Quiz
AZ900 ( 140 - 296)
This quiz has question types that open in the usual player.
Questions in this quiz (200)
1Match the Azure services to the correct descriptions.
Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
- AAzure Functions
- BAzure App Service
- CAzure virtual machines
- DAzure Container Instances
- EAzure Functions
- FAzure App Service
- GAzure virtual machines
- HAzure Container Instances
- IAzure Functions
- JAzure App Service
- KAzure virtual machines
- LAzure Container Instances
- MAzure Functions
- NAzure App Service
- OAzure virtual machines
- PAzure Container Instances
2You have several virtual mahines in an Azure subscription. You create a new subscription.
- AThe virtual machines cannot be moved to the new subscription.
- BThe virtual machines can be moved to the new subscription
- CThe virtual machines can be moved to the new subscription only if they are all in the same resource group.
- DThe virtual machines can be moved to the new subscription only if they run Windows Server 2019.
3You need to purchase a third-party virtual security appliance that you will deploy to Azure subscription.
What should you use?- AAzure subscriptions
- BMicrosoft Defender for Cloud
- CAzure Marketplace
- DMicrosoft Store
4[blank_start]Azure Arc[blank_end] is a highly secure IoT solution that includes a microcontroller unit (MCU) and a customized Linux operating system
- AAzure Arc
- BAzure IoT Central
- CAzure IoT Hub
- DAzure Sphere
5You plan to deploy a service to Azure virtual machines.
You need to ensure that the service will be available if a datacenter fails.
What should you use as part of the virtual machine deployment?- Aavailability sets
- Bproximity placement groups
- Chost groups
- Davailability zones
6Your company has an Azure subscription that contains resources in several regions.
You need to ensure that administrators can only create resources in those regions.
What should you use?- Aa read-only lock
- Ban Azure policy
- Ca management group
- Da reservation
7An Azure region ___________________
- Acontaines on or more data centers that are connected by using a low-latency
- Bis found in each country where Microsoft has a subsidiary office.
- Ccan be found in every country in Europe and the Americas only.
- Dcontains one or more data centers that are connected by using a high-latency network
8You can use the Azure File Sync agent to sync on-permises data to an Azure [blank_start]blob container[blank_end]
- Ablob container
- BData Lake Storage container
- Cfile share
- Dqueue
9What is the function of a Site-to-Site VPN?
- Aprovides a secure connection between a computer on a public network and the corporate network
- Bprovides a dedicated private connection to Azure that does NOT travel over the internet
- Cprovides a connection from an on-premises VPN device to an Azure VPN gateway
10Match the cloud service models to the appropriate offerings.
To answer, drag the appropriate model from the column on the left to its offering on the right. Each model may be used once, more than once, or not at all.
- AIaaS
- BPaaS
- CSaaS
- DIaaS
- EPaaS
- FSaaS
- GIaaS
- HPaaS
- ISaaS
11Match the cloud service models to the appropriate solutions.
To answer, drag the appropriate cloud service model from the column on the left to its solution on the right Each cloud service model may be used once, more than once, or not at all.
- AIaaS
- BPaaS
- CSaaS
- DIaaS
- EPaaS
- FSaaS
- GIaaS
- HPaaS
- ISaaS
12You need to manage containers.
Which two services can you use? Each correct answer presents a complete solution.- AAzure Virtual Desktop
- BAzure virtual machines
- CAzure Functions
- DAzure Container Instances
- EAzure Kubernetes Service (AKS)
13When you need to delegate permissions to several Azure virtual machines simultaneously, oyu must deploy the Azure virtual machines ___________
- Ato the same Azure region
- Bby using the same Azure Resource Manager template
- Cto the same resource group
- Dto the same availability zone
14Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You plan to deploy several Azure virtual machines.
You need to ensure that the services running on the virtual machines are available if a single data center fails.
Solution: You deploy the virtual machines to two or more availability zones.
Does this meet the goal?- AYes
- BNo
15This question requires that you evaluate the underlined text to determine if it is correct.
"One of the benefits of Azure SQL Data Warehouse is that high availability is built into the platform."
Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed`. If the statement is incorrect, select the answer choice that makes the statement correct.- ANo change is needed
- Bautomatic scaling
- Cdata compression
- Dversioning
16Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You plan to deploy several Azure virtual machines.
You need to ensure that the services running on the virtual machines are available if a single data center fails.
Solution: You deploy the virtual machines to two or more regions.
Does this meet the goal?- AYes
- BNo
17An Azure container instance is an example of an Azure [blank_start]compute service[blank_end]
- Acompute service
- Bidentity service
- Cnetworking service
- Dstorage service
18At which OSI layer does ExpressRoute operate?
- ALayer 2
- BLayer 3
- CLayer 5
- DLayer 7
19Application Insights is a feature of [blank_start]Azure Advisor[blank_end]
- AAzure Advisor
- BAzure Application Gateway
- CAzure Arc
- DAzure Monitor
20Azure resource can only access other resources in the same resource group
- ATrue
- BFalse
21If you delete a resource group, all the resources in the resource group will be deleted
- ATrue
- BFalse
22A resource group can contain resources from multiple Azure regions
- ATrue
- BFalse
23You plan to store 20 TB of data in Azure. The data will be accessed infrequently and visualized by using Microsoft Power BI.
You need to recommend a storage solution for the data.
