24/11/2023, 17:46 LMS | Whizlabs

Home / Dashboard / My Courses / Microsoft Azure Exam AZ-900 Certification / Practice Test 2 / Report

Level: Beginner h Back to the Course

Microsoft Azure Exam AZ-900 Certification

Practice Test 2 Completed on Fri, 24 Nov 2023

1st 47/55 85.45%

Attempt Marks Obtained Your Score

1h 14m 41s PASS

Time Taken Result

Domain wise Quiz Performance Report

No. Domain Total Question Correct Incorrect Unattempted Marked for Review

1 Describe cloud concepts 6 6 0 0 0

2 Describe Azure architecture and services 25 22 3 0 2

3 Describe Azure management and governance 24 19 5 0 1

Total All Domains 55 47 8 0 3

Review the Answers Filter By All Questions

Question 1 Correct

Domain: Describe Azure management and governance

An IT Engineer needs to create a Virtual Machine in Azure. Currently, the IT Engineer has a Windows desktop along with the Azure Command Line
Interface (CLI). Which of the following would allow the IT engineer to use the Azure Command Line Interface? Choose 2 answers from the options
given below.

A. Powershell right

B. File and Print Explorer

C. Command Prompt right

D. Control Panel

Explanation:

Answer – A and C

You can launch the Azure command-line tool from the command prompt as shown below.

Or you could also launch it from PowerShell as shown below.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 1/52
24/11/2023, 17:46 LMS | Whizlabs

Options B and D are incorrect because you can’t launch Azure Command-Line from any of these options.

For more information on Azure Command Line Interface, please visit the below URL-

https://docs.microsoft.com/en-us/cli/azure/get-started-with-azure-cli?view=azure-cli-latest

Ask our Experts

Did you like this Question?

Question 2 Incorrect

Domain: Describe Azure management and governance

A company is planning to set up an Azure Free Account. Does the Standard Support plan come along with the Azure Free Account?

A. Yes wrong

B. No right

Explanation:

Answer – B

An Azure free account comes with a 'basic' support plan, not a 'standard' support plan. The basic support plan is the default one, which is
associated with all Azure accounts. In order to have a Standard Support Plan, it needs to be purchased.

 

Reference: For more information on the comparison of Support plans, please click the link- Azure Support Plans Comparison | Microsoft Azure

If you are looking for a comprehensive, organization-wide support plan that includes Azure, Microsoft 365, and Dynamics 365, explore enterprise
support.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 2/52
24/11/2023, 17:46 LMS | Whizlabs

Ask our Experts

Did you like this Question?

Question 3 Correct

Domain: Describe Azure management and governance

A customer is planning to create several Azure Free Accounts. Can a customer have an allowance of a maximum of 10 Azure Free Accounts?

A. Yes

B. No right

Explanation:

Answer – B

A customer can only have one Azure Free Account. This is also given in the Microsoft documentation.

For more information on the Azure Free Account, please visit the below URL-

https://azure.microsoft.com/en-us/free/free-account-faq/

Ask our Experts

Did you like this Question?

Question 4 Correct

Domain: Describe Azure architecture and services

Your company is planning to host resources in Azure. Can an administrator give access to partners who do not have an Azure AD account to
access resources in Azure?

A. Yes right

B. No

Explanation:

Answer – A

Azure has other capabilities in place that can allow other partners to access Azure-based resources. For example, Azure has the feature of Azure
AD Business to Business collaboration where the partners don’t have to be defined in Azure.

The Microsoft documentation mentions the following on Azure B2B.

For more information on Azure B2B, please visit the below URL-

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 3/52
24/11/2023, 17:46 LMS | Whizlabs
https://docs.microsoft.com/en-us/azure/active-directory/b2b/what-is-b2b

Ask our Experts

Did you like this Question?

Question 5 Correct

Domain: Describe Azure architecture and services

Your organization is looking for a physical migration service that helps to transfer 70 TB of files from an on-premise data center to Azure in a quick,
inexpensive, and reliable way. Which of the following services will you select for this task?

A. Azure Batch

B. Azure ExpressRoute

C. Azure Data Box right

D. Azure Migrate

Explanation:

Correct Answer : C

The organization is looking for a physical data transfer method.

Option A is Incorrect: Azure Batch is not used for data transfer. Azure Batch runs large-scale applications efficiently in the cloud.

Option B is Incorrect: Azure ExpressRoute is a service that enables you to create private connections between Azure datacenters and on-
premises infrastructure or in a colocation environment.

Option C is Correct: Azure Data Box ships a storage device to your data center that has a maximum usable storage capacity of 80 TB. So, Azure
Data Box helps to move large amounts of data to Azure with little or no impact on the network.

Option D is Incorrect: Azure Migrate is an infrastructure Migration service.

References:

Microsoft Azure Data Box overview | Microsoft Docs

https://azure.microsoft.com/en-us/services/expressroute/#overview

Ask our Experts

Did you like this Question?

Question 6 Correct Marked for review

Domain: Describe Azure architecture and services

Your company has implemented Work From Home. As per company policies, your employees should be able to sign in to the Azure portal only
when they are using the company-provided devices (which are registered in Azure Active Directory) from their base location (which is India).

You want to block the sign-in attempt to Azure Portal when either of the condition fails. What should you configure to achieve this?

A. Microsoft Entra ID Device management

B. Microsoft Entra Privileged Identity Management (PIM)

C. Azure RBAC

D. Conditional Access right

Explanation:

Correct Answer: D

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 4/52
24/11/2023, 17:46 LMS | Whizlabs
According to the question, we need to block sign-in attempts IF any specific condition is met.

IF the sign-in attempt is from an unexpected Location/device

THEN Block the access.

Option A is Incorrect : Azure AD Device management helps register our devices to azure. Hence, it can not help to block the sign-in from
untrusted locations.

Option B is Incorrect: Privileged Identity Management (PIM) enables you to manage, control, and monitor access to important resources in your
organization. These resources include resources in Azure AD, Azure & M365.

Option C is Incorrect: Azure RBAC helps us to give fine access control to our users, but it can not identify signals (Unexpected device/ location)
and allow or deny the sign-in attempts.

Option D is Correct: Conditional Access checks the conditional statement (also called an If-Then Statement), which helps you to
allow/deny/require MFA to a sign-in attempt based on the signals(like location, type of device, etc).

Reference:

What is Conditional Access in Azure Active Directory? - Microsoft Entra | Microsoft Docs

Ask our Experts

Did you like this Question?

Question 7 Correct

Domain: Describe Azure management and governance

Azure Advisor dashboard displays personalized recommendations to optimize your Azure deployments. Which of the following options are not
included in the Azure Advisor recommendations?

A. Reliability

B. Performance

C. Predictability right

D. Cost

Explanation:

Correct Answer: C

Azure Advisor gives proactive, actionable, and personalized best practices recommendations to help you improve your azure cloud deployments.

Option A is Incorrect : Azure Advisor gives recommendations on Reliability to ensure and improve the continuity of your business-critical
applications.

Option B is incorrect : Azure Advisor gives a recommendation on Performance to improve the speed of your applications.

Option C is Correct: Azure Advisor does not give a recommendation on Predictability.

Option D is incorrect : Azure Advisor gives the recommendation to optimize and reduce your overall Azure spending.

Reference:

Introduction to Azure Advisor - Azure Advisor | Microsoft Docs

Ask our Experts

Did you like this Question?

