Font size
WorksheetsAZ 900 REAL EXAM QUESTIONS
Total questions: 163
Worksheet time: 54mins
You have an on
premises network that contains several servers. You plan to migrate all the servers
to Azure. You need to recommend a solution to ensure that some of the servers are available if a
single Azure data center goes offline for an extended period. What should you include in the
recommendation?
Availability Set
Fault tolerance
Scalability
elasticity
low latency
Azure Firewall will encrypt all the network traffic sent from Azure to the Internet.
true
false
You have an Azure virtual network named VNET1 in a resource group named RG1. You assign an Azure policy specifying that virtual networks are not an allowed resource type in RG1.
VNET1 is deleted automatically.
a) No change is needed.
b) Is moved automatically to another resource group.
c) Continues to function normally.
d) Is now a read-only object
You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from
the Internet by using an anonymous IP address, the users are prompted automatically to change
their password. Which Azure service should you use?
a) Azure AD Connect Health
b) Azure AD Privileged Identity Management
c) Azure Advanced Threat Protection (ATP)
d) Azure AD Identity Protection
What can Azure Information Protection encrypt?
a) network traffic
b) documents and email messages
c) an Azure Storage account
d) an Azure SQL database
What should you use to evaluate whether your company's Azure environment meets regulatory
requirements?
a) The Knowledge Center website.
b) The Advisor blade from the Azure portal.
c) Compliance Manager from the Security Trust Portal.
d) The Security Center blade from the Azure portal
You plan to migrate a web application to Azure. The web application is accessed by external users.
You need to recommend a cloud deployment solution to minimize the amount of administrative
effort used to manage the web application. What should you include in the recommendation?
a) Infrastructure as a Service(IaaS)
b) Database as a Service (Daas)
c) Software as a Service (Saas)
d) Platform as a Service (Paas)
Azure has built-in authentication and authorization services that provide secure access to Azure
resources.
true
false
Azure Advisor provides recommendations on how to improve the security of an Azure Active
Directory (Azure AD) environment.
true
false
Azure Advisor provides recommendations on how to configure the network settings on Azure
virtual machines.
true
false
Azure Advisor provides recommendations on how to reduce the cost of running Azure virtual
machines.
true
false
Several support engineers plan to manage Azure by using the computers shown in table below:
The Azure CLI, the Azure portal, and
Azure PowerShell
The Azure CLI and the Azure portal
The Azure portal and Azure PowerShell
The Azure CLI and Azure PowerSheII
Authorization to access Azure resources can be provided only to Azure Active Directory (Azure AD)
users.
true
false
Identities stored in Azure Active Directory (Azure AD), third-party cloud services, and on-premises
Active Directory can be used to access Azure resources.
true
false
Azure Germany can be used by legal residents of Germany only.
Instructions: Review the underlined text. If it makes the statement correct, select ‘No change is needed’. If the statement is incorrect, select the answer choice that makes the statement correct.
a) no change is needed
b) only enterprises that are registered in Germany
c) only enterprises that purchase their azure licenses from a partner based in Germany
d) any user or enterprise that requires its data to reside in Germany
After you create a virtual machine, you need to modify the network security group (NSG) to allow connections to TCP port 8080 on the virtual machine.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”.
If the statement is incorrect, select the answer choice that makes the statement correct.
a) No change is needed
b) virtual network gateway
c) virtual network
d) Route table
Microsoft Office 365, Xbox Live, and Microsoft Intune is an example of:
a) Software as a service (SaaS)
b) Infrastructure as a service (IaaS)
c) Platform as a service (PaaS)
You have a resource group named RG1. You plan to create virtual networks and app services in
RG1. You need to prevent the creation of virtual machines only in RG1. The solution must ensure
that other objects can be created in RG1. What should you use?
a) a lock
b) an Azure role
c) a tag
d) an Azure policy
To answer, drag the appropriate benefit from the column on the left to its description on the right.
