AZ-900 Microsoft Azure Fundamentals Questions and Answers

You have an Azure subscription and 100 Windows 10 devices.

You need to ensure that only users whose devices have the latest security patches installed can access Azure AD-integrated applications.

What should you implement?

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Match the cloud computing benefits to the correct descriptions.

To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.

NOTE: Each correct match is worth one point

Azure distributed denial of service (DDoS) protection is an example of protection that is implemented at the (_______________).

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Select the answer that correctly completes the sentence.

Your company has an Azure subscription that contains several resources.

You need to identify which department is responsible for the cost of each resource.

What should you use?

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Select the answer that correctly completes the sentence.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You plan to collect and analyze event details for five Azure virtual machines. You need to run queries to compare the event details collected from all the virtual machines. Which two tools should you use? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Match the term to the appropriate description.

To answer, drag the appropriate term from the column on the left to its description on the right. Each term may be used once, more than once, or not at all.

NOTE: Each correct match is worth one point.

You plan to deploy a service to Azure virtual machines.

You need to ensure that the service will be available if a datacenter fails.

What should you use as part of the virtual machine deployment?

Select the answer that correctly completes the sentence.

Select the answer that correctly completes the sentence.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Select the answer that correctly completes the sentence.

Fill in the blank

(_____________________) runs application code in Azure without requiring a server.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE; Each correct selection is worth one point.

You plan to reduce ongoing Azure expenditures.

You need to identify which factors affect the costs of a resource.

Which three factors should you identify? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Select the answer that correctly completes the sentence.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Select the answer that correctly completes the sentence.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You need to complete the defense-in-depth strategy used in a datacenter,

What should you do? To answer, drag the appropriate layers to the correct positions in the model. Each layer may be used once, more than once, or not at all.

NOTE: Each correct selection is worth one point.

Which Azure service can you use as a security information and event management (SIEM) solution?

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Select the answer that correctly completes the sentence.

(______________________) in Azure Firewall enables users on the internet to access a server on a virtual network.

Match the cloud computing benefits to the appropriate descriptions

To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.

NOTE: Each correct match is worth one point

Which service provides serverless computing in Azure?

To complete the sentence, select the appropriate option in the answer area.

What should you use to prevent traffic from an Azure virtual network from being routed to an Azure Storage account via the internet?

Match the Azure Services service to the correct description.

Instructions: To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.

NOTE: Each correct selection is worth one point.

Select the answer that correctly completes the sentence.

An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script.

Which three computers can run the script? Each correct answer presents a complete solution

NOTE: Each correct selection is worth one point.

You have an Azure environment that contains 10 virtual networks and 100 virtual machines.

You need to limit the inbound traffic to all the Azure virtual networks.

What should you create?

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

To complete the sentence, select the appropriate option in the answer area.

To complete the sentence, select the appropriate option in the answer area.

Your company has an Azure subscription that contains the following unused resources:

* 20 user accounts in Azure Active Directory (Azure AD)

* Five groups in Azure AD

* 10 public IP addresses

* 10 network interfaces

You need to reduce the Azure costs for the company.

Which unused resources should you remove?

Select the answer that correctly completes the sentence.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Your company is planning a deployment using Azure Database for PostgreSQL. The deployment should meet the following requirements:

- Up to 10 TB storage

- Azure Premium Storage

- Point-in-time-restore for up to 35 days

You need to select the appropriate deployment and pricing tier to meet these requirements and minimize costs. What should you select?

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Your company has an Azure subscription that contains the following unused resources:

• 20 user accounts in Azure Active Directory (Azure AD)
• Five groups in Azure AD
• 10 public IP addresses
• 10 network interfaces

You need to reduce the Azure costs for the company.

Solution: You remove the unused network interfaces.

Does this meet the goal?

You plan to deploy several Azure virtual machines.

You need to ensure that the services running on the virtual machines are available if a single data center fails.

Solution: You deploy the virtual machines to a scale set. Does this meet the goal?

In the software as a service (SaaS) cloud service, which responsibility is shared between Microsoft and the customer?

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

To complete the sentence, select the appropriate option in the answer area.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE; Each connect selection is worth one point.