Which two solutions should you recommend? Each correct answer presents a complete solution.- AAzure Data Lake
- BAzure Cosmos DB
- CAzure SQL Data Warehouse
- DAzure SQL Database
- EAzure Database for PostgreSQL
24You have an Azure environment that contains 10 web apps. To which URL should you connect to manage all the Azure resources? To answer, select the appropriate options in the answer area.
https://[blank_start]admin[blank_end].[blank_start]azure[blank_end].com- Aadmin
- Bportal
- Cwww
- Dazure
- Eazurewebsites
- Fmicrosoft
25Arrange the storage account redundancy options from the least redundant to the most redundant. To answer, move all options from the list of options to the answer area and arrange them in the correct order. (1 less red - 3 mor red)
Zone-redundant storage: [blank_start]1[blank_end]
Geo-redundant storage: [blank_start]2[blank_end]
Locally-redundant storage: [blank_start]3[blank_end]- A1
- B2
- C3
- D1
- E2
- F3
- G1
- H2
- I3
26Azure Blob Storage is a ________
- Adata store for queuing and reliaby delivering messages between applications
- Bfile share that can be mapped as a network drive
- Ckey/attribute stre for non-relational, structured data
- Dstorage service optimized for very large objects, such as video files and bitmaps
27Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
An Azure administrator plans to run a PowerShell script that creates Azure resources.
You need to recommend which computer configuration to use to run the script.
Solution: Run the script from a computer that runs Linux and has the Azure CLI tools installed.
Does this meet the goal?- AYes
- BNo
28Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
An Azure administrator plans to run a PowerShell script that creates Azure resources.
You need to recommend which computer configuration to use to run the script.
Solution: Run the script from a computer that runs Chrome OS and uses Azure Cloud Shell.
Does this meet the goal?- AYes
- BNo
29From Azure Service Health, and administrator can view the health os all the services in an Azure environment
- ATrue
- BFalse
30From Azure Serivce Health, and administrator can create and rule to be alerted if an Azure service fails
- ATrue
- BFalse
31From Azure Service Health, an administrator can prevent a service failure
- ATrue
- BFalse
32Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
An Azure administrator plans to run a PowerShell script that creates Azure resources.
You need to recommend which computer configuration to use to run the script.
Solution: Run the script from a computer that runs macOS and has PowerShell Core 6.0 installed.
Does this meet the goal?- AYes
- BNo
33You need to view a list of planned maintenance events that can affect the availability of an Azure subscription.
Which blade should you use from the Azure portal? To answer, select the appropriate blade in the answer area.- ADashboard
- BAll resources
- CResource groups
- DApp Service
- EFunction Apps
- FSQL databases
- GVirtual machines
- HLoad balancers
- Ihelp + support
34Match the Azure service to the correct definition.
Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
- AAzure DevOps
- BAzure Advisor
- CAzure Cognitive Services
- DAzure Application Insights
- EAzure Advisor
- FAzure DevOps
- GAzure Cognitive Services
- HAzure Application Insights
- IAzure DevOps
- JAzure Advisor
- KAzure Cognitive Services
- LAzure Application Insights
- MAzure DevOps
- NAzure Advisor
- OAzure Cognitive Services
- PAzure Application Insights
35Match the Azure service to the correct description.
Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
- AAzure HDInsight
- BAzure Data Lake Analytics
- CAzure SQL Synapse Analytics
- DAzure SQL Database
- EAzure HDInsight
- FAzure Data Lake Analytics
- GAzure SQL Synapse Analytics
- HAzure SQL Database
- IAzure HDInsight
- JAzure Data Lake Analytics
- KAzure SQL Synapse Analytics
- LAzure SQL Database
- MAzure HDInsight
- NAzure Data Lake Analytics
- OAzure SQL Synapse Analytics
- PAzure SQL Database
36You need to identify which blades in the Azure portal must be used to perform the following tasks:
✑ View security recommendations.
✑ Monitor the health of Azure services.
✑ Browse available virtual machine images.
Which blade should you identify for each task? To answer, select the appropriate options in the answer area.
Monitor the health of Azure services: [blank_start]Monitor[blank_end]
Browse available virtual machine images: [blank_start]Monitor[blank_end]
View security recommendations: [blank_start]Monitor[blank_end]- AMonitor
- BSubscription
- CMarketplace
- DAdvisor
- EMonitor
- FSubscription
- GMarketplace
- HAdvisor
- IMonitor
- JSubscription
- KMarketplace
- LAdvisor
37Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system.
Solution: You use Bash in Azure Cloud Shell.
Does this meet the goal?- AYes
- BNo
38You have an on-premises application that sends email notifications automatically based on a rule.
You plan to migrate the application to Azure.
You need to recommend a serverless computing solution for the application.
What should you include in the recommendation?- Aa web app
- Ba server image in Azure Marketplace
- Ca logic app
- Dan API app
39You plan to deploy a website to Azure. The website will be accessed by users worldwide and will host large video files.
You need to recommend which Azure feature must be used to provide the best video playback experience.
What should you recommend?- Aan application gateway
- Ban Azure ExpressRoute circuit
- Ca content delivery network (CDN)
- Dan Azure Traffic Manager profile
40Your company plans to deploy several million sensors that will upload data to Azure.
You need to identify which Azure resources must be created to support the planned solution.
Which two Azure resources should you identify? Each correct answer presents part of the solution.- AAzure Data Lake
- BAzure Queue storage
- CAzure File Storage
- DAzure IoT Hub
- EAzure Notification Hubs
41You have an Azure web app.
You need to manage the settings of the web app from an iPhone.
What are two Azure management tools that you can use? Each correct answer presents a complete solution.- AAzure CLI
- Bthe Azure portal
- CAzure Cloud Shell
- DWindows PowerShell
- EAzure Storage Explorer
42Your company plans to deploy an Artificial Intelligence (AI) solution in Azure.
