WorksheetsMicrosoft Azure Fundamentals (AZ-900) - Practice Exam - 4
Total questions: 40
Worksheet time: 3600secs
Which of the following Azure Resource Manager tools are able to run a PowerShell script?
(Choose2)
Azure PowerShell
Azure CLI
Azure CLI via Google Chromebooks
Azure Cloud Shell via the Azure portal
What are some of the advantages of using a subnet with your Azure Virtual Network?
(Choose3)
IP address allocation on the subnet is more efficient.
Subnets contain security rules that allow or deny network traffic.
You can save costs by only using a part of the Virtual Network through a subnet.
You can secure a subnet individually from the entire virtual network.
You can logically group services on the same Virtual Network.
In Azure, how many free trial subscriptions can we have per Microsoft account?
Microsoft does not provide a free trial subscription for Azure.
Microsoft accounts can have unlimited free trial subscriptions.
Microsoft accounts can have only a single free trial subscription to Azure.
Microsoft accounts can have access to 3 free trial subscriptions.
You and your team interact with Azure Storage. You want to recommend a locally installed tool that provides a user-friendly drag-and-drop GUI interface to transfer all storage types. Which tool would you recommend?
AzCopy
Azure Storage Explorer
Azure File Sync
Azure Data Box
To access the Azure Portal in a web browser, what website URL do you need to visit?
portal.azure.com
portal.microsoftazure.com
www.azureportal.com
console.azure.com
Your company, A Llama Guru, is becoming increasingly popular (why wouldn't it be?). You have to add more virtual machines to run your web facing application. What is the best way to ensure that traffic is distributed and that all virtual machines are being used optimally?
Use Azure Load Balancer to distribute the inbound flow of internet traffic to a backend pool of virtual machines.
Use an Azure Application Gateway to recognize the application requested and guide the traffic to the appropriate machine.
Use a VPN Gateway to route secure and insecure requests to the appropriate virtual machine in your backend pool.
Create a pool of identical virtual machines that can all take an equal share of the incoming requests.
In Azure, we use roles to ensure separation of responsibilities. We want to control the ability for our teams to manage billing within Azure. We assign the Billing Admin role to the necessary personnel within our organization. Which of the following can these billing administrators now manage within Azure?
Management groups
Subscriptions
Azure accounts
Resource groups
Which of the following is true of the Cost Management feature in Azure?
(Choose3)
View Azure Advisor recommendations for reducing costs
Create alerts for unexpectedly high expenses
Create budgets to proactively manage and monitor costs
Create cost estimates for multiple implementation scenarios
What is the purpose of Log Analytics?
Lists planned and unplanned service outages of Azure resources
Security information event management (SIEM) tool to monitor security of Azure resources
Gain insights from stored logs and metrics collected by Azure Monitor via queries
Provides insights to web applications, such as customer behavior, performance bottlenecks, and errors
According to the Shared Responsibility Model, what are you responsible for managing in a PaaS product? Select 2 true answers.
(Choose2)
Application management
Hardware management
Operating system management
Information and data
You have a web application on Azure with a number of virtual machines to run various processes. One of these virtual machines is in charge of processing images. Which Azure service could you use to route all requests for the "/image/" URLs to this specific VM?
Implement a content delivery network to route URLs containing the "/image/" path.
Use a VPN Gateway to route URLs containing the "/image/" path.
Use an Application Gateway to route URLs containing the "/image/" path.
Use Azure Load Balancer to route URLs containing the "/image/" path.
What is the aim of using Azure Functions in a serverless architecture on Azure?
To get rid of virtual machines, as they are slow and costly.
Be into the latest and greatest. All the cool kids are doing serverless.
To have each function do a single task, which enables high performance and separation of application responsibilities.
Improve performance and splitting up data processing into many smaller parts.
Which are considered serverless services on Azure?
(Choose4)
Event Grid
App Services
Azure Data Lake Analytics
Azure Logic Apps
Azure Functions
What is the purpose of the Total Cost of Ownership (TCO) calculator on Azure?
Track your Azure environment's adherence to your company's compliance requirements
Monitors and analyzes the cost of your current Azure resources
Create accurate estimates of hourly or monthly Azure costs across the entire Azure portfolio
Estimate the cost savings you can realize by migrating your existing workloads to Azure
Our organization is really starting to grow within Azure. We have several subscriptions at this point, and managing access control to these subscriptions for a single Azure AD tenant is becoming cumbersome. Which of the following would allow our organization to manage access control to our Azure subscriptions?
Billing admin role assignment
Management groups
Resource groups
Access control cannot be managed between various subscriptions associated with our Azure tenant.
When implementing passwordless authentication with Azure AD, what authentication methods are currently available to use?
(Choose3)
Windows Hello
Microsoft Authenticator
Facebook Authenticator
FIDO2 Security Key
You need to prevent the accidental deletion of a critical VM in an Azure resource group. Personnel need to be able to change the configuration of the VM, if needed, such as changing the VM size. What should you use to accomplish this task?
Apply a read-only lock on the VM.
Apply a delete lock on the VM.
Create a Conditional Access policy to prevent deletion.
Apply an Azure Policy to the VM to prevent deletion.
Which Azure service delivers a comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments?
Azure Blueprints
Azure Sentinel
Azure Policy
Azure Monitor
Which of the following statements is true in regards to Azure billing for our Azure subscriptions?
In Azure, billing cycles are quarterly and require payment immediately.
In Azure, billing cycles are monthly and require payment within 30 or 60 days.
In Azure, billing cycles are weekly and require payment within 7 days.
In Azure, billing cycles are always due upfront.
How does passwordless authentication ease the burden of signing in with multi-factor authentication?