Each benefit may be used once, more than once, or not at all.
Azure AD:an if-then statement, of Assignments and Access
controls
RBAC:Responsible for AUTHENTICATION
Conditional Access:Responsible for AUTHORIZATION
Conditional Access:an if-then statement, of Assignments and Access
controls
Azure AD: Responsible for AUTHENTICATION
RBAC:Responsible for AUTHORIZATION
Azure China is operated by Microsoft.
true
false
Azure Government is operated by Microsoft.
true
false
Identities stored in Azure Active Directory (Azure AD), third-party cloud services, and on-premises
Active Directory can be used to access Azure resources.
true
false
Azure Government is available only to US government agencies and their partners.
true
false
azure china is operated by 21Vianet.
true
false
Microsoft Azure services operated by 21Vianet are a standalone instance, separating from Azure
Global services.
true
false
Azure Government is designed for:
a) Any Government worldwide
b) US Government
c) UK Government
Your company implements Azure policies to automatically add a watermark to Microsoft Word
documents that contain credit card information.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is
needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
a) No change is needed.
b) DDoS protection
c) Azure Information Protection
d) Azure Active Directory (Azure AD) Identity Protection
Azure has built-in authentication and authorization services that provide secure access to Azure
resources.
true
false
Authorization to access Azure resources can be provided only to Azure Active Directory (Azure AD) users.
true
false
Identities stored in Azure Active Directory (Azure AD), third-party cloud services, and on-premises
Active Directory can be used to access Azure resources.
true
false
One of the benefits of Azure SQL Data Warehouse is that high availability is built into the platform.
Instructions: Review the underlined text. If it makes the statement correct, select "No change is
needed". If the statement is incorrect, select the answer choice that makes the statement correct.
a) No change is needed
b) automatic scaling
c) data compression
d) versioning
When you need to delegate permissions to several Azure virtual machines simultaneously, you
must deploy Azure virtual machines to which of the following?
a) Azure region
b) Azure availability Zone
c) Azure resource group
d) Azure resource manager template
You have an application that is comprised of an Azure web app that has a Service Level Agreement
(SLA) of 99.95 percent and an Azure SQL database that has an SLA of 99.99 percent. The
composite SLA for the application is the product of both SLAs, which equals 99.94 percent.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is
needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
a) No change is needed.
b) the lowest SLA associated to the application, which is 99.95 percent
c) the highest SLA associated to the application, which is 99.99 percent
d) the difference between the two SLAs, which is 0.05 percent
If Microsoft plans to end support for an Azure service that does NOT have a successor service,
Microsoft will provide notification at least 12 months before.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is
needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
a) No change is needed.
b) 6 months
c) 90 days
d) 30 days
Which of the following is not a Cloud computing?
a) Public Cloud
b) Scalable Cloud
c) Private Cloud
d) Hybrid Cloud
Which of the following is not a feature of Cloud computing?
a) Latest technology
b) A limited pool of services
c) flexible resources
d) economies of scale
Which of the following best explains cloud computing?
a) Delivery of computing services over the internet.
b) Setting up your own datacenter.
c) Scalable computing
You plan to implement an Azure database solution. You need to implement a database solution
that meets the following requirements:
• Can add data concurrently from multiple regions
• Can store JSON documents
Which database service should you deploy?
a) Azure Cosmos DB
b) Azure Database for MySQL servers
c) SQL Servers
d) SQL data warehouse
e) Azure Database for PostgreSQL servers
You plan to extend your company’s network to Azure. The network contains a VPN appliance that
uses an IP address of 131.107.200.1. You need to create an Azure resource that identifies the VPN
appliance. Which Azure resource should you create?
a) Virtual networks
b) Load balancers
r
c) Virtual network gateways
d) DNS zones
e) Local Network Gateway
Which of the following is not a feature of Cloud computing?
a) Latest technology
b) A limited pool of services
c) flexible resources
d) economies of scale
Which of the following best explains cloud computing?
