Practice Microsoft Azure AZ-900 exam. Online Exam Practice Tests with detailed explanations! Pass AZ-900 with confidence!

AZ-900 - Microsoft Azure Fundamentals Practice Tests 2021 | VCE4Dumps

NEW QUESTION 67
Your company has an Azure environment that contains resources in several regions.
A company policy states-that administrators must only be allowed to create additional Azure resources in a region in the country where their office is located.
You need to create the Azure resource that must be used to meet the policy requirement.
What should you create?

• A. a read-only lock
• B. an Azure policy
• C. a reservation
• D. a management group

Answer: B

 

NEW QUESTION 68
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has an Azure subscription that contains the following unused resources:
* 20 user accounts in Azure Active Directory (Azure AD)
* Five groups in Azure AD
* 10 public IP addresses
* 10 network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused public IP addresses.
Does this meet the goal?

• A. No
• B. Yes

Answer: B

Explanation:
Section: Understand Azure Pricing and Support
Explanation
Explanation:
You are charged for public IP addresses. Therefore, deleting unused public IP addresses will reduce the Azure costs.
References:
https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations#reduce-costs-by-deleting-or- reconfiguring-idle-virtual-network-gateways

 

NEW QUESTION 69
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

Box 1: No
A PaaS solution does not provide access to the operating system. The Azure Web Apps service provides an environment for you to host your web applications. Behind the scenes, the web apps are hosted on virtual machines running IIS. However, you have no direct access to the virtual machine, the operating system or IIS.
Box 2: Yes
Box 3: Yes
A PaaS solution that hosts web apps in Azure does provide the ability to scale the platform automatically. This is known as autoscaling. Behind the scenes, the web apps are hosted on virtual machines running IIS.
Autoscaling means adding more load balanced virtual machines to host the web apps.
References:
https://azure.microsoft.com/en-gb/overview/what-is-paas/

 

NEW QUESTION 70
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

 

NEW QUESTION 71
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system.
Solution: You use the PowerApps portal.
Does this meet the goal?

• A. No
• B. Yes

Answer: A

Explanation:
Section: Understand Core Azure Services
Explanation:
PowerApps lets you quickly build business applications with little or no code. It is not used to create Azure virtual machines. Therefore, this solution does not meet the goal.
PowerApps Portals allow organizations to create websites which can be shared with users external to their organization either anonymously or through the login provider of their choice like LinkedIn, Microsoft Account, other commercial login providers.
References:
https://powerapps.microsoft.com/en-us/blog/introducing-powerapps-portals-powerful-low-code-websites-for- external-users/

 

NEW QUESTION 72
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

Azure AD join only applies to Windows 10 devices.
References:
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy
https://docs.microsoft.com/en-us/azure/active-directory/devices/azureadjoin-plan

 

NEW QUESTION 73
In which Azure support plans can you open a new support request?

• A. Premier and Professional Direct only
• B. Premier, Professional Direct, Standard, and Developer only
• C. Premier, Professional Direct, and Standard only
• D. Premier, Professional Direct, Standard, Developer, and Basic

Answer: D

Explanation:
https://docs.microsoft.com/en-us/azure/azure-portal/supportability/how-to-create-azure-support-request

 

NEW QUESTION 74
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company plans to migrate all its data and resources to Azure.
The company's migration plan states that only platform as a service (PaaS) solutions must be used in Azure.
You need to deploy an Azure environment that supports the planned migration.
Solution: You create an Azure App Service and Azure Storage accounts.
Does this meet the goal?

• A. No
• B. Yes

Answer: A

Explanation:
Azure Storage Accounts are IaaS, PaaS as Microsoft says is "a complete development and deployment environment in the cloud, with resources that enable you to deliver everything from simple cloud-based apps to sophisticated, cloud-enabled enterprise applications". So the answer is No because Storage is IaaS.

 

NEW QUESTION 75
This question requires that you evaluate the Bold text to determine if it is correct.
After you create a virtual machine, you need to modify the network security group (NSG) to allow connections from TCP port 8080 to the virtual machine.
Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

• A. virtual network
• B. virtual network gateway.
• C. No change is needed.
• D. route table.

Answer: C

Explanation:
Reference:
https://mymicrosoftexchange.wordpress.com/2019/03/20/allow-external-rdp-to-your-newly-created-azure-vm/

 

NEW QUESTION 76
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

 

NEW QUESTION 77
You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted automatically to change their password.
Which Azure service should you use?