Passwordless authentication requires both a system password and multi-factor authentication from an approved device.
Removes the system password and replaces it with device authentication combined with biometrics/PIN.
No password is required to log in, only a valid username.
A username is replaced by a secure PIN code.
Which of the following represents the billing entity for our Azure resource costs?
Subscriptions
Management groups
Azure accounts
Resource groups
Which of the following Azure services are Platform as a Service (PaaS) solutions?
(Choose2)
Microsoft 365
Azure Functions
Azure App Service
Azure Virtual Machines
Management groups are not used to do which of the following for our organization?
Manage resource lifecycle
Manage policies
Manage compliance
Manage access control
Our organization is planning to use Azure. We have gathered from planning meetings that we will need to segment billing between various departments, such as marketing and human resources. Which of the following would be the best way to implement segmentation of billing for Azure?
Create separate resource groups for each department to deploy their resources.
Create a separate Azure account for each department to use.
Create a management group for each department.
Create a separate subscription for each department under our Azure account.
Which of the following is a Software as a Service (SaaS) solution?
Azure SQL Databases
Microsoft Office 365
Azure Functions
Azure App Service
You need to choose a performance option for an Azure storage account. This storage account will contain small blob objects used to train machine learning models, and it requires the fastest possible performance. Which performance option should you choose?
General-purpose v2
Premium page blobs
Premium block blobs
Premium file shares
Which of the following is a correct statement regarding Azure?
Resource groups are used as a billing container for our Azure resource costs.
Non-root management groups can have only a single parent management group and many child management groups.
Management groups represent the billing entity for our Azure resource costs.
Azure accounts can only be associated with a single Azure subscription.
Your company wants to make use of Azure for deployment of various solutions. They want to ensure suspicious attacks and threats using compromised credentials to resources in their Azure account are prevented. Which of the following helps prevent such attacks by using in-built sensors in Azure?
Microsoft Defender for Identity (formerly Azure Advanced Threat Protection)
Azure AD Identity Protection
Azure Privileged Identity Management
Azure DDoS Protection
Which of the following Azure storage types is most suitable for sharing files using the Server Message Block (SMB) protocol?
Blob Storage
Azure Files
Azure Storage Explorer
Disk Storage
Which of the following are Platform-as-a-Service (PaaS) database offerings on Azure?
(Choose2)
Cosmos DB
SQL Server in Azure VM
Azure MySQL Database Platform
SQL Server Private Cloud
Azure SQL Database
The Cosmos DB instance that your application uses has suddenly stopped responding. You cannot find any misconfigurations in your database; however, it is still unresponsive. You need to rule out an outage before you perform additional troubleshooting. What should you do?
Check Azure Monitor for any outages.
Check Synapse Analytics for any outages.
Check Azure Sentinel for any outages.
Check Azure Service Health for any outages.
What is the purpose of a resource lock in Azure?
Prevent accidental deletion or modification of critical resources.
Enforce standards and restrictions in a subscription or resource group.
Manage authentication of Azure AD accounts based on conditions of the authentication attempt.
Synchronize an on-premises AD server with Azure AD.
What Cloud model allows you to have complete control over the operating system?
Infrastructure as a Service
Software as a Service (SaaS)
Platform as a Service
Your company is migrating an internal web application to the cloud. The application requires specific configuration changes within the Operating System. Which of the following cloud deployment solutions would be most suitable?
Function as a Service (FaaS)
Platform as a Service (PaaS)
Infrastructure as a Service (IaaS)
Software as a Service (SaaS)
Your application is hosted on a VM scale set that is able to automatically add and remove individual VMs based on application load. What cloud concept is demonstrated in this example?
Responsive computing
Reliability
Scalability
OpEx
The Cost Management tool is used to manage Azure costs. Who is able to use the Cost Management tool?
Only EA subscriptions have access to the Cost Management tool.
All Azure subscriptions have access to the Cost Management tool.
Any Azure account subscribed to the Cost Management tool.
Microsoft Azure doesn't have a Cost Management tool at this time.
According to the Shared Responsibility Model, what are you responsible for managing in a SaaS product? Select 2 true answers.
(Choose 2)
Information and data
Application management
Operating system management
Devices and accounts
Your organization hosts a customer-facing application that is used to generate revenue. Demand fluctuates at different periods of the day: it is most active during daytime hours, but does not have much traffic overnight. The application needs to automatically increase and decrease compute capacity to meet demand, but not run up costs when demand is low. Which cloud attribute describes the ability for public cloud offerings to meet this requirement?
Scalability
Governance
Reliability
Customer management
Llama Financial is our organization, and we are in charge of our cloud spend. At this time, we do not have a way to manage our cloud spend in an automated fashion. Which of the following tools could we use to automate management of our cloud spend on Azure?
TCO calculator
Cost Management tool
Pricing calculator
Subscriptions
Your company is beginning the process of migrating their existing applications to Azure. A business-critical accounting application requires authentication with the NTLM protocol. This application will be migrated to a virtual machine in Azure. Any authentication solution must integrate into your existing on-premises Active Directory domain. What options are available for hosting this application in Azure while still authenticating with Active Directory?
(Choose3)
Configure the application to authenticate using Azure AD credentials over single sign-on (SSO).
Configure the Azure Active Directory Domain Services (AADDS) service to act as a fully managed Active Directory environment. Give the AADDS instance a unique namespace and configure the application to authenticate with your AADDS instance.
Configure an Azure VM with Windows Server, and operate as an Active Directory domain controller. Configure the application to authenticate with your VM-hosted AD server.
Continue using your on-premises AD server, and synchronize the server with Azure AD over Azure AD Connect. Configure the application to authenticate with your on-premises AD server.
AnswerFlag for Review