a) Delivery of computing services over the internet.
b) Setting up your own datacenter.
c) Scalable computing
Your network contains an Active Directory forest. The forest contains 5,000 user accounts. Your
company plans to migrate all network resources to Azure and to decommission the on-premises
data center. You need to recommend a solution to minimize the impact on users after the planned
migration. What should you recommend?
a) Implement Azure Multi-Factor Authentication (MFA).
b) Sync all the Active Directory user accounts to Azure Active Directory (Azure AD).
c) Instruct all users to change their password.
d) Create a guest user account in Azure Active Directory (Azure AD) for each user.
A Microsoft SQL Server database that is hosted in the cloud and has software updates managed by
Azure is an example of:
a) disaster recovery as a service (DRaaS).
b) infrastructure as a service (IaaS).
c) platform as a service (PaaS).
d) software as a service (SaaS).
Azure Cosmos DB is an example of which cloud offering.
a) platform as a service (PaaS)
b) infrastructure as a service (IaaS)
c) serverless
d) software as a service (SaaS)
Azure Reserved VM Instances are an example of OpEx.
true
false
Deploying your own datacenter is an example of CapEx.
true
false
Azure Pay-As-You-Go pricing is an example of CapEx.
true
false
You need to be aware of the latest Azure security standards to protect your data. Which of the
following services should you use to ensure this?
a) Azure Government
b) Online Terms of Service
c) Trust center
d) Azure compliance documentation
To what should an application connect to retrieve security tokens?
a) Azure Storage account
b) Azure Active Directory (Azure AD)
c) Azure security center
d) Azure Key vault
Which Azure service you can use for quickly sending millions of notifications to iOS, Android,
Windows, or Kindle devices, working with APNs (Apple Push Notification service), GCM (Google
Cloud Messaging), WNS (Windows Push Notification Service), and more.
a) IoT Hub
b) Azure Notification Hubs
c) Azure Machine Learning
d) Azure Monitor
Your company plans to deploy several million sensors that will upload data to Azure. You need to
identify which Azure resources must be created to support the planned solution. Which two Azure
resources should you identify? Each correct answer presents part of the solution. NOTE: Each
correct selection is worth one point.
a) Azure Data Lake
b) Azure Queue storage
c) Azure File Storage
d) Azure IoT Hub
Azure Firewall can be used to grant or deny access based on the originating IP address.
true
false
Azure Active Directory can be used to grant or deny access based on the originating IP address.
true
false
The only way to use Azure resources is to purchase an Azure account before you can use them?
true
false
From Azure Cloud Shell, you can track your company's regulatory standards and regulations, such
as ISO 27001.
Instructions: Review the underlined text. If it makes the statement correct, select ‘No change is
needed’
, If the statement is incorrect, select the answer choice that makes the statement correct.
a) No change is needed.
b) The Microsoft Cloud Partner Portal
c) Compliance Manager
d) The Trust Center
Azure Key Vault is used to store secrets for Azure Active Directory (Azure AD) user accounts.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is
needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
a) No change is needed
b) Azure Active Directory (Azure AD) administrative accounts
c) Personally Identifiable Information (PII)
d) server applications
Which of the following correctly define Edge Computing?
a) Edge computing allows you to secure your application on multiple locations.
b) Edge computing allows customers to run VMs, containers and data services at edge locations.
c) Edge computing allows you to create scalable web applications.
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual
machine named VM1 is accessible from the Internet over HTTP.
Solution: You modify an Azure Traffic manager profile. Does this meet the goal?
yes
no
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual
machine named VM1 is accessible from the Internet over HTTP.
Solution: You modify a DDoS protection plan. Does this meet the goal?
yes
no
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual
machine named VM1 is accessible from the Internet over HTTP.
