2.0 AZ-900 exam questions

1

( Azure Logic Apps, An availability set, An Azure virtual machine scale set, Azure Load Balancer ) enables you to provision a group of matching and load-balanced virtual machines in Azure.

1

( Elasticity, Scalability, Geo-distribution, High availability )in Azure enables you to deploy Azure resources close to the users.

1

( A Point-to-Site VPN, A point-to-point Ethernet connection, A Site-to-Site VPN, Azure Peering service ) is supported by ExpressRoute for connecting an on-premises network to Azure.

1

Which Azure feature enables you to organize multiple subscriptions in hierarchies for unified policies and compliance?

1

( Azure Monitor, Azure Advisor, Azure Service Health, Azure Application Insights ) alerts you when service issues occur in an Azure environment, such as a regional Azure outage that affects all Azure customers.

1

( Authorization, Authentication ) Confirms the identity of a person who wants access

1

( Authentication, Authorization ) Grants the proper access to a legitimate user

1

Azure Firewall will encrypt all the network traffic sent from Azure to the Internet

1

A network security group (NSG) will encrypt all the network traffic sent form Azure to the internet

1

Azure virtual machines that run Windows Server 2016 can encrypt the network traffic sent from the virtual machines to a host on the internet

1

You plan to migrate a web application to Azure. The web application is accessed by external
users.
You need to recommend a cloud deployment solution to minimize the amount of administrative
effort used to manage the web application.
What should you include in the recommendation?

1

Your company plans to purchase Azure.
The company's support policy states that the Azure environment must provide an option to access
support engineers by phone or email. You need to recommend which support plan meets the support policy requirement.
Solution: Recommend a Basic support plan.
Does this meet the goal?

1

The cost os Azure resources can vary between regions

1

An Azure reservation is used to reserve server capacity at a specific data center

1

You can stop an Azure SQL Database instance to decrease costs

1

Azure Active Directory (Azure AD) can be used to manage access to on-premises applications

1

Azure Active Directory (Azure AD) provides single sign-on (SSO)

1

IOS devices can be registered to Azure Active Directory (Azure AD)

1

Azure PowerShell modules can be installed on macOS

1

Azure Cloud Shell can be accessed from a web browser on a Linux computer

1

The Azure portal can only be accessed from a Windows device

1

An Azure region

1

You need to identify the type of failure for which an Azure availability zone can be used to
protect access to Azure services.
What should you identify?

1

An availability Zone in Azure has physically seperate locations

1

You can enable just in time (JIT) VM access by using ( Azure Bastion, Azure Firewall, Azure Front Door, Azure Security Center )

1

You create a resource group named RG1 in Azure Resource Manager.
You need to prevent the deletion of the resources in RG1.
Which setting should you use?

1

Azure Advisor provides recommendations on how to improve security of an Azure Active Directory (AzureAD) environment

1

Azure Advisor provides recommendations on how to reduce the cost of running Azure virtual machines

1

Azure Advisor provides recommendations on how to configure the network settings on Azure virtual machines

1

You need to complete the defense-in-depth strategy used in a datacenter, What should you
do

1
Identity & Access
2
Network
compute
#

1

This question requires that you evaluate the quoted text to determine if it is correct

When planning to migrate a public website to Azure, you must "plan to pay monthly usage costs."

1

What is required to use Azure Cost Management?

1

You plan to store 20 TB of data in Azure. The data will be accessed infrequently and visualized
by using Microsoft Power BI.
You need to recommend a storage solution for the data.
Which two solutions should you recommend? Each correct answer presents a complete solution.

1

Your company plans to automate the deployment of servers to Azure.
Your manager is concerned that you may expose administrative credentials during the deployment.
You need to recommend an Azure solution that encrypts the administrative credentials during the
deployment.
What should you include in the recommendation?

1

This question requires that you evaluate the quoted text to determine if it is correct.
All Azure services that are in public preview are "provided without any documentation."

1

After you create a virtual machine, you need to modify the ( Network security group (NSG), virtual network gateway, virtual network, route table ) to allow connections to TCP port 8080 on the virtual machine

1

You have an Azure environment. You need to create a new Azure virtual machine from an Android
laptop.
Solution: You use PowerShell in Azure Cloud Shell.
Does this meet the goal?

1

All Azure services in private preview must be accessed by using a separate Azure portal

1

Azure services in public preview can be used in production environments

1

Azure services in public preview are subjects to a Service Level Agreement (SLA)

1

You need to purchase a third-party virtual security appliance that you will deploy to an Azure
subscription. What should you use?