Question 8 Correct

Domain: Describe cloud concepts

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 5/52
24/11/2023, 17:46 LMS | Whizlabs
A company is planning to create several SQL Databases in Azure. They would be using the Azure SQL Database service. Which of the following is the
right category to which the Azure SQL Database service belongs to?
A. Infrastructure as a service (IaaS)

B. Platform as a service (PaaS) right

C. Software as a service (SaaS)

D. Function as a service (FaaS)

Explanation:

Correct Answer – B

Azure SQL Database is a fully managed platform as a service (PaaS) database engine that handles most of the database management functions
such as upgrading, patching, backups, and monitoring without user involvement

This is given in the Microsoft documentation.

Reference:

Azure SQL Database service - Azure SQL Database | Microsoft Learn

What is Azure SQL? - Azure SQL | Microsoft Learn

Ask our Experts

Did you like this Question?

Question 9 Correct

Domain: Describe Azure management and governance

A company is planning to use Azure Storage Accounts. They have the following requirement.

Storage of 2 TB of data

Storage of a million files

Would using Azure Storage fulfill these requirements?

A. Yes right

B. No

Explanation:

Correct Answer – A

If you look at the Microsoft documentation, Azure storage has a high limit on the amount that can be stored and no limit on the number of files. The
Max storage capacity is 5 PiB 1, while there is no limit for the maximum number of BLOBs, TABLEs, QUEUEs, or MESSAGEs per storage account.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 6/52
24/11/2023, 17:46 LMS | Whizlabs
SCALE TARGETS FOR STANDARD STORAGE ACCOUNTS

Resource Limit

Several storage accounts per region per subscription, including standard and premium storage accounts. 250

Maximum storage account capacity 5 PiB 1

Maximum number of blob containers, blobs, file shares, tables, queues, entities, or messages per storage No limit
account

Maximum request rate1 per storage account 20,000 requests per second

Maximum ingress1 per storage account (US, Europe regions) 10 Gbps

Maximum ingress1 per storage account (regions other than the US and Europe) 5 Gbps if RA-GRS/GRS is enabled, 10 Gbps for
LRS/ZRS2

Maximum egress for general-purpose v2 and Blob storage accounts (all regions) 50 Gbps

Maximum egress for general-purpose v1 storage accounts (US regions) 20 Gbps if RA-GRS/GRS is enabled, 30 Gbps for
LRS/ZRS2

Maximum egress for general-purpose v1 storage accounts (non-US regions) 10 Gbps if RA-GRS/GRS is enabled, 15 Gbps for
LRS/ZRS2

Maximum number of virtual network rules per storage account 200

Reference:

Scalability and performance targets for standard storage accounts - Azure Storage | Microsoft Learn

Ask our Experts

Did you like this Question?

Question 10 Correct

Domain: Describe Azure architecture and services

A company is planning to use Azure Storage Accounts. They have the following requirement.

Storage Account should automatically replicate data to the secondary region.

Can configuring the Read-Access Geo-Redundant Storage Account automatically replicate data to the secondary region?

A. Yes right

B. No

Explanation:

Answer – A

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 7/52
24/11/2023, 17:46 LMS | Whizlabs

You need to set the replication strategy in order to make this possible. Below is the table on the redundancy for storage accounts.

For ensuring data is replicated to another region, you have to choose either Geo-redundant storage or Read access geo-redundant storage.

For more information on Azure storage redundancy, please visit the below URL-

https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy

Ask our Experts

Did you like this Question?

Question 11 Correct

Domain: Describe Azure architecture and services

A company has its own on-premises/private cloud and wants to use Azure for deployment of various solutions. They want to ensure that suspicious
attacks and threats to resources in their Azure account are prevented. Which of the following helps prevent such attacks by using built-in sensors
in Azure?

A. Microsoft Entra ID Identity Protection

B. Azure DDoS attacks

C. Microsoft Entra Privileged Identity Management

D. Microsoft Defender for Identity right

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 8/52
24/11/2023, 17:46 LMS | Whizlabs

Explanation:

Answer – D

The Microsoft documentation states the below feature on the Microsoft Defender for Identity service.

Microsoft Defender for Identity is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and
investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.

Monitor and analyze user behavior and activities

Defender for Identity's proprietary sensors monitor organizational domain controllers, providing a comprehensive view of all user activities from
every device. Defender for Identity monitors and analyzes user activities and information across your network, such as permissions and group
membership, creating a behavioral baseline for each user.

Options A and C are incorrect since these are used for protecting identities in Azure AD.

Option B is incorrect since this is solely a solution to protect against DDoS attacks.

For more information on Azure Advanced Threat Protection, please visit the below URL-

https://docs.microsoft.com/en-us/defender-for-identity/what-is

Ask our Experts

Did you like this Question?

Question 12 Correct

Domain: Describe Azure architecture and services

You have multiple storage accounts in your subscription. You need to provide read access for storage account1 only to a user, Write access to
storage account1 shouldn’t be granted. Access to other storage accounts should not be given.

Which of the following you should configure to achieve this target?

A. Microsoft Entra ID Device Management

B. Privileged Identity Management(PIM)

C. Azure RBAC right

D. Conditional Access

Explanation:

Correct Answer: C

Option A is Incorrect : Azure AD Device management helps register our devices to azure. Hence, it can not help in this case.

Option B is Incorrect : Privileged Identity Management (PIM) enables you to manage, control, and monitor access to important resources in
your organization. These resources include objects in Azure AD, Azure & M365 only and not to the Azure storage accounts.

Option C is correct : Azure RBAC helps us to give fine-grained access control to our users. It can be attached at the resource level also. A reader
role at the Storage account1 level will help in this case.

Option D is Incorrect : Conditional Access is simple If-Then statements, which helps you to allow/deny/require MFA to a sign-in attempt based
on the signals, not suitable to give access controls.

Reference:

What is Azure role-based access control (Azure RBAC)? | Microsoft Docs

Ask our Experts

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 9/52
24/11/2023, 17:46 LMS | Whizlabs

Did you like this Question?

Question 13 Correct

Domain: Describe Azure management and governance b a n 0

D
A company has deployed a Virtual Machine in Azure Portal and that Virtual machine is named "demovm". The overview of the Virtual Machine is
shown below.

Which one should they use to help them get more information from the options below to help resolve an ongoing issue for underlying
infrastructure hosted on Azure?

A. Azure Advisor

B. Microsoft Entra ID

C. Azure Resource Health right

D. Azure Marketplace

Explanation:

Answer – C

You can see any service health issues for the Virtual Machine's infrastructure in the VM blade itself under Resource Health Option.

Just go to Resource Health, as shown below.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 10/52
24/11/2023, 17:46 LMS | Whizlabs

 

Option A is incorrect since this is used to provide recommendations in Azure.

Option B is incorrect since this is used for identity management.

Option D is incorrect since this is used for buying and selling third-party software and solutions.

Reference: For more information on Azure resource health, please visit the below URL-

Azure Resource Health overview - Azure Service Health | Microsoft Learn

Ask our Experts

Did you like this Question?

Question 14 Correct Marked for review

Domain: Describe Azure management and governance

A company is planning to host 2 Virtual Machines in Azure, as shown below.

Would both the Virtual Machines always generate the same monthly costs?