Solution: You modify an Azure firewall. Does this meet the goal?
yes
no
Which Azure service should you use to correlate events from multiple resources into a centralized
repository?
a) Azure Event Hubs
b) Azure Analysis Services
c) Azure Monitor
d) Azure Log Analytics
Your company plans to deploy an Artificial Intelligence (AI) solution in Azure. What should the
company use to build, test, and deploy predictive analytics solutions?
a) Azure Logic Apps
b) Azure Machine Learning Studio
c) Azure Batch
d) Azure Cosmos DB
Define availability set?
a) Group of instances of your application in an availability zone
b) A logical grouping of VMs that allows Azure to understand how your application is built to
provide for redundancy and availability.
c) Set of resources
You have an on-premises network that contains 100 servers. You need to recommend a solution
that provides additional resources to your users. The solution must minimize capital and
operational expenditure costs. What should you include in the recommendation?
a) a complete migration to the public cloud
b) an additional data center
c) a private cloud
d) a hybrid cloud
A Public cloud is part of Hybrid cloud.
yes
no
Which two types of customers are eligible to use Azure Government to develop a cloud solution?
Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
a) a Canadian government contractor
b) a European government contractor
c) a United States government entity
d) a United States government contractor
e) a European government entity
You are the data engineer for your company. An application uses a NoSQL database to
store data. The database uses the key-value and wide-column NoSQL database type. Developers
need to access data in the database using an API. You need to determine which API to use for the
database model and type. Which two APIs should you use?
a) Cassandra API
b) Table API
c) SQL API
d) Gremlin API
e) MongoDB API
A Hybrid cloud is part of Public cloud.
yes
no
In Azure what do you understand by Application availability?
a) Application is available to high end users
b) The individual SLA of each resource
c) The overall time that a system is functional and working
Your company plans to start using Azure and will migrate all its network resources to Azure.
You need to start the planning process by exploring Azure. What should you create first?
a) a subscription
b) a resource group
c) a virtual network
d) a management group
You plan to build an enterprise data warehouse in Azure to perform business data analysis. The
requirement is to build an integrated environment that will support the development of end-to-end
analytical solutions. Which service should you use for this?
a) Azure Machine learning
b) Azure Synapse Analytics
c) Azure Database for PostgreSQL
A company wants to create multiple data stores in Azure. They want to have storage layers that can be used to store data that is infrequently used.
Which of the following storage tiers for Azure BLOB storage would be suitable for this type of requirement?
Choose 2 answers from the options given below
Premium storage
Hot storage
Cold storage
Archive storage
You are working on understanding all the key terms when it comes to international standards, data privacy, and data protection policies.Which of the following pertains to the following?
"A European policy that regulates data privacy and data protection"
Azure Government
GDPR
ISO
NIST
A company wants to try out a couple of Azure services which are available in public preview. Is it true that services in public preview can only be used via the Azure command line interface?
Yes
No
A company is planning on moving to Azure. The senior management wants to get an idea on the cost that would be incurred when hosting resources in Azure. You recommend using the pricing calculator to get the required costing of the resources
Would this recommendation fit the requirement?
Yes
No
A company plans to purchase an Azure Support plan. Below is a key requirement for the support plan
- Provide an option to contact Microsoft support engineers by phone or email.
A recommendation is made to purchase the Basic Support plan.
Would this recommendation fulfill the requirement?
Yes
No
A company is planning on setting up a solution in Azure. The solution would have the following key requirement:
- Use a platform as a service to host a web application
Which of the following is best suited for this requirement?
Please select 2 options
Azure Data Lake Analytics
Azure Virtual Machine scale sets
Azure Kubenetes
Azure App Service
A company wants to host a mission critical application on a set of Virtual Machines in Azure. They want to ensure they can setup the infrastructure in Azure to guarantee the maximum possible uptime for the application. Which of the following can you make use of in Azure to fulfil this requirement? Choose 2 answers from the options given below:
Resource Groups
Availability Zones
Availability Sets
Resource Tags
A company wants to create multiple data stores in Azure. They want to have storage layers that can be used to store data that is infrequently used. Which of the following storage tiers for Azure BLOB storage would be suitable for this type of requirement? Choose 2
Premium Storage
Hot Storage
Cool Storage
Archive Storage
A company has a set of resources deployed to Azure. They want to make use of the Azure Advisor tool. Would the Azure Advisor tool alone be able to give recommendations on how to improve the security of the Azure AD environment?