• A. Azure AD Connect Health
• B. Azure AD Identity Protection
• C. Azure AD Privileged Identity Management
• D. Azure Advanced Threat Protection (ATP)

Answer: B

Explanation:
Section: Describe identity, governance, privacy, and compliance features Explanation:
Azure AD Identity Protection includes two risk policies: sign-in risk policy and user risk policy. A sign-in risk represents the probability that a given authentication request isn't authorized by the identity owner.
There are several types of risk detection. One of them is Anonymous IP Address. This risk detection type indicates sign-ins from an anonymous IP address (for example, Tor browser or anonymous VPN). These IP addresses are typically used by actors who want to hide their login telemetry (IP address, location, device, etc.) for potentially malicious intent.
You can configure the sign-in risk policy to require that users change their password.
References:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-risk-policy
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks

 

NEW QUESTION 78
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

References:
https://docs.microsoft.com/en-us/azure/advisor/advisor-overview
https://microsoft.github.io/AzureTipsAndTricks/blog/tip173.html

 

NEW QUESTION 79
For each of the following statements, select Yes if the statement is true, Otherwise, select No.
NOTE: Each correct match is worth one point.

Answer:

Explanation:

Explanation

.

 

NEW QUESTION 80
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

Box 1: Yes
Most services go to private preview then public preview before being released to general availability.
The private preview is only available to certain Azure customers for evaluation purposes. The public preview is available to all Azure customers.
Box 2: No
Azure services in public preview can be managed using the regular management tools: Azure Portal, Azure CLI and PowerShell.
Box 3: No
Services in private or public preview are usually offered at reduced costs. However, the costs increase, not decrease when the services are released to general availability.

 

NEW QUESTION 81
You plan to implement an Azure database solution.
You need to implement a database solution that meets the following requirements:
Can add data concurrently from multiple regions
Can store JSON documents
Which database service should you deploy? To answer, select the appropriate service in the answer area.

Answer:

Explanation:

Explanation

Section: Understand Core Azure Services
References:
https://docs.microsoft.com/en-us/azure/azure-functions/functions-integrate-store-unstructured-data-cosmosdb?t

 

NEW QUESTION 82
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation:
Azure AD join only applies to Windows 10 devices.
References:
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy
https://docs.microsoft.com/en-us/azure/active-directory/devices/azureadjoin-plan

 

NEW QUESTION 83
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

Box 1: No
Azure Advisor does not generate a list of virtual machines that ARE protected by Azure Backup. Azure Advisor does however, generate a list of virtual that ARE NOT protected by Azure Backup. You can view a list of virtual machines that are protected by Azure Backup by viewing the Protected Items in the Azure Recovery Services Vault.
Box 2: No
If you implement the security recommendations, you company's score will increase, not decrease.
Box 3: No
There is no requirement to implement the security recommendations provided by Azure Advisor. The recommendations are just that, 'recommendations'. They are not 'requirements'.
References:
https://azure.microsoft.com/en-gb/blog/advisor-backup-recommendations/
https://docs.microsoft.com/en-us/azure/advisor/advisor-overview
https://microsoft.github.io/AzureTipsAndTricks/blog/tip173.html

 

NEW QUESTION 84
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You plan to deploy several Azure virtual machines.
You need to ensure that the services running on the virtual machines are available if a single data center fails.
Solution: You deploy the virtual machines to two or more scale sets.
Does this meet the goal?

• A. No
• B. Yes

Answer: A

Explanation:
Section: Understand Cloud Concepts
Explanation/Reference:
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/availability

 

NEW QUESTION 85
You have an Azure environment that contains 10 virtual networks and 100 virtual machines.
You need to limit the amount of inbound traffic to all the Azure virtual networks.
What should you create?

• A. 10 virtual network gateways
• B. one application security group (ASG)
• C. 10 Azure ExpressRoute circuits
• D. one Azure firewall

Answer: D

Explanation:
Section: Understand Core Azure Services
Explanation:
You can restrict traffic to multiple virtual networks with a single Azure firewall.
Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources. It's a fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability.
You can centrally create, enforce, and log application and network connectivity policies across subscriptions and virtual networks. Azure Firewall uses a static public IP address for your virtual network resources allowing outside firewalls to identify traffic originating from your virtual network.
References:
https://docs.microsoft.com/en-us/azure/firewall/overview

 

NEW QUESTION 86
......

Get instant access to AZ-900 practice exam questions: https://drive.google.com/open?id=1EqF9EXGcOK5p1D0be6s22WX7Q_mSJIbX

The best AZ-900 exam study material and preparation tool is here: https://www.vce4dumps.com/AZ-900-valid-torrent.html