A. Yes

B. No right

Explanation:

Answer – B

The cost for a Virtual Machine depends on the region where it is hosted.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 11/52
24/11/2023, 17:46 LMS | Whizlabs
Below is a screenshot from the link given below where the pricing for a Virtual Machine changes as the region value changes.

https://azure.microsoft.com/en-in/pricing/details/virtual-machines/windows/

 

 

For more information on the pricing calculator, please visit the below URL-

https://azure.microsoft.com/en-us/pricing/calculator/

Ask our Experts

Did you like this Question?

Question 15 Correct

Domain: Describe Azure management and governance

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 12/52
24/11/2023, 17:46 LMS | Whizlabs
A company has a set of resources deployed to Azure. They want to make use of the Azure Advisor tool. Would the Azure Advisor tool give
recommendations on the tenancy?
A. Yes

B. No right

Explanation:

Correct Answer – B

If you see the Azure Advisor as shown below, the main area recommendations are Cost, Security, Reliability, Operational excellence &
Performance.

 

For more information on Azure Advisor, please visit the below URL-

https://docs.microsoft.com/en-us/azure/advisor/advisor-overview

Ask our Experts

Did you like this Question?

Question 16 Correct

Domain: Describe Azure architecture and services

A company is planning to deploy resources to Azure. Which of the following in Azure provides a platform for defining the dependencies between
resources so they're deployed in the correct order?

A. Azure Resource Groups

B. Azure policies

C. Azure Management Groups

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 13/52
24/11/2023, 17:46 LMS | Whizlabs
D. Azure Resource Manager right

Explanation:

Answer – D

The Microsoft documentation mentions the following.

Option A is incorrect since this provides a means to categorize resources deployed to Azure. It's not a platform.

Option B is incorrect since this allows you to govern Azure resources.

Option C is incorrect since this allows you to efficiently manage access, policies, and compliance for those subscriptions.

For more information on Azure Resource Manager, please visit the below URL-

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-overview

Ask our Experts

Did you like this Question?

Question 17 Incorrect Marked for review

Domain: Describe Azure architecture and services

Your organization published a custom web application. You want to use Azure Active Directory as an Identity and access management service
provider to authenticate customers to your web applications. By configuring this, which of the following Azure AD features are you using?

A. Microsoft Entra Private Access wrong

B. Microsoft Entra Connect

C. Microsoft Entra Verified ID

D. Microsoft Entra External ID right

Explanation:

Correct Answer: D

This question describes that you want your customers to be able to use your web application after getting authenticated from the Azure Active
Directory.

Option A is Incorrect : Azure AD tenant is a container for Azure AD Objects like users, groups & devices

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 14/52
24/11/2023, 17:46 LMS | Whizlabs
Option B is Incorrect : Azure AD connect is used to connect On-prem AD to Azure AD

Option C is Incorrect : Azure B2B is used to invite external Azure AD users to your Azure AD. It helps your company to start collaborating with
other organizations.

Option D is Correct : Azure AD B2C is used when you use Azure AD to authenticate and authorize customers to your application.

Reference:

What is Azure Active Directory B2C? | Microsoft Docs

Ask our Experts

Did you like this Question?

Question 18 Correct

Domain: Describe Azure architecture and services

Which of the following option is True regarding Azure File Sync?

A. Upload/Download files using a physical device

B. Copy blobs or files to or from your storage account using the command line

C. Download/upload files and blobs in your Azure Storage Account using a GUI-based app installed on your local computer

D. Cloud Tiering - most frequently accessed files are replicated locally, while infrequently accessed files are stored in azure right

Explanation:

Correct Answer: D

Azure File Sync is used with a windows server to access your data locally. It uses SMB, NFS, and FTPS protocols

Option A is Incorrect: Azure File sync is not a physical data transfer tool.

Option B is Incorrect: AzCopy is a command line utility used to upload and download files to and from your azure storage account using your
command line. In Azure File sync there is no command to upload/download files.

Option C is Incorrect: Azure Storage Explorer is a GUI-based file transfer utility. Azure File Sync has a GUI ONLY TO REGISTER THE WINDOWS SERVER,
but it does not uses any GUI to upload / download blobs.

Option D is correct: Azure File Sync helps us to configure cloud tiering so the most frequently accessed files are replicated locally, while
infrequently accessed files are kept in the cloud until requested.

Reference:

Identify Azure file movement options - Learn | Microsoft Docs

Ask our Experts

Did you like this Question?

Question 19 Correct

Domain: Describe Azure architecture and services

Your company decides to implement passwordless authentication for an efficient user experience. Being an administrator please identify which of
the following passwordless authentication options DOES NOT INTEGRATE with Azure Active Directory (Azure AD).

A. Windows Hello for Business

B. Microsoft Authenticator app

C. FIDO2 security keys

D. A cryptographic key right

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 15/52
24/11/2023, 17:46 LMS | Whizlabs

Explanation:

Correct Answer: D

Option A is Incorrect: Windows Hello helps the user to use their biometric and PIN credentials to be inserted into your PC/Laptop which will be
used to sign in to the Azure console..

Option B is Incorrect: After installing Microsoft Authenticator App on your phone, users can sign in to any platform or browser by getting a
notification on their phone, matching a number displayed on the screen to the one on their phone.

Option C is incorrect: FIDO2 is the latest standard from the FIDO (Fast IDentity Online) Alliance that incorporates the web authentication
(WebAuthn) standard. It is a physical component that needs to be attached to your device.

Option D is Correct: Passwordless Authentication does not support cryptographic keys. A cryptographic key is a string of data that is used to
lock or unlock cryptographic functions, including authentication, authorization, and encryption

References:

Describe Azure authentication methods - Learn | Microsoft Docs

Azure Active Directory passwordless sign-in - Microsoft Entra | Microsoft Docs

Ask our Experts

Did you like this Question?

Question 20 Correct

Domain: Describe cloud concepts

You have been asked to identify various benefits of the Cloud. Which of the following should you recommend for each requirement?

Your Answers Correct Answers

Scalability Scalability

Ability to adjust resources to meet varying demand

Ability to adjust resources to meet varying demand

Manageability Manageability

Using the web portal, CLI, and/or PowerShell to create and delete
resources in the cloud
Using the web portal, CLI, and/or PowerShell to create and delete resources in the
cloud

Reliability Reliability

The ability of the system to recover from failures and continue to

work
The ability of the system to recover from failures and continue to work

Predictability Predictability

Forecasting the cost of the cloud spend

Forecasting the cost of the cloud spend

Explanation:

Correct Answer:

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 16/52
24/11/2023, 17:46 LMS | Whizlabs

Scalability Ability to adjust resources to meet varying demand

Manageability Using the web portal, CLI, and/or PowerShell to create and
delete resources in the cloud

Reliability The ability of the system to recover from failures and

continue to work.

Predictability Forecasting the cost of the cloud spend

Scalability: The number of users may vary. So, the ability to add the resource capacity when the user load increases and decrease resource
capacity when the user load decreases.

Manageability: We can create, update, delete and list the azure resources by using Azure Portal, Azure CLI, and Azure PowerShell. to manage
your cloud environment and resources.

Reliability: Cloud computing makes data backup, disaster recovery, and business continuity easier and less expensive because data can be
mirrored at multiple redundant sites. So it helps the system to recover from failures and continue to work.

Predictability: With the use of tools like Pricing Calculator, you can Forecast the cost of your cloud spends.

References:

Describe the benefits of high availability and scalability in the cloud - Learn | Microsoft Docs

Describe the benefits of reliability and predictability in the cloud - Learn | Microsoft Docs

Describe the benefits of manageability in the cloud - Learn | Microsoft Docs

https://docs.microsoft.com/en-us/azure/cost-management-billing/understand/plan-manage-costs

Ask our Experts

Did you like this Question?

