Az 900
Az 900
Question 1 of 50
Which two characteristics are common advantages of cloud computing? Each correct
answer presents a complete solution.
Your Answer
geo-distribution
This answer is correct.
high availability
This answer is correct.
Correct Answer
geo-distribution
This answer is correct.
high availability
This answer is correct.
Correct Answer
You are only billed for what you use.
This answer is correct.
Renting compute and storage services and being billed for only what you use often
lowers operating expenses. Depending on the service and the type of network
bandwidth, charges can be incurred. Cloud service offerings often provide
functionality that can be difficult or cost-prohibitive to deploy on-premises,
especially for smaller organizations. Major cloud providers offer services around the
world. Making it easy and relatively inexpensive to deploy services close to where
your users reside.
Describe cloud computing - Training | Microsoft Learn
Question 3 of 50
Select the answer that correctly completes the sentence.
[Answer choice] refers to upfront costs incurred one time, such as hardware
purchases.
Your Answer
A consumption-based model
This answer is incorrect.
Correct Answer
Capital expenditures
This answer is correct.
Capital expenditures are one-time expenses that can be deducted over time.
Operational expenditures are billed as you use services and a do not have upfront
costs.
Describe cloud computing - Training | Microsoft Learn
Question 4 of 50
Which cloud deployment model are you using if you have servers physically located
at your organization’s on-site datacenter, and you migrate a few of the servers to the
cloud?
Your Answer
hybrid cloud
This answer is correct.
Correct Answer
hybrid cloud
This answer is correct.
Correct Answer
vertical scaling
This answer is correct.
You scale vertically to increase compute capacity by adding RAM or CPUs to a virtual
machine. Scaling horizontally increases compute capacity by adding instances of
resources, such as adding virtual machines to the configuration. Disaster recovery
keeps data and other assets safe in the event of a disaster. High availability
minimizes downtime when things go wrong.
Describe the benefits of using cloud services - Training | Microsoft Learn
Question 6 of 50
Select the answer that correctly completes the sentence.
Deploying and configuring cloud-based resources quickly as business requirements
change is called [answer choice].
Your Answer
agility
This answer is correct.
Correct Answer
agility
This answer is correct.
Agility means that you can deploy and configure cloud-based resources quickly as
app requirements change. Scalability means that you can add RAM, CPU, or entire
virtual machines to a configuration. Elasticity means that you can configure cloud-
based apps to take advantage of autoscaling, so apps always have the resources they
need. High availability means that cloud-based apps can provide a continuous user
experience with no apparent downtime, even when things go wrong.
Describe the benefits of using cloud services - Training | Microsoft Learn
Question 7 of 50
What are cloud-based backup services, data replication, and geo-distribution
features of?
Your Answer
a disaster recovery plan
This answer is correct.
Correct Answer
a disaster recovery plan
This answer is correct.
Disaster recovery uses services, such as cloud-based backup, data replication, and
geo-distribution, to keep data and code safe in the event of a disaster.
Describe the benefits of using cloud services - Training | Microsoft Learn
Question 8 of 50
What is high availability in a public cloud environment dependent on?
Your Answer
the vertical scalability of an app
This answer is incorrect.
Correct Answer
the service-level agreement (SLA) that you choose
This answer is correct.
Different services have different SLAs. Sometimes different tiers of the same service
will offer different SLAs, which can increase or decrease the promised availability.
Describe the benefits of using cloud services - Training | Microsoft Learn
Question 9 of 50
Select the answer that correctly completes the sentence.
Increasing the capacity of an application by adding additional virtual machine is
called [answer choice].
Your Answer
vertical scaling
This answer is incorrect.
Correct Answer
horizontal scaling
This answer is correct.
Correct Answer
operating system
This answer is correct.
physical network
This answer is correct.
In PaaS, the cloud provider is responsible for the operating system, physical
datacenter, physical hosts, and physical network. In PaaS, the customer is responsible
for accounts and identities.
Describe cloud service types - Training | Microsoft Learn
Question 11 of 50
Which type of cloud service model is typically licensed through a monthly or annual
subscription?
Your Answer
software as a service (SaaS)
This answer is correct.
Correct Answer
software as a service (SaaS)
This answer is correct.
SaaS is software that is centrally hosted and managed for you and your users or
customers. Usually, one version of the application is used for all customers, and it is
licensed through a monthly or annual subscription. PaaS and IaaS use a
consumption-based model, so you only pay for what you use.
Describe cloud service types - Training | Microsoft Learn
Question 12 of 50
What is the customer responsible for in a software as a service (SaaS) model?
Your Answer
data and access
This answer is correct.
Correct Answer
data and access
This answer is correct.
Correct Answer
platform as a service (PaaS)
This answer is correct.