Your Azure environment contains multiple Azure virtual machines.

You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.

What are two possible solutions? Each correct answer presents a complete solution.

For each of the following statements, select Yes if the statement is true, Otherwise, select No.

NOTE: Each correct match is worth one point.

For each of the following statements, select Yes if the statement is true, Otherwise, select No.

NOTE: Each correct match is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true, Otherwise, select No.

NOTE: Each correct match is worth one point.

For each of the following statements, select Yes if the statement is true, Otherwise, select No.

NOTE: Each correct match is worth one point.

Which Azure service provides a set of version control tools to manage code?

To complete the sentence, select the appropriate option in the answer area.

A tion in the answer area.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

To complete the sentence, select the appropriate option in the answer area.

This question requires that you evaluate the underlined text to determine if it is correct.

The Microsoft Online Services Privacy Statement explains what data Microsoft processes, how Microsoft processes the data, and the purpose of processing the data.

Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed.” If the statement is incorrect, select the answer choice that makes the statement correct.

This question requires that you evaluate the BOLD text to determine if it is correct.

The Azure Standard support plan is the lowest cost option to receive 24x7 access to support engineers by phone.

Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

What can you use to identify underutilized or unused Azure virtual machines?

To complete the sentence, select the appropriate option in the answer area.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Which service provides network traffic filtering across multiple Azure subscriptions and virtual networks?

Your company has an Azure subscription that contains resources in several regions.

You need to ensure that administrators can only create resources in those regions.

What should you use?

Your company plans to migrate all its network resources to Azure. You need to start the planning process by exploring Azure. What should you create first?

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Which statement accurately describes the Modern Lifecycle Policy for Azure services?

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

To complete the sentence, select the appropriate option in the answer area.

Your company uses management groups to manage resources in your Azure tenant more efficiently. User1 should be able to assign access and assign policies to management groups. You need to determine to which role-based access control (RBAC) role User1 should be added.

Your solution should follow the principle of least privilege. To which role should you add User1?

Note: This question is part of a series of questions that present the same scenario. Each question in

the series contains a unique solution that might meet the stated goals. Some question sets might have

more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

Your company plans to migrate all its data and resources to Azure.

The company’s migration plan states that only platform as a service (PaaS) solutions must be used in Azure.

You need to deploy an Azure environment that supports the planned migration.

Solution: You create an Azure App Service and Azure Storage accounts.

Does this meet the goal?

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

This question requires that you evaluate the Bold text to determine if it is correct.

After you create a virtual machine, you need to modify the network security group (NSG) to allow connections from TCP port 8080 to the virtual machine.

Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.

You create a resource group named RG1 in Azure Resource Manager.

You need to prevent the deletion of the resources in RG1.

Which setting should you use? To answer, select the appropriate setting in the answer area.

Which cloud deployment is used for Azure virtual machines and Azure SQL database? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

This question requires that you evaluate the underlined text to determine if it is correct.

You have an Azure virtual network named VNET1 in a resource group named RG1.

You assign an Azure policy specifying that virtual networks are not an allowed resource type in RG1. VNET1 is deleted automatically.

Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.

Your company has 10 offices. You plan to generate several billing reports from the Azure portal. Each report will contain the Azure resource utilization of each office.

Which Azure Resource Manager feature should you use before you generate the reports?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to purchase Azure.

The company’s support policy states that the Azure environment must provide an option to access support engineers by phone or email.

You need to recommend which support plan meets the support policy requirement.

Solution: Recommend a Basic support plan.

Does this meet the goal?

This question requires that you evaluate the underlined text to determine if it is correct.

When you need to delegate permissions to several Azure virtual machines simultaneously, you must deploy the Azure virtual machines to the same Azure region

Instructions: Review the underlined text If it makes the statement correct, select "No change is needed." If the statement is incorrect, select the answer choice that makes the statement correct.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, white others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure environment.

You need to create a new Azure virtual machine from an Android laptop.

Solution: You use the PowerApps portal.

Does this meet the goal?

In which Azure support plans can you open a new support request?

Your company plans to deploy several web servers and several database servers to Azure.

You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers.

What should you include in the recommendation?

You have an Azure environment that contains 10 web apps.