Question 21 Correct

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 17/52
24/11/2023, 17:46 LMS | Whizlabs

Domain: Describe Azure management and governance

A company has several resources hosted in Azure. They want to have a comprehensive solution for collecting, analyzing, and acting on telemetry
from the Azure cloud. Which of the following service would you use for this requirement?

A. Azure Event Hubs

B. Azure Analysis Services

C. Azure Advisor

D. Azure Monitor right

Explanation:

Correct Answer – D

Azure Monitor delivers a comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments.
Thus it maximizes the availability and performance of your applications and services. It helps you understand how your applications are
performing and proactively identifies issues affecting them and the resources they depend on.

You can use Azure Monitor to collect all the data from various sources, as shown below. You can then perform interactive queries on the stored
logs.

 

Option A is incorrect since this service is a big data streaming platform and event ingestion service.

Option B is incorrect since this is a fully managed platform as a service (PaaS) that provides enterprise-grade data models in the cloud.

Option C is incorrect since this is used as a recommendation engine.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 18/52
24/11/2023, 17:46 LMS | Whizlabs
Reference: Azure Monitor overview - Azure Monitor | Microsoft Learn

Ask our Experts

Did you like this Question?

Question 22 Correct

Domain: Describe Azure architecture and services

A company has a virtual machine called demovm in which a web application is installed. This web application should be accessed over the
Internet using HTTP.

To fulfill the above requirement, you propose a solution to modify the DDoS Protection plan. Does this solution fit the need?

A. Yes

B. No right

Explanation:

Correct Answer – B

Modifying the DDoS Protection plan would be not the correct service for accessing the web application over the Internet using HTTP.

DDoS Protection enables you to protect your Azure resources from Distributed denial of service (DDoS) attacks with always-on monitoring and
automatic network attack mitigation and not allow the traffic into the Virtual machine.

The correct service for the above requirement is Azure App Service.

Azure App Service is an HTTP-based service for hosting web applications, REST APIs, and mobile backends.

References:

Overview - Azure App Service | Microsoft Learn

Azure DDoS Protection Standard Overview | Microsoft Docs

Azure DDoS Protection and Mitigation Services | Microsoft Azure

Ask our Experts

Did you like this Question?

Question 23 Correct

Domain: Describe Azure architecture and services

A company has a virtual machine defined as demovm. This Virtual Machine was created with the standard settings. An application is installed on
demovm. It now needs to be ensured that the application can be accessed over the Internet via HTTP using port ranges and prioritized security
rules using the 5-tuple information.

You make modifications to the Azure firewall.

Would this solution fit the requirement?

A. Yes right

B. No

Explanation:

Answer – A

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 19/52
24/11/2023, 17:46 LMS | Whizlabs
You can configure NAT rules, network rules, and applications rules on Azure Firewall. Rule collections are processed according to the rule type in
priority order, lower numbers to higher numbers from 100 to 65,000. A rule collection name can have only letters, numbers, underscores, periods, or
hyphens. It must begin with a letter or number, and end with a letter, number, or underscore. The maximum name length is 80 characters.

It's best to initially space your rule collection priority numbers in 100 increments (100, 200, 300, and so on) so you have room to add more rule
collections if needed.

https://docs.microsoft.com/en-us/azure/firewall/rule-processing

Ask our Experts

Did you like this Question?

Question 24 Correct

Domain: Describe Azure architecture and services

A company has a virtual machine defined as demovm. This Virtual Machine(VM) was created with the standard settings, then you need to run
containers directly on Azure, without having to manage any virtual machines and without having to adopt a higher-level service.

You proposed a solution to modify the Azure Traffic Manager profile to fulfill the above requirement. Does this solution fit the need?

A. Yes

B. No right

Explanation:

Correct Answer – B

Modifying the Azure Traffic Manager profile is suitable for the question requirement.

The Azure Traffic Manager is a DNS-based traffic load balancer.

The correct service for the above question requirement is Azure Container Instances.

Azure Container Instances (ACI) is a managed service that allows you to run containers directly on Azure, without having to manage any virtual
machines and without having to adopt a higher-level service.

References:

Hosting applications on Azure | Microsoft Learn

Azure Traffic Manager | Microsoft Learn

Ask our Experts

Did you like this Question?

Question 25 Correct

Domain: Describe Azure architecture and services

A company has a virtual machine defined as demovm. This Virtual Machine was created with the standard settings. Now this virtual machine
needs to communicate with other Azure resources outside the Virtual Network and the VNet peering is already in place.

You modify the Network Security Groups.

Would this solution fit the requirement?

A. Yes right

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 20/52
24/11/2023, 17:46 LMS | Whizlabs
B. No

Explanation:

Answer – A

You should change the Network Security group by adding a rule for allowing Inbound Traffic, as shown below.

 

1. Create an Inbound Network Security Rule.

2. Ensure the Service Tag is the Internet.

3. Ensure the destination port range is 80.

4. Ensure the Action is placed as Allow.

For more information on Virtual Network Security, please visit the below URL-

https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

Ask our Experts

Did you like this Question?

Question 26 Correct

Domain: Describe Azure architecture and services

Your company has an on-premise data center (private cloud) and now they are planning to implement a hybrid cloud environment. Which Azure
service do you recommend choosing for the requirements in the answer area?

Your Answers Correct Answers

Azure ExpressRoute Azure ExpressRoute

Migrate Critical workloads from on-premises to the Azure which

requires a bandwidth of 100 Gbps
Migrate Critical workloads from on-premises to the Azure which requires a
bandwidth of 100 Gbps

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 21/52
24/11/2023, 17:46 LMS | Whizlabs

Azure VPN Azure VPN

Connect on-prem network to Azure virtual network and send

encrypted traffic between them
Connect on-prem network to Azure virtual network and send encrypted traffic
between them

Microsoft Entra ID Microsoft Entra ID

Managing users from both on-premises and in the cloud

Managing users from both on-premises and in the cloud

Microsoft Defender for Cloud Microsoft Defender for Cloud

Protect Cloud and On-prem resources and services from security

Vulnerabilities
Protect Cloud and On-prem resources and services from security Vulnerabilities

Explanation:

Correct Answer:

Azure ExpressRoute Migrate Critical workloads from on-prem to

Azure which requires a bandwidth of 100 Gbps

Azure VPN Connect on-prem network to Azure virtual

network and send encrypted traffic between
them.

Azure Active Directory Managing users from both on-premises and

in the cloud

Microsoft Defender for Cloud Protect Cloud and On-prem resources and
services from security Vulnerabilities

Azure ExpressRoute: Connects your on-premise network to Microsoft Cloud Services by using a fast, private connection using Fiber optic
Cables. It provides bandwidth up to 100 Gbps.

Azure VPN: Azure VPN helps you to connect your Azure Virtual Network to any other network (it may be your on-prem network or another cloud
provider’s network) Azure VPN gives a maximum bandwidth of 10 Gbps only.

Azure Active Directory: With Active Directory P1 License, users can access both on-premises and cloud resources.

Microsoft Defender for Cloud: It continually accesses, secures, and defends your Azure, on-premises, and multicloud (Amazon AWS and
Google GCP) resources.

