Navigate the challenging certification pathways with the indispensable guidance of the AZ-900 dumps. Harmoniously woven to match the unique cadences of the curriculum, the AZ-900 dumps roll out an eclectic selection of practice questions, ensuring a comprehensive grasp. Whether you\’re drawn to the lucid narratives of PDFs or the vibrant expanse offered by the VCE format, the AZ-900 dumps stand ready to assist. An in-depth study guide, a hallmark of the AZ-900 dumps, augments the toolkit, shedding light on foundational themes. Emboldened by our unwavering commitment to these offerings, we assert our 100% Pass Guarantee with pride.
Dive into the 2024 free resources and study guide, packed with AZ-900 braindumps for optimal practice
Question 1:
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has an Azure subscription that contains the following unused resources:
1.
20 user accounts in Azure Active Directory (Azure AD)
2.
Five groups in Azure AD
3.
10 public IP addresses
4.
10 network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused user accounts.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
You are not charged for user accounts. Therefore, deleting unused user accounts will not reduce the Azure costs for the company.
References:
https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations#reduce-costs-by-deleting- or-reconfiguring-idle-virtual-network-gateways
Question 2:
In which Azure support plans can you open a new support request?
A. Premier and Professional Direct only
B. Premier, Professional Direct, and Standard only
C. Premier, Professional Direct, Standard, and Developer only
D. Premier, Professional Direct, Standard, Developer, and Basic
Correct Answer: D
You can submit support request tickets in the following plans: Premier, Professional Direct, Standard, Developer, and Basic.
Reference:
https://azure.microsoft.com/en-us/support/plans/
Question 3:
This question requires that you evaluate the underlined text to determine if it is correct.
An Azure region contains one or more data centers that are connected by using a low-latency network.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. Is found in each country where Microsoft has a subsidiary office
C. Can be found in every country in Europe and the Americas only
D. Contains one or more data centers that are connected by using a high-latency network
Correct Answer: A
A region is a set of data centres deployed within a latency-defined perimeter and connected through a dedicated regional low-latency network.
Microsoft Azure currently has 55 regions worldwide.
Regions are divided into Availability Zones. Availability Zones are physically separate locations within an Azure region. Each Availability Zone is made up of one or more datacenters equipped with independent power, cooling, and networking.
References: https://azure.microsoft.com/en-gb/global-infrastructure/regions/
Question 4:
HOTSPOT
To complete the sentence, select the appropriate option in the answer area.
Hot Area:
Correct Answer:
Question 5:
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Reference: https://azure.microsoft.com/en-us/overview/what-is-saas/ https://azure.microsoft.com/en-us/overview/what-is-iaas/ https://azure.microsoft.com/en-us/overview/what-is-paas/
Question 6:
HOTSPOT
To complete the sentence, select the appropriate option in the answer area.
Hot Area:
Correct Answer:
Preview features are made available to you on the condition that you accept additional terms which supplement the regular Azure terms. The supplemental terms state:
PREVIEWS ARE PROVIDED “AS-IS,” “WITH ALL FAULTS,” AND “AS AVAILABLE,” AND ARE EXCLUDED FROM THE SERVICE LEVEL AGREEMENTS AND LIMITED WARRANTY.
Reference:
https://azure.microsoft.com/en-gb/support/legal/preview-supplemental-terms/
Question 7:
Which service provides network traffic filtering across multiple Azure subscriptions and virtual networks?
A. Azure Firewall
B. an application security group
C. Azure DDoS protection
D. a network security group (NSG)
Correct Answer: A
You can restrict traffic to multiple virtual networks in multiple subscriptions with a single Azure firewall.
Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources. It\’s a fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability.
You can centrally create, enforce, and log application and network connectivity policies across subscriptions and virtual networks. Azure Firewall uses a static public IP address for your virtual network resources allowing outside firewalls to
identify traffic originating from your virtual network.
References:
https://docs.microsoft.com/en-us/azure/firewall/overview
Question 8:
HOTSPOT
You plan to deploy an Azure web app named App1 that will use Azure Active Directory (Azure AD) authentication.
App1 will be accessed from the internet by the users at your company. All the users have computers that run Windows 10 and are joined to Azure AD.
You need to recommend a solution to ensure that the users can connect to App1 without being prompted for authentication and can access App1 only from company-owned computers.