Azure subscriptions

2.0 AZ-900 exam questions

Azure Logic Apps An availability set An Azure virtual machine scale set Azure Load Balancer( Azure Logic Apps, An availability set, An Azure virtual machine scale set, Azure Load Balancer ) enables you to provision a group of matching and load-balanced virtual machines in Azure.

Elasticity Scalability Geo-distribution High availability( Elasticity, Scalability, Geo-distribution, High availability )in Azure enables you to deploy Azure resources close to the users.

A Point-to-Site VPN A point-to-point Ethernet connection A Site-to-Site VPN Azure Peering service( A Point-to-Site VPN, A point-to-point Ethernet connection, A Site-to-Site VPN, Azure Peering service ) is supported by ExpressRoute for connecting an on-premises network to Azure.

Which Azure feature enables you to organize multiple subscriptions in hierarchies for unified policies and compliance?

Azure Monitor Azure Advisor Azure Service Health Azure Application Insights( Azure Monitor, Azure Advisor, Azure Service Health, Azure Application Insights ) alerts you when service issues occur in an Azure environment, such as a regional Azure outage that affects all Azure customers.

Authorization Authentication( Authorization, Authentication ) Confirms the identity of a person who wants access

Authentication Authorization( Authentication, Authorization ) Grants the proper access to a legitimate user

Azure Firewall will encrypt all the network traffic sent from Azure to the Internet

A network security group (NSG) will encrypt all the network traffic sent form Azure to the internet

Azure virtual machines that run Windows Server 2016 can encrypt the network traffic sent from the virtual machines to a host on the internet

You plan to migrate a web application to Azure. The web application is accessed by external users. You need to recommend a cloud deployment solution to minimize the amount of administrative effort used to manage the web application. What should you include in the recommendation?

The cost os Azure resources can vary between regions

An Azure reservation is used to reserve server capacity at a specific data center

You can stop an Azure SQL Database instance to decrease costs

Azure Active Directory (Azure AD) can be used to manage access to on-premises applications

Azure Active Directory (Azure AD) provides single sign-on (SSO)

IOS devices can be registered to Azure Active Directory (Azure AD)

Azure PowerShell modules can be installed on macOS

Azure Cloud Shell can be accessed from a web browser on a Linux computer

( Azure Logic Apps, An availability set, An Azure virtual machine scale set, Azure Load Balancer ) enables you to provision a group of matching and load-balanced virtual machines in Azure.

( Elasticity, Scalability, Geo-distribution, High availability )in Azure enables you to deploy Azure resources close to the users.

( A Point-to-Site VPN, A point-to-point Ethernet connection, A Site-to-Site VPN, Azure Peering service ) is supported by ExpressRoute for connecting an on-premises network to Azure.

( Azure Monitor, Azure Advisor, Azure Service Health, Azure Application Insights ) alerts you when service issues occur in an Azure environment, such as a regional Azure outage that affects all Azure customers.

( Authorization, Authentication ) Confirms the identity of a person who wants access

( Authentication, Authorization ) Grants the proper access to a legitimate user

You plan to migrate a web application to Azure. The web application is accessed by external
users.
You need to recommend a cloud deployment solution to minimize the amount of administrative
effort used to manage the web application.
What should you include in the recommendation?

You need to identify the type of failure for which an Azure availability zone can be used to
protect access to Azure services.
What should you identify?

You can enable just in time (JIT) VM access by using ( Azure Bastion, Azure Firewall, Azure Front Door, Azure Security Center )

You create a resource group named RG1 in Azure Resource Manager.
You need to prevent the deletion of the resources in RG1.
Which setting should you use?

You need to complete the defense-in-depth strategy used in a datacenter, What should you
do

1
Identity & Access
2
Network
compute
#

This question requires that you evaluate the quoted text to determine if it is correct

When planning to migrate a public website to Azure, you must "plan to pay monthly usage costs."

You plan to store 20 TB of data in Azure. The data will be accessed infrequently and visualized
by using Microsoft Power BI.
You need to recommend a storage solution for the data.
Which two solutions should you recommend? Each correct answer presents a complete solution.

This question requires that you evaluate the quoted text to determine if it is correct.
All Azure services that are in public preview are "provided without any documentation."

After you create a virtual machine, you need to modify the ( Network security group (NSG), virtual network gateway, virtual network, route table ) to allow connections to TCP port 8080 on the virtual machine

You have an Azure environment. You need to create a new Azure virtual machine from an Android
laptop.
Solution: You use PowerShell in Azure Cloud Shell.
Does this meet the goal?