References:

What is hybrid identity with Azure Active Directory? - Microsoft Entra | Microsoft Docs

https://azure.microsoft.com/en-in/services/expressroute/

What is Microsoft Defender for Cloud? - Microsoft Defender for Cloud | Microsoft Docs

About Azure VPN Gateway | Microsoft Docs

Ask our Experts

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 22/52
24/11/2023, 17:46 LMS | Whizlabs

Did you like this Question?

Question 27 Incorrect

Domain: Describe Azure architecture and services

Azure Storage account access tiers manage your data based on how often it is accessed and how long it is stored. Therefore, arrange the storage
access tiers in descending order of their data access time periods. That means the access tier with the maximum number of days comes first,
followed by the second highest and so on.

Your Answer Correct Answer

1. Hot 1. Archive

2. Cool 2. Cool

3. Nearline storage 3. Hot

Explanation:

Correct Answers: C, B and E

Azure Storage account has various access tiers. They are categorized on the basis of how frequently your data will be accessed and how long it will
be retained.

The time periods for various access tiers of Azure Storage Account is

Access Tier Time Period (in days)

Hot Frequent

Cool 30

Archive 180

Hence in descending order of access tiers according to the time period should be

1. Archive

2. Cool

3. Hot

Options A and D are Incorrect: Nearline storage and Coldline are the storage classes (access tiers) in Google Cloud Platform (GCP), not Azure

References:

Hot, Cool, and Archive access tiers for blob data - Azure Storage | Microsoft Docs

https://aws.amazon.com/s3/storage-classes/

https://cloud.google.com/storage/docs/storage-classes

Ask our Experts

Did you like this Question?

Question 28 Incorrect

Domain: Describe Azure management and governance

You need to monitor your workloads in Azure to maximize the availability and performance of your applications running in Azure.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 23/52
24/11/2023, 17:46 LMS | Whizlabs
Your Answers Correct Answers

Azure Monitor Azure Monitor

Monitoring User and session counts for live web apps that are
running in Azure
Azure service to Collect, analyze and visualize logs and metrics collected from Azure
resources, your on-premises resources, and even multi-cloud resources

Log Analytics Log Analytics

Edit and run log queries to perform statistical analysis and visualize
the result
Edit and run log queries to perform statistical analysis and visualize the result

Azure Monitor Alerts Azure Monitor Alerts

Azure service to Collect, analyze and visualize logs and metrics

collected from Azure resources, your on-premises resources, and
Setup an email alert to a specified group of people when the average CPU Utilization
even multi-cloud resources
of VM1 gets more than 80%. Here VM1 is an azure virtual Machine

Application Insights Application Insights

Setup an email alert to a specified group of people when the

average CPU Utilization of VM1 gets more than 80%. Here VM1 is an
azure virtual Machine Monitoring User and session counts for live web apps that are running in Azure

Explanation:

Correct Answer:

Azure service to Collect, analyze and visualize logs and

metrics collected from Azure resources, your on-premises
Azure Monitor resources, and even multi-cloud resources

Edit and run log queries to perform statistical analysis and

Log Analytics visualize the result

Setup an email alert to a specified group of people when the

Azure Monitor average CPU Utilization of VM1 gets more than 80%. Here VM1
Alerts is an azure virtual Machine.

Application Monitoring User and session counts for live web apps that
Insights are running in Azure

Azure Monitor: Azure’s native monitoring service which collects logs and metrics from Azure resources, your on-premises resources, and even
multi-cloud resources

Azure Log Analytics: You can write a simple query that returns a set of records and then use features of Log Analytics to sort, filter, and analyze
the records.

Azure Monitor Alerts: It helps to send automated emails to participants of an action group whenever your specified threshold is crossed. An
Action Group is simply a group of notification recipients (people’s email ID, Mobile number who wish to receive the notification)

Application Insights: It monitors your web applications. Application Insights is capable of monitoring applications running in Azure, on-
premises, or in a different cloud environment. You can monitor a wide range of things like Request rates, response times, failure rates, and User
and session count

References:

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 24/52
24/11/2023, 17:46 LMS | Whizlabs
Azure monitoring services -

Describe Azure Monitor - Learn | Microsoft Docs

Overview of Azure Monitor Alerts - Azure Monitor | Microsoft Docs

https://docs.microsoft.com/en-us/azure/azure-monitor/logs/log-analytics-overview

https://docs.microsoft.com/en-us/azure/azure-monitor/overview

Ask our Experts

Did you like this Question?

Question 29 Incorrect

Domain: Describe Azure management and governance

A company plans to purchase an Azure Support plan. Below is a key requirement for the support plan.

Ensure that for critical business (Severity A) cases, there will be a response within an hour.

The support Plan should be Low-Price.

A recommendation is made to purchase the Standard Support plan.

Would this recommendation fulfill the requirement?

A. Yes right

B. No wrong

Explanation:

Answer – A

Please find the latest support plans that Azure is providing.

 

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 25/52
24/11/2023, 17:46 LMS | Whizlabs
For more information on the support plans, please visit the below URL-

https://azure.microsoft.com/en-us/support/plans/

Ask our Experts

Did you like this Question?

Question 30 Correct

Domain: Describe Azure architecture and services

A company is planning to deploy a web server and database server, as shown in the architecture diagram below. You have to ensure that traffic
restrictions are in place so that the database server can only communicate with the web server.

Which of the following would you recommend for implementing these restrictions?

A. Network Security Groups (NSGs) right

B. Azure Service Bus

C. A Local Network Gateway

D. A Virtual Private Gateway

Explanation:

Answer – A

It would help if you used network security groups to allow or deny traffic within subnets.

Below is what the Microsoft documentation mentions in terms of filtering network traffic.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 26/52
24/11/2023, 17:46 LMS | Whizlabs

 

Option B is incorrect since this is used as a messaging system.

Option C is incorrect since this is used to represent a VPN device in a Site-to-Site VPN connection.

Option D is incorrect since this is normally used to connect networks via the Internet.

Remember, Network Security Group (NSG) and Application Security Group (ASG) are two different things. Please visit the below URL to know about
ASG-

https://docs.microsoft.com/en-us/azure/virtual-network/application-security-groups

For more information on network planning and design, please visit the below URL-

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-vnet-plan-design-arm

Ask our Experts

Did you like this Question?

Question 31 Correct

Domain: Describe Azure management and governance

A company wants to make use of an Azure service in private preview. Are Azure services in private preview available only to a selective portion of
customers?

A. Yes right

B. No

Explanation:

Answer – A

Services in private preview are only available a few customers to take part in early access to new concepts and features.

An example is given below. If you go to the services available in the beta phase and click on “Try it”

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 27/52
24/11/2023, 17:46 LMS | Whizlabs

 

For more information on services in the beta test phase, please visit the below URL-

Preview Terms Of Use | Microsoft Azure

Ask our Experts

Did you like this Question?

Question 32 Correct

Domain: Describe Azure management and governance

A company wants to make use of an Azure service in public preview. Are Azure services in public preview available to all customers?

A. Yes right

B. No

Explanation:

Correct Answer – A

An example is given below. Here there is a preview available for SQL and Service Bus in Azure Monitor.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 28/52
24/11/2023, 17:46 LMS | Whizlabs

 

References

Azure updates | Microsoft Azure

Preview Terms Of Use | Microsoft Azure

Monitor Azure Service Bus with Azure Monitor insights - Azure Service Bus | Microsoft Learn

Monitor your SQL deployments with SQL Insights (preview) - Azure SQL Database | Microsoft Learn

Ask our Experts

Did you like this Question?

