Azure AZ-900 Main Exam

Question #1Topic 1
DRAG DROP -
Your company intends to subscribe to an Azure support plan.
The support plan must allow for new support requests to be opened.
Which of the following are support plans that will allow this? Answer by dragging the correct option from
the list to the answer area.
Select and Place:
Correct Answer:
Question #2Topic 1
Your company has datacenters in Los Angeles and New York. The company has a Microsoft Azure
subscription.
You are configuring the two datacenters as geo-clustered sites for site resiliency.
You need to recommend an Azure storage redundancy option.
You have the following data storage requirements:
✑ Data must be stored on multiple nodes.
✑ Data must be stored on nodes in separate geographic locations.
✑ Data can be read from the secondary location as well as from the primary location
Which of the following Azure stored redundancy options should you recommend?
 A. Geo-redundant storage
 B. Read-only geo-redundant storage
 C. Zone-redundant storage
 D. Locally redundant storage
Question #3Topic 1
Note: The question is included in a number of questions that depicts the identical set-up. However, every
question has a distinctive result. Establish if the solution satisfies the requirements.
Your company‫ג‬€™s Azure subscription includes a Basic support plan.
They would like to request an assessment of an Azure environment‫ג‬€™s design from Microsoft. This is,
however, not supported by the existing plan.
You want to make sure that the company subscribes to a support plan that allows this functionality, while
keeping expenses to a minimum.
Solution: You recommend that the company subscribes to the Professional Direct support plan.
Does the solution meet the goal?
 A. Yes
 B. No
Question #4Topic 1
You are tasked with deploying Azure virtual machines for your company.
You need to make use of the appropriate cloud deployment solution.
Solution: You should make use of Software as a Service (SaaS).
 A. Yes
 B. No
Question #5Topic 1
Solution: You should make use of Platform as a Service (PaaS).
 A. Yes
 B. No
Question #6Topic 1
Solution: You should make use of Infrastructure as a Service (IaaS).
 A. Yes
 B. No
Question #7Topic 1
Your developers have created 10 web applications that must be host on Azure.
You need to determine which Azure web tier plan to host the web apps. The web tier plan must meet the
following requirements:
✑ The web apps will use custom domains.
✑ The web apps each require 10 GB of storage.
✑ The web apps must each run in dedicated compute instances.
✑ Load balancing between instances must be included.
✑ Costs must be minimized.
Which web tier plan should you use?
 A. Standard
 B. Basic
 C. Free
 D. Shared
Question #8Topic 1
You are planning to migrate a company to Azure. Each of the company‫ג‬€™s numerous divisions will
have an administrator in place to manage the Azure resources used by their respective division.
You want to make sure that the Azure deployment you employ allows for Azure to be segmented for the
divisions, while keeping administrative effort to a minimum.
Solution: You plan to make use of several Azure Active Directory (Azure AD) directories.
 A. Yes
 B. No
Question #9Topic 1
Your developers have created a portal web app for users in the Miami branch office. The web app will be
publicly accessible and used by the Miami users to retrieve customer and product information. The web
app is currently running in an on-premises test environment.
You plan to host the web app on Azure.
You need to determine which Azure web tier plan to host the web app. The web tier plan must meet the
following requirements:
✑ The website will use the miami.weyland.com URL.
✑ The website will be deployed to two instances.
✑ SSL support must be included.
✑ The website requires 12 GB of storage.
✑ Costs must be minimized.
Which web tier plan should you use?
 A. Standard
 B. Basic
 C. Free
 D. Shared
Question #10Topic 1
Your company is planning to migrate all their virtual machines to an Azure pay-as-you-go subscription.
The virtual machines are currently hosted on the Hyper-V hosts in a data center.
You are required make sure that the intended Azure solution uses the correct expenditure model.
Solution: You should recommend the use of the elastic expenditure model.
 A. Yes
 B. No
Question #11Topic 1
Solution: You should recommend the use of the scalable expenditure model.
 A. Yes
 B. No
Question #12Topic 1
Solution: You should recommend the use of the operational expenditure model.
 A. Yes
 B. No
Question #13Topic 1
You are required to deploy an Artificial Intelligence (AI) solution in Azure.
You want to make sure that you are able to build, test, and deploy predictive analytics for the solution.
Solution: You should make use of Azure Cosmos DB.
 A. Yes
 B. No
Question #14Topic 1
Your company‫ג‬€™s Active Directory forest includes thousands of user accounts.
You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises
data center will be retired.
You are required to employ a strategy that reduces the effect on users, once the planned migration has
been completed.
Solution: You plan to sync all the Active Directory user accounts to Azure Active Directory (Azure AD).
 A. Yes
 B. No
Question #15Topic 1
You are required to deploy an Artificial Intelligence (AI) solution in Azure.
You want to make sure that you are able to build, test, and deploy predictive analytics for the solution.
Solution: You should make use of Azure Machine Learning Studio.
 A. Yes
 B. No
Question #16Topic 1
Your company‫ג‬€™s infrastructure includes a number of business units that each need a large number of
various Azure resources for everyday operation.
The resources required by each business unit are identical.
You are required to sanction a strategy to create Azure resources automatically.
Solution: You recommend that the Azure API Management service be included in the strategy.
 A. Yes
 B. No
Question #17Topic 1
Solution: You recommend that management groups be included in the strategy.
 A. Yes
 B. No
Question #18Topic 1
Solution: You recommend that the Azure Resource Manager templates be included in the strategy.
 A. Yes
 B. No
Question #19Topic 1
You are tasked with deploying a critical LOB application, which will be installed on a virtual machine, to
Azure.
You are informed that the application deployment strategy should allow for a guaranteed availability of
99.99 percent. You need to make sure that the strategy requires as little virtual machines and availability
zones as possible.
Solution: You include two virtual machines and one availability zone in your strategy.
 A. Yes
 B. No
Question #20Topic 1
Azure.
zones as possible.
Solution: You include one virtual machine and two availability zones in your strategy.
 A. Yes
 B. No
Question #21Topic 1
Azure.
zones as possible.
Solution: You include two virtual machines and two availability zones in your strategy.
 A. Yes
 B. No
Question #22Topic 1
Your company‫ג‬€™s developers intend to deploy a large number of custom virtual machines on a weekly
basis. They will also be removing these virtual machines during the same week it was deployed. Sixty
percent of the virtual machines have Windows Server 2016 installed, while the other forty percent has
Ubuntu Linux installed.
You are required to make sure that the administrative effort, needed for this process, is reduced by
employing a suitable Azure service.
Solution: You recommend the use of Microsoft Managed Desktop.
 A. Yes
 B. No
Question #23Topic 1
Solution: You recommend the use of Azure Reserved Virtual Machines (VM) Instances.
 A. Yes
 B. No
Question #24Topic 1
Solution: You recommend the use of Azure DevTest Labs.
 A. Yes
 B. No
Question #25Topic 1
Your company has virtual machines (VMs) hosted in Microsoft Azure. The VMs are located in a single
Azure virtual network named VNet1.
The company has users that work remotely. The remote workers require access to the VMs on VNet1.
You need to provide access for the remote workers.
What should you do?
 A. Configure a Site-to-Site (S2S) VPN.
 B. Configure a VNet-toVNet VPN.
 C. Configure a Point-to-Site (P2S) VPN.
 D. Configure DirectAccess on a Windows Server 2012 server VM.
 E. Configure a Multi-Site VPN
Question #26Topic 1
You have been informed by your superiors of the company‫ג‬€™s intentions to automate server
deployment to Azure. There is, however, some concern that administrative credentials could be uncovered
during this process.
You are required to make sure that during the deployment, the administrative credentials are encrypted
using a suitable Azure solution.
Solution: You recommend the use of Azure Information Protection.
 A. Yes
 B. No
Question #27Topic 1
You have been informed by your superiors of the company‫ג‬€™s intentions to automate server
deployment to Azure. There is, however, some concern that administrative credentials could be uncovered
during this process.
You are required to make sure that during the deployment, the administrative credentials are encrypted
using a suitable Azure solution.
Solution: You recommend the use of Azure Multi-Factor Authentication (MFA).
 A. Yes
 B. No
Question #28Topic 1
DRAG DROP -
The company would like to develop a cloud solution by making use of Azure Government. Azure
Government can only be used by certain types of clients to develop cloud solutions.
Which of the following are the types of customers that can make use of Azure Government in this
situation? Answer by dragging the correct option from the list to the answer area.
Select and Place:
Answer:
Question #29Topic 1
Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to
Azure AD via the Internet.
You have been tasked with making sure that users who connect to Azure AD via the internet from an
unidentified IP address, are automatically encouraged to change passwords.
Solution: You configure the use of Azure AD Identity Protection.
 A. Yes
 B. No
Question #30Topic 1
Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to
Azure AD via the Internet.
You have been tasked with making sure that users who connect to Azure AD via the internet from an
unidentified IP address, are automatically encouraged to change passwords.
Solution: You configure the use of Azure AD Privileged Identity Management.
 A. Yes
 B. No
Question #31Topic 1
You are planning a strategy to deploy numerous web servers and database servers to Azure.
This strategy should allow for connection types between the web servers and database servers to be
controlled.
Solution: You include network security groups (NSGs) in your strategy.
 A. Yes
 B. No
Question #32Topic 1
You are planning a strategy to deploy numerous web servers and database servers to Azure.
This strategy should allow for connection types between the web servers and database servers to be
controlled.
Solution: You include a local network gateway in your strategy.
 A. Yes
 B. No
Question #33Topic 1
Your company‫ג‬€™s Active Directory forest includes thousands of user accounts.
You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises
data center will be retired.
You are required to employ a strategy that reduces the effect on users, once the planned migration has
been completed.
Solution: You plan to require Azure Multi-Factor Authentication (MFA).
 A. Yes
 B. No
Question #34Topic 1 (A platform as a service (Paas) solution that hosts web apps in Azure provides full
control of the operating systems that host applications)
HOTSPOT -
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Question #35Topic 1 (Azure provides flexibility between capital expenditure (CapEx) and operational
expenditure (OpEx))
HOTSPOT -
Hot Area:
Question #36Topic 1 (When you are implementing as Software as a Service (SaaS) solution, you are
responsible for)
HOTSPOT -
To complete the sentence, select the appropriate option in the answer area.
Hot Area:
When you are implementing a Software as a Service (SaaS) solution, you are responsible for configuring
the SaaS solution.
Question #37Topic 1
You have an on-premises network that contains several servers.
You plan to migrate all the servers to Azure.
You need to recommend a solution to ensure that some of the servers are available if a single Azure data
center goes offline for an extended period.
What should you include in the recommendation?
 A. fault tolerance
 B. elasticity
 C. scalability
 D. low latency
Question #38Topic 1 (An organization that hosts its infrastructure in a public cloud can no longer requires
a data center)
HOTSPOT -
Hot Area:
An organization that hosts its infrastructure in a public cloud can close its data center.
Question #39Topic 1
What are two characteristics of the public cloud? Each correct answer presents a complete solution.
 A. dedicated hardware
 B. unsecured connections
 C. limited storage
 D. metered pricing
 E. self-service management
Question #40Topic 1 (When planning to migrate a public website to Azure, you must plan to pay monthly
usage costs)
HOTSPOT -
Hot Area:
When planning to migrate a public website to Azure, you must plan to pay monthly usage costs.
Question #41Topic 1
Note: This question is part of a series of questions that present the same scenario. Each question in the
series contains a unique solution that might meet the stated goals. Some question sets might have more
than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
Your company plans to migrate all its data and resources to Azure.
The company‫ג‬€™s migration plan states that only Platform as a Service (PaaS) solutions must be used in
Azure.
You need to deploy an Azure environment that meets the company migration plan.
Solution: You create an Azure App Service and Azure SQL databases.
Does this meet the goal?
 A. Yes
 B. No
Question #42Topic 1
Azure.
Solution: You create an Azure App Service and Azure virtual machines that have Microsoft SQL Server
installed.
 A. Yes
 B. No
Question #43Topic 1
Azure.
Solution: You create an Azure App Service and Azure Storage accounts.
 A. Yes
 B. No
Question #44Topic 1
Your company hosts an accounting application named App1 that is used by all the customers of the
company.
App1 has low usage during the first three weeks of each month and very high usage during the last week
of each month.
Which benefit of Azure Cloud Services supports cost management for this type of usage pattern?
 A. high availability
 B. high latency
 C. elasticity
 D. load balancing
Question #45Topic 1
You plan to migrate a web application to Azure. The web application is accessed by external users.
You need to recommend a cloud deployment solution to minimize the amount of administrative effort
used to manage the web application.
 A. Software as a Service (SaaS)
 B. Platform as a Service (PaaS)
 C. Infrastructure as a Service (IaaS)
 D. Database as a Service (DaaS)
Question #46Topic 1(Azure virtual machines are Infrastructure as a service (IaaS))