What should the company use to build, test, and deploy predictive analytics solutions?- AAzure Logic Apps
- BAzure Machine Learning Designer
- CAzure Batch
- DAzure Cosmos DB
43Azure Advisor can generate a list of Azure virtual machines that are protected by Azure Backup
- ATrue
- BFalse
44If you implement the security recommendations provided by Azure Advisor, your comapny's securo score will descrease
- ATrue
- BFalse
45To maintain Microsoft support, you must implement the security recommendations provided by Azure Advisor within a period of 30 days
- ATrue
- BFalse
46What can you use to automatically send an alert if an administrator stops an Azure virtual machine?
- AAzure Advisor
- BAzure Service Health
- CAzure Monitor
- DAzure Network Watcher
47Match the Azure services to the correct descriptions.
Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
- AAzure Machine Learning
- BAzure Synapse Analytics
- CAzure IoT Hub
- DAzure Functions
- EAzure Machine Learning
- FAzure Synapse Analytics
- GAzure IoT Hub
- HAzure Functions
- IAzure Machine Learning
- JAzure Synapse Analytics
- KAzure IoT Hub
- LAzure Functions
- MAzure Machine Learning
- NAzure Synapse Analytics
- OAzure IoT Hub
- PAzure Functions
48You have an Azure environment.
You need to create a new Azure virtual machine from a tablet that runs the Android operating system.
What are three possible solutions? Each correct answer presents a complete solution.- AUse Bash in Azure Cloud Shell.
- BUse PowerShell in Azure Cloud Shell.
- CUse the PowerApps portal.
- DUse the Security & Compliance admin center.
- EUse the Azure portal.
49A team of developers at your company plans to deploy, and then remove, 50 virtual machines each week. All the virtual machines are configured by using Azure
Resource Manager templates.
You need to recommend which Azure service will minimize the administrative effort required to deploy and remove the virtual machines.
What should you recommend?- AAzure Reserved Virtual Machine (VM) Instances
- BAzure DevTest Labs
- CAzure virtual machine scale sets
- DAzure Virtual Desktop
50Azure advisor provides recommendations on how to improve the security of an Azure Aztive Directory (Azure AD) environment
- ATrue
- BFalse
51Azure Advisor provides recommendations on how to reduce the cost of running Azure virtual machines.
- ATrue
- BFalse
52Azure Advisor provides recommendations on how to configure the network settings on Azure virtual machines.
- ATrue
- BFalse
53Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.
From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys
You need to create VM1 in Subscription1 by using the command.
Solution: From the Azure portal, launch Azure Cloud Shell and select PowerShell. Run the command in Cloud Shell.
Does this meet the goal?- AYes
- BNo
54Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.
From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS
--generate-ssh-keys
You need to create VM1 in Subscription1 by using the command.
Solution: From a computer that runs Windows 10, install Azure CLI. From PowerShell, sign in to Azure and then run the command.
Does this meet the goal?- AYes
- BNo
55Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.
From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS
--generate-ssh-keys
You need to create VM1 in Subscription1 by using the command.
Solution: From a computer that runs Windows 10, install Azure CLI. From a command prompt, sign in to Azure and then run the command.
Does this meet the goal?- AYes
- BNo
56Several support engineers plan to manage Azure by using the computers:
- Computer1 --> Windows 10
- Computer2 --> Ubuntu
- Computer3 --> MacOS Mojave
You need to identify which Azure management tools can be used from each computer.
What should you identify for each computer? To answer, select the appropriate options in the answer area.
Computer1: [blank_start]The Azure CLI and the Azure portal[blank_end]
Computer2: [blank_start]The Azure CLI and the Azure portal[blank_end]
Computer3: [blank_start]The Azure CLI and the Azure portal[blank_end]- AThe Azure CLI and the Azure portal
- BThe Azure portal and Azure powerShell
- CThe Azure CLI and Azure PowerShell
- DAzure CLI, Az Portal and Az PowerShell
- EThe Azure CLI and the Azure portal
- FThe Azure portal and Azure powerShell
- GThe Azure CLI and Azure PowerShell
- HAzure CLI, Az Portal and Az PowerShell
- IThe Azure CLI and the Azure portal
- JThe Azure portal and Azure powerShell
- KThe Azure CLI and Azure PowerShell
- LAzure CLI, Az Portal and Az PowerShell
57You can access Compliance Manager from the [blank_start]Azure Active Directory admin center[blank_end]
- AAzure Active Directory admin center
- BAzure portal
- CMicorsoft 365 admin center
- DMicrosoft Service Trust Portal
58___________ a common platfor for deploying objects to a cloud infrastructure and for implementing consistency across the Azure environment
- AAzure policies provide
- BResource groups provide
- CAzure Resource Manager templates provid
- DManagement groups provide
59Match the Azure service to the correct description.
Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
- AAzure Machine Learning
- BAzure IoT Hub
- CAzure Bot Services
- DAzure Functions
- EAzure Machine Learning
- FAzure IoT Hub
- GAzure Bot Services
- HAzure Functions
- IAzure Machine Learning
- JAzure IoT Hub
- KAzure Bot Services
- LAzure Functions
- MAzure Machine Learning
- NAzure IoT Hub
- OAzure Bot Services
- PAzure Functions
60An Azure administrator plans to run a PowerShell script that creates Azure resources.
You need to recommend which computer configuration to use to run the script.
Solution: Run the script from a computer that runs Windows 10 and has the Azure PowerShell module installed.
Does this meet the goal?- AYes
- BNo
61Match the Azure services to the correct description.
Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
- AAzure Functions
- BAzure App Service
- CAzure virtual machines
- DAzure Containter Instances
- EAzure Functions
- FAzure App Service
- GAzure virtual machines
- HAzure Containter Instances
- IAzure Functions
- JAzure App Service
- KAzure virtual machines
- LAzure Containter Instances
- MAzure Functions
- NAzure App Service
- OAzure virtual machines
- PAzure Containter Instances
62Which service provides serverless computing in Azure?
- AAzure Virtual Machines
- BAzure Functions
- CAzure storage account
- DAzure dedicated hosts
63An Azure administrator plans to run a PowerShell script that creates Azure resources.
You need to recommend which computer configuration to use to run the script.
Which three computers can run the script? Each correct answer presents a complete solution.- Aa computer that runs macOS and has PowerShell Core 6.0 installed.
- Ba computer that runs Windows 10 and has the Azure PowerShell module installed.
- Ca computer that runs Linux and has the Azure PowerShell module installed.
- Da computer that runs Linux and has the Azure CLI tools installed.
- Ea computer that runs Chrome OS and uses Azure Cloud Shell.
64You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.
From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys
You need to create VM1 in Subscription1 by using the command.
Solution: From the Azure portal, launch Azure Cloud Shell and select Bash. Run the command in Cloud Shell.
Does this meet the goal?- AYes
- BNo
65Your company has several business units.
Each business unit requires 20 different Azure resources for daily operation. All the business units require the same type of Azure resources.
You need to recommend a solution to automate the creation of the Azure resources.
What should you include in the recommendations?- AAzure Resource Manager templates
- Bvirtual machine scale sets
- Cthe Azure API Management service
- Dmanagement groups
66You can use Azure Cost Management to view costs associated to management groups.
- ATrue
- BFalse
67You can use Azure Cost Management to view costs associated to resource groups.
- ATrue
- BFalse
68You can use Azure Cost Management to view the usage of virtual machines during the last three months.
- ATrue
- BFalse
69What can you use to identify underutilized or unused Azure virtual machines?
- AAzure Advisor
- BAzure Cost Management + Billing
- CAzure reservations
- DAzure Policy
70Which node in the Azure portal should you use to assign a user the Reader role for a resource group?
- AOverview
- BActivity Log
- CAccess control (IAM)
- DTags
- EResource visualizer
- FEvents
71[blank_start]Azure Databricks[blank_end] is an Apache Spark-based anaytics service
- AAzure Databricks
- BAzure Data Factory
- CAzure DevOps
- DAzure Synapse Analytics
72You must have internet connection to manage cloud service
- ATrue
- BFalse
73You must intall a management app to manage cloud services
- ATrue
- BFalse
74You can manage cloud services from any moderns web browser
- ATrue
- BFalse
75Match the Azure service to the correct definition.
Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
- AAzure Databricks
- BAzure Functions
- CAzure App Service
- DAzure Application Insights
- EAzure Databricks
- FAzure Functions
- GAzure App Service
- HAzure Application Insights
- IAzure Databricks
- JAzure Functions
- KAzure App Service
- LAzure Application Insights
- MAzure Databricks
- NAzure Functions
- OAzure App Service
- PAzure Application Insights
76A team of developers at your company plans to deploy, and then remove, 50 customized virtual machines each week. Thirty of the virtual machines run Windows
Server 2016 and 20 of the virtual machines run Ubuntu Linux.
You need to recommend which Azure service will minimize the administrative effort required to deploy and remove the virtual machines.
What should you recommend?- AAzure Reserved Virtual Machines (VM) Instances
- BAzure virtual machine scale sets
- CAzure DevTest Labs
- DMicrosoft Managed Desktop
77Azure PowerShell modules can be installed on macOS
- ATrue
- BFalse
78Azure Cloud Shell can be accessed from a web browser on a Linux Computer
- ATrue
- BFalse
79The Azure portal can only be accessed from a Windows device
- ATrue
- BFalse
80A support engineer plans to perform several Azure management tasks by using the Azure CLI.
You install the CLI on a computer.
You need to tell the support engineer which tools to use to run the CLI.
Which two tools should you instruct the support engineer to use? Each correct answer presents a complete solution.- ACommand Prompt
- BAzure Resource Explorer
- CWindows PowerShell
- DWindows Defender Firewall
- ENetwork and Sharing Center
81You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system.
Solution: You use PowerShell in Azure Cloud Shell.
Does this meet the goal?- AYes
- BNo
82You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system.
Solution: You use the PowerApps portal.
Does this meet the goal?- AYes
- BNo
83You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system.
Solution: You use the Azure portal.
Does this meet the goal?- AYes
- BNo
84______________ provides in-depth information about security, privacy, compliance offerings, policies, and features across Microsoft cloud products
- AThe Microsoft 365 Compliance admin center
- BThe Microsoft 365 Defender portal
- CMicrosoft Defender for Cloud in the Azure portal
- DMicrosoft Trust Center
85You can manage an on-permises Windows server as an Azure resource by using [blank_start]Azure AD Connect[blank_end]
- AAzure AD Connect
- BAzure Arc
- Can Azure Pipelines agent
- DAzure VPN Gateway
86You can only manage cloud services frmo Windows devices
- ATrue
- BFalse
87You can manage cloud services from the command line
- ATrue
- BFalse
88You can manage cloud services by using a web browser
- ATrue
- BFalse
89Azure Monitor can monitor the performance of on-permises computers
- ATrue
- BFalse
90Azure Monitor can send alerts to Azure Active Directory security groups
- ATrue
- BFalse
91Azure Monitor can trigger alerts based on data in an Azure Log Analytics workspace.
