Perimeter
Application
Physical Security
Perimeter
Physical Security
Application
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
y n y
n y n
y y y
n n n
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
n n n
y y y
n y n
y n y
DRAG DROP - Match the Azure Services service to the correct descriptions. Instructions: To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all. NOTE: Each correct match is worth one point. Select and Place:
Azure Sentinel,
Azure Security Center,
Azure Key Vault
Azure Lighthouse,
Azure Active Directory,
Azure Key Vault
Azure Active Directory,
Azure Key Vault,
Azure Sentinel
Azure Security Center,
Azure Key Vault,
Azure Active Directory
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
n y y
n n n
y y y
n n y
Which Azure service can you use as a security information and event management (SIEM) solution?
Azure Analysis Services
Azure Sentinel
Azure Information Protection
Azure Cognitive Services
Which Azure service should you use to store certificates?
Azure Security Center
an Azure Storage account
Azure Key Vault
Azure Information Protection
Which service provides network traffic filtering across multiple Azure subscriptions and virtual networks?
. Azure Firewall
an application security group
Azure DDoS protection
a network security group (NSG)
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
a
b
c
d
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify an Azure Traffic Manager profile. Does this meet the goal?
yes
no
Your Azure environment contains multiple Azure virtual machines.You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.Solution: You modify an Azure firewall.Does this meet the goal?
yes
no
You need to collect and automatically analyze security events from Azure Active Directory (Azure AD). What should you use?
Azure Sentinel
Azure Synapse Analytics
Azure AD Connect
Azure Key Vault
Your Azure environment contains multiple Azure virtual machines.You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.Solution: You modify a DDoS protection plan.Does this meet the goal?
yes
no
Your Azure environment contains multiple Azure virtual machines.You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.Solution: You modify a network security group (NSG).Does this meet the goal?
yes
no
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
y y y
n n n
n y y
y n y
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
a
b
c
d
You plan to deploy several Azure virtual machines. You need to control the ports that devices on the Internet can use to access the virtual machines. What should you use?
a network security group (NSG)
an Azure Active Directory (Azure AD) role
an Azure Active Directory group
an Azure key vault
Your company plans to automate the deployment of servers to Azure. Your manager is concerned that you may expose administrative credentials during the deployment. You need to recommend an Azure solution that encrypts the administrative credentials during the deployment. What should you include in the recommendation?
Azure Key Vault
Azure Information Protection
. Azure Security Center
Azure Multi-Factor Authentication (MFA)
This question requires that you evaluate the underlined text to determine if it is correct. Azure Key Vault is used to store secrets for Azure Active Directory (Azure AD) user accounts. Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
No change is needed
Azure Active Directory (Azure AD) administrative accounts
Personally Identifiable Information (PII)
server applications
You have an Azure environment that contains 10 virtual networks and 100 virtual machines. You need to limit the amount of inbound traffic to all the Azure virtual networks. What should you create?
one application security group (ASG)
10 virtual network gateways
10 Azure ExpressRoute circuits
one Azure firewall
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
y n y
n y n
n n n
y y n
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
a
b
c
d
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. What are two possible solutions? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
Modify an Azure Traffic Manager profile
Modify a network security group (NSG)
Modify a DDoS protection plan
Modify an Azure firewall
HOTSPOT -You plan to implement several security services for an Azure environment. You need to identify which Azure services must be used to meet the following security requirements:✑ Monitor threats by using sensors✑ Enforce Azure Multi-Factor Authentication (MFA) based on a conditionWhich Azure service should you identify for each requirement? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
d c
a b
c c
a d
What can you use to identify underutilized or unused Azure virtual machines?
Azure Advisor
Azure Cost Management + Billing
Azure reservations
Azure Policy
HOTSPOT -To answer, select the appropriate option in the answer area.Hot Area:
a
b
c
d
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
y y y
y y n
n n y
y n y
Your company has several business units. Each business unit requires 20 different Azure resources for daily operation. All the business units require the same type of Azure resources. You need to recommend a solution to automate the creation of the Azure resources. What should you include in the recommendations?
Azure Resource Manager templates
virtual machine scale sets
the Azure API Management service
management groups
You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keysYou need to create VM1 in Subscription1 by using the command.Solution: From the Azure portal, launch Azure Cloud Shell and select Bash. Run the command in Cloud Shell.Does this meet the goal?
yes
no
An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Which three computers can run the script? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
a computer that runs macOS and has PowerShell Core 6.0 installed.
a computer that runs Windows 10 and has the Azure PowerShell module installed.
a computer that runs Linux and has the Azure PowerShell module installed.
a computer that runs Linux and has the Azure CLI tools installed.
a computer that runs Chrome OS and uses Azure Cloud Shell.
Which service provides serverless computing in Azure?
Azure Virtual Machines
Azure Functions
Azure storage account
Azure dedicated hosts
DRAG DROP -Match the Azure services to the correct description.Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.NOTE: Each correct selection is worth one point. Select and Place:
Azure Functions,
Azure App Service,
Azure VM,
Azure Container Instances
Azure App Service,
Azure VM,
Azure Functions,
Azure Container Instances
Azure Container Instances,
Azure App Service,
Azure VM,
Azure Functions
Azure VM,
Azure Container Instances,
Azure App Service,
Azure Functions,
An Azure administrator plans to run a PowerShell script that creates Azure resources.You need to recommend which computer configuration to use to run the script.Solution: Run the script from a computer that runs Windows 10 and has the Azure PowerShell module installed.Does this meet the goal?
YES
NO
DRAG DROP -Match the Azure service to the correct description. Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.NOTE: Each correct selection is worth one point.Select and Place:
Azure Bot Services,
Azure Machine Learning,
Azure Functions,
Azure IoT Hub
Azure Functions,
Azure IoT Hub,
Azure Bot Services,
Azure Machine Learning
Azure IoT Hub,
Azure Bot Services,
Azure Machine Learning,
Azure Functions
Azure Bot Services,
Azure Machine Learning,
Azure IoT Hub,
Azure Functions
HOTSPOT -To complete the sentence, select the appropriate option in the answer area.Hot Area:
a
b
c
d
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
a
b
c
d
You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS--generate-ssh-keysYou need to create VM1 in Subscription1 by using the command.Solution: From a computer that runs Windows 10, install Azure CLI. From a command prompt, sign in to Azure and then run the command.Does this meet the goal?
yes
no
You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS--generate-ssh-keysYou need to create VM1 in Subscription1 by using the command.Solution: From a computer that runs Windows 10, install Azure CLI. From PowerShell, sign in to Azure and then run the command.Does this meet the goal?
yes
no
You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keysYou need to create VM1 in Subscription1 by using the command.Solution: From the Azure portal, launch Azure Cloud Shell and select PowerShell. Run the command in Cloud Shell.Does this meet the goal?
yes
no
HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
n y n
y n y
n y y
n n n
A team of developers at your company plans to deploy, and then remove, 50 virtual machines each week. All the virtual machines are configured by using Azure Resource Manager templates. You need to recommend which Azure service will minimize the administrative effort required to deploy and remove the virtual machines. What should you recommend?
Azure Reserved Virtual Machine (VM) Instances
Azure DevTest Labs
Azure virtual machine scale sets
Azure Virtual Desktop
You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system. What are three possible solutions? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
Use Bash in Azure Cloud Shell.
Use PowerShell in Azure Cloud Shell.
Use the PowerApps portal.
Use the Security & Compliance admin center.
Use the Azure portal.
