/118
62877

AZ-900 Azure Fundamentals

This practice exam is designed to assess your readiness for the AZ-900 Azure Fundamentals exam. The AZ-900 exam is an opportunity to prove knowledge of cloud concepts, Azure services, Azure workloads, security and privacy in Azure, as well as Azure pricing and support.

1 / 118

What is the standard lifecycle for Azure services released by Microsoft?

2 / 118

Are Azure services in Public Preview available in all Azure regions?

3 / 118

To transition a large capital expenditure (CapEx) to an operational expenditure (OpEx), Contoso's CIO has suggested to the board that the organization move their virtual machine (IaaS) workloads to Azure. The CFO argues that this will result in unpredictable OpEx spending. In this case, what pricing option is available to reduce costs and making predicting future spending easier?

4 / 118

Contoso IT has deployed a group of VMs in Azure. They want to identify recommendations on how to reduce the cost of running these VMs. Which tool should they use? (choose the best answer)

5 / 118

You plan to deploy several Azure VMs. The applications running on these VMs should remain available if a single Azure datacenter fails. You opt to deploy VMs to multiple availability zones. Does your solution meet the solution criteria?

6 / 118

To manage service lifecycle with more granularity, Contoso cloud architects have designed a model that involves a large number of resource groups. Will Contoso incur additional costs for the resources groups?

7 / 118

Contoso is planning to move several on-premises services to Azure PaaS and IaaS solutions. The CIO has asked for a tool to estimate the cost of hosting these resources in Azure. Tom suggests Azure Cost Management to estimate costs prior to migration. Does Tom's solution meet the solution criteria?

8 / 118

Contoso IT Operations has been tasked with providing recommendations on how to reducing cost of running Azure VMs. Which service should they use to gather recommendations?

9 / 118

Which aspect(s) of an Azure service are guaranteed in an Azure Service Level Agreement (SLA)? (choose the best answer)

10 / 118

Are Azure services in Public Preview available to all customers?

11 / 118

As part of a migration of on-premises VM workloads to Azure VMs, Contoso wants to minimize costs. Since the VMs will be running in Azure for an extended period of time (years), what option should they consider to reduce hosting costs?

12 / 118

You need to calculate the estimated cost of a set of Azure resources before you deploy them. Which service or tool will you use?

13 / 118

Contoso IT is planning to migrate all on-premises data to Azure. The Legal Department has asked for verification that Azure complies with Contoso's regulatory obligations, such as HIPAA and PCI DSS. What should you use to answer this request?

14 / 118

You need to identify deviations from Microsoft security best practices in your Azure cloud infrastructure. Which service should you use?

15 / 118

Contoso IT has deployed an Azure VM scale set for a frontend web application. They want guidance on configuring the virtual network for these resources. Will the Azure Advisor tool provide recommendations for these existing resources?

16 / 118

Contoso IT are frequently early adopters of new Azure features. They are trying a feature currently in Public Preview. Do services in Public Preview include an SLA?

17 / 118

Application developers at Contoso need Azure capacity to try some Azure services in the coming months. They plan to sign up for individual Azure Free accounts. Will this meet the requirement?

18 / 118

Contoso Corp is planning to move their custom web applications to the cloud. The cloud provider platform must provide the ability to scale automatically, and meet the availability SLA of 99%. Will Azure App Service (PaaS) meet these requirements?

19 / 118

All resources deployed to Contoso's Azure subscriptions include a tag assigned to the resource. Do resources in a resource group inherit the tag assigned to the resource group?

20 / 118

Which of the following describes authentication?

21 / 118

You need to ensure no one (including administrators) can create additional resources in a Azure resource group. What will you do to achieve this objective?

22 / 118

Using role based access control (RBAC) in Azure, we can determine which resources and services a user has access to. This is an example of:

23 / 118

You need to identify and enforce Contoso's corporate standards across new and existing Azure deployments. Which service would you choose to achieve this requirement? (choose the best answer)

24 / 118

Contoso has deployed resources across multiple Azure regions for multiple business units. They have a requirement to generate cost and chargeback reporting to track the Azure costs to be charged back to each business unit. Which Azure feature should they use to simplify this task?

25 / 118

Contoso's Security team wants to implement selective use of multi-factor authentication (MFA) based on risk associated with the authentication request. Which service should they implement?

26 / 118

Azure China is available to:

27 / 118

Implementing Azure MFA (multi-factor authentication) will ensure we know who the user is who they claim to be. This is an example of:

28 / 118

You need to configure access to Office 365 resources for users at Contoso. To group users for assignment of permissions, which of the following options can you use?