Yes
No
A company wants to provision a solution with the following requirements:
- Provision a WordPress solution
- Host the solution on a Virtual Machine
Which of the following could be used to quickly deploy the required solution?
Virtual Machine Scale sets
Azure Resource Groups
Azure Marketplace
Azure Web Apps
An IT administrator for a company has been given a powershell script. This powershell script will be used to create several Virtual Machines in Azure. You have to provide a machine to the IT admin for running the powershell script. You decide to provide a Linux machine which has Azure CLI tools installed. Would this solution meet the requirement?
Yes
No
A company wants to host a set of tables in Azure. They want absolutely zero administration of the underlying infrastructure and low latency access to data.
You recommend using CosmosDB service.
Would this suit the requirement?
Yes
No
A company has a set of IT engineers that are responsible for implementing and managing the resources in their Azure account. The IT engineers have a set of on-premise workstations that have the following flavors of operating systems
-Windows 10
-MacOS
-Ubuntu
Which of the following tools can you use on the MacOS machines?
The Azure CLI and Azure Portal only
The Azure CLI and Powershell only
The Azure Portal and Powershell only
The Azure CLI, Azure Powershell and Azure Portal
Let us suppose a company wants to make use of Azure for the deployment of various solutions. The company want to make sure that whenever users authenticate to Azure, they must make use of Multi-Factor Authentication.
Which of the following options would help them achieve this?
Azure Security Centre
Azure DDoS protection
Azure privileged identity management
Azure AD Identity Protection
A company wants to try out a couple of Azure services which are available in public preview. Is it true that services in public preview can only be used via the Azure command line interface?
Yes
No
A company has several on-premise computers that run Windows 10. They want to map a network drive from these machines onto Azure Storage.
Which of the following would you consider fulfilling this requirement?
An Azure SQL Database
An Azure SQL Datawarehouse
Azure Storage account - BLOB service
Azure Storage account - File service
A company wants to migrate their current on-promise servers to Azure. They want to ensure that the servers are running even if a single Azure Data Center goes down. Which of the following terms refers to the solution that needs to be in place to fulfill this requirement?
Fault tolerance
Elasticity
Scalability
Low latency
You want to deploy a virtual machine scale set to Azure. Could you deploy the scale set using the Azure command link interface.
Yes
No
An IT admin for a company has been given a powershell script. The powershell script will be used to create several virtual Machines in Azure. You provide the machine to the IT admin for running the powershell script. You decide to provide a Azure CLI installed computer that has MacOS and Powershell Core 6.0 also installed. Would this solution fit the requirement?
Yes
No
A company has 100 machines in their on-premise environment. They want to extend their infrastructure without too much extra capital or operational expenditure. Which of the following could they opt to carry out for this requirement?
Migrate all to the public cloud
Move all to the private cloud
Have a hybrid architecture
Move just 50 machines to the public cloud
A network security group (NSG) will encrypt all the network traffic sent from Azure to the Internet
true
false
Which of the following describes Platform as a Service (PaaS)?
a) Users are responsible for purchasing, installing, configuring, and managing their own software
(operating systems, middleware, and applications).
Users create and deploy applications quickly without having to worry about managing the
underlying infrastructure.
c) Users pay an annual or monthly subscription.