- ATrue
- BFalse
92Which Azure service provides a set of version control tools to manage code?
- AAzure Repos
- BAzure DevTest Labs
- CAzure Storage
- DAzure Cosmos DB
93You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region.
Which Azure service should you use from the Azure portal to view service failure notifications that can affect the availability of VM1?- AAzure Service Fabric
- BAzure Monitor
- CAzure virtual machines
- DAzure Advisor
94Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
Solution: You modify an Azure Traffic Manager profile.
Does this meet the goal?- AYes
- BNo
95Your company plans to deploy several web servers and several database servers to Azure.
You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers.
What should you include in the recommendation?- Anetwork security groups (NSGs)
- BAzure Service Bus
- Ca local network gateway
- Da route filter
96From [blank_start]Azure Access Control IAM[blank_end] you can view which user turned off a specific virtual machine during the last days
- AAzure Access Control IAM
- BAzure Event Hub
- CAzure Activity Log
- DAzure Service Health
97Which service provides network traffic filtering across multiple Azure subscriptions and virtual networks?
- AAzure Firewall
- Ban application security group
- CAzure DDoS protection
- Da network security group (NSG)
98Which Azure service should you use to store certificates?
- AAzure Security Center
- Ban Azure Storage account
- CAzure Key Vault
- DAzure Information Protection
99Which Azure service can you use as a security information and event management (SIEM) solution?
- AAzure Analysis Services
- BAzure Sentinel
- CAzure Information Protection
- DAzure Cognitive Services
100Azure Sentinel stores collected events in a Azure Storage account.
- ATrue
- BFalse
101Azure Sentinel can remediate incidents automatically.
- ATrue
- BFalse
102Azure Sentinel can collect Windows Defender Firewall logs from Azure virtual machines.
- ATrue
- BFalse
103Match the Azure Services service to the correct descriptions.
Instructions: To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
- AAzure Active Directory (Azure AD)
- BAzure Key Vault
- CAzure Lighthouse
- DAzure Security Center
- EAzure Sentinel
- FAzure Active Directory (Azure AD)
- GAzure Key Vault
- HAzure Lighthouse
- IAzure Security Center
- JAzure Sentinel
- KAzure Active Directory (Azure AD)
- LAzure Key Vault
- MAzure Lighthouse
- NAzure Security Center
- OAzure Sentinel
104Azure Firewall will encrypt all the network sent from Azure to the Internet
- ATrue
- BFalse
105A network security group (NSG) will encrypt all the network traffic sent from Azure to the Internet.
- ATrue
- BFalse
106Azure virtual machines that run Windows Server 2016 can encrypt network traffic sent to the Internet.
- ATrue
- BFalse
107You need to complete the defense-in-depth strategy used in a datacenter.
What should you do? To answer, drag the appropriate layers to the correct positions in the model. Each layer may be used once, more than once, or not at all.
- APerimenter
- BApplication
- CPhysical Security
- DPerimenter
- EApplication
- FPhysical Security
- GPerimenter
- HApplication
- IPhysical Security
108You have an Azure virtual machine named VM1.
You plan to encrypt VM1 by using Azure Disk Encryption.
Which Azure resource must you create first?- Aan Azure Storage account
- Ban Azure Key Vault
- Can Azure Information Protection policy
- Dan Encryption key
109Which resources can be used as a source for a Network security group inbound security rule?
- AService Tags only
- BIP Addresses, Service tags and Application security groups
- CApplication security groups only
- DIP Addresses only
110Azure Sentinel uses playbook to [blank_start]automatically respond to threats[blank_end]
- Aautomatically respond to threats
- Bcollect data from Azure services
- Cspecify how long data is retained
- Dstore passwords and certifies
111[blank_start]Network Address Translation (NAT) rules[blank_end] in Azure Firewall enables users in the internet to access a server on a virtual network
- ANetwork Address Translation (NAT) rules
- BApplication rules
- CNetwork rules
- DService tags
112Azure distributed denial of service (DDoS) protection is an example of protection that is implemented at the [blank_start]application layer[blank_end]
- Aapplication layer
- Bcompute layer
- Cnetworking layer
- Dperimeter layer
113You have an Azure Sentinel workspace.
You need to automate responses to threats detected by Azure Sentinel.
What should you use?- Aadaptive network hardening in Azure Security Center
- BAzure Service Health
- CAzure Monitor workbooks
- Dadaptive application controls in Azure Security Center
114Match the Azure services benefits to the correct descriptions.
Instructions: To answer, drag the appropriate benefit from the column on the left to its description on the right. Each benefit may be used once, more than once, or not at all.
- AAzure Active Directory (Azure AD)
- BAzure Key Vault
- CAzure Lighthouse
- DMicrosoft Defender for Cloud
- EMicrosoft Sentinel
- FAzure Active Directory (Azure AD)
- GAzure Key Vault
- HAzure Lighthouse
- IMicrosoft Defender for Cloud
- JMicrosoft Sentinel
- KAzure Active Directory (Azure AD)
- LAzure Key Vault
- MAzure Lighthouse
- NMicrosoft Defender for Cloud
- OMicrosoft Sentinel
115Which Azure service can you use as a security information and event management (SIEM) solution?
- AAzure Analysis Services
- BMicrosoft Sentinel
- CAzure Information Protection
- DAzure Cognitive Services
116An Azure Policy inititative definitions is a ________
- Acollection of policy definitions
- Bcollection of Azure Policy definition assignments
- Cgroup of Azure Blueprints definitions
- Dgroup of role-based access control (RBAC) role assignments
117You have an Azure subscription.
You need to review your secure score.