Azure Virtual Machines is an IaaS offering. The customer is responsible for the
configuration of the virtual machine as well as all operating system configurations.
Azure App Services and Azure Cosmos DB are PaaS offerings. Microsoft Office 365 is
a SaaS offering.
Describe cloud service types - Training | Microsoft Learn
Question 15 of 50
Which two components are created in an Azure subscription? Each correct answer
presents a complete solution.
Your Answer
resource groups
This answer is correct.
resources
This answer is correct.
Correct Answer
resource groups
This answer is correct.
resources
This answer is correct.
Correct Answer
a resource
This answer is correct.
Correct Answer
Azure Resource Manager (ARM)
This answer is correct.
Correct Answer
Azure Virtual Machine Scale Sets
This answer is correct.
Virtual Machine Scale Sets are an Azure compute resource that you can use to
deploy and manage and scale a set of identical virtual machines.
Describe Azure compute and networking services - Training | Microsoft Learn
Question 19 of 50
What can you use to execute code in a serverless environment?
Your Answer
Azure Functions
This answer is correct.
Correct Answer
Azure Functions
This answer is correct.
Azure Functions allows you to run code as a service without having to manage the
underlying platform or infrastructure. Azure Logic Apps is similar to Azure Functions,
but uses predefined workflows instead of developing your own code.
Describe Azure compute and networking services - Training | Microsoft Learn
Question 20 of 50
Which scenario is a use case for a VPN gateway?
Your Answer
connecting an on-premises datacenter to an Azure virtual network
This answer is correct.
Correct Answer
connecting an on-premises datacenter to an Azure virtual network
This answer is correct.
A VPN gateway is a type of virtual network gateway. Azure VPN Gateway instances
are deployed to a dedicated subnet of a virtual network. You can use them to
connect on-premises datacenters to virtual networks through a Site-to-Site (S2S)
VPN connection.
Describe Azure compute and networking services - Training | Microsoft Learn
Question 21 of 50
You need to allow resources on two different Azure virtual networks to communicate
with each other.
What should you configure?
Your Answer
a network security group (NSG)
This answer is incorrect.
Correct Answer
peering
This answer is correct.
You can link virtual networks together by using virtual network peering. Peering
enables resources in each virtual network to communicate with each other.
Describe Azure compute and networking services - Training | Microsoft Learn
Question 22 of 50
Which two services can you use to establish network connectivity between an on-
premises network and Azure resources? Each correct answer presents a complete
solution.
Your Answer
Azure Firewall
This answer is incorrect.
Correct Answer
Azure VPN Gateway
This answer is correct.
ExpressRoute
This answer is correct.
ExpressRoute connections and Azure VPN Gateway are two services that you can use
to connect an on-premises network to Azure. Bastion provides a web interface to
remotely administer Azure virtual machines by using SSH/RDP. Azure Firewall is a
stateful firewall service used to protect virtual networks.
Azure ExpressRoute: Connectivity models | Microsoft Learn
Describe Azure compute and networking services - Training | Microsoft Learn
Question 23 of 50
What are two services that allow you to run applications in containers? Each correct
answer presents a complete solution.
Your Answer
Azure Functions
This answer is incorrect.
Correct Answer
Azure Container Instances
This answer is correct.
Correct Answer
Archive
This answer is correct.
The Archive storage tier stores data offline and offers the lowest storage costs, but
also the highest costs to rehydrate and access data. The Hot storage tier is optimized
for storing data that is accessed frequently. Data in the Cool access tier can tolerate
slightly lower availability, but still requires high durability, retrieval latency, and
throughput characteristics similar to hot data.
Describe Azure storage services - Training | Microsoft Learn
Question 25 of 50
Which storage service offers fully managed file shares in the cloud that are accessible
by using Server Message Block (SMB) protocol?
Your Answer
Azure Files
This answer is correct.
Correct Answer
Azure Files
This answer is correct.
Azure Files offers fully managed file shares in the cloud with shares that are
accessible by using Server Message Block (SMB) protocol. Mounting Azure file shares
is just like connecting to shares on a local network.
Describe Azure storage services - Training | Microsoft Learn
Question 26 of 50
Which Azure Blob storage service tier has the highest storage costs and the fastest
access times for reading and writing data?
Your Answer
Hot
This answer is correct.
Correct Answer
Hot
This answer is correct.
The Hot tier is optimized for storing data that is accessed frequently. The Cool access
tier has a slightly lower availability SLA and higher access costs compared to hot
data, which are acceptable trade-offs for lower storage costs. Archive storage stores
data offline and offers the lowest storage costs, but also the highest costs to
rehydrate and access data.
Describe Azure storage services - Training | Microsoft Learn
Question 27 of 50
Which two protocols are used to access Azure file shares? Each correct answer
presents a complete solution.