Question 33 Correct

Domain: Describe Azure management and governance

A company is planning to set up an Azure account. Can they purchase multiple organization subscriptions using a common Azure AD tenant that
contains the organization's accounts?

A. Yes right

B. No

Explanation:

Correct Answer – A

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 29/52
24/11/2023, 17:46 LMS | Whizlabs
Yes, you can have multiple subscriptions of an organization using a common Azure AD tenant that contains the organization's accounts.

Reference:

Subscriptions, licenses, accounts, and tenants for Microsoft's cloud offerings - Microsoft 365 Enterprise | Microsoft Learn

Ask our Experts

Did you like this Question?

Question 34 Correct

Domain: Describe Azure management and governance

Your company has multiple subscriptions in Azure. The administrators want to transfer billing ownership of the subscriptions to your company's
accounts.

Does your administrator need to contact Microsoft for this activity?

A. Yes

B. No right

Explanation:

Answer – B

Ideally, you would look to transfer subscriptions under one account and manage them centrally. If you go to your subscription, there will be a
Transfer subscription option as shown below.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 30/52
24/11/2023, 17:46 LMS | Whizlabs

For more information on transferring subscriptions please visit the below URL-

https://docs.microsoft.com/en-us/azure/billing/billing-subscription-transfer

Ask our Experts

Did you like this Question?

Question 35 Correct

Domain: Describe Azure management and governance

A company has multiple subscriptions. They want to create resources in different subscriptions. Is it possible to create the same type of Azure
resources in different Azure subscriptions?

A. Yes right

B. No

Explanation:

Answer – A

An example of this is given below. Here we have 2 storage accounts created in one Azure account, under multiple subscriptions.

For more information on Azure resource manager, please visit the below URL-

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-overview

Ask our Experts

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 31/52
24/11/2023, 17:46 LMS | Whizlabs

Did you like this Question?

Question 36 Correct

Domain: Describe Azure management and governance

A company is planning to set up a solution in Azure. The solution would have the following key requirement.

Provide an analytics service for BI and machine learning needs.

Which of the following would be best suited for this requirement?

A. Azure Content Delivery Network

B. Azure Synapse Analytics right

C. Azure Load Balancer

D. Azure Cosmos DB

Explanation:

Answer – B

The Microsoft documentation mentions the following.

For more information on the Azure Synapse service, please visit the below URL-

https://docs.microsoft.com/en-us/azure/sql-data-warehouse/sql-data-warehouse-overview-what-is

Ask our Experts

Did you like this Question?

Question 37 Correct

Domain: Describe Azure architecture and services

A company is planning to set up a solution in Azure. The solution would have the following key requirement.

Provide an efficient way to distribute web content to users across the world.

Which of the following would be best suited for this requirement?

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 32/52
24/11/2023, 17:46 LMS | Whizlabs
A. Azure Content Delivery Network right

B. Azure SQL Datawarehouse

C. Azure Load Balancer

D. Azure HD Insight

Explanation:

Answer – A

The Microsoft documentation mentions the following.

 

Since this is a clear feature of the tool, all other options are incorrect.

For more information on Azure Content Delivery, please visit the below URL-

https://docs.microsoft.com/en-us/azure/cdn/cdn-overview

Ask our Experts

Did you like this Question?

Question 38 Correct

Domain: Describe Azure architecture and services

A company is planning to set up a solution in Azure. The solution would have the following key requirement.

Provide the ability to distribute user traffic to a set of backend Virtual Machines Which of these features satisfies the requirement?

A. Azure Monitor

B. Azure App Service

C. Azure Load Balancer right

D. Azure ExpressRoute

Explanation:

Correct Answer – C

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 33/52
24/11/2023, 17:46 LMS | Whizlabs
Azure Load Balancer operates at layer 4 of the Open Systems Interconnection (OSI) model. It's the single point of contact for clients. Load balancer
distributes inbound flows that arrive at the load balancer's front end to backend pool instances. These flows are according to configured load-
balancing rules and health probes. The backend pool instances can be Azure Virtual Machines or instances in a Virtual Machine Scale Set.

The Microsoft documentation mentions the following.

 

Option A is an incorrect answer: Azure Monitor is a comprehensive monitoring solution for collecting, analyzing, and responding to monitoring data
from your cloud and on-premises environments.

Option B is an incorrect answer: Azure App Service is an HTTP-based service for hosting web applications, REST APIs, and mobile backends.

Option D is an incorrect answer: Azure ExpressRoute allows an organization like Adatum to connect its on-premises networks directly to the
Microsoft Azure and Microsoft 365 clouds.

Reference:

What is Azure Load Balancer? - Azure Load Balancer | Microsoft Learn

Ask our Experts

Did you like this Question?

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 34/52
24/11/2023, 17:46 LMS | Whizlabs

Question 39 Correct

Domain: Describe Azure management and governance

A company is planning to set up a solution in Azure. The solution would have the following key requirement.

Provide a cloud service that makes it easy, fast, and cost-effective to analyze streaming data using open source frameworks like Apache Hadoop.

Which of the following Azure services would meet the criteria?

A. Azure Content Delivery Network

B. Azure Synapse

C. Azure Load Balancer

D. Azure HDInsight right

Explanation:

Answer – D

The Microsoft documentation mentions the following.

Since this is a clear feature of the tool, all other options are incorrect.

For more information on Azure HDInsight, please visit the below URL-

https://docs.microsoft.com/en-us/azure/hdinsight/

Ask our Experts

Did you like this Question?

Question 40 Incorrect

Domain: Describe Azure management and governance

Identify the appropriate management tool for the requirements given in the answer area.

Your Answers Correct Answers

Azure Portal Azure Portal

Watching a pictorial representation of actual Azure spent and

forecasted cost in Cost Management and Billing Tab
Watching a pictorial representation of actual Azure spent and forecasted cost in
Cost Management and Billing Tab

Azure CLI Azure CLI

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 35/52
24/11/2023, 17:46 LMS | Whizlabs

Use the New-AzResourceGroup cmdlet to create an Azure resource

group
Use az vm create command to create an Azure Virtual Machine

Azure Powershell Azure Powershell

Use az vm create command to create an Azure Virtual Machine

Use the New-AzResourceGroup cmdlet to create an Azure resource group

Azure Resource Manager (ARM) Template Azure Resource Manager (ARM) Template

Create a series of the dependable resource by using azure’s native

Infrastructure as Code tool
Create a series of the dependable resource by using azure’s native Infrastructure as
Code tool

Explanation:

Correct Answer:

Azure Portal Watching a pictorial representation of actual Azure

spent and forecasted cost in Cost Management and
Billing Tab

Azure CLI Use az vm create command to create an Azure Virtual

Machine

Azure Powershell Use the New-AzResourceGroup cmdlet to create an

Azure resource group

Azure Resource Create a series of the dependable resource by using

Manager (ARM) azure’s native Infrastructure as Code tool
Template

Azure Portal: Azure portal is a web-based, unified console that provides an alternative to command-line tools. With the Azure portal, you can
manage your Azure subscription by using a graphical user interface. You can:

Build, manage, and monitor everything from simple web apps to complex cloud deployments

Create custom dashboards for an organized view of resources

Configure accessibility options for an optimal experience

Screenshot of Azure Cost Management and Billing Tab`

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 36/52
24/11/2023, 17:46 LMS | Whizlabs

Image Source: https://docs.microsoft.com/en-us/azure/cost-management-billing/understand/plan-manage-costs

Azure CLI: It can be installed locally on Windows, Linux, and Mac platforms. It helps to manage azure resources via the command line. Every
Azure CLI command begins with “az”

Azure Powershell: Azure PowerShell is a set of commands called command-lets (cmdlets) for managing Azure resources directly from
PowerShell

Azure Resource Manager (ARM) Template: These templates are written in JSON which helps you to Create a series of the dependable resource
by using azure’s native Infrastructure as Code tool

References:

New-AzResourceGroup (Az.Resources) | Microsoft Docs

az vm | Microsoft Docs

What is the Azure CLI? | Microsoft Docs

ARM template frequently asked questions | Microsoft Docs

Ask our Experts

Did you like this Question?