What should you use?- AAzure Monitor
- BAzure Advisor
- CHelp + support
- DMicrosoft Defender for Cloud
118You can enable in time (JIT) VM access by using [blank_start]Azure Bastion[blank_end]
- AAzure Bastion
- BAzure Firewall
- CAzure Front Door
- DMicrosoft Defender for Cloud
119You can view your company's regulatory compliance report from [blank_start]Azure Advisor[blank_end]
- AAzure Advisor
- BAzure Analysis Services
- CAzure Monitor
- DMicrosoft Defender for cloud
120You need to collect and automatically analyze security events from Azure Active Directory (Azure AD).
What should you use?- AMicrosoft Sentinel
- BAzure Synapse Analytics
- CAzure AD Connect
- DAzure Key Vault
121[blank_start]Application security groups in Azure[blank_end] enables users to authenticate to multiple applications by using single sign-in (SSO)
- AApplication security groups in Azure
- BAzure Active Directory (Azure AD)
- CAzure Key Vault
- DMicorsoft Defender for Cloud
122A network security group (NSG) will block all network traffic by default
- ATrue
- BFalse
123Application security groups can be specified as parto of network security group (NSG) rules
- ATrue
- BFalse
124Network security groups (NSGs) always include inbound security rules and outbound security rules
- ATrue
- BFalse
125Match the term to the appropriate description.
To answer, drag the appropriate term from the column on the left to its description on the right. Each term may be used once, more than once, or not at all.
- Aauthorization
- Bmulti-factor authentication (MFA)
- Csingle sign-on (SSO)
- Dauthorization
- Emulti-factor authentication (MFA)
- Fsingle sign-on (SSO)
- Gauthorization
- Hmulti-factor authentication (MFA)
- Isingle sign-on (SSO)
126Your company plans to automate the deployment of servers to Azure.
Your manager is concerned that you may expose administrative credentials during the deployment.
You need to recommend an Azure solution that encrypts the administrative credentials during the deployment.
What should you include in the recommendation?- AAzure Key Vault
- BAzure Information Protection
- CMicrosoft Defender for Cloud
- DAzure Multi-Factor Authentication (MFA)
127After you create a virtual machine, you need to modify the [blank_start]network security group (NSG)[blank_end] to allow connections to TCP port 808 on the virtual machine
- Anetwork security group (NSG)
- Bvirtual network gateway
- Cvirtual network
- Droute table
128Azure distributed denial of service (DDoS) protection is an example of preotection that is implemented at the [blank_start]application layer[blank_end]
- Aapplication layer
- Bcompute layer
- Cnetworking layer
- Dperimeter layer
129Microsoft Sentinel uses playbooks to [blank_start]automatically respond to threats[blank_end]
- Aautomatically respond to threats
- Bvisualize data collected by connectors
- Cspecify how long data is retained
- Dstore passwords and certificates
130You need to configure an Azure solution that meets the following requirements:
✑ Secures websites from attacks
✑ Generates reports that contain details of attempted attacks
What should you include in the solution?- AAzure Firewall
- Ba network security group (NSG)
- CAzure Information Protection
- DDDoS protection
131You plan to implement several security services for an Azure environment. You need to identify which Azure services must be used to meet the following security requirements:
✑ Monitor threats by using sensors
✑ Enforce Azure Multi-Factor Authentication (MFA) based on a condition
Which Azure service should you identify for each requirement? To answer, select the appropriate options in the answer area.
Monitor threats by using sensors: [blank_start]Azure Monitor[blank_end]
Enforce Azure MFA based on a condition: [blank_start]Azure Monitor[blank_end]- AAzure Monitor
- BAzure Security Center
- CAzure Act. Directory Identity Protection
- DAzure Advanced Threat Protection (ATP)
- EAzure Monitor
- FAzure Security Center
- GAzure Act. Directory Identity Protection
- HAzure Advanced Threat Protection (ATP)
132Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
What are two possible solutions? Each correct answer presents a complete solution.- AModify an Azure Traffic Manager profile
- BModify a network security group (NSG)
- CModify a DDoS protection plan
- DModify an Azure firewall
133You can enable just in time (JIT) VM access by using [blank_start]Azure Bastion[blank_end]
- AAzure Bastion
- BAzure Firewall
- CAzure Front Door
- DAzure Security Center
134You can associate a network security group (NSG) to a virtual network subnet
- ATrue
- BFalse
135You can associate a network security group (NSG) to a virtual network
- ATrue
- BFalse
136You can associate a network security group (NSG) to a network interface
- ATrue
- BFalse
137You have an Azure environment that contains 10 virtual networks and 100 virtual machines.
You need to limit the amount of inbound traffic to all the Azure virtual networks.
What should you create?- Aone application security group (ASG)
- B10 virtual network gateways
- C10 Azure ExpressRoute circuits
- Done Azure firewall
138Azure Key Vault is used to store secrets for "Azure Active Directory (Azure AD) user accounts".
Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed`. If the statement is incorrect, select the answer choice that makes the statement correct.- ANo change is needed
- BAzure Active Directory (Azure AD) administrative accounts
- CPersonally Identifiable Information (PII)
- Dserver applications
139Your company plans to automate the deployment of servers to Azure.
Your manager is concerned that you may expose administrative credentials during the deployment.
You need to recommend an Azure solution that encrypts the administrative credentials during the deployment.
What should you include in the recommendation?- AAzure Key Vault
- BAzure Information Protection
- CAzure Security Center
- DAzure Multi-Factor Authentication (MFA)
140You plan to deploy several Azure virtual machines.
You need to control the ports that devices on the Internet can use to access the virtual machines.