Your Answer
Network File System (NFS)
This answer is correct.
Correct Answer
Network File System (NFS)
This answer is correct.
Azure Files offers fully managed file shares in the cloud that are accessible via
industry-standard SMB and NFS protocols.
Describe Azure storage services - Training | Microsoft Learn
Question 28 of 50
What can you use to ensure that a user can only access applications from compliant
devices?
Your Answer
multi-factor authentication (MFA)
This answer is incorrect.
Correct Answer
Conditional Access
This answer is correct.
Conditional Access is a tool that Azure AD uses to allow or deny access to resources
based on identity signals, such as the device being used. SSO enables a user to sign
in one time and use that credential to access multiple resources and applications
from different providers. MFA is a process whereby a user is prompted during the
sign-in process for an additional form of identification. Hybrid identity solutions
create a common user identity for authentication and authorization to all resources,
regardless of location.
Describe Azure identity, access, and security - Training | Microsoft Learn
Question 29 of 50
What can you use to allow a user to manage all the resources in a resource group?
Your Answer
Azure role-based access control (RBAC)
This answer is correct.
Correct Answer
Azure role-based access control (RBAC)
This answer is correct.
Azure RBAC allows you to assign a set of permissions to a user or group. Resource
tags are used to locate and act on resources associated with specific workloads,
environments, business units, and owners. Resource locks prevent the accidental
change or deletion of a resource. Key Vault is a centralized cloud service for storing
an application secrets in a single, central location.
Describe Azure identity, access, and security - Training | Microsoft Learn
Question 30 of 50
Which type of strategy uses a series of mechanisms to slow the advancement of an
attack that aims to gain unauthorized access to data?
Your Answer
distributed denial-of-service (DDoS)
This answer is incorrect.
Correct Answer
defense in depth
This answer is correct.
A defense in depth strategy uses a series of mechanisms to slow the advancement of
an attack that aims to gain unauthorized access to data. The principle of least
privilege means restricting access to information to only the level that users need to
perform their work. A DDoS attack attempts to overwhelm and exhaust an
application's resources. The perimeter layer is about protecting an organization's
resources from network-based attacks.
Describe Azure identity, access, and security - Training | Microsoft Learn
Question 31 of 50
Which two services are provided by Azure AD? Each correct answer presents a
complete solution.
Your Answer
authentication
This answer is correct.
Correct Answer
authentication
This answer is correct.
Azure AD provides services for verifying identity and access to applications and
resources. SSO enables you to remember a single username and password to access
multiple applications and is available in Azure AD.
Describe Azure identity, access, and security - Training | Microsoft Learn
Question 32 of 50
What Azure AD feature can you use to ensure that users can only access Microsoft
Office 365 applications from approved client applications?
Your Answer
single sign-on (SSO)
This answer is incorrect.
Correct Answer
Conditional Access
This answer is correct.
Correct Answer
Azure AD Connect
This answer is correct.
resource location
This answer is correct.
resource usage
This answer is correct.
Correct Answer
resource location
This answer is correct.
resource usage
This answer is correct.
Usage meters, such as CPU time, disk size, and write operations, are used to calculate
your bill for an Azure resource. Deleting or deallocating a resource means that you
will no longer be billed for it. Different regions can have different associated prices.
Resources cost the same no matter the time of day or the day of the week.
Describe cost management in Azure - Training | Microsoft Learn
Question 35 of 50
You need to compare the costs of running an application in an on-premises
datacenter with the costs of running the application in Azure.
What should you use to assist you?
Your Answer
Azure Pricing calculator
This answer is incorrect.
Correct Answer
Total Cost of Ownership (TCO) Calculator
This answer is correct.
The TCO Calculator helps you estimate the cost savings over time of operating a
solution in Azure compared to operating in an on-premises datacenter.
Describe cost management in Azure - Training | Microsoft Learn
Question 36 of 50
Which two scenarios are common billing use cases for resource tags? Each correct
answer presents a complete solution.
Your Answer
categorizing costs by department
This answer is correct.
Correct Answer
associating costs with different environments
This answer is correct.
You can use tags to categorize costs by department, such as human resources,
marketing, or finance, or by environment, such as test or production. Resizing
underutilized virtual machines is a good cost saving measure and provisioning
resources in lower cost regions is a good practice, but resource tags do not help with
this.
Describe cost management in Azure - Training | Microsoft Learn
Question 37 of 50
You plan to build a new solution in Azure that will use platform as a service (PaaS)
products.
What should you use to estimate the monthly costs?
Your Answer
Azure Pricing calculator
This answer is correct.
Correct Answer
Azure Pricing calculator
This answer is correct.