HOTSPOT -
Which cloud deployment solution is used for Azure virtual machines and Azure SQL databases? To
answer, select the appropriate options in the answer area.
Question #47Topic 1
You have an on-premises network that contains 100 servers.
You need to recommend a solution that provides additional resources to your users. The solution must
minimize capital and operational expenditure costs.
 A. a complete migration to the public cloud
 B. an additional data center
 C. a private cloud
 D. a hybrid cloud
Question #48Topic 1 (To achieve a hybrid cloud model, a company must always migrate from a private
cloud model)
HOTSPOT -
Hot Area:
Question #49Topic 1
You plan to migrate several servers from an on-premises network to Azure.
What is an advantage of using a public cloud service for the servers over an on-premises network?
 A. The public cloud is owned by the public, NOT a private corporation
 B. The public cloud is a crowd-sourcing solution that provides corporations with the ability to enhance
the cloud
 C. All public cloud resources can be freely accessed by every member of the public
 D. The public cloud is a shared entity whereby multiple corporations each use a portion of the resources
in the cloud
Question #50Topic 1 (Azure Site Recovery provides fault tolerance for virtual machines)
HOTSPOT -
Hot Area:
Azure Site Recovery provides fault tolerance for virtual machines.

Question #51Topic 1
In which type of cloud model are all the hardware resources owned by a third-party and shared between
multiple tenants?
 A. private
 B. hybrid
 C. public
Question #52Topic 1(An Azure web app that queries an on-premises Microsoft SQL server is an example
of a hybrid cloud)
HOTSPOT -
Hot Area:
Question #53Topic 1
You have 1,000 virtual machines hosted on the Hyper-V hosts in a data center.
You plan to migrate all the virtual machines to an Azure pay-as-you-go subscription.
You need to identify which expenditure model to use for the planned Azure solution.
Which expenditure model should you identify?
 A. operational
 B. elastic
 C. capital
 D. scalable
Question #54Topic 1
DRAG DROP -
Match the Azure Cloud Services benefit to the correct description.
Instructions: To answer, drag the appropriate benefit from the column on the left to its description on the
right. Each benefit may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Question #55Topic 1(To implement a hybrid cloud model, a company must have an internal network)
HOTSPOT -
Hot Area:
Question #56Topic 1 (A Platform as a Service (PaaS) solution provides full control of operating systems
that host applications)
HOTSPOT -
Hot Area:
Question #57Topic 1
Your company has an on-premises network that contains multiple servers.
The company plans to reduce the following administrative responsibilities:
✑ Backing up application data
✑ Replacing failed server hardware
✑ Managing physical server security
✑ Updating server operating systems
✑ Managing permissions to shared documents
The company plans to migrate servers to Azure virtual machines.
You need to identify which administrative responsibilities will be eliminated after the planned migration.
Which two responsibilities should you identify? Each correct answer presents a complete solution.
 A. Replacing failed server hardware
 B. Backing up application data
 C. Managing physical server security
 D. Updating server operating systems
 E. Managing permissions to shared documents
Question #58Topic 1(Azure Pay-As-You-Go pricing is an example of CapEx)

HOTSPOT -
Hot Area:
Question #59Topic 1
You plan to provision Infrastructure as a Service (IaaS) resources in Azure.
Which resource is an example of IaaS?
 A. an Azure web app
 B. an Azure virtual machine
 C. an Azure logic app
 D. an Azure SQL database
Question #60Topic 1
To which cloud models can you deploy physical servers?
 A. private cloud and hybrid cloud only
 B. private cloud only
 C. private cloud, hybrid cloud and public cloud
 D. hybrid cloud only
Question #61Topic 1
DRAG DROP -
Match the cloud model to the correct advantage.
Instructions: To answer, drag the appropriate cloud model from the column on the left to its advantage on
the right. Each cloud model may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point
Select and Place:
Question #62Topic 1 (A company can extend a private cloud by adding its own physical servers to the
public cloud)
HOTSPOT -
Hot Area:
Question #63Topic 1
You have 50 virtual machines hosted on-premises and 50 virtual machines hosted in Azure. The on-
premises virtual machines and the Azure virtual machines connect to each other.
Which type of cloud model is this?
 A. hybrid
 B. private
 C. public
Question #64Topic 1 (A platform as a service (PaaS) solution that hosts web apps in Azure provides full
control of the operating systems that host applications)
HOTSPOT -
Hot Area:
Question #65Topic 1
Azure.
Solution: You create Azure virtual machines, Azure SQL databases, and Azure Storage accounts.
 A. Yes
 B. No
Question #66Topic 1
Your company plans to deploy several custom applications to Azure. The applications will provide
invoicing services to the customers of the company. Each application will have several prerequisite
applications and services installed.
You need to recommend a cloud deployment solution for all the applications.
What should you recommend?
 A. Software as a Service (SaaS)
 B. Platform as a Service (PaaS)
 C. Infrastructure as a Service (laaS)
Question #67Topic 1 (Buliding a data center infrastructure is an example of operational expenditure

(OpEx) costs)
HOTSPOT -
Hot Area:
Question #68Topic 1(Azure Cosmos DB is an example of a platform as a service (PaaS) offering)

HOTSPOT -
Hot Area:
Azure Cosmos DB is an example of a platform as a service (PaaS) cloud database provider.