Azure virtual machines that run Windows Server 2016 can encrypt network traffic sent to the Internet.
true
false
azure bot services
Uses past trainings to provide predictions that have
high probability
Provides a digital online assistant that provides
speech support
Provides serverless computing functionalities
Processes data from millions of sensors
Azure Machine
Learning
Uses past trainings to provide predictions that have
high probability
Provides a digital online assistant that provides
speech support
Provides serverless computing functionalities
Processes data from millions of sensors
Azure Functions
Uses past trainings to provide predictions that have
high probability
Provides a digital online assistant that provides
speech support
Provides serverless computing functionalities
Processes data from millions of sensors
Azure IoT Hub
Processes data from millions of sensors
Provides serverless computing functionalities
Provides a digital online assistant that provides
speech support
Uses past trainings to provide predictions that have
high probability
Your company has an Azure environment that contains resources in several regions. A company
policy states that administrators must only be allowed to create additional Azure resources in a
region in the country where their office is located. You need to create the Azure resource that must
be used to meet the policy requirement. What should you create?
a) A read-only lock
b) An Azure policy.
c) A management group.
d) A reservation.
You need to configure an Azure solution that meets the following requirements:
• Secures websites from attacks.
• Generates reports that contain details of attempted attacks.
What should you include in the solution?
a) Azure Firewall.
b) A network security group (NSG).
c) Azure Information Protection.
d) DDoS protection.
Your company has datacenters in Los Angeles and New York. The company has a Microsoft Azure
subscription. You are configuring the two datacenters as geo-clustered sites for site resiliency.
You need to recommend an Azure storage redundancy option.
You have the following data storage requirements:
a) Data must be stored on multiple nodes.
b) Data must be stored on nodes in separate geographic locations.
c) Data can be read from the secondary location as well as from the primary location
Which of the following Azure stored redundancy options should you recommend?
a) Geo-redundant storage
b) Read-only geo-redundant storage
c) Zone-redundant storage
d) Locally redundant storage
You are building an application using a virtual machine in Azure. As a security requirement, it is
necessary to apply Azure Multi-Factor Authentication (MFA) based on certain conditions.
Which Azure service should you choose?
a) Azure Monitor
b) Azure Advanced Threat Protection (ATP)
c) Azure Active Directory ID Protection
d) Azure Security Center
An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to
recommend which computer configuration to use to run the script. Which three computers can run
the script?
Each correct answer presents a complete solution NOTE: Each correct selection is worth one point.
a) a computer that runs Windows 10 and has the Azure PowerShell module installed
b) a computer that runs macOS and has PowerShell Core 6.0 installed
c) a computer that runs Linux and has the Azure PowerShell module installed.
d) a computer that runs Linux and has the Azure CLI tools installed
e) a computer that runs Chrome OS and uses Azure Cloud Shell
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual
machine named VM1 is accessible from the Internet over HTTP. What are two possible solutions?
Each correct answer presents a complete solution. NOTE: Each correct selection is worth one
point.
a) Modify an Azure Traffic Manager profile
b) Modify a network security group (NSG)
c) Modify a DDoS protection plan
d) Modify an Azure firewall
Each Azure subscription can contain multiple account administrators.
yes
no
Each Azure subscription can be managed by using a Microsoft account only
yes
no
An Azure resource group contains multiple Azure Subscriptions
yes
no
Which of the following provides a command platform for deploying objects to your Cloud
infrastructure and maintaining consistency throughout your Azure environment.
a) Azure policy
b) Resource group
c) Azure resource manager
d) Management group
Which of the following is a logical unit of Azure services that links to an Azure account?
a) Azure Subscription
b) Management Group
c) Resource Group
Which of the following can be used to help you enforce resource tagging so you can manage
billing?
a) Azure Policy
b) Azure Service Health
c) Compliance Manager
Which of the following refers to spending money upfront and then deducting that expense over time?
a) Capital expenditure
b) Operational expenditures
c) Supply and demand
From the choices below, what is one of the advantages of moving your infrastructure to Azure?
a) The move reduces Capital Expenditures. (CapEx)
b) The move reduces Operational Expenses (OpEx).
c) The move allows for complete control of infrastructure resources.