Question 41 Correct

Domain: Describe cloud concepts

A company is planning to use Azure Cloud for hosting resources. Which of the following is a key advantage of hosting resources in the Azure public
cloud?

A. All users across the world can access the resources in your Azure account.

B. High reliability - a vast network of servers ensures against failure right

C. Only privileged users can have access to resources in your Azure account.

D. You pay a capital upfront cost when using resources in the public cloud.

Explanation:

Correct Answer: B

What is a public cloud?

Public clouds are the most common way of deploying cloud computing. The cloud resources (like servers and storage) are owned and operated
by a third-party cloud service provider and delivered over the Internet. Microsoft Azure is an example of a public cloud. With a public cloud, all
hardware, software and other supporting infrastructure are owned and managed by the cloud provider. In a public cloud, you share the same
hardware, storage and network devices with other organizations or cloud “tenants.” You access services and manage your account using a web

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 37/52
24/11/2023, 17:46 LMS | Whizlabs
browser. Public cloud deployments are frequently used to provide web-based email, online office applications, storage and testing and
development environments.

Advantages of public clouds:

Lower costs—no need to purchase hardware or software and you pay only for the service you use.

No maintenance—your service provider provides the maintenance.

Near-unlimited scalability—on-demand resources are available to meet your business needs.

High reliability—a vast network of servers ensures against failure.

Reference URL-
https://azure.microsoft.com/en-in/overview/what-are-private-public-hybrid-clouds/

Ask our Experts

Did you like this Question?

Question 42 Correct

Domain: Describe Azure management and governance

A company needs to deploy several identical virtual machines. Each of these virtual machines will have the same set of permissions. To minimize
the administrative overhead, where would you deploy the Azure Virtual Machines?

A. Azure policies

B. Azure Virtual Machine Scale sets

C. Azure Resource Groups right

D. Azure Tags

Explanation:

Answer – C

When you deploy a resource to a resource group with a set of permissions defined, the resource will inherit the permissions assigned to the
resource group. An example is shown below.

1. An example is shown below where a resource group has a permission defined.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 38/52
24/11/2023, 17:46 LMS | Whizlabs

1. And there is a resource defined in the resource group.

1. If you go to the Access Control section of the resource, you will see that the permissions are inherited from the resource group.

For more information on role-based access control, please visit the below URL-

https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal

Ask our Experts

Did you like this Question?

Question 43 Correct

Domain: Describe cloud concepts

An application consists of a set of virtual machines hosted in a Virtual Network. In a month, the application seems to have a load of around 20% for
3 weeks. During the last week, the load on the application reaches 80%. Which of the following benefits of Azure Cloud would ensure the underlying

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 39/52
24/11/2023, 17:46 LMS | Whizlabs
application infrastructure's cost and efficiency?
A. High availability

B. Elasticity right

C. Disaster recovery

D. Fault tolerance

Explanation:

Answer – B

Here the concept refers to Elasticity.

In this use case, you could define a Virtual Machine Scale set in Azure.

You could define an initial set of Virtual Machines as part of the scale set that would run for the first 3 weeks.

You can then add a scaling policy to add more Virtual Machines to support the application during the last week.

You can then add a scaling policy to remove the extra Virtual Machines at the end of last week to save on costs.

All other options are incorrect since they all refer to the availability of the infrastructure.

For more information on Virtual Machine scale sets, please visit the below URL-

https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/overview

Ask our Experts

Did you like this Question?

Question 44 Incorrect

Domain: Describe Azure architecture and services

A company wants to start using Azure. They want to use availability zones in Azure. Which of the following is attached to the concept of availability
zones in Azure?

A. Region failure wrong

B. Resource failure

C. Data Center failure right

D. Azure failure

Explanation:

Answer – C

The Microsoft documentation mentions the following.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 40/52
24/11/2023, 17:46 LMS | Whizlabs

 

Since this is clearly mentioned in the Microsoft documentation, all other options are incorrect.

For more information on availability zones, please visit the below URL-

https://docs.microsoft.com/en-us/azure/availability-zones/az-overview

Ask our Experts

Did you like this Question?

Question 45 Correct

Domain: Describe Azure architecture and services

A company wants to start using Azure with availability zones. If they have resources deployed across all regions in Azure, can they implement
availability zones in all regions?

A. Yes

B. No right

Explanation:

Answer – B

Currently, availability zones are not available in all regions. You need to check first on the availability of zones in a region.

Below is the snapshot from the Microsoft documentation.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 41/52
24/11/2023, 17:46 LMS | Whizlabs

For more information on availability zones, please visit the below URL-

https://docs.microsoft.com/en-us/azure/availability-zones/az-overview

Ask our Experts

Did you like this Question?

Question 46 Correct

Domain: Describe Azure management and governance

A company is planning to create resources for different departments in Azure. They want to ensure that they get the bills based on different
departments. Which of the following should you consider implementing for this requirement?

A. Azure locks

B. Azure tags right

C. Azure Monitor

D. Azure Advisor

Explanation:

Answer – B

The Microsoft documentation mentions the following.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 42/52
24/11/2023, 17:46 LMS | Whizlabs
An example is given below. Below is a resource being tagged. A department name and value are used as the tag.

Then in cost analysis, you can segregate costs based on tags.

Here each department is given a tag which allows knowing how much resource used by them and accordingly they are charged which leads to
the generation of separate bills for respective departments.

For better understanding please refer to the below reference link.

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags

Option A is incorrect since this is used to ensure that resources don’t get accidentally deleted.

Option C is incorrect since this is used to monitor resources.

Option D is incorrect since this is used for providing recommendations in Azure.

For more information on using tags, please visit the below URL-https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-
using-tags

Ask our Experts

Did you like this Question?

Question 47 Correct

Domain: Describe Azure management and governance

A company needs to create a set of resources in Azure. They have a requirement that IT Administrators must create resources only in a certain
region. Which of the following can help achieve this?

A. Azure Tags

B. Azure Policies right

C. Azure Resource Groups

D. Azure Locks

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 43/52
24/11/2023, 17:46 LMS | Whizlabs

Explanation:

Answer – B

You can use Azure policy for the governance of your resources. An example policy on this line is shown below.

Option A is incorrect since this is used for management and billing purpose.

Option C is incorrect since this is used to group resources.

Option D is incorrect since this is used to ensure that resources don’t get accidentally deleted.

For more information on Azure policies, please visit the below URL-

https://docs.microsoft.com/en-us/azure/governance/policy/overview

Ask our Experts

Did you like this Question?

Question 48 Correct

Domain: Describe cloud concepts

"Azure Functions" service falls into which of the following category?