Question #69Topic 1(With software as a service (SaaS) you must apply software updates)
HOTSPOT -
Hot Area:
Question #70Topic 1 (You can create a resource group inside of an other resource group)
HOTSPOT -
Hot Area:
Question #71Topic 1 (Microsoft SQL server 2019 installed on an Azure virtual machine is an example of
platform as a service (PaaS))
HOTSPOT -
Hot Area:
Question #72Topic 1 (A Microsoft SQL Server database that is hosted in the cloud and has software
updates managed by Azure is an example of platform as a service)
HOTSPOT -
Hot Area:
Question #73Topic 1
Azure.
You need to deploy an Azure environment that meets the company‫ג‬€™s migration plan.
What should you create?
 A. Azure virtual machines, Azure SQL databases, and Azure Storage accounts.
 B. an Azure App Service and Azure virtual machines that have Microsoft SQL Server installed.
 C. an Azure App Service and Azure SQL databases.
 D. Azure storage accounts and web server in Azure virtual machines.
Question #74Topic 1
What does a customer provide in a software as a service (SaaS) model?
 A. application data
 B. data storage
 C. compute resources
 D. application software
Question #75Topic 1(Azure Files is an example of infrastructure as a service)
HOTSPOT -
Hot Area:
Question #76Topic 1(Cloud computing provides elastic scalability)

HOTSPOT -
Hot Area:
Question #77Topic 1
What is the first stage in the Microsoft Cloud Adoption Framework for Azure?
 A. Adopt the cloud.
 B. Make a plan.
 C. Ready your organization.
 D. Define your strategy.
Question #78Topic 1(When you need to delegate permission to several Azure virtual machines
simultaneously, you must deploy the Azure virtual machines to the same resource group)
HOTSPOT -
Hot Area:
Question #79Topic 1
You plan to deploy several Azure virtual machines.
You need to ensure that the services running on the virtual machines are available if a single data center
fails.
Solution: You deploy the virtual machines to two or more availability zones.
 A. Yes
 B. No
Question #80Topic 1
This question requires that you evaluate the underlined text to determine if it is correct.
One of the benefits of Azure SQL Data Warehouse is that high availability is built into the platform.
Instructions: Review the underlined text. If it makes the statement correct, select ‫ג‬€No change is
needed‫ג‬€. If the statement is incorrect, select the answer choice that makes the statement correct.
 A. No change is needed
 B. automatic scaling
 C. data compression
 D. versioning
Question #81Topic 1
fails.
Solution: You deploy the virtual machines to two or more regions.
 A. Yes
 B. No
Question #82Topic 1(Azure resources can only access other resources in the same resource group)
HOTSPOT -
Hot Area:
Question #83Topic 1
You plan to store 20 TB of data in Azure. The data will be accessed infrequently and visualized by using
Microsoft Power BI.
You need to recommend a storage solution for the data.
Which two solutions should you recommend? Each correct answer presents a complete solution.
 A. Azure Data Lake
 B. Azure Cosmos DB
 C. Azure SQL Data Warehouse
 D. Azure SQL Database
 E. Azure Database for PostgreSQL
Question #84Topic 1(https://)
HOTSPOT -
You have an Azure environment that contains 10 web apps. To which URL should you connect to
manage all the Azure resources? To answer, select the appropriate options in the answer area.
Hot Area:
Question #85Topic 1
You need to identify the type of failure for which an Azure Availability Zone can be used to protect
access to Azure services.
What should you identify?
 A. a physical server failure
 B. an Azure region failure
 C. a storage failure
 D. an Azure data center failure
Question #86Topic 1(Local network gateways)

HOTSPOT -
You plan to extend your company‫ג‬€™s network to Azure. The network contains a VPN appliance that
uses an IP address of 131.107.200.1.
You need to create an Azure resource that defines the VPN appliance in Azure.
Which Azure resource should you create? To answer, select the appropriate resource in the answer area.
Hot Area:
Question #87Topic 1
fails.
Solution: You deploy the virtual machines to two or more resource groups.
 A. Yes
 B. No
Question #88Topic 1
fails.
Solution: You deploy the virtual machines to a scale set.
 A. Yes
 B. No
Question #89Topic 1(An Azure subscription can be associated to multiple Azure Active Directory (Azure
AD) tenants)
HOTSPOT -
Hot Area:
Question #90Topic 1
Resource groups provide organizations with the ability to manage the compliance of Azure resources
across multiple subscriptions.
 B. Management groups
 C. Azure policies
 D. Azure App Service plans
Question #91Topic 1
Your company plans to migrate to Azure. The company has several departments. All the Azure resources
used by each department will be managed by a department administrator.
What are two possible techniques to segment Azure for the departments? Each correct answer presents a
complete solution.
 A. multiple subscriptions
 B. multiple Azure Active Directory (Azure AD) directories
 C. multiple regions
 D. multiple resource groups
Question #92Topic 1(A single Microsoft account can be used to manage multiple Azure subscriptions)
HOTSPOT -
Hot Area:
Question #93Topic 1(You have several virtual machines in an Azure subscription. You create a new
subscription.)
HOTSPOT -
Hot Area:
You can move a VM and its associated resources to a different subscription by using the Azure portal.
Moving between subscriptions can be handy if you originally created a VM in a personal subscription and
now want to move it to your company's subscription to continue your work. You do not need to start the
VM in order to move it and it should continue to run during the move.
Question #94Topic 1
You have an Azure environment that contains multiple Azure virtual machines.
You plan to implement a solution that enables the client computers on your on-premises network to
communicate to the Azure virtual machines.
You need to recommend which Azure resources must be created for the planned solution.
Which two Azure resources should you include in the recommendation? Each correct answer presents
part of the solution.
 A. a virtual network gateway
 B. a load balancer
 C. an application gateway
 D. a virtual network
 E. a gateway subnet
Question #95Topic 1
You attempt to create several managed Microsoft SQL Server instances in an Azure environment and
receive a message that you must increase your Azure subscription limits.
What should you do to increase the limits?
 A. Create a service health alert
 B. Upgrade your support plan
 C. Modify an Azure policy
 D. Create a new support request
Question #96Topic 1(Each Azure subscription can contain multiple account administrators)
HOTSPOT -
Hot Area:
Question #97Topic 1(Availability zones can be implemented in all Azure regions)

HOTSPOT -
Hot Area:
Question #98Topic 1(Containers)
HOTSPOT -
You plan to create an Azure virtual machine.
You need to identify which storage service must be used to store the unmanaged data disks of the virtual
machine.
What should you identify? To answer, select the appropriate service in the answer area.
Question #99Topic 1
Your company plans to move several servers to Azure.
The company‫ג‬€™s compliance policy states that a server named FinServer must be on a separate network
segment.
You are evaluating which Azure services can be used to meet the compliance policy requirements.
Which Azure solution should you recommend?
 A. a resource group for FinServer and another resource group for all the other servers
 B. a virtual network for FinServer and another virtual network for all the other servers
 C. a VPN for FinServer and a virtual network gateway for each other server
 D. one resource group for all the servers and a resource lock for FinServer
Question #100Topic 1
You plan to map a network drive from several computers that run Windows 10 to Azure Storage.
You need to create a storage solution in Azure for the planned mapped drive.
 A. an Azure SQL database
 B. a virtual machine data disk
 C. a File service in a storage account
 D. a Blob service in a storage account
Question #101Topic 1(Azure Cosmos DB)

HOTSPOT -
You plan to implement an Azure database solution.
You need to implement a database solution that meets the following requirements:
✑ Can add data concurrently from multiple regions
✑ Can store JSON documents
Which database service should you deploy? To answer, select the appropriate service in the answer area.
Hot Area:
Your company plans to start using Azure and will migrate all its network resources to Azure.
You need to start the planning process by exploring Azure.
What should you create first?
 A. a subscription
 B. a resource group
 C. a virtual network
 D. a management group
Question #103Topic 1 (All the Azure resources deployed to a resource group must use the same Azure
region)
HOTSPOT -
Hot Area:
Question #104Topic 1 (Data that is stored in the Archive access tier of an Azure Storage account)
HOTSPOT -
Hot Area:
Question #105Topic 1 (Minimum number of virtual machines)
HOTSPOT -
You plan to deploy a critical line-of-business application to Azure.
The application will run on an Azure virtual machine.
You need to recommend a deployment solution for the application. The solution must provide a
guaranteed availability of 99.99 percent.
What is the minimum number of virtual machines and the minimum number of availability zones you
should recommend for the deployment? To answer, select the appropriate options in the answer area.
Hot Area:
Which Azure service should you use to collect events from multiple resources into a centralized
repository?
 A. Azure Event Hubs
 B. Azure Analysis Services
 C. Azure Monitor
 D. Azure Stream Analytics
Question #107Topic 1(An Availability Zone in Azure has physically separate locations within a single
Azure region)
HOTSPOT -
Hot Area:
Question #108Topic 1(Data that is stored in an Azure Storage account automatically has at least three
copies)
HOTSPOT -
Hot Area:
Question #109Topic 1(If you have Azure resources deployed to every region, you can implement
availability zones in all the regions)
HOTSPOT -
Hot Area:
Question #110Topic 1(North America is represented by a single Azure region)