The Azure Pricing calculator allows you to estimate and configure according to your
specific requirements. You will then receive a consolidated estimated price and a
detailed breakdown of the costs associated with each resource you added to your
solution.
Describe cost management in Azure - Training | Microsoft Learn
Question 38 of 50
You need to associate the costs of resources to different groups within an
organization without changing the location of the resources.
What should you use?
Your Answer
resource groups
This answer is incorrect.
Correct Answer
resource tags
This answer is correct.
Resource tags can be used to group billing data and categorize costs by runtime
environment, such as billing usage for virtual machines running in a production
environment.
Tag resources, resource groups, and subscriptions for logical organization - Azure
Resource Manager | Microsoft Learn
Describe the purpose of tags - Training | Microsoft Learn
Question 39 of 50
Your organization plans to deploy several production virtual machines that will have
consistent resource usage throughout the year.
What can you use to minimize the costs of the virtual machines without reducing the
functionality of the virtual machines?
Your Answer
Azure Monitor alerts
This answer is incorrect.
Correct Answer
Azure Reservations
This answer is correct.
Azure Policy is a service in Azure that enables you to create, assign, and manage
policies that control or audit resources. These policies enforce different rules across
all resource configurations so that the configurations stay compliant with corporate
standards.
Describe features and tools in Azure for governance and compliance - Training |
Microsoft Learn
Question 41 of 50
You need to recommend a solution for Azure virtual machine deployments. The
solution must enforce company standards on the virtual machines.
What should you include in the recommendation?
Your Answer
Azure Policy
This answer is correct.
Correct Answer
Azure Policy
This answer is correct.
Azure policies will allow you to enforce company standards on new virtual machines
when combined with Azure VM Image Builder and Azure Compute Gallery. By using
Azure Policy and role-based access control (RBAC) assignments, enterprises can
enforce standards on Azure resources. But on virtual machines, these mechanisms
only affect the control plane or the route to the virtual machine.
Describe features and tools in Azure for governance and compliance - Training |
Microsoft Learn
Question 42 of 50
You need to ensure that multi-factor authentication (MFA) is enabled on accounts
with write permissions in an Azure subscription.
What should you implement?
Your Answer
Azure Policy
This answer is correct.
Correct Answer
Azure Policy
This answer is correct.
Azure Policy is a service in Azure that enables you to create, assign, and manage
policies that control or audit resources.
Describe features and tools in Azure for governance and compliance - Training |
Microsoft Learn
Question 43 of 50
What can you use to define the resources you want to provision in a declarative
JSON format?
Your Answer
Azure Resource Manager (ARM) templates
This answer is correct.
Correct Answer
Azure Resource Manager (ARM) templates
This answer is correct.
By using ARM templates, you can describe the resources you want to use in a
declarative JSON format.
Describe features and tools for managing and deploying Azure resources - Training |
Microsoft Learn
Question 44 of 50
What should you use to access Azure Cloud Shell?
Your Answer
the command-line on a local computer
This answer is incorrect.
Correct Answer
a web browser
This answer is correct.
Correct Answer
Azure Resource Manager (ARM) templates
This answer is correct.
Correct Answer
Azure Advisor
This answer is correct.
Correct Answer
Azure Monitor
This answer is correct.
Azure Monitor is a platform that collects metric and logging data, such as CPU
percentages. The data can be used to trigger autoscaling.
Describe monitoring tools in Azure - Training | Microsoft Learn
Question 48 of 50
What can you use to automatically detect performance anomalies for web apps?
Your Answer
Azure Application Insights
This answer is correct.
Correct Answer
Azure Application Insights
This answer is correct.
Application Insights is a feature of Azure Monitor that allows you to monitor running
applications, automatically detect performance anomalies, and use built-in analytics
tools to see what users do on an app.
Describe monitoring tools in Azure - Training | Microsoft Learn
Question 49 of 50
Which Azure service can generate an alert if virtual machine utilization is over 80%
for five minutes?
Your Answer
Azure Service Health
This answer is incorrect.
Correct Answer
Azure Monitor
This answer is correct.
Azure Monitor is a platform for collecting, analyzing, visualizing, and alerting based
on metrics. Azure Monitor can log data from an entire Azure and on-premises
environment.
Describe monitoring tools in Azure - Training | Microsoft Learn
Question 50 of 50
What can you use to find information about planned maintenance for Azure services
that are critical to your organization?
Your Answer
Azure Service Health
This answer is correct.
Correct Answer
Azure Service Health
This answer is correct.
You can drill down to the affected services, regions, and details to show how an
event will affect you and what you must do. Most of these events occur without any
impact to you and will not be shown. In a rare case that a reboot is required, Service
Health allows you to choose when to perform the maintenance to minimize the
downtime
Describe monitoring tools in Azure - Training | Microsoft Learn
Skip to main content