29 / 118

Your company is planning to host services in Azure. You want to leverage identities in Azure Active Directory, but still need to support on-premises identities in Active Directory MFA. Can you support single sign-on (SSO) and multi-factor authentication without synchronizing on-premises identities to Azure?

30 / 118

Contoso Electronics is a global retailer. The Contoso Cloud Architecture team needs to simplify deployments of new environments in Azure, including Azure Resource Manager (ARM) templates , role-based access, and policies.

Which Azure service enables delivery of templates for repeatable deployment and configuration of new subscriptions and environments? (choose the best answer)

31 / 118

You need to determine if the Azure platform meets a particular regulatory standard. How can you find the answer to this question?

32 / 118

The Contoso Legal Department has asked Contoso IT to verify whether the Contoso's Azure environment meets regulatory requirements. Which service should you use to answer this question?

33 / 118

The Contoso Security team wants to identify unsanctioned apps that may be responsible for data leakage and unwanted SaaS expenses (aka Shadow IT). What service should they use?

34 / 118

Can users located in countries outside China utilize Azure services deployed in Azure China?

35 / 118

The Contoso Security team has implemented a new security policy. When users connect from an unusual location, they must be prompted for MFA. If accessing from an anonymous IP, they should be forced to reset their password. Which feature will you implement?

36 / 118

Azure Germany is available to:

37 / 118

You need to implement multi-factor authentication for your Azure Active Directory users. However, you only want to prompt for an additional authentication factor when users are not in a trusted location on an unmanaged device. Which feature should you implement? (choose the best answer)

38 / 118

Contoso has implemented a hybrid, synchronized identity model, consisting of on-premises Active Directory and Azure Active Directory. They want to more effectively protect their on-premises identities from external threats. Which service should they choose?

39 / 118

Contoso IT assigns permissions at the resource group level for all resources deployed to Azure. Will resources in the resource group inherit permissions assigned to the resource group?

40 / 118

You are responsible for creating Azure resources at Contoso using ARM templates. You need to ensure Azure resources are only created in approved regions. What should you use to enforce this requirement

41 / 118

You need to prevent accidental deletion of Azure resources in your subscription. Which feature will meet this requirement? (choose the best answer)

42 / 118

In a Site-to-Site VPN, the____ is the cross-premises gateway that connects your Azure Virtual Network with your on-premises VPN appliances

43 / 118

Tailspin Toys relies heavily on Azure Active Directory for cloud identity. They want to more effectively protect their identities from external threats. Which service should they choose?

44 / 118

You need to define a group of Azure policies that defines and enforce corporate standards for new and existing Azure resource deployments in all of Contoso's Azure subscriptions. What should you use to meet this objective?

45 / 118

You have a web farm that . You need to restrict communication for current and future resources with a minimum of administrative effort. Which option should you choose?

46 / 118

Contoso IT has deployed multiple Azure VM across 15 virtual networks. How can you most securely limit inbound traffic and protect these VMs from unwanted inbound requests? (choose the best answer)

47 / 118

You are the administrator at Tailspin Toys. You have deployed an Azure VM hosting a line-of-business web application. You need to provide access to the application over the Internet via HTTP/S. You add a security rule to the Network Security Group (NSG) to allow inbound traffic. Does this solution meet the requirement?

48 / 118

Your company hosts a global web application. You need to ensure users can access the application from any country in the world with minimal latency. Which load balancing options should you use?

49 / 118

Azure routes traffic between all subnets within a virtual network, by default. To override Azure's default routing, you can create a(n)

50 / 118

Azure VMs in different virtual networks can communicate by default

51 / 118

The Contoso Field Services team is designing an application for monitoring thousands of sensors generating millions of data points daily. Which service can facilitate bi-directional communication with millions of IoT devices?

52 / 118

You can find recommendations for security best practices security configuration for Azure Kubernetes Service (AKS) with:

53 / 118

You need to alert on service failures in your Azure services, such as web app instances hosted in App Service, and Azure VMs that stop running for any reason. Which tool should you use?

54 / 118

The Contoso IT Operations team needs to aggregate events from a large number of resources hosted in Azure for correlation, alerting, and reporting. Which Azure service would you use to centrally collect, store, and act on events?

55 / 118

You need to automate and centrally manage various processes in VMs hosted both in Azure and on-premises. Which Azure service is best suited to this task?

56 / 118

Contoso Financial Services hosts an application that stores customer data in json format in MongoDB. They want to migrate the application to Azure, and want to minimize code updates. Which Azure database platform will best meet their requirements?

57 / 118

The Contoso Data Services team wants to migrate their NoSQL data to Platform as a Service. Contoso's cloud architect suggests that Azure SQL Database service. Will this meet the requirement?