HOTSPOT -
Hot Area:
fails.
Solution: You deploy the virtual machines to two or more scale sets.
 A. Yes
 B. No
You need to be notified when Microsoft plans to perform maintenance that can affect the resources
deployed to an Azure subscription.
What should you use?
 A. Azure Monitor
 B. Azure Service Health
 C. Azure Advisor
 D. Microsoft Trust Center
Question #113Topic 1(A managed service that provides bidirectional communication between IoT
devices and Azure)
DRAG DROP -
Match the Azure Services service to the correct description.
Instructions: To answer, drag the appropriate service from the column on the left to its description on the
right. Each service may be used once, more than once, or not at all.
Select and Place:
Question #114Topic 1(A Windows Virtual Desktop sessions host can run Windows 10 only)
HOTSPOT -
Hot Area:
Question #115Topic 1(Can calculate cost savings due to reduced electricity consumption as a result of
migrating on-premises Microsoft SQL servers to Azure)
HOTSPOT -
Hot Area:
Question #116Topic 1(You can use Availability Zones in Azure to protect Azure virtual machines from a
datacenter failure)
HOTSPOT -
Hot Area:
Question #117Topic 1(An Azure subscription can have multiple account administrators)
HOTSPOT -
Hot Area:
Question #118Topic 1(An Azure region contains one or more data centers that are connected by using a
low-latency network)
HOTSPOT -
Hot Area:
Question #119Topic 1(To use Azure Active Directory (Azure AD) credentials to sign in to a computer
that runs Windows 10, the computer must be joined to Azure AD)
HOTSPOT -
Hot Area:
You need to ensure that the services running on the virtual machines remain available if a single data
center fails.
What are two possible solutions? Each correct answer presents a complete solution.
 A. Deploy the virtual machines to two or more availability zones.
 B. Deploy the virtual machines to two or more resource groups.
 C. Deploy the virtual machines to a scale set.
 D. Deploy the virtual machines to two or more regions.
Question #121Topic 1(You plan to deploy 20 virtual machines to an Azure environment. TO ensure that a
virtual machine named VM1 cannot connect to the other virtual machines, VM1 must be deployed to a
separate virtual network)
HOTSPOT -
Hot Area:
Question #122Topic 1(A fully managed data warehouse that has integral security at every level of scale at
no extra cost)
DRAG DROP -
Match the Azure service to the appropriate description.
To answer, drag the appropriate service from the column on the left to its description on the right. Each
service may be used once, more than once, or not at all.
Select and Place:
Question #123Topic 1(The Archive access tier is set at the storage account level)
HOTSPOT -
Hot Area:
Question #124Topic 1(Provides the platform for serverless code)

DRAG DROP -
Match the Azure service to the correct definition.
Instructions: To answer, drag the appropriate Azure service from the column on the left to its description
on the right. Each service may be used once, more than once, or not at all.
Select and Place:
A team of developers at your company plans to deploy, and then remove, 50 customized virtual machines
each week. Thirty of the virtual machines run Windows
Server 2016 and 20 of the virtual machines run Ubuntu Linux.
You need to recommend which Azure service will minimize the administrative effort required to deploy
and remove the virtual machines.
 A. Azure Reserved Virtual Machines (VM) Instances
 B. Azure virtual machine scale sets
 C. Azure DevTest Labs
 D. Microsoft Managed Desktop
A support engineer plans to perform several Azure management tasks by using the Azure CLI.
You install the CLI on a computer.
You need to tell the support engineer which tools to use to run the CLI.
Which two tools should you instruct the support engineer to use? Each correct answer presents a complete
solution.
 A. Command Prompt
 B. Azure Resource Explorer
 C. Windows PowerShell
 D. Windows Defender Firewall
 E. Network and Sharing Center
You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs
the Android operating system.
Solution: You use PowerShell in Azure Cloud Shell.
 A. Yes
 B. No
Solution: You use the PowerApps portal.
 A. Yes
 B. No
Solution: You use the Azure portal.
 A. Yes
 B. No
Question #130Topic 1(Azure Databricks is an Apache Spark-based analytics service)

HOTSPOT -
Hot Area:
Question #131Topic 1(Azure Monitor can monitor the performance of on-premises computers)
HOTSPOT -
Hot Area:
Which Azure service provides a set of version control tools to manage code?
 A. Azure Repos
 B. Azure DevTest Labs
 C. Azure Storage
 D. Azure Cosmos DB
HOTSPOT -
You need to manage Azure by using Azure Cloud Shell.
Which Azure portal icon should you select? To answer, select the appropriate icon in the answer area.
Hot Area:
You can access Azure Cloud Shell in the Azure portal by clicking the icon.
You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure
region.
Which Azure service should you use from the Azure portal to view service failure notifications that can
affect the availability of VM1?
 A. Azure Service Fabric
 B. Azure Monitor
 C. Azure virtual machines
 D. Azure Advisor
An Azure administrator plans to run a PowerShell script that creates Azure resources.
You need to recommend which computer configuration to use to run the script.
Solution: Run the script from a computer that runs Linux and has the Azure CLI tools installed.
 A. Yes
 B. No
Solution: Run the script from a computer that runs Chrome OS and uses Azure Cloud Shell.
 A. Yes
 B. No
Question #137Topic 1(From Azure Service Health, an administrator can view the health of all the services
in an Azure environment)
HOTSPOT -
Hot Area:
Solution: Run the script from a computer that runs macOS and has PowerShell Core 6.0 installed.
 A. Yes
 B. No
HOTSPOT -
You need to view a list of planned maintenance events that can affect the availability of an Azure
subscription.
Which blade should you use from the Azure portal? To answer, select the appropriate blade in the answer
area.
On the Help and Support blade, there is a Service Health option. If you click Service Health, a new blade
opens. The Service Health blade contains the Planned
Maintenance link which opens a blade where you can view a list of planned maintenance events that can
affect the availability of an Azure subscription.
Question #140Topic 1(An integrated solution for the deployment of code)
DRAG DROP -
Match the Azure service to the correct definition.
Select and Place:
Question #141Topic 1(A managed relational cloud database service)

DRAG DROP -
Match the Azure service to the correct description.
Select and Place:
Question #142Topic 1(Monitor the health of Azure services)
HOTSPOT -
You need to identify which blades in the Azure portal must be used to perform the following tasks:
✑ View security recommendations.
✑ Monitor the health of Azure services.
✑ Browse available virtual machine images.
Which blade should you identify for each task? To answer, select the appropriate options in the answer
area.
Solution: You use Bash in Azure Cloud Shell.
 A. Yes
 B. No
You have an on-premises application that sends email notifications automatically based on a rule.
You plan to migrate the application to Azure.
You need to recommend a serverless computing solution for the application.
 A. a web app
 B. a server image in Azure Marketplace
 C. a logic app
 D. an API app
You plan to deploy a website to Azure. The website will be accessed by users worldwide and will host
large video files.
You need to recommend which Azure feature must be used to provide the best video playback
experience.
 A. an application gateway
 B. an Azure ExpressRoute circuit
 C. a content delivery network (CDN)
 D. an Azure Traffic Manager profile
Your company plans to deploy several million sensors that will upload data to Azure.
You need to identify which Azure resources must be created to support the planned solution.
Which two Azure resources should you identify? Each correct answer presents part of the solution.
 A. Azure Data Lake
 B. Azure Queue storage
 C. Azure File Storage
 D. Azure IoT Hub
 E. Azure Notification Hubs
You have an Azure web app.
You need to manage the settings of the web app from an iPhone.
What are two Azure management tools that you can use? Each correct answer presents a complete
solution.
 A. Azure CLI
 B. the Azure portal
 C. Azure Cloud Shell
 D. Windows PowerShell
 E. Azure Storage Explorer
Your company plans to deploy an Artificial Intelligence (AI) solution in Azure.
What should the company use to build, test, and deploy predictive analytics solutions?
 A. Azure Logic Apps
 B. Azure Machine Learning Designer
 C. Azure Batch
 D. Azure Cosmos DB
Question #149Topic 1(Azure Advisor can generate a list of Azure virtual machines that are protected by
Azure Backup)
HOTSPOT -
Hot Area:
What can you use to automatically send an alert if an administrator stops an Azure virtual machine?
 A. Azure Advisor
 B. Azure Service Health
 C. Azure Monitor
 D. Azure Network Watcher
Your company has an Azure subscription that contains resources in several regions.
You need to create the Azure resource that must be used to meet the policy requirement.
 A. a read-only lock
 B. an Azure policy
 C. a management group
 D. a reservation
From Azure Cloud Shell, you can track your company‫ג‬€™s regulatory standards and regulations, such as
ISO 27001.
needed.‫ג‬€ If the statement is incorrect, select the answer choice that makes the statement correct.
 A. No change is needed.
 B. the Microsoft Cloud Partner Portal
 C. Compliance Manager
 D. the Trust Center
Question #203Topic 1(You can create Group Polices in Azure Active Directory (Azure AD))
HOTSPOT -
Hot Area:
Question #204Topic 1(The Microsoft Online Services Privacy Statement explains what data Microsoft
processes, how Microsoft processes the data, and the purpose of processing the data)
HOTSPOT -
Hot Area:
Question #205Topic 1(Authentication is the process of verifying a user’s credentials)