To which URL should you connect to manage all the Azure resources? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

A team of developers at your company plans to deploy, and then remove, 50 customized virtual machines each week. Thirty of the virtual machines run Windows Server 2016 and 20 of the virtual machines run Ubuntu Linux.

You need to recommend which Azure service will minimize the administrative effort required to deploy and remove the virtual machines.

What should you recommend?

Match the term to the correct definition.

Instructions: To answer, drag the appropriate term from the column on the left to its description on the right. Each term may be used once, more than once, or not at all.

NOTE: Each correct match is worth one point.

You need to view a list of planned maintenance events that can affect the availability of an Azure subscription.

Which blade should you use from the Azure portal? To answer, select the appropriate blade in the answer

area.

This question requires that you evaluate the underlined text to determine if it is correct.

If a resource group named RG1 has a delete lock, only a member of the global administrators group can delete RG1.

Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region.

Which Azure service should you use from the Azure portal to view service failure notifications that can affect the availability of VM1?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to purchase Azure.

The company’s support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement.

Solution: Recommend a Premier support plan.

Does this meet the goal?

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

This question requires that you evaluate the underlined text to determine if it is correct. Authorization is the process of verifying a user's credentials.

Instructions: Review the underlined text If it makes the statement correct, select "No change is needed." If the statement is incorrect, select the answer choice that makes the statement correct.

What is guaranteed in an Azure Service Level Agreement (SLA) for virtual machines?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your Azure environment contains multiple Azure virtual machines.

You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.

Solution: You modify an Azure Traffic Manager profile.

Does this meet the goal?

You plan to map a network drive from several computers that run Windows 10 to Azure Storage. You need to create a storage solution in Azure for the planned mapped drive.

What should you create?

You have an Azure environment that contains 10 virtual networks and 100 virtual machines.

You need to limit the amount of inbound traffic to all the Azure virtual networks.

What should you create?

You plan to extend your company’s network to Azure. The network contains a VPN appliance that uses an IP address of 131.107.200.1.

You need to create an Azure resource that identifies the VPN appliance.

Which Azure resource should you create? To answer, select the appropriate resource in the answer area.

You need to manage Azure by using Azure Cloud Shell.

Which Azure portal icon should you select? To answer, select the appropriate icon in the answer area.

You plan to create an Azure virtual machine.

You need to identify which storage service must be used to store the data disks of the virtual machine.

What should you identify? To answer, select the appropriate service in the answer area.

You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted automatically to change their password.

Which Azure service should you use?

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Which two types of customers are eligible to use Azure Government to develop a cloud solution? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your Azure environment contains multiple Azure virtual machines.

You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.

Solution: You modify a DDoS protection plan.

Does this meet the goal?

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Which Azure service should you use to store certificates?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to purchase Azure.

The company’s support policy states that the Azure environment must provide an option to access support engineers by phone or email.

You need to recommend which support plan meets the support policy requirement.

Solution: Recommend a Professional Direct support plan.

Does this meet the goal?

You plan to deploy a website to Azure. The website will be accessed by users worldwide and will host large video files. You need to recommend which Azure feature must be used to provide the best video playback experience. What should you recommend?

Select the answer that correctly completes the sentence.

Azure distributed denial of service (DDoS) protection is an example of protection that is implemented at the (_______________________).

Select the answer that correctly completes the sentence.

This question requires that you evaluate the underlined BOLD text to determine if it is correct.

Your company implements Azure policies to automatically add a watermark to Microsoft Word documents that contain credit card information.

Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.

How should you calculate the monthly uptime percentage? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your company hosts an accounting named App1 that is used by all the customers of the company.App1 has low usage during the first three weeks of each month and very high usage during the last week of each month.

Which benefit of Azure Cloud Services supports cost management for this type of usage pattern?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

An Azure administrator plans to run a PowerShell script that creates Azure resources.

You need to recommend which computer configuration to use to run the script.

Solution: Run the script from a computer that runs Linux and has the Azure CLI tools installed.

Does this meet the goal?

You have a resource group named RG1.

You plan to create virtual networks and app services in RG1.

You need to prevent the creation of virtual machines only in RG1.

What should you use?