58 / 118

The Contoso IT Operations team needs to monitor their customer-facing web apps for performance anomalies. Which Azure service will best fulfill this need?

59 / 118

The Contoso Applications team needs a no-code tool to build and test a predictive analytics solution using machine learning models. Which should they choose?

60 / 118

Contoso IT has deployed a group of Azure VMs for hosting production. They want best practices recommendations for high availability of their VM resources. Will the Azure Advisor tool provide recommendations for these existing resources?

61 / 118

Contoso's customer profiling app stores custom data in JSON format. Customers use a mobile app to access their profile data from around the world. This data should be available anywhere in the world with minimal latency. Which service should Contoso choose?

62 / 118

The Contoso Data Platform team wants to deploy an Apache Hadoop cluster in Azure. Which service should they choose?

63 / 118

You can monitor health and performance of microservices applications running on Azure Kubernetes Service (AKS) with:

64 / 118

Contoso IT wants to develop modern application components using a serverless architecture. Which Azure service is best for hosting code as part of a services infrastructure?

65 / 118

You need to manage your Azure VMs using the Azure portal. Which URL would you use to manage the Azure VMs?

66 / 118

The Field Services business unit needs a solution to analyze data locally on field devices. The goal is to speed event response and reduce data sent to the cloud. Which solution best addresses this need? (choose the best answer)

67 / 118

Contoso needs to select an IoT management platform for Internet-connected devices at their retail locations. They have no IoT expertise, and want a solution that minimizes the need for custom development. Which solution will best meet their requirement?

68 / 118

An ______ protects against server rack-level failures.

69 / 118

The Cloud Infrastructure team at Contoso Corp is responsible for service recovery in the event of site outage at their on-premises datacenter. Which Azure service is best-suited for this task?

70 / 118

Contoso hosts a non-HTTP(S) mobile app available around the world. They need to ensure users can access the application from any country in the world with minimal latency. Which load balancing options should they use?

71 / 118

Contoso Field Services needs a solution to analyze telemetry data collected from their IoT devices at their retail locations. Their goal is to identify performance anomalies and identify opportunities to refine and improve device operation. Which Azure service will best meet this requirement?

72 / 118

You run a small accounting business and need to host a custom WordPress site. You would like to host this in Azure. Where can you find an offering to quickly deploy a solution?

73 / 118

An Azure ______ is a set of datacenters deployed within a latency-defined perimeter and connected through a dedicated regional low-latency network.

74 / 118

Contoso Financial Services regularly creates documents containing sensitive customer data, including personally identifiable information. You need to ensure access is restricted to finance personnel, regardless of where the document travels. Which service should you use to classify and protect these documents?

75 / 118

Contoso IT wants to configure separate Azure subscriptions for different environments (production, development, test) and products. Can they associate multiple Azure subscriptions to the same Azure Active Directory tenant?

76 / 118

Storage for Azure VMs is hosted in which Azure Storage type?

77 / 118

Contoso wants to migrate a legacy application to Azure that requires an file share accessible on a UNC path. You need to provide an SMB file share and secure access. The solution should minimize administrative effort. Which service will you use?

78 / 118

You need to store, manage, and access SSL/TLS certificates for Contoso's corporate web apps. Which service should you use?

79 / 118

As part of a hybrid cloud deployment at Contoso, you need to connect Contoso's on-premises datacenter to Azure. The solution you choose should minimize expense during the low-scale pilot deployment. Which option will you choose?

80 / 118

Contoso plans to implement a hybrid cloud architecture utilizing Azure. They need to connect on-premises application resources. The solution should minimize latency and maximize security. Which option should they choose?

81 / 118

Contoso's Security team wants to apply standards across deployments in multiple Azure subscriptions. Which of the following can help achieve this requirement?

82 / 118

The Contoso Data Services team wants to migrate their relational databases to Platform as a Service. Contoso's cloud architect suggests that Azure SQL Database service. Will this meet the requirement?

83 / 118

The Contoso Corp Data Services team needs a platform to host their big data service, which will serve as a data source for their machine learning algorithms.

84 / 118

Contoso Corp wants to develop an artificial intelligence (AI) app that it will host in Azure. The app will accept requests through chat, interpreting requests with natural language processing (NLP). What service in Azure should they use for this solution?

85 / 118

You attempt to create several Azure SQL Database instances are receive a message that you must increase the limits in your Azure subscription. What should you do?

86 / 118

Contoso needs to automate version updates of their PaaS application hosted in Azure. Which service can best help meet this requirement?

87 / 118

To retire some aging on-premises servers, Contoso is planning to move several SQL databases to Azure SQL Database. The CIO has asked for a tool to estimate the cost of hosting these resources in Azure. Sally suggests using the Azure Pricing Calculator to estimate costs prior to migration. Does Sally's solution meet the solution criteria?