What should you use?- Aa network security group (NSG)
- Ban Azure Active Directory (Azure AD) role
- Can Azure Active Directory group
- Dan Azure key vault
141After you create a virtual machine, you need to modify the [blank_start]network security group (NSG)[blank_end] to allow connections TCP port 8080 on the virtual machine
- Anetwork security group (NSG)
- Bvirtual network gateway
- Cvirtual network
- Droute table
142You can create custom Azure roles to control access to resources
- ATrue
- BFalse
143A user account can be assigned to multiple Azure roles
- ATrue
- BFalse
144A resource group can have the Owner role assigned to multiple users.
- ATrue
- BFalse
145Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
Solution: You modify a network security group (NSG).
Does this meet the goal?
A. Yes- AYes
- BNo
146Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
Solution: You modify a DDoS protection plan.
Does this meet the goal?- AYes
- BNo
147You need to collect and automatically analyze security events from Azure Active Directory (Azure AD).
What should you use?- AAzure Sentinel
- BAzure Synapse Analytics
- CAzure AD Connect
- DAzure Key Vault
148Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
Solution: You modify an Azure firewall.
Does this meet the goal?- AYes
- BNo
149Azure Germany can be used by legal residents of Germany only.
Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed`. If the statement is incorrect, select the answer choice that makes the statement correct.- Ano change is needed
- Bonly enterprises that are registered in Germany
- Conly enterprises that purchase their azure licenses from a partner based in Germany
- Dany user or enterprise that requires its data to reside in Germany
150Identities stored in an on-permises Aztive Directory can be synchonized to Azure Active Directory (Azure AD)
- ATrue
- BFalse
151Identities stored in Azure Active Directory (Azure AD), third-party cloud services, and on-permises Active Directory can be used to access Azure resources
- ATrue
- BFalse
152Azure has built-in auhtentication and authorization services that provide secure access to Azure resources
- ATrue
- BFalse
153You can view your comapny's regulatory compliance report from [blank_start]Azure advisor[blank_end]
- AAzure advisor
- BAzure Analysis Services
- CAzure Monitor
- DAzure Security Center
154What should you use to evaluate whether your company's Azure environment meets regulatory requirements?
- AAzure Service Health
- BAzure Knowledge Center
- CAzure Security Center
- DAzure Advisor
155Your comany implements [blank_start]Azure policies[blank_end] automatically add a watermark to Microsoft Word documents that contain credit card information
- AAzure policies
- BDDoS protecton
- CAzure Information Protection
- DAzure AD Identity Protection
156Azure Aztive Directory (Azure AD) requires the implementation fo domain controllers on Azure virtual machines
- ATrue
- BFalse
157Azure Active Directory (Azure AD) provides authentication services for resources hosted in Azure and Microsoft 365
- ATrue
- BFalse
158Each user account in Azure Azctive Directory (Azure AD) can be assigned only one license
- ATrue
- BFalse
159Which two types of customers are eligible to use Azure Government to develop a cloud solution? Each correct answer presents a complete solution.
- Aa Canadian government contractor
- Ba European government contractor
- Ca United States government entity
- Da United States government contractor
- Ea European government entity
160To implement an Azure Multi-Factor Authentication (MFA) solution, you must sync on-permises identities to the cloud
- ATrue
- BFalse
161Two valid methods for Azure Multi-Factor Authentication (MFA) are picture identification and a passport number
- ATrue
- BFalse
162Azure Multi-Facotr Authentication (MFA) can be required for administrative and non-administrative user accounts
- ATrue
- BFalse
163You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted automatically to change their password.
Which Azure service should you use?- AAzure AD Connect Health
- BAzure AD Privileged Identity Management
- CAzure Advanced Threat Protection (ATP)
- DAzure AD Identity Protection
164Match the term to the correct definition.
Instructions: To answer, drag the appropriate term from the column on the left to its description on the right. Each term may be used once, more than once, or not at all.
- AAzure Government
- BGDPR
- CISO
- DNIST
- EAzure Government
- FGDPR
- GISO
- HNIST
- IAzure Government
- JGDPR
- KISO
- LNIST
- MAzure Government
- NGDPR
- OISO
- PNIST
165To what should an application connect to retrieve security tokens?
- Aan Azure Storage account
- BAzure Active Directory (Azure AD)
- Ca certificate store
- Dan Azure key vault
166Your network contains an Active Directory forest. The forest contains 5,000 user accounts.
Your company plans to migrate all network resources to Azure and to decommission the on-premises data center.
You need to recommend a solution to minimize the impact on users after the planned migration.
What should you recommend?- AImplement Azure Multi-Factor Authentication (MFA)
- BSync all the Active Directory user accounts to Azure Active Directory (Azure AD)
- CInstruct all users to change their password
- DCreate a guest user account in Azure Active Directory (Azure AD) for each user
167You can configure the Azure Active Directory (Azure AD) activity logs to appear in Azure Monitor
- ATrue
- BFalse
168From the Azure Monitor, you can monitor resources across multiple Azure subscriptions
- ATrue
- BFalse
169From Azure Monitor, you can create alerts
- ATrue
- BFalse
170You create a resource group named RG1 in Azure Resource Manager.
You need to prevent the accidental deletion of the resources in RG1.
Which setting should you use? To answer, select the appropriate setting in the answer area.- AQuickstart
- BResource costs
- CDeployments
- DPolicies
- EProperties
- FLocks
- GExport template
171You have a resource group named RG1.
You need to prevent the creation of virtual machines in RG1. The solution must ensure that other objects can be created in RG1.
What should you use?- Aa lock
- Ban Azure role
- Ca tag
- Dan Azure policy
172You have an Azure subscription and 100 Windows 10 devices.