Which cloud model provides the greatest degree of ownership and control?
a) Hybrid
b) Private
c) Public
Which cloud model provides the greatest degree of flexibility?
a) Hybrid
b) Private
c) Public
Azure Pay-As-You-Go pricing is an example of CapEx.
true
false
Azure Reserved VM Instances are an example of OpEx.
true
false
Deploying your own datacenter is an example of CapEx.
true
false
Paying electricity for your datacenter is an example of OpEX
true
false
You have an Azure environment that contains multiple Azure virtual machines. You plan to
implement a solution that enables the client computers on your on-premises network to
communicate to the Azure virtual machines. You need to recommend which Azure resources must be created for the planned solution.
Which two Azure resources should you include in the recommendation?
a) a virtual network gateway
b) a load balancer
c) an application gateway
d) a virtual network
e) a gateway subnet
Your company is planning to move from an on-premises environment to Azure and you have decided to develop your application using Docker as the development environment.
Which of the following is the best service to use for this scenario?
a) Azure AppService
b) Azure Container Instances
c) Azure Functions
d) Azure virtual machine
You can use ‘Azure Policy’ to download published audit reports and how Microsoft builds and operates its cloud services?
true
false
You can use ‘Service Trust Portal’ to download published audit reports and how Microsoft builds and operates its cloud services?
true
false
Choose an international organization that develops international standards for privacy and compliance.
a) International, Governmental & Defense Agencies
b) GDPR
c) International Civil Defence Organization
d) International Organization for Standardization (ISO)
You need to identify the type of failure for which an Azure Availability Zone can be used to protect access to Azure services. What should you identify?
a) a storage failure
b) an Azure region failure
c) a physical server failure
d) an Azure data center failure
North America is represented by a single Azure region.
true
false
Azure web app, Azure logic app and Azure SQL database are all examples of Platform as a Service
(Paas).
true
false
DNS server runs on a virtual machine is PaaS.
true
false
SQL Server installed on a virtual machine is SaaS.
true
false
Azure SQL database is an example of PaaS.
true
false
Azure files is an example of SaaS.
true
false
You need to identify the type of failure for which an Azure Availability Zone can be used to protect
access to Azure services. What should you identify?
a) a storage failure
b) an Azure region failure
c) a physical server failure
d) an Azure data center failure
Use DDoS Protection service in combination with a web application firewall (WAF) for protection both at the ------------ (layer 3 and 4, offered by DDoS Protection Standard) and at the ----------- (layer 7,offered by a WAF).
a) Identity and access
b) Perimeter
c) Network
d) Compute
e) Application
A company is planning on deploying Microsoft Azure resources to a Resource Group (RG). But the resources would belong to different locations.
Can you have resources that belong to the same resource group but be in multiple locations?
yes
no
A company is planning on hosting an application on a set of Virtual Machines. The Virtual Machines are going to be running for a prolonged duration of time.
Which of the following should be considered to reduce the overall cost of Virtual Machine usage?
a) Premium Disks
b) Virtual Machine Scale sets
c) Azure Reservations
d) Azure Resource Groups
What are two characteristics of the public cloud?
Each correct answer presents a complete solution.
a) Dedicated hardware.
b) Unsecured connections.
c) Limited storage.
d) Metered pricing.
e) Self-service management.
NSG can be applied to what level?
a) Subscription level
b) Subnet level
c) Management group level
d) Virtual Machine / NIC Level
What are different level of access tiers for blob data, select all applicable options?
a) Hot Tier
b) Cold Tier
c) Archive Tier
d) Permanent Tier
What is Azure policy initiative?
a) a collection of policy definitions
b) collection of Azure policy definition assignments
c) group of Azure Blue Prints definition
d) group of role based access control (RBAC)?