What should you recommend for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Box 1: An Azure AD app registration
Azure active directory (AD) provides cloud based directory and identity management services.You can use azure AD to manage users of your application and authenticate access to your applications using azure active directory.
You register your application with Azure active directory tenant.
Box 2: A conditional access policy
Conditional Access policies at their simplest are if-then statements, if a user wants to access a resource, then they must complete an action.
By using Conditional Access policies, you can apply the right access controls when needed to keep your organization secure and stay out of your user\’s way when not needed.
Reference:
https://codingcanvas.com/using-azure-active-directory-authentication-in-your-web-application/
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview
Question 9:
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Reference: https://azure.microsoft.com/en-us/support/legal/preview-supplemental-terms/
Question 10:
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Box 1: No
Building a data center infrastructure is capital expenditure, not operation expenditure.
Box 2: Yes
OpEx is ongoing costs (costs of operations) such as staff salaries.
Box 2: Yes
OpEx is ongoing costs (costs of operations) such as leasing software. If you purchased software as a one-off purchase, that would be CapEx, but leasing software is ongoing so it\’s OpEx.
Question 11:
This question requires that you evaluate the underlined text to determine if it is correct.
The Microsoft Online Services Privacy Statement explains what data Microsoft processes, how Microsoft processes the data, and the purpose of processing the data.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed.” If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed.
B. Microsoft Online Services Terms
C. Microsoft Online Service Level Agreement
D. Online Subscription Agreement for Microsoft Azure
Correct Answer: A
The Microsoft Privacy Statement explains what personal data Microsoft processes, how Microsoft processes the data, and the purpose of processing the data
References: https://privacy.microsoft.com/en-us/privacystatement
Question 12:
You need to purchase a third-party virtual security appliance that you will deploy to an Azure subscription. What should you use?
A. Azure subscriptions
B. Azure Security Center
C. Azure Marketplace
D. Microsoft Store
Correct Answer: C
You can access these enhanced network security features by using an Azure partner solution. You can find the most current Azure partner network security solutions by visiting the Azure Marketplace, and searching for “security” and
“network security.”
Some third-party reseller services available on Azure Marketplace now consume your Enterprise Agreement (EA) Azure Prepayment balance.
Reference:
https://docs.microsoft.com/en-us/azure/security/fundamentals/network-overview
https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/ea-azure-marketplace
Question 13:
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
You are tasked with deploying a critical LOB application, which will be installed on a virtual machine, to Azure.
You are informed that the application deployment strategy should allow for a guaranteed availability of 99.99 percent. You need to make sure that the strategy requires as little virtual machines and availability zones as possible.
Solution: You include two virtual machines and two availability zones in your strategy.
Does the solution meet the goal?
A. Yes
B. No
Correct Answer: A
References: https://docs.microsoft.com/en-us/azure/availability-zones/az-overview
Question 14:
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a hybrid conguration of Azure Active Directory (Azure AD).
You have an Azure HDInsight cluster on a virtual network.
You plan to allow users to authenticate to the cluster by using their on-premises Active Directory credentials. You need to congure the environment to support the planned authentication.
Solution: You deploy the On-premises data gateway to the on-premises network.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
Instead, you connect HDInsight to your on-premises network by using Azure Virtual Networks and a VPN gateway.
Note: To allow HDInsight and resources in the joined network to communicate by name, you must perform the following actions:
1.
Create Azure Virtual Network.
2.
Create a custom DNS server in the Azure Virtual Network.
3.
Congure the virtual network to use the custom DNS server instead of the default Azure Recursive Resolver. Congure forwarding between the custom DNS server and your on-premises DNS server.
References: https://docs.microsoft.com/en-us/azure/hdinsight/connect-on-premises-network
Question 15:
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Explanation:
Box 1: No
Easily manage your Azure storage accounts in the cloud, from Windows, macOS, or Linux, using Azure Storage Explorer.
Box 2: Yes
Azure cloud services can be managed in Azure Automation by using the PowerShell cmdlets that are available in the Azure PowerShell tools.
Box 3: Yes
Reference:
https://azure.microsoft.com/en-us/features/storage-explorer/
https://docs.microsoft.com/en-us/azure/cloud-services/automation-manage-cloud-services