A. Infrastructure as a service (IaaS)

B. Platform as a service (PaaS) right

C. Software as a service (SaaS)

D. Function as a service (FaaS)

Explanation:

Correct Answer – B

Azure Functions is a serverless Platform-as-a-Service (PaaS) in Azure that runs small, single-task code without requiring new infrastructure to
be spun up.

Azure Functions is an event-driven, serverless compute platform that helps you develop more efficiently using the programming language of your
choice. Focus on core business logic with the highest level of hardware abstraction. Simplify complex orchestration challenges, build and debug

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 44/52
24/11/2023, 17:46 LMS | Whizlabs
locally, deploy at scale in the cloud, and connect functions to Azure services using triggers and bindings.

References:

Azure Functions in a hybrid environment - Azure Architecture Center | Microsoft Learn

Azure Functions – Serverless Functions in Computing | Microsoft Azure

Ask our Experts

Did you like this Question?

Question 49 Correct

Domain: Describe Azure architecture and services

A company wants to host an application in Azure. The application connects to a database in Azure. The company would like to store the database
password in a secure location.

You recommend the usage of the Azure key vault for the storage of the password.

Would this fulfill the requirement?

A. Yes right

B. No

Explanation:

Answer – A

Yes, this is the right tool to use. Below is what the Microsoft documentation states about this service.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 45/52
24/11/2023, 17:46 LMS | Whizlabs

 

For more information on the Azure Key vault, please visit the below URL-
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-whatis

Ask our Experts

Did you like this Question?

Question 50 Correct

Domain: Describe Azure architecture and services

A company wants to host an application on Azure. The application connects to a database in Azure. The company wants to store the database
password in a secure location.

We recommend that you use Microsoft Defender for the Cloud for password storage. Does it meet the need?

A. Yes

B. No right

Explanation:

Answer – B

Microsoft Defender for Cloud provides unified security management and advanced threat protection across hybrid cloud workloads.

Defender for the Cloud is a monitoring tool for security posture management and threat protection. It monitors your cloud, on-premises, hybrid
and multicloud environments and provides guidance and notifications aimed at strengthening your security posture.

This is used more of a protective layer for your resources in Azure. Below is what the Microsoft documentation states about this service.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 46/52
24/11/2023, 17:46 LMS | Whizlabs

References:

Describe Microsoft Defender for Cloud - Training | Microsoft Learn

What is Microsoft Defender for Cloud? - Microsoft Defender for Cloud | Microsoft Learn

Ask our Experts

Did you like this Question?

Question 51 Correct

Domain: Describe Azure management and governance

A company wants to host an application in Azure. The application connects to a database in Azure. The company wants to store the database
password in a secure location.

You recommend the usage of the Azure Advisor for the storage of the password.

Would this fulfill the requirement?

A. Yes

B. No right

Explanation:

Answer – B

This is a recommendation tool. Below is what the Microsoft documentation states about this service.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 47/52
24/11/2023, 17:46 LMS | Whizlabs

 

For more information on the Azure Advisor, please visit the below URL-
https://docs.microsoft.com/en-us/azure/advisor/advisor-overview

Ask our Experts

Did you like this Question?

Question 52 Correct

Domain: Describe Azure architecture and services

A company needs to connect its on-premises data center to an Azure Virtual Network using a Site-to-Site connection. Which of the following would
you create as part of this implementation?

A. Virtual Network

B. Load Balancer

C. Application Gateway

D. Virtual Network Gateway right

Explanation:

Answer – D

The Microsoft documentation mentions the following.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 48/52
24/11/2023, 17:46 LMS | Whizlabs

 

Option A is incorrect since this is used to create a network in Azure.

Options B and C are incorrect since this is used to divert traffic to backend Virtual Machines.

For more information on the Virtual Private gateway, please visit the below URL-

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways

Ask our Experts

Did you like this Question?

Question 53 Correct

Domain: Describe cloud concepts

A company is planning to set up a private cloud network. Which of the following is an advantage of setting up a private cloud network?

A. A Private Cloud environment can only support an Infrastructure as a service model.

B. A Private Cloud environment can only support a Platform as a service model.

C. The Private Cloud environment can be rolled out to the general public.

D. The Private Cloud environment has a higher level of security and privacy. right

Explanation:

Answer - D

The Microsoft documentation mentions the following.

Since this is clearly mentioned, all other options are incorrect.

For more information on the private cloud network, please visit the below URL-

https://azure.microsoft.com/en-us/overview/what-is-a-private-cloud/

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 49/52
24/11/2023, 17:46 LMS | Whizlabs

Ask our Experts

Did you like this Question?

Question 54 Correct

Domain: Describe Azure architecture and services

A company wants to set up resources in Azure. They want a way to manage identities in Azure. Which of the following is used as an Identity
Management solution in Azure?

A. Microsoft Entra ID right

B. Azure Advisor

C. Microsoft Defender for Cloud

D. Azure Monitor

Explanation:

Answer – A

Azure AD is Azure's cloud-based identity and access management service.

Option B is incorrect since this is used to provide recommendations.

Option C is incorrect since this is used to protect resources in Azure.

Option D is incorrect since this is used to monitor resources in Azure.

Reference:

What is Azure Active Directory? - Microsoft Entra | Microsoft Learn

Ask our Experts

Did you like this Question?

Question 55 Incorrect

Domain: Describe Azure management and governance

You are planning to set up an Azure Free Account.

Which of the following are correct with respect to the Azure Free Account?

Drag the correct options from the Action area and drop them to the answer area.

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 50/52
24/11/2023, 17:46 LMS | Whizlabs
Your Answer Correct Answer

Getting started is free. You will not be charged unless you You cannot use Azure Hybrid Benefit within the Azure free
decide to go for the price you pay. account.

Access to popular Azure products is free after the 12 Getting started is free. You will not be charged unless you
months expiration period decide to go for the price you pay.

Get access to 55+ products always free. Get access to 55+ products always free.

Explanation:

Correct Answers:

Get access to 55+ products always free.

You cannot use Azure Hybrid Benefit within the Azure free account.

Getting started is free. You won't be charged anything unless you decide to move to pay-as-you-go pricing.

 

References:

Azure Free Account FAQ | Microsoft Azure

Create Your Azure Free Account Today | Microsoft Azure

Ask our Experts

Did you like this Question?

Finish Review

Hands-on Labs Sandbox Pricing For Business Library

Categories Popular Courses Company

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 51/52
24/11/2023, 17:46 LMS | Whizlabs
Cloud Computing Certifications AWS Certified Solutions Architect A… About Us
Amazon Web Services (AWS) AWS Certified Cloud Practitioner Blog
Microsoft Azure Microsoft Azure Exam AZ-204 Certif… Reviews
Google Cloud Microsoft Azure Exam AZ-900 Certi… Careers
DevOps Google Cloud Certified Associate … Become an Affiliate
Cyber Security Microsoft Power Platform Fundam… Become Our Instructor
Microsoft Power Platform HashiCorp Certified Terraform Ass… Team Account
Microsoft 365 Certifications Snowflake SnowPro Core Certificat… AWS Consulting Services
Java Certifications Docker Certified Associate

Legal Support

Privacy Policy Contact Us

Terms of Use Discussions
EULA FAQs
Refund Policy
Programs Guarantee

Need help? Please or +91 6364678444

©2023, Whizlabs Software Pvt. Ltd. All rights reserved. c d 

https://www.whizlabs.com/learn/course/microsoft-azure-certification-az-900/256/quiz/14910/report/7658165 52/52