HOTSPOT -
Hot Area:
Question #206Topic 1(An Azure Policy initiative definition is a collection of policy definitions)
HOTSPOT -
Hot Area:
Question #207Topic 1(Azure policies provide organizations with the ability to manage the compliance of
Azure resources across multiple subscriptions)
HOTSPOT -
Hot Area:
Question #208Topic 1(General Data Protection Regulation (GDPR) defines data protection and privacy
rules)
HOTSPOT -
Hot Area:
Question #209Topic 1(You can add an Azure Resource Manager template to an Azure blueprint)
HOTSPOT -
Hot Area:
Question #210Topic 1(Azure China is operated by Microsoft)
HOTSPOT -
Hot Area:
Question #211Topic 1(An Azure resource can have multiple Delete locks)
HOTSPOT -
Hot Area:
Your company plans to migrate all on-premises data to Azure.
You need to identify whether Azure complies with the company‫ג‬€™s regional requirements.
 A. the Knowledge Center
 B. Azure Marketplace
 C. the MyApps portal
 D. the Trust Center
Question #213Topic 1(Authorization to access Azure resources can be provided only to Azure Active
Directory (Azure AD) users)
HOTSPOT -
Hot Area:
Question #214Topic 1(If a resource group named RGI has a delete lock, the delete lock must be removed
before an administrator can delete RGI)
HOTSPOT -
Hot Area:
Azure Germany can be used by legal residents of Germany only.
 A. no change is needed
 B. only enterprises that are registered in Germany
 C. only enterprises that purchase their azure licenses from a partner based in Germany
 D. any user or enterprise that requires its data to reside in Germany
Question #216Topic 1(Identities stored in an on-premises Active Directory can be synchronizes to Azure
Active Directory (Azure AD))
HOTSPOT -
Hot Area:
Question #217Topic 1(You can view your company’s regulatory compliance report from Azure Security
Center)
HOTSPOT -
Hot Area:
What should you use to evaluate whether your company‫ג‬€™s Azure environment meets regulatory
requirements?
 A. Azure Service Health
 B. Azure Knowledge Center
 C. Azure Security Center
 D. Azure Advisor
Question #219Topic 1(Your company implements Azure Information Protection automatically add a
watermark to Microsoft Word documents that contain credit card information.)
HOTSPOT -
Hot Area:
Question #220Topic 1(Azure Active Directory (Azure AD) requires the implementation of domain
controllers on Azure virtual machines)
HOTSPOT -
Hot Area:
Which two types of customers are eligible to use Azure Government to develop a cloud solution? Each
correct answer presents a complete solution.
 A. a Canadian government contractor
 B. a European government contractor
 C. a United States government entity
 D. a United States government contractor
 E. a European government entity
Question #222Topic 1(To implement an Azure Multi-Factor Authentication (MFA) solution, you must
sync on-premises identities to the cloud)
HOTSPOT -
Hot Area:
You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the
Internet by using an anonymous IP address, the users are prompted automatically to change their
password.
Which Azure service should you use?
 A. Azure AD Connect Health
 B. Azure AD Privileged Identity Management
 C. Azure Advanced Threat Protection (ATP)
 D. Azure AD Identity Protection
DRAG DROP -
Match the term to the correct definition.
Instructions: To answer, drag the appropriate term from the column on the left to its description on the
right. Each term may be used once, more than once, or not at all.
Select and Place:
To what should an application connect to retrieve security tokens?
 A. an Azure Storage account
 B. Azure Active Directory (Azure AD)
 C. a certificate store
 D. an Azure key vault
Your network contains an Active Directory forest. The forest contains 5,000 user accounts.
Your company plans to migrate all network resources to Azure and to decommission the on-premises data
center.
You need to recommend a solution to minimize the impact on users after the planned migration.
 A. Implement Azure Multi-Factor Authentication (MFA)
 B. Sync all the Active Directory user accounts to Azure Active Directory (Azure AD)
 C. Instruct all users to change their password
 D. Create a guest user account in Azure Active Directory (Azure AD) for each user
Question #227Topic 1(You can configure the Azure Active Directory (Azure AD) activity logs to appear
in Azure Monitor)
HOTSPOT -
Hot Area:
Question #228Topic 1(LOCKS)
HOTSPOT -
You create a resource group named RG1 in Azure Resource Manager.
You need to prevent the accidental deletion of the resources in RG1.
Which setting should you use? To answer, select the appropriate setting in the answer area.
Hot Area:
You have a resource group named RG1.
You need to prevent the creation of virtual machines in RG1. The solution must ensure that other objects
can be created in RG1.
 A. a lock
 B. an Azure role
 C. a tag
 D. an Azure policy
You have an Azure subscription and 100 Windows 10 devices.
You need to ensure that only users whose devices have the latest security patches installed can access
Azure Active Directory (Azure AD)-integrated applications.
What should you implement?
 A. a conditional access policy
 B. Azure Bastion
 C. Azure Firewall
 D. Azure Policy
What can Azure Information Protection encrypt?
 A. network traffic
 B. documents and email messages
 C. an Azure Storage account
 D. an Azure SQL database
What should you use to evaluate whether your company‫ג‬€™s Azure environment meets regulatory
requirements?
 A. the Knowledge Center website
 B. the Advisor blade from the Azure portal
 C. Compliance Manager from the Service Trust Portal
 D. the Solutions blade from the Azure portal
Question #233Topic 1(Azure Active Directory (Azure AD) enables users to authenticate to multiple
applications by using single sign-on (SSO))
HOTSPOT -
Hot Area:
You have an Azure subscription.
Where will you find details on the personal data collected by Microsoft, how Microsoft uses the data, and
what the data is used for?
 A. the Data Protection Addendum
 B. the Microsoft Online Services Terms
 C. the Microsoft Privacy Statement
 D. Azure Security Center
Question #235Topic 1(Azure Active Directory (Azure AD) can be used to manage access to on-premises
applications)
HOTSPOT -
Hot Area:
Question #236Topic 1(You deploy an Azure resource. The resource becomes unavailable for an extended
period for an extended period due to a service outage. Microsoft will credit your Azure account.)
HOTSPOT -
Hot Area:
Which task can you perform by using Azure Advisor?
 A. Integrate Active Directory and Azure Active Directory (Azure AD).
 B. Estimate the costs of an Azure solution.
 C. Confirm that Azure subscription security follows best practices.
 D. Evaluate which on-premises resources can be migrated to Azure.
Question #238Topic 1(If your company uses an Azure free account, you will only be able to use a subset
of Azure services)
HOTSPOT -
Hot Area:
Question #239Topic 1(All Azure services in private preview must be accessed by using a separate Azure
portal)
HOTSPOT -
Hot Area:
Your company has 10 offices. You plan to generate several billing reports from the Azure portal. Each
report will contain the Azure resource utilization of each office.
Which Azure Resource Manager feature should you use before you generate the reports?
 A. tags
 B. templates
 C. locks
 D. policies
Question #241Topic 1(A Standard support plan is included in an Azure free account)
HOTSPOT -
Hot Area:
If Microsoft plans to end support for an Azure service that does NOT have a successor service, Microsoft
will provide notification at least 12 months before.
 B. 6 months
 C. 90 days
 D. 30 days
Question #243Topic 1(A user who is assigned the Owner role can transfer ownership of an Azure
subscription)
HOTSPOT -
Hot Area:
Question #244Topic 1(With Azure Reservations, you pay less for virtual machines than with pay-as-you-
go pricing)
HOTSPOT -
Hot Area:
Your company has an Azure subscription that contains the following unused resources:
✑ 20 user accounts in Azure Active Directory (Azure AD)
✑ Five groups in Azure AD
✑ 10 public IP addresses
✑ 10 network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused network interfaces.
 A. Yes
 B. No
Five groups in Azure AD -
Solution: You remove the unused public IP addresses.
 A. Yes
 B. No
Solution: You remove the unused user accounts.
 A. Yes
 B. No
Question #248Topic 1(Maximum available minutes – Downtime in Minutes)

HOTSPOT -
How should you calculate the monthly uptime percentage? To answer, select the appropriate options in
the answer area.
Hot Area:
Question #249Topic 1(By creating additional resource groups in an Azure subscription, additional costs
are incurred)
HOTSPOT -
Hot Area:
A support plan solution that gives you best practice information, health status and notifications, and 24/7
access to billing information at the lowest possible cost is a Standard support plan.
 B. Developer
 C. Basic
 D. Premier
151.
DRAG DROP – (Provides a cloud-based Enterprise Data Warehouse (EDW))
Match the Azure services to the correct descriptions.
NOTE: Each correct match is worth one point
Select and Place:
Correct Answer:
Box 1: Azure SQL Synapse Analytics

