Font size
S
M
L
XL
WorksheetsAZ900-08
Total questions: 40
Worksheet time: 20mins
Name
Class
Date
1.
You need to be notified when there are new recommendations for reducing costs
a)
Azure Advisor
b)
Azure Monitor
c)
Azure Service Health
d)
Log Analytics
2.
Which type of cloud service are virtual networks?
a)
IaaS
b)
PaaS
c)
SaaS
3.
Which are TRUE about Azure Trust Center
a)
Azure is K-ISMS Certified
b)
GDPR non-compliance can lead to fines
c)
Sentinel is a compliance management tool within Trust Center
d)
Trust Center is built on the 3 foundational principles of trust
4.
What are the Trust Center Founational Principals of Trust
a)
Security
b)
Privacy
c)
Compliance
d)
Transparency
5.
Which is true about Azure Locks
a)
Only Owner and User Access Admin roles are granted permissions to create or delete locks
b)
Applying a lock to a parent enforces the lock on the resources within scope
c)
Apply a lock to a database permits changes but not operations on the resource
d)
CanNotModify lock will allow a user to delete the resource
6.
Which of the following are the only valid Azure Locks
a)
ReadOnly
b)
CanNotDelete
c)
CanNotModify
7.
You are making DNS changes. What should you use to ensure concurrent changes are not overwritten
a)
ETag
b)
Metadata
c)
Apex
d)
DNSSec
8.
This is the root record of a DNS zone
a)
Apex
b)
ETag
c)
Metadata
d)
DNSSec
9.
Which is the fastest and simplest way to deploy a development environment for Docker
a)
Azure Container Instances
b)
Azure Kubernetes Service
c)
Azure Functions
d)
Azure Virtual Machine
10.
WHich of the following is configured by a YAML file and is more complex for enterprise solutions
a)
Azure Kubernetes Service
b)
Azure Container Instances
c)
Azure Functions
d)
Azure Virtual Machine
11.
In Public Cloud, Which of the following is the responsibility of the customer to secure
a)
Firewall Configurations
b)
Cloud Networking
12.
Which is true about Spot Virtual Machines
a)
Can be deavicted based on capacity
b)
Can be evicted based on the Max price you set
c)
Have the same SLA as regular VMs
d)
Must be manually deleted if evicted
e)
Are supported on B, D, and E Series
13.
Spot VMs are supported on all VM series except which
a)
B-Series
b)
Promo Versions
c)
F-Series
d)
D-Series
14.
Which is a collaborative effort where infrastructure is shared between orgs with common concerns
a)
community cloud
b)
hybrid cloud
c)
public cloud
d)
private cloud
15.
What are the first five steps of using a Data Box Edge device
a)
1. Install the data box device
b)
2. Create & configure data box resource
c)
3. Activate the data box deive
d)
4. Assign a 192 IP Address
e)
5. Connect to shares on the data box
16.
Hypervisor-level security is a benefit provided by which
a)
Azure Container Instances
b)
Azure Kubernetes Service
17.
T/F Deleting or rehydrating an Archive Blob before 180 days invites an early deletion fee from Microsoft
a)
"TRue"
b)
"False"
18.
T/F A large archive blob takes more time than several small blobs to rehydrate
a)
"False"
b)
"True"
19.
Data in an archive bob CAN/CAN NOT be copied to another Archive Blob
a)
Can Not
b)
Can
20.
Which is true about Azure Virtual Desktop
a)
Remote Desktop Connection (MSTSC) can NOT be used
b)
RemoteApp and Desktop Connections (RADC) can NOT be used
c)
Remote Clients can NOT run IOS
d)
Remote clients cannot run Android
e)
You can NOT prevent screen captures
21.
With Azure Virtual Desktop, which of the following can the remote client be running?
a)
Windows
b)
IOS
c)
MacOS
d)
Android
e)
Web
22.
Which is true for Azure Subscriptions
a)
Keyvaults are innaccessible with a subscription is added to an AD Tenant
b)
A registered Azure Stack must be reregistered after adding a subscription to an AD Tenant
c)
Subscriptions are always paid in USD
d)
Credits from one subscription can be moved to another
23.
WHat would you use? Sales reps authenticate with AD to access a webapp while sales mgmt wants SSO
a)
AD Federated Services
b)
AD Domain Services
c)
Azure Active DIrectory
d)
OAth 2.0
e)
Microsoft Account Authentication
24.
Which AAD feature manages your cloud and on-premis apps using application proxy
a)
Application Management
b)
Identify Governance
c)
Business to Customer
d)
Conditional Access
e)
Hybrid Identify
25.
Which AAD feature controls how users create, sign in with, and update their profiles
a)
Business to Customer
b)
Identify Governance
c)
Application Management
d)
Conditional Access
e)
Hybrid Identify
26.
Which AAD Feature manages access to cloud apps
a)
Conditional Access
b)
Identify Governance
c)
Business to Customer
d)
Identity Protection
e)
Hybrid Identify
27.
Which AAD feature uses tools to provide uniform authentication and authorization for all resources in AD and Azure
a)
Hybrid Identify
b)
Identify Governance
c)
Business to Customer
d)
Identity Protection
e)
Conditional Access
28.
Which AAD feature manages your org's identity through access controls such as access reviews
a)
Identify Governance
b)
Hybrid cloud
c)
Business to Customer
d)
Identity Protection
e)
Conditional Access
29.
Which AAD feature finds vulnerabilities affecting identities in Azure AD
a)
Identity Protection
b)
Hybrid cloud
c)
Business to Customer
d)
Identity Governance
e)
Conditional Access
30.
Which are benefits of DevTest Labs?
a)
Track costs on VM Resources
b)
Base Azure VM Images
c)
Azure Resource Manager Templates
d)
Automatically build and test code projects
e)
Collect security logs from operating systems
31.
Which scenario requires a local network gateway?
a)
Express Route
b)
VNet to VNet
c)
Site to Site VPN
d)
Point to Site
32.
Which Function attribute will write stateful functions in a serverless compute environment
a)
Durable Functions
b)
dynamicThrottlesEnabled
c)
matchCondition
d)
Schedule
e)
Binding
33.
Which Function attribute will check system performance countrers
a)
dynamicThrottlesEnabled
b)
Durable Functions
c)
matchCondition
d)
Schedule
e)
Binding
34.
Which Function attribute will define a single API surface for multiple function apps
a)
matchCondition
b)
Durable Functions
c)
dynamicThrottlesEnabled
d)
Schedule
e)
Binding
35.
Which Function attribute will fetch data from external services
a)
Binding
b)
Durable Functions
c)
dynamicThrottlesEnabled
d)
Schedule
e)
matchCondition
36.
Which is a virtual file system driver that access block blob data in the storage account through the Linux file system
a)
Blobfuse
b)
Page
c)
Cool
d)
AZCopy
37.
T/F Transferring a subscription to a different tenant permanently deletes all role assignments from the source AD Tenant and migrates the assignments to the target tenant
a)
"True"
b)
"False"
38.
You CAN/CAN NOT create alterts using Azure Monitor
a)
Can
b)
Can Not
39.
With Azure Monitor, you CAN/CAN NOT set the user response of an alert to specify where it is tin the resolution process
a)
Can
b)
Can Not
40.
What can Azure AD Identity Protection alert you on
a)
password spraying
b)
leaked credentials
c)
malware linked IP addresses
d)
Anonymous IP Address use
e)
unfamiliar sign-in properties
Reset
