Embrace a universe where learning knows no bounds, catalyzed by the wisdom of AZ-900 dumps. As you traverse this vast expanse, the AZ-900 dumps sprinkle your path with enlightening practice questions. PDFs serve as ancient scrolls, preserving knowledge, while the VCE format is the modern storyteller, making learning come alive. The accompanying study guide and AZ-900 dumps together craft a map for your quest. With unwavering confidence in this odyssey, we put forth our 100% Pass Guarantee, your North Star in this journey.
[Up-to-the-Minute Version] Dive into 100% exam success with the free AZ-900 PDF and Exam Questions
Question 1:
DRAG DROP Match the Azure services benefits to the correct descriptions.
Instructions: To answer, drag the appropriate benefit from the column on the left to its description on the right. Each benefit may be used once, more than once, or not at all. NOTE: Each correct match is worth one point.
Select and Place:
Correct Answer:
Explanation:
Box 1:
Fault tolerance is the ability of a service to remain available after a failure of one of the components of the service. For example, a service running on multiple servers can withstand the failure of one of the servers.
Box 2:
Disaster recovery is the recovery of a service after a failure. For example, restoring a virtual machine from backup after a virtual machine failure.
Box 3:
Dynamic scalability is the ability for compute resources to be added to a service when the service is under heavy load. For example, in a virtual machine scale set, additional instances of the virtual machine are added when the existing virtual
machines are under heavy load.
Box 4:
Latency is the time a service to respond to requests. For example, the time it takes for a web page to be returned from a web server. Low latency means low response time which means a quicker response.
References:
https://msdn.microsoft.com/en-us/magazine/mt422582.aspx
https://searchdisasterrecovery.techtarget.com/definition/cloud-disaster-recovery-cloud-DR
https://azure.microsoft.com/en-in/overview/what-is-cloud-computing/
Question 2:
HOTSPOT
To answer, select the appropriate option in the answer area.
Hot Area:
Correct Answer:
Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm
Question 3:
How many copies of data are maintained by an Azure Storage account that uses locally-redundant storage (LRS)?
A. 2
B. 3
C. 6
D. 9
Correct Answer: C
Question 4:
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Box 1: No
It is not true that a company must always migrate from a private cloud model to implement a hybrid cloud. You could start with a public cloud and then combine that with an on-premise infrastructure to implement a hybrid cloud.
Box 2: Yes
A company can extend the computing resources of its internal network by using the public cloud. This is very common. When you need more resources, rather than pay out for new on-premises infrastructure, you can configure a cloud
environment and connect your on-premises network to the cloud environment by using a VPN.
Box 3: No
It is not true that only guest users can access cloud resources. You can give anyone with an account in Azure Active Directory access to the cloud resources. There are many authentication scenarios but a common one is to replicate your
on-premises Active Directory accounts to Azure Active Directory and provide access to the Azure Active Directory accounts. Another commonly used authentication method is ‘Federation’ where authentication for access to cloud resources is
passed to another authentication provider such as an on-premises Active Directory.
https://azure.microsoft.com/en-gb/overview/what-is-hybrid-cloud-computing/
Question 5:
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Box 1: Yes
You can assign additional account administrators in the Azure Portal.
Box 2: No
You need an Azure Active Directory account to manage a subscription, not a Microsoft account.
An account is created in the Azure Active Directory when you create the subscription. Further accounts can be created in the Azure Active Directory to manage the subscription.
Box 3: No
Resource groups are logical containers for Azure resources. However, resource groups do not contain subscriptions. Subscriptions contain resource groups.
References:
https://docs.microsoft.com/en-us/office365/enterprise/subscriptions-licenses-accounts-and-tenants-for-microsoft-cloud-offerings
Question 6:
Your company plans to deploy several million sensors that will upload data to Azure.
You need to identify which Azure resources must be created to support the planned solution.
Which two Azure resources should you identify? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Azure Data Lake
B. Azure Queue storage
C. Azure File Storage
D. Azure IoT Hub
E. Azure Notification Hubs
Correct Answer: AD
IoT Hub (Internet of things Hub) provides data from millions of sensors. IoT Hub is a managed service, hosted in the cloud, that acts as a central message hub for bi-directional communication between your IoT application and the devices it manages. You can use Azure IoT Hub to build IoT solutions with reliable and secure communications between millions of IoT devices and a cloud- hosted solution backend. You can connect virtually any device to IoT Hub.
There are two storage services IoT Hub can route messages to — Azure Blob Storage and Azure Data Lake Storage Gen2 (ADLS Gen2) accounts. Azure Data Lake Storage accounts are hierarchical namespace-enabled storage accounts built on top of blob storage. Both of these use blobs for their storage.
References: https://docs.microsoft.com/en-us/azure/iot-hub/about-iot-hub https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-messages-d2c
Question 7:
This question requires that you evaluate the underlined text to determine if it is correct.
You deploy an Azure resource. The resource becomes unavailable for an extended period due to a service outage. Microsoft will automatically refund your bank account.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed.
B. automatically migrate the resource to another subscription
C. automatically credit your account
D. send you a coupon code that you can redeem for Azure credits
Correct Answer: C
If the SLA for an Azure service is not met, you receive credits for that service and that service only. The credits are deducted from your monthly bill for that service. If you stopped using the service where the SLA was not met, your account would remain in credit for that service. The credits would not be applied to any other services that you may be using.