Azure SQL Synapse Analytics (previously called Data Warehouse) is a cloud-based Platform-as-a-
Service (PaaS) offering from Microsoft. It is a large-scale, distributed, MPP (massively parallel
processing) relational database technology in the same class of competitors as Amazon Redshift or
Snowflake. Azure SQL
Synapse Analytics is an important component of the Modern Data Warehouse multi-platform
architecture. Because Azure SQL Synapse Analytics is an MPP system with a shared-nothing architecture
across distributions, it is meant for large-scale analytical workloads which can take advantage of
parallelism.
Box 2:
Azure Machine Learning uses past trainings to provide predictions that have high probability.
Machine learning is a data science technique that allows computers to use existing data to forecast future
behaviors, outcomes, and trends. By using machine learning, computers learn without being explicitly
programmed.
Forecasts or predictions from machine learning can make apps and devices smarter. For example, when
you shop online, machine learning helps recommend other products you might want based on what you've
bought.
Box 3:
Azure Functions provides serverless computing functionalities.
Azure Functions is a serverless compute service that lets you run event-triggered code without having to
explicitly provision or manage infrastructure.
Box 4:
IoT Hub (Internet of things Hub) provides data from millions of sensors.
IoT Hub is a managed service, hosted in the cloud, that acts as a central message hub for bi-directional
communication between your IoT application and the devices it manages. You can use Azure IoT Hub to
build IoT solutions with reliable and secure communications between millions of IoT devices and a
cloud- hosted solution backend. You can connect virtually any device to IoT Hub.
152.
You have an Azure environment.
You need to create a new Azure virtual machine from a tablet that runs the Android operating system.
What are three possible solutions? Each correct answer presents a complete solution.
 A. Use Bash in Azure Cloud Shell.
 B. Use PowerShell in Azure Cloud Shell.
 C. Use the PowerApps portal.
 D. Use the Security & Compliance admin center.
 E. Use the Azure portal.
Correct Answer: ABE
The Android tablet device will have a web browser (Chrome). That‫ג‬€™s enough to connect to the Azure
portal.
The Azure portal offers three ways to create a VM:
✑ Using the graphical portal.
✑ Using the Azure Cloud Shell using Bash.
✑ Using the Azure Cloud Shell using PowerShell.
153.
A team of developers at your company plans to deploy, and then remove, 50 virtual machines each week.
All the virtual machines are configured by using Azure
Resource Manager templates.
You need to recommend which Azure service will minimize the administrative effort required to deploy
and remove the virtual machines.
Ans - Azure DevTest Labs
154.
HOTSPOT - Azure Advisor provides recommendations on how to improve the security of an Azure
Active Directory (Azure AD) environment.
Hot Area:
Correct Answer:
Box 1: No -
Azure Advisor provides you with a consistent, consolidated view of recommendations for all your Azure
resources. It integrates with Azure Security Center to bring you security recommendations. You can get
security recommendations from the Security tab on the Advisor dashboard. Examples of
recommendations include restricting access to virtual machines by configuring Network Security Groups,
enabling storage encryption, installing vulnerability assessment solutions.
However, Azure Advisor does not provide recommendations on how to improve the security of an Azure
AD environment.
Box 2: Yes -
Advisor helps you optimize and reduce your overall Azure spend by identifying idle and underutilized
resources. You can get cost recommendations from the Cost tab on the Advisor dashboard.
Box 3: No.
Azure Advisor does not provide recommendations on how to configure network settings on Azure virtual
machines.
155.
You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a
resource group named RG1.
From Azure documentation, you have the following command that creates a virtual machine named VM1.
az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys
You need to create VM1 in Subscription1 by using the command.
Solution: From the Azure portal, launch Azure Cloud Shell and select PowerShell. Run the command in
Cloud Shell.
Ans - Yes
156.
az vm create --resource-group RG1 --name VM1 --image UbuntuLTS
--generate-ssh-keys
Solution: From a computer that runs Windows 10, install Azure CLI. From PowerShell, sign in to Azure
and then run the command.
Ans - Yes
157.
az vm create --resource-group RG1 --name VM1 --image UbuntuLTS
--generate-ssh-keys
Solution: From a computer that runs Windows 10, install Azure CLI. From a command prompt, sign in to
Azure and then run the command.
Ans - Yes
158.
HOTSPOT - Computer 1
Several support engineers plan to manage Azure by using the computers shown in the following table:
You need to identify which Azure management tools can be used from each computer.
What should you identify for each computer? To answer, select the appropriate options in the answer
area.
Hot Area:
Correct Answer:
159.
HOTSPOT -
Hot Area:
Correct Answer:
You can access Compliance Manager from the AZURE PORTAL.

160.
HOTSPOT -
Hot Area:
Ans-
Azure Resource Manager templates provides a common platform for deploying objects to a cloud
infrastructure and for implementing consistency across the Azure environment.
161.
Match the Azure service to the correct description.
Select and Place:
Ans:
Box 1:
Azure Bot Services provides a digital online assistant that provides speech support.
Box 2:
Azure Machine Learning uses past trainings to provide predictions that have high probability.
Box 3:
Azure Functions provides serverless computing functionalities.
Box 4:
IoT Hub (Internet of things Hub) provides data from millions of sensors.
162.
Solution: Run the script from a computer that runs Windows 10 and has the Azure PowerShell module
installed.
Ans - Yes
163.
DRAG DROP -
Match the Azure services to the correct description.
Select and Place:
Correct Answer:
Box 1:
Azure virtual machines provide operation system virtualization.
Azure Virtual Machines (VM) is one of several types of on-demand, scalable computing resources that
Azure offers. Typically, you choose a VM when you need more control over the computing environment
than the other choices offer.
Box 2:
Azure Container Instances provide portable environments for virtualized applications.
Containers are becoming the preferred way to package, deploy, and manage cloud applications. Azure
Container Instances offers the fastest and simplest way to run a container in Azure, without having to
manage any virtual machines and without having to adopt a higher-level service.
Containers offer significant startup benefits over virtual machines (VMs). Azure Container Instances can
start containers in Azure in seconds, without the need to provision and manage VMs.
Box 3:
Azure App Service is used to build, deploy and scale web apps.
Azure App Service is a platform-as-a-service (PaaS) offering that lets you create web and mobile apps for
any platform or device and connect to data anywhere, in the cloud or on-premises. App Service includes
the web and mobile capabilities that were previously delivered separately as Azure Websites and Azure
Mobile
Services.
Box 4:
Azure Functions provide a platform for serverless code.
Azure Functions is a serverless compute service that lets you run event-triggered code without having to
explicitly provision or manage infrastructure.
164.
Which service provides serverless computing in Azure?
Azure Functions
165.
Which three computers can run the script? Each correct answer presents a complete solution.
 A. a computer that runs macOS and has PowerShell Core 6.0 installed.
 B. a computer that runs Windows 10 and has the Azure PowerShell module installed.
 C. a computer that runs Linux and has the Azure PowerShell module installed.
 D. a computer that runs Linux and has the Azure CLI tools installed.
 E. a computer that runs Chrome OS and uses Azure Cloud Shell.
Correct Answer: ABE
A PowerShell script is a file that contains PowerShell cmdlets and code. A PowerShell script needs to be
run in PowerShell.
166.
az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys
Solution: From the Azure portal, launch Azure Cloud Shell and select Bash. Run the command in Cloud
Shell.
Ans - Yes
Your company has several business units.
Each business unit requires 20 different Azure resources for daily operation. All the business units require
the same type of Azure resources.
You need to recommend a solution to automate the creation of the Azure resources.
What should you include in the recommendations?
 A. Azure Resource Manager templates
 B. virtual machine scale sets
 C. the Azure API Management service
 D. management groups
Ans - Azure Resource Manager templates
168.
HOTSPOT - You can use Azure Cost Management to view costs associated to management groups.
Hot Area:
Correct Answer:
169.
You need to configure an Azure solution that meets the following requirements:
✑ Secures websites from attacks
✑ Generates reports that contain details of attempted attacks
What should you include in the solution?
 A. Azure Firewall
 B. a network security group (NSG)
 C. Azure Information Protection
 D. DDoS protection
Ans - DDoS protection
170.
Correct Answer:
Box 1:
To monitor threats by using sensors, you would use Azure Advanced Threat Protection (ATP).
Azure Advanced Threat Protection (ATP) is a cloud-based security solution that leverages your on-
premises Active Directory signals to identify, detect, and investigate advanced threats, compromised
identities, and malicious insider actions directed at your organization.
Sensors are software packages you install on your servers to upload information to Azure ATP.
Box 2:
To enforce MFA based on a condition, you would use Azure Active Directory Identity Protection.
Azure AD Identity Protection helps you manage the roll-out of Azure Multi-Factor Authentication (MFA)
registration by configuring a Conditional Access policy to require MFA registration no matter what
modern authentication app you are signing in to.
171.
Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
What are two possible solutions? Each correct answer presents a complete solution.
 A. Modify an Azure Traffic Manager profile
 B. Modify a network security group (NSG)
 C. Modify a DDoS protection plan
 D. Modify an Azure firewall
Ans - Modify a network security group (NSG)
172.
HOTSPOT - You can enable just in time (JIT) VM
Hot Area:
Correct Answer:
The just-in-time (JIT) virtual machine (VM) access feature in Azure Security Center allows you to lock
down inbound traffic to your Azure Virtual Machines. This reduces exposure to attacks while providing
easy access when you need to connect to a VM.
Ans - Azure Security Center
173.
HOTSPOT - You can associate a network security group (NSG) to a virtual network subnet.
Correct Answer:
174.
You have an Azure environment that contains 10 virtual networks and 100 virtual machines.
You need to limit the amount of inbound traffic to all the Azure virtual networks.
 A. one application security group (ASG)
 B. 10 virtual network gateways
 C. 10 Azure ExpressRoute circuits
 D. one Azure firewall
Ans - One Azure Firewall
175.
Azure Key Vault is used to store secrets for Azure Active Directory (Azure AD) user accounts.
 B. Azure Active Directory (Azure AD) administrative accounts
 C. Personally Identifiable Information (PII)
 D. server applications
Ans - Server Applications
176.
Your company plans to automate the deployment of servers to Azure.
Your manager is concerned that you may expose administrative credentials during the deployment.
You need to recommend an Azure solution that encrypts the administrative credentials during the
deployment.
 A. Azure Key Vault
 B. Azure Information Protection
 C. Azure Security Center
 D. Azure Multi-Factor Authentication (MFA)
Ans - Azure Key Vault
177.
You need to control the ports that devices on the Internet can use to access the virtual machines.
 A. a network security group (NSG)
 B. an Azure Active Directory (Azure AD) role
 C. an Azure Active Directory group
 D. an Azure key vault
Ans - A network Security Group (NSG)
178.
HOTSPOT - After you create a virtual machine, you need to modify the
Correct Answer:
179.
HOTSPOT - You can create custom Azure roles to control access to resources
Correct Answer:
180.
Solution: You modify a network security group (NSG).
 A. Yes
 B. No
Ans - Yes
181.
Solution: You modify a DDoS protection plan.
 A. Yes
 B. No
Ans - No
182.
You need to collect and automatically analyze security events from Azure Active Directory (Azure AD).
 A. Azure Sentinel
 B. Azure Synapse Analytics
 C. Azure AD Connect
 D. Azure Key Vault
Ans - Azure Sentinel
183.
Solution: You modify an Azure firewall.
 A. Yes
 B. No
Ans - Yes
184.
Solution: You modify an Azure Traffic Manager profile.
 A. Yes
 B. No
Ans - No
185.
Your company plans to deploy several web servers and several database servers to Azure.
You need to recommend an Azure solution to limit the types of connections from the web servers to the
database servers.
 A. network security groups (NSGs)
 B. Azure Service Bus
 C. a local network gateway
 D. a route filter
Ans - network security groups (NSGs)
186.
HOTSPOT - You can view which user turned off a specific virtual machine during the last 14 days.
Correct Answer:
187.
Which service provides network traffic filtering across multiple Azure subscriptions and virtual
networks?
 A. Azure Firewall
 B. an application security group
 C. Azure DDoS protection
 D. a network security group (NSG)
Ans - Azure Firewall
188.
Which Azure service should you use to store certificates?
 A. Azure Security Center
 B. an Azure Storage account
 C. Azure Key Vault
 D. Azure Information Protection
Ans - Azure Key Vault
189.
Which Azure service can you use as a security information and event management (SIEM) solution?
 A. Azure Analysis Services
 B. Azure Sentinel
 C. Azure Information Protection
 D. Azure Cognitive Services
Ans - Azure Sentinel
190. Azure Sentinel stores collected events in an Azure Storage account