What is guaranteed in an Azure Service Level Agreement (SLA) for virtual machines?
a) uptime
b) feature availability
c) bandwidth
d) performance
Which statement accurately describes the Modern Lifecycle Policy for Azure services?
a) Microsoft provides mainstream support for a service for five years.
b) Microsoft provides a minimum of 12 months' notice before ending support for a service.
c) After a service is made generally available, Microsoft provides support for the service for a
minimum of four years.
d) When a service is retired, you can purchase extended support for the service for up to five
years.
a) Most Azure services are introduced in private preview before being introduced
in public preview and then in general availability
yes
no
Azure services in public preview can be managed only by using Azure CLI
yes
no
The cost of an Azure service in private preview decrease when the service
becomes generally available
yes
no
a) With a consumption-based plan, you pay a fixed rate for all data sent to or
from virtual machines hosted in the cloud.
yes
no
With a consumption-based plan, you reduce overall costs by paying only for
extra capacity when it is required.
yes
no
Serverless computing is an example of a consumption-based plan.
yes
no
Azure services in public preview can be managed using which of the management tools?
a) Azure Portal
Azure CLI
You can associate a network security group (NSG) to a virtual network subnet.
yes
no
You can associate a network security group (NSG) to a virtual network.
yes
no
You can associate a network security group (NSG) to a network interface.
yes
no
You can enable just in time (JIT) VM access by using:
a) Azure Bastion
b) Azure Firewall
c) Azure Front Door
d) Azure Security Center
A company is using containers for deploying all of its web applications. During a security audit, you notice that Microsoft Defender for Cloud is not being used properly to provide misconfigurations related to containers.
For which resource can you NOT use Microsoft Defender for Cloud to secure
the containers?
a) Azure Kubernetes Service (AKS)
b) Container hosts (VMs running Docker)
c) Azure Container Registry (ACR)
d) Azure Container Instance (ACI)
You have an Azure environment. You need to create a new Azure virtual machine from a tablet that
runs the Android operating system. What are three possible solutions?
a) Use Bash in Azure Cloud Shell.
b) Use PowerShell in Azure Cloud Shell.
c) Use the PowerApps portal.
d) Use the Security & Compliance admin center.
e) Use the Azure portal.
Azure Site Recovery provides fault tolerance for virtual machines. Instructions:
Review the underlined text. If it makes the statement correct, select “No change is needed.” If the statement is
incorrect, select the answer choice that makes the statement correct.
a) No change is needed.
b) disaster recovery
c) elasticity
d) high availability
An Availability Zone in Azure has physically separate locations [across two continents.]
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed.” If the statement is incorrect, select the answer choice that makes the statement correct.
a) No change is needed.
b) within a single Azure region
c) within multiple Azure regions
d) within a single Azure datacenter
A systems ability to scale dynamically is called:
a) Agility
b) Elasticity
c) Extendibility
Which of the following is correct Lifecyle of Azure Services:
Private preview >Public preview >Generally available (GA)
Dev preview >Public preview >Generally available (GA)
You can create Group Policies in Azure Active Directory (Azure AD).
true
false
You can join Windows 10 devices to Azure Active Directory (Azure AD).
true
false
You can join Android devices to Azure Active Directory (Azure AD).
true
false
Which resources can be used as a source for a Network security group inbound security rule?
a) Application security groups only
b) IP Address only
c) Service Tags only
d) IP Addresses, Service tags and Application security groups
You have an Azure subscription named Subscription1. You sign into the Azure portal and create a
resource group named RG1. From Azure documentation, you have the following command that
creates a virtual machine named VM1.
az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys
You need to create VM1 in Subscription1 by using the command.
Solution: From the Azure portal, launch Azure Cloud Shell and select Bash. Run the command in
Cloud Shell.
Does this meet the goal?
yes
no
You have an Azure subscription named Subscription1.
You sign into the Azure portal and create a resource group named RG1. From Azure documentation, you have the following command that creates a virtual machine named VM1.
az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys
You need to create VM1 in Subscription1 by using the command.
Solution: From a computer that runs Windows 10, install Azure CLI. From a command prompt, sign
into Azure and then run the command.
Does this meet the goal?
yes
no