You need to ensure that only users whose devices have the latest security patches installed can access Azure Active Directory (Azure AD)-integrated applications.
What should you implement?- Aa conditional access policy
- BAzure Bastion
- CAzure Firewall
- DAzure Policy
173What can Azure Information Protection encrypt?
- Anetwork traffic
- Bdocuments and email messages
- Can Azure Storage account
- Dan Azure SQL database
174What should you use to evaluate whether your company's Azure environment meets regulatory requirements?
- Athe Knowledge Center website
- Bthe Advisor blade from the Azure portal
- CCompliance Manager from the Service Trust Portal
- Dthe Solutions blade from the Azure portal
175[blank_start]Application security groups in Azure[blank_end] enables users to authenticate to multiple applications by using single sign-on (SSO)
- AApplication security groups in Azure
- BAzure Active Directory (Azure AD)
- CAzure Key Vault
- DAzure Security Center
176You have an Azure subscription.
Where will you find details on the personal data collected by Microsoft, how Microsoft uses the data, and what the data is used for?- Athe Data Protection Addendum
- Bthe Microsoft Online Services Terms
- Cthe Microsoft Privacy Statement
- DAzure Security Center
177Azure Active Directory (Azure AD) can be used to manage access to on-persmises applications
- ATrue
- BFalse
178Azure Active Directory (Azure AD) provides single sign-on (SSO)
- ATrue
- BFalse
179iOS devices can be registered in Azure Active Directory (Azure AD)
- ATrue
- BFalse
180You have an Azure virtual netwotk named VNET1 in a resource group named RG1.
You assign the Azure policy definition of Not Allowed Resource.
Type and specify that virtual networks are not an allowed resource
type in RG1. VNET1 ____________- Ais deleted automatically
- Bos moved automatically to another resource group
- Ccotinues to function normally
- Dis now a read-only object
181Trust Center is a part of the Azure Security Center
- ATrue
- BFalse
182Trust Center can only be accessed by usersthat have an Azure subscription
- ATrue
- BFalse
183Trust Center provides information about the Azure compliance offerings
- ATrue
- BFalse
184You can use Azure Policy to apply tags to resources
- ATrue
- BFalse
185You can add multiple tags to the same Azure resource
- ATrue
- BFalse
186An Azure resource inhertis tags from the resource group to which the resource is deployed
- ATrue
- BFalse
187Match the resources to the appropriate descriptions.
To answer, drag the appropriate resource from the column on the left to its description on the right. Each resource may be used once, more than once, or not at all.
- AData Protection Addendum
- BMicrosoft Privacy Statement
- COnline Services Terms
- DData Protection Addendum
- EMicrosoft Privacy Statement
- FOnline Services Terms
- GData Protection Addendum
- HMicrosoft Privacy Statement
- IOnline Services Terms
188Requiring a user to enter a password and answer a security question when signing-in to Azure Active Directory (Azure AD) is an example of _________________
- Abusiness-to-consumer (B2C) identity services
- Bmanaged identities
- Cmulti-factor authentication (MFA)
- Drole-based access control (RBAC)
189Microsoft China _______________
- Ais operated by Microsoft
- Bhas feature parity with Azure global
- Cservices can be accessed from China only
- Dis a distinct separate instance of Microsoft Azure
190What should you use to evaluate whether your company's Azure environment meets regulatory requirements?
- AAzure Service Health
- BAzure Knowledge Center
- CMicrosoft Defender for Cloud
- DAzure Advisor
191You can review audit reports and compilance-related information for Azure services from __________
- AMicrosoft Defender for Cloud
- Bthe Microsoft Defender for Identity admin center
- Cthe Microsoft 365 Compilance center
- Dthe Microsoft Service Trust Portal
192The Mcrosoft Service Trust Portal can be accessed by using a Microsoft cloud services account
- ATrue
- BFalse
193Compilance Manager can be used to track your company's regulatory compilance activities related to Microsoft cloud services
- ATrue
- BFalse
194The My Library feature can be used to save Microsoft Service Trust Portal documents and resources in a single location
- ATrue
- BFalse
195Your company has an Azure subscription that contains resources in several regions.
You need to create the Azure resource that must be used to meet the policy requirement.
What should you create?- Aa read-only lock
- Ban Azure policy
- Ca management group
- Da reservation
196From __Azure Cloud Shell__, you can track your company's regulatory standards and regulations, such as ISO 27001.
Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed.` If the statement is incorrect, select the answer choice that makes the statement correct.- ANo change is needed.
- Bthe Microsoft Cloud Partner Portal
- CCompliance Manager
- Dthe Trust Center
197You can create Group Policies in Azure Active Directory (Azure AD).
- ATrue
- BFalse
198You can join Windows 10 devices to Azure Active Directory (Azure AD).
- ATrue
- BFalse
199You can join Android devices to Azure Active Directory (Azure AD).
- ATrue
- BFalse
200The ________ explains what data Microsoft processes, how Microsoft processes the data, and the purpose of processing the data
- AMicrosoft Online Services Privacy Statement
- BMicrosoft Product Terms
- CMicrosoft Online Service Level Agreement
- DOnline Subscritpion Agreement from Microsoft Azure
Information
- Description
- Analista AZ900 Quiz on AZ900 ( 140 - 296), created by Daniel Oria Martín on 10/01/2023.
- Author
- Daniel Oria Martín
- Language
- Español
- Views
- 1,336
- History
- Created on 10 Jan 2023 · updated on 11 Jan 2023
- Tags
- Rating
- No ratings yet Rate this quiz