HOTSPOT -
Correct Answer:
191. Analyze security log files from Azure Virtual Machines

DRAG DROP -
Match the Azure Services service to the correct descriptions.
Instructions: To answer, drag the appropriate service from the column on the left to its description on the
right. Each service may be used once, more than once, or not at all.
Select and Place:
Box 1: Azure Sentinel -
Box 2: Azure Security Center -

Box 3: Azure Key Vault -
✑Azure Active Directory (Azure AD)
Azure AD is an identity and access management service, which helps your employees sign in and access
resources
✑Azure Lighthouse
Azure Lighthouse is used for cross- and multi-tenant management.
192. Azure Firewall will encrypt all the network traffic sent from Azure to the Internet
HOTSPOT -
Hot Area:
Correct Answer:
Box 1: No -
Azure firewall does not encrypt network traffic. It is used to block or allow traffic based on
source/destination IP address, source/destination ports and protocol.
Box 2: No -
A network security group does not encrypt network traffic. It works in a similar way to a firewall in that it
is used to block or allow traffic based on source/ destination IP address, source/destination ports and
protocol.
Box 3: No -
The question is rather vague as it would depend on the configuration of the host on the Internet. Windows
Server does come with a VPN client and it also supports other encryption methods such IPSec encryption
or SSL/TLS so it could encrypt the traffic if the Internet host was configured to require or accept the
encryption.
However, the VM could not encrypt the traffic to an Internet host that is not configured to require the
encryption.
193. Azure Security Center can monitor Azure resources and on-premises resources.
HOTSPOT -
Correct Answer:
Box 1: Yes -
Azure Security Center is a unified infrastructure security management system that strengthens the security
posture of your data centers, and provides advanced threat protection across your hybrid workloads in the
cloud - whether they're in Azure or not - as well as on premises.
Box 2: No -
Only two features: Continuous assessment and security recommendations, and Azure secure score, are
free.
Box 3: Yes -
The advanced monitoring capabilities in Security Center also let you track and manage compliance and
governance over time. The overall compliance provides you with a measure of how much your
subscriptions are compliant with policies associated with your workload.
194.
DRAG DROP -
You need to complete the defense-in-depth strategy used in a datacenter.
What should you do? To answer, drag the appropriate layers to the correct positions in the model. Each
layer may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
Correct Answer:
195.
You have an Azure virtual machine named VM1.

You plan to encrypt VM1 by using Azure Disk Encryption.
Which Azure resource must you create first?
 A. an Azure Storage account
 B. an Azure Key Vault
 C. an Azure Information Protection policy
 D. an Encryption key
Ans - An Azure Key Vault
196.
Which resources can be used as a source for a Network security group inbound security rule?
 A. Service Tags only
 B. IP Addresses, Service tags and Application security groups
 C. Application security groups only
 D. IP Addresses only
Ans - IP Addresses, Service tags and Application security groups
197. HOTSP
OT -
Correct Answer:
Ans - Azure Sentinel uses playbooks to
198. HOTSP
OT -
Correct Answer:
Ans - in Azure Firewall enables users on the internet to access a server on a virtual network.
199. HOTSP
OT -
Correct Answer:
Ans - Azure distributed denial of service (DDoS) protection is an example of protection that is
implemented at the
200. HOTSP
OT -
Correct Answer:
Ans - You have an Azure virtual network named VNET1 in a resource group named RG1.
251.
In which Azure support plans can you open a new support request?
 A. Premier and Professional Direct only

 B. Premier, Professional Direct, and Standard only
 C. Premier, Professional Direct, Standard, and Developer only
 D. Premier, Professional Direct, Standard, Developer, and Basic
Ans - Premier, Professional Direct, Standard, Developer, and Basic
252.
You can create an Azure support request from support.microsoft.com.
Instructions: Review the underlined text. If it makes the statement correct, select ‫ג‬€No
change is needed.‫ג‬€ If the statement is incorrect, select the answer choice that makes
the statement correct.
 B. the Azure portal
 C. the Knowledge Center
 D. the Security & Compliance admin center
Ans - the Azure portal
253.
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution that might meet the stated goals.
Some question sets might have more than one correct solution, while others might not
have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a
result, these questions will not appear in the review screen.
Solution: You remove the unused groups.
 A. Yes
 B. No
Ans - No
254.
The Azure Standard support plan is the lowest cost option to receive 24x7 access to
support engineers by phone.
Instructions: Review the underlined text. If it makes the statement correct, select ‫ג‬€No
change is needed‫ג‬€. If the statement is incorrect, select the answer choice that makes
the statement correct.
 B. Developer
 C. Basic
 D. Professional Direct
Ans - No change is needed
255.
HOTSPOT - All Azure services that are in public preview are
Hot Area:
Correct Answer:
Ans - Excluded from the Service Level Agreements
256.
What is guaranteed in an Azure Service Level Agreement (SLA) for virtual machines?
 A. uptime
 B. feature availability
 C. bandwidth
 D. performance
Ans - Uptime
257.
HOTSPOT - An Azure service is available to all Azure customers when it is in
Hot Area:
Correct Answer:
Ans - Public Preview
258.
Your company plans to purchase an Azure subscription.
The company‫ג‬€™s support policy states that the Azure environment must provide an
option to access support engineers by phone or email.
You need to recommend which support plan meets the support policy requirement.
Solution: Recommend a Basic support plan.
 A. Yes
 B. No
Ans - No
259.
Solution: Recommend a Standard support plan.
 A. Yes
 B. No
Ans - Yes
260.
Solution: Recommend a Premier support plan.
 A. Yes
 B. No
Ans - Yes
261.
Your company plans to request an architectural review of an Azure environment from
Microsoft.
The company currently has a Basic support plan.
You need to recommend a new support plan for the company. The solution must
minimize costs.
Which support plan should you recommend?
 A. Premier
 B. Developer
 C. Professional Direct
 D. Standard
Ans - Premier
262.
HOTSPOT - Most Azure services are introduced in private preview before being
introduced in public preview
For each of the following statements, select Yes if the statement is true. Otherwise,
select No.
Correct Answer:
Box 1: Yes -
Most services go to private preview then public preview before being released to
general availability.
The private preview is only available to certain Azure customers for evaluation
purposes. The public preview is available to all Azure customers.
Box 2: No -
Azure services in public preview can be managed using the regular management tools:
Azure Portal, Azure CLI and PowerShell.
Box 3: No -
Services in private or public preview are usually offered at reduced costs. However, the
costs increase, not decrease when the services are released to general availability.
263.
What is required to use Azure Cost Management?
 A. a Dev/Test subscription
 B. Software Assurance
 C. an Enterprise Agreement (EA)
 D. a pay-as-you-go subscription
Ans - An Enterprise Agreement (EA)
264.
HOTSPOT - Your Azure trail account expired last week
Correct Answer:
A stopped (deallocated) VM is offline and not mounted on an Azure host server. Starting
a VM mounts the VM on a host server before the VM starts. As soon as the VM is
mounted, it becomes chargeable. For this reason, you are unable to start a VM after a
trial has expired.
Incorrect Answers:
✑ You are not charged for Azure Active Directory user accounts so you can continue to
create accounts.
✑ You can access data that is already stored in Azure.

✑ You can access the Azure Portal. You can also reactivate and upgrade the expired
subscription in the portal.
265.
Solution: Recommend a Professional Direct support plan.
 A. Yes
 B. No
Ans - Yes
266.
Your company has a Software Assurance agreement that includes Microsoft SQL
Server licenses.
You plan to deploy SQL Server on Azure virtual machines.
What should you do to minimize licensing costs for the deployment?
 A. Deallocate the virtual machines during off hours.