88 / 118

Contoso's Application Development team has been tasked with building a mobile app that can interact with users using spoken and written language. Which service should they choose?

89 / 118

Azure Container Instances provides feature parity for Linux and Windows containers

90 / 118

You can monitor health and availability of your Azure Kubernetes Service (AKS) cluster with:

91 / 118

Contoso has messages from a variety of sources (many Azure services) that need to be need to be relayed to an application. Which Azure service would be best suited to the task?

92 / 118

An application developer at Contoso has asked you to deploy a web application and SQL database to Azure. You need to store the password in a secure location. Which service will you use?

93 / 118

An ______ protects against datacenter-level failures.

94 / 118

Which Azure service would you use to correlate events from multiple Azure resources in a central repository? (choose the best answer)

95 / 118

You are responsible for recommending infrastructure architectures for applications at Contoso. Which solution would you recommend for load balancing HTTPS traffic to a web farm in a single Azure region?

96 / 118

You are deploying multiple instances of a custom Contoso web application. The application instances share a common management lifecycle, but will be located in different Azure regions. Can you deploy resources across multiple Azure regions in a single resource group?

97 / 118

You are testing new software in an Azure VM. When you are done testing, you shut down the VM, which shows a state of "Stopped" in the Azure portal. Will you incur additional costs while the VM is in this state?

98 / 118

Contoso IT needs to ensure deployments of like Azure resources are the same for every deployment. Which of the following could be used to automate resource deployment?

99 / 118

Contoso has a line-of-business application that requires access to a file share. You need to host this share in Azure with a minimum of cost and administration effort. Which service would best fulfill this requirement?

100 / 118

Kelly, who works in IT Operations, wants to automate a task using a script she wrote. She wants to do this with a minimum of expense and maintenance effort. She selected Azure Functions to host the job, instead of Azure Virtual Machines (IaaS). Does this service meet the solution criteria?

101 / 118

The Contoso Corp Financial Services team needs to automate several business processes. They need to create workflows in a low-code environment with a visual interface. The service must have built-in connectivity to their existing platforms, like SalesForce and SAP. They also require the flexibility to run develop and run small snippets of code if necessary. Which Microsoft service will best fit their use case?

102 / 118

A financial analysis of migration of on-premises files to Azure Storage at Contoso showed that storing 2TB of archived data in Azure would be less expensive than hosting this data on-premises. The report also showed unit cost in Azure would decrease even further as the data archive grows. This is an example of cloud

103 / 118

Contoso plans to migrate their existing on-premises SQL VMs to Azure. Which expenditure model does this implement?

104 / 118

Contoso hosts a legacy CRM application that runs on an Azure VM scale set. The application runs at a steady state of around 30% resource utilization. However, during month end closing activities, the application spikes to 90% resource utilization for extended periods during the last week of the month. Azure allows Contoso IT to meet these spikes in resource demand at the push of a button, paying for the additional capacity only when needed. This is an example of:

105 / 118

Contoso host databases for customer-facing web applications in Azure MySQL Database. Which cloud computing model best categorizes this service?

106 / 118

Office 365, Azure VMs, and Event Grid represent, ______, ______, and ______, respectively.

107 / 118

You need to provide additional capacity than what is currently available in your on-premises datacenter. The solution must minimize capital expense (CapEx) and operational expense (OpEx). Which solution should you recommend?

108 / 118

Azure App Service, Azure SQL Database, and Cosmos DB are examples of which category of cloud computing service?

109 / 118

Contoso runs several business applications in Azure VMs. Which cloud computing model best categorizes Azure VMs?

110 / 118

In Azure, you are charged only for what you use. This is known as a

111 / 118

Azure SQL Database and an on-premises SQL cluster represent a(n) ___ expense and a(n) ____ expense, respectively.

112 / 118

Contoso is planning to move to Azure, but currently hosts business applications in a shared virtualization infrastructure on-premises, utilizing Hyper-V. This is an example of which cloud computing model?

113 / 118

Which of the following statements are true of a Software as a Service solution?

114 / 118

Tailspin Toys, a small startup, is choosing their initial services architecture. They choose to rely on Office 365 and Microsoft Azure for all services. Which of the following best describes the cloud model they have chosen?

115 / 118

Azure Container Instances enable elastic bursting for Azure Kubernetes Service

116 / 118

Azure Container Instances enable running containers without host servers to manage.

117 / 118

Azure DDoS, which protects your Azure resources against distributed denial of services attacks, includes both a Basic and Standard tiers.

118 / 118

Azure VMs in different subnets in the same virtual network can communicate by default