Service Credits apply only to fees paid for the particular Service, Service Resource, or Service tier for which a Service Level has not been met. In cases where Service Levels apply to individual Service Resources or to separate Service tiers, Service Credits apply only to fees paid for the affected Service Resource or Service tier, as applicable. The Service Credits awarded in any billing month for a particular Service or Service Resource will not, under any circumstance, exceed your monthly service fees for that Service or Service Resource, as applicable, in the billing month.
References: https://azure.microsoft.com/en-gb/support/legal/sla/analysis-services/v1_0/
Question 8:
HOTSPOT
You plan to extend your company\’s network to Azure. The network contains a VPN appliance that uses an IP address of 131.107.200.1.
You need to create an Azure resource that identifies the VPN appliance.
Which Azure resource should you create? To answer, select the appropriate resource in the answer area.
Hot Area:
Correct Answer:
A Local Network Gateway is an object in Azure that represents your on-premise VPN device. A Virtual Network Gateway is the VPN object at the Azure end of the VPN. A ‘connection’ is what connects the Local Network Gateway an the Virtual Network Gateway to bring up the VPN.
The local network gateway typically refers to your on-premises location. You give the site a name by which Azure can refer to it, then specify the IP address of the on-premises VPN device to which you will create a connection. You also specify the IP address prefixes that will be routed through the VPN gateway to the VPN device. The address prefixes you specify are the prefixes located on your on-premises network. If your on-premises network changes or you need to change the public IP address for the VPN device, you can easily update the values later.
References: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
Question 9:
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Box 1: No
Most services go to private preview then public preview before being released to general availability. The private preview is only available to certain Azure customers for evaluation purposes.
Box 2: Yes
Public Preview means that the service is in public beta and can be tried out by anyone with an Azure subscription. Services in public preview are often offered at a discount price.
Public previews are excluded from SLAs and in some cases, no support is offered.
Box 3: No
An Azure service in general availability is available to all Azure customers, not just a subset of the customers.
References:
https://azure-overview.com/Home/Faq
Question 10:
A company uses Microsoft cloud services.
You need to change the update channels for the Microsoft 365 Apps for enterprise by using a Microsoft supported method.
Which two methods can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Windows 10 Update Assistant
B. Group Policy
C. Client app
D. Office Deployment Tool
E. Readiness Toolkit
Correct Answer: BD
After deploying Microsoft 365 Apps, you can change the update channel with Group Policy or the Office Deployment Tool (ODT).
Reference: https://docs.microsoft.com/en-us/deployoffice/change-update-channels
Question 11:
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Explanation:
Single sign-on is an authentication method that allows users to sign in using one set of credentials to login across applications. Single sign-on makes it easier to manage passwords and increases security capabilities.
Authorization is the process of establishing what level of access a legitimate user or service should have.
During sign-in, Conditional Access collects signals from the user, makes decisions based on those signals, and then enforces that decision by allowing or denying the access request or challenging for a multifactor authentication response.
Reference:
https://docs.microsoft.com/learn/modules/secure-access-azure-identity-services/3-what-is-azure-active-directory
https://docs.microsoft.com/learn/modules/secure-access-azure-identity-services/2-compare-authentication-authorization
https://docs.microsoft.com/learn/modules/secure-access-azure-identity-services/4-what-are-mfa-conditional-access
Question 12:
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
You are planning a strategy to deploy numerous web servers and database servers to Azure.
This strategy should allow for connection types between the web servers and database servers to be controlled.
Solution: You include a local network gateway in your strategy.
Does the solution meet the goal?
A. Yes
B. No
Correct Answer: B
Question 13:
You have a resource group named RG1.
You need to prevent the creation of virtual machines in RG1. The solution must ensure that other objects can be created in RG1.
What should you use?
A. a lock
B. an Azure role
C. a tag
D. an Azure policy
Correct Answer: D
Azure policies can be used to define requirements for resource properties during deployment and for already existing resources. Azure Policy controls properties such as the types or locations of resources.
Azure Policy is a service in Azure that you use to create, assign, and manage policies. These policies enforce different rules and effects over your resources, so those resources stay compliant with your corporate standards and service level
agreements.
In this question, we would create an Azure policy assigned to the resource group that denies the creation of virtual machines in the resource group.
You could place a read-only lock on the resource group. However, that would prevent the creation of any resources in the resource group, not virtual machines only. Therefore, an Azure Policy is a better solution.
Reference:
https://docs.microsoft.com/en-us/azure/governance/policy/overview
Question 14:
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Box 1: No
Resource groups are logical containers for Azure resources. You do not pay for resource groups.
Box 2: No
Data ingress over a VPN is data ~coming in TM to Azure over the VPN. You are not charged data transfer costs for data ingress.
Box 3: Yes
Data egress over a VPN is data ~going out TM of Azure over the VPN. You are charged for data egress.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/manage-resource-groups-portal
https://azure.microsoft.com/en-us/pricing/details/bandwidth/ https://azure.microsoft.com/en-us/pricing/details/bandwidth/
Question 15:
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Reference: https://docs.microsoft.com/en-us/azure/azure-sql/azure-sql-iaas-vs-paas-what-is-overview https://www.red-gate.com/simple-talk/cloud/azure/overview-of-azure-cosmos-db