 B. Use Azure Hybrid Benefit.
 C. Configure Azure Cost Management budgets.
 D. Use Azure reservations.
Ans - Use Azure Hybrid Benefit
267.
Your company has 10 departments.
The company plans to implement an Azure environment.
You need to ensure that each department can use a different payment option for the
Azure services it consumes.
What should you create for each department?
 A. a reservation
 B. a subscription
 C. a resource group
 D. a container instance
Ans - A Subscription
268.
HOTSPOT - An Azure free account has a spending limit
select No.
Correct Answer:
Box 1: Yes -
An Azure free account has a spending limit. This is currently 200 USD or 150 GBP.
Box 2: No -
Azure free account has a 5 GB blob storage limit and a 5 GB file storage limit.
Box 3: No -
Azure free account has a limit of 10 web, mobile or API apps.
269.
HOTSPOT - An Azure service in private preview is released to all Azure customers
select No.
Correct Answer:
Box 1: No -
Most services go to private preview then public preview before being released to
general availability. The private preview is only available to certain Azure customers for
evaluation purposes.
Box 2: Yes -
Public Preview means that the service is in public beta and can be tried out by anyone
with an Azure subscription. Services in public preview are often offered at a discount
price.
Public previews are excluded from SLAs and in some cases, no support is offered.
Box 3: No -
An Azure service in general availability is available to all Azure customers, not just a
subset of the customers.
270.
HOTSPOT - With a consumption-based plan, you pay a fixed rate for all
select No.
Correct Answer:
271.
HOTSPOT - The cost of Azure resources can vary between regions.
select No.
Correct Answer:
272.
HOTSPOT - You have an application that is comprised of an Azure web app that has a
Service Level Agreement (SLA) of 99.95 percent
Hot Area:
Correct Answer:
Composite SLAs involve multiple services supporting an application, each with differing
levels of availability. For example, consider an App Service web app that writes to Azure
SQL Database. At the time of this writing, these Azure services have the following
SLAs:
App Service web apps = 99.95%
✑ SQL Database = 99.99%

What is the maximum downtime you would expect for this application? If either service
fails, the whole application fails. The probability of each service failing is independent,
so the composite SLA for this application is 99.95% — 99.99% = 99.94%. That's lower
than the individual SLAs, which isn't surprising because an application that relies on
multiple services has more potential failure points.
273.
HOTSPOT - The Service Level Agreement (SLA) guaranteed uptime for paid Azure
services is at least 99.9 percent.
select No.
Correct Answer:
Box 1: Yes -
SLA‫ג‬€™s vary based on the resource type and the location distribution of the resource.
However, the minimum uptime for all Azure services is 99.9 percent.
Box 2: Yes -
The SLA guaranteed uptime is increased (usually to 99.95 percent) when resources are
deployed across multiple regions.
Box 3: No -
The number of subscriptions is unrelated to uptime SLA‫ג‬€™s. You can deploy
resources to multiple regions under a single subscription or you can have multiple
subscriptions with resources deployed to the same region.
274.
Which statement accurately describes the Modern Lifecycle Policy for Azure services?
 A. Microsoft provides mainstream support for a service for five years.

 B. Microsoft provides a minimum of 12 months‫ג‬€™ notice before ending support
for a service.
 C. After a service is made generally available, Microsoft provides support for the
service for a minimum of four years.
 D. When a service is retired, you can purchase extended support for the service
for up to five years.
Ans - Microsoft provides a minimum of 12 months‫ג‬€™ notice before ending support for
a service.
275.
HOTSPOT -
You need to request that Microsoft increase a subscription quota limit for your company.
Which blade should you use from the Azure portal? To answer, select the appropriate
blade in the answer area.
Correct Answer:
Request a standard quota increase from Help + support
276.
HOTSPOT - in Azure to send email alerts when the cost of the current
Hot Area:
Correct Answer:
Budget alerts notify you when spending, based on usage or cost, reaches or exceeds
the amount defined in the alert condition of the budget. Cost Management budgets are
created using the Azure portal or the Azure Consumption API.
Ans - Budget alerts
277.
HOTSPOT - From the Azure portal, you can distinguish between services that are
generally available and services that are in public preview.
select No.
Correct Answer:
278.
HOTSPOT - When using an Azure ExpressRoute connection, inbound data traffic from
an on-premises network to Azure is always free.
select No.
Correct Answer:
Box 1: Yes -
With Azure ExpressRoute, all inbound data transfer is free of charge.
Box 2: No -
Inbound data traffic is free but outbound data traffic is not.
Box 3: Yes -
279.
our company has an Azure subscription that contains the following unused resources:
Which unused resources should you remove?
 A. the network interfaces

 B. the public IP addresses
 C. the groups
 D. the user accounts
Ans - the public IP addresses
280.
HOTSPOT - If an Azure virtual machine has a status of Stopped (deallocated), you will
continue to pay for
Correct Answer:
When a virtual machine is stopped (deallocated), the virtual machine is

unloaded/dismounted from the physical server in Azure. In this state, you are not
charged for the virtual machine itself. However, you are still charged for the storage
costs of the virtual hard disks attached to the virtual machine.
If the virtual machine is stopped but not deallocated (this happens if you shut down the
virtual machine from the operating system of the virtual machine), the virtual machine is
still mounted on the physical server in Azure and you are charged for the virtual
machine itself as well as the storage costs. To ensure that a virtual machine is
‫ג‬€˜stopped (deallocated)‫ג‬€™, you need to stop the virtual machine in the Azure portal.
Ans - Storage
281.
HOTSPOT - Storing 1TB of data in Azure Blob storage will always cost the same,
regardless of the Azure region in which the data is located.
select No.
Correct Answer:
Box 1: No -
The price of Azure storage varies by region. If you use the Azure storage pricing page,
you can select different regions and see how the price changes per region.
Box 2: No -
You are charged for read and write operations in general-purpose v2 storage accounts.
Box 3: No -
You would be charge for the read operations of the source storage account and write
operations in the destination storage account.
282.
HOTSPOT - In Azure Directory Premium P2, at least 99.9 percent availability is
guaranteed.
select No.
Correct Answer:
Box 1: Yes -
Microsoft guarantee at least 99.9% availability of the Azure Active Directory Premium
edition services. The services are considered available in the following scenarios:
✑ Users are able to login to the service, login to the Access Panel, access applications
on the Access Panel and reset passwords.
✑ IT administrators are able to create, read, write and delete entries in the directory or
provision or de-provision users to applications in the directory.
Box 2: No -
No SLA is provided for the Free tier of Azure Active Directory.
Box 3: Yes -
You can claim credit if the availability falls below the SLA. The amount of credit depends
on the availability. For example: You can claim 25% credit if the availability is less than
99.9%, 50% credit for less than 99% and 100% for less than 95% availability.
283.
HOTSPOT - Adding resource groups in an Azure subscription generates additional
costs.
select No.
Correct Answer:
Box 1: No -
Resource groups are logical containers for Azure resources. You do not pay for
resource groups.
Box 2: No -
Data ingress over a VPN is data ‫ג‬€˜coming in‫ג‬€™ to Azure over the VPN. You are not
charged data transfer costs for data ingress.
Box 3: Yes -
Data egress over a VPN is data ‫ג‬€˜going out‫ג‬€™ of Azure over the VPN. You are
charged for data egress.
284.
Who can use the Azure Total Cost of Ownership (TCO) calculator?
 A. billing readers for an Azure subscription only

 B. owners for an Azure subscription only
 C. anyone
 D. all users who have an account in Azure Active Directory (Azure AD) that is
linked to an Azure subscription only
Ans - Anyone

Azure AZ-900 Main Exam

Uploaded by

Copyright:

Available Formats

Azure AZ-900 Main Exam

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Azure AZ-900 Main Exam

Uploaded by

Copyright:

Available Formats

What are the different Azure support plans and their capabilities?

What are the different Azure support plans and their capabilities?

What are the different Azure storage redundancy options and when would each be used?

What are the different Azure storage redundancy options and when would each be used?

Question #1Topic 1

Question #46Topic 1(Azure virtual machines are Infrastructure as a service (IaaS))

Azure Site Recovery provides fault tolerance for virtual machines.

Question #58Topic 1(Azure Pay-As-You-Go pricing is an example of CapEx)

Question #67Topic 1 (Buliding a data center infrastructure is an example of operational expenditure

Question #68Topic 1(Azure Cosmos DB is an example of a platform as a service (PaaS) offering)

Azure Cosmos DB is an example of a platform as a service (PaaS) cloud database provider.

Question #76Topic 1(Cloud computing provides elastic scalability)

Question #86Topic 1(Local network gateways)

Question #97Topic 1(Availability zones can be implemented in all Azure regions)

Question #101Topic 1(Azure Cosmos DB)

Question #110Topic 1(North America is represented by a single Azure region)

Question #124Topic 1(Provides the platform for serverless code)

Question #130Topic 1(Azure Databricks is an Apache Spark-based analytics service)

Question #141Topic 1(A managed relational cloud database service)

Question #205Topic 1(Authentication is the process of verifying a user’s credentials)

Question #248Topic 1(Maximum available minutes – Downtime in Minutes)

Box 1: Azure SQL Synapse Analytics

You can access Compliance Manager from the AZURE PORTAL.

190. Azure Sentinel stores collected events in an Azure Storage account

191. Analyze security log files from Azure Virtual Machines

Box 1: Azure Sentinel -

Box 2: Azure Security Center -

You have an Azure virtual machine named VM1.

Ans - Azure Sentinel uses playbooks to

 A. Premier and Professional Direct only

Ans - Premier, Professional Direct, Standard, Developer, and Basic

Ans - the Azure portal

Ans - No change is needed

Ans - Excluded from the Service Level Agreements

Ans - Public Preview

Ans - An Enterprise Agreement (EA)

✑ You can access data that is already stored in Azure.

 A. Deallocate the virtual machines during off hours.

Ans - Use Azure Hybrid Benefit

App Service web apps = 99.95%

✑ SQL Database = 99.99%

 A. Microsoft provides mainstream support for a service for five years.

With Azure ExpressRoute, all inbound data transfer is free of charge.

Inbound data traffic is free but outbound data traffic is not.

 A. the network interfaces

Ans - the public IP addresses

When a virtual machine is stopped (deallocated), the virtual machine is

No SLA is provided for the Free tier of Azure Active Directory.

 A. billing readers for an Azure subscription only

You might also like