Sample AZ-900 Questions

Which Azure Active Directory (Azure AD) feature is used to provide access to resources based on organizational policies?

A. multi-factor authentication (MFA)
B. single sign-on (SSO)
C. administrative units
D. Conditional Access
Click the card to flip 👆
1 / 20
Terms in this set (20)
Which Azure Active Directory (Azure AD) feature is used to provide access to resources based on organizational policies?

A. multi-factor authentication (MFA)
B. single sign-on (SSO)
C. administrative units
D. Conditional Access
D. Conditional Access

Conditional Access is the tool used by Azure Active Directory to allow (or deny) access to resources based on identity signals. Conditional access is a more refined MFA (multifactor authentication) method.
Single sign-on (SSO) is __________ method that enables users to sign in the first time and access various applications and resource by using same password.
A. a validation
B. an authentication
C. a configuration
D. an authorization
B. an authentication

Single sign-on is an authentication method that allows users to sign in using one set of credentials to login across applications. Single sign-on makes it easier to manage passwords and increases security capabilities.
Match the services to the correct descriptions

Services
A. Pricing calculator
B. TCO calculator
C. Cost management

Descriptions
1. Estimates workload costs
2. Estimates the cost savings by comparing datacenter costs to running the same workload on Azure
3. Helps control, analyze, and optimize workload costs
A1, B2, C3

Pricing calculator helps you to estimate workload cost.TCO Calculator provided approximate cost savings of operating similar workload on Azure to on-premises datacenter.Azure Cost Management helps to understand Azure bill, manage account.
__________ is a repeatable set of governance tools that helps development teams quickly build and create new environments while adhering to organizational compliance to speed up development and deployment.


A. Azure DevOps
B. A Continuous Integration/Continuous Deployment (CI/CD) pipeline configuration
C. Azure Blueprints
D. Azure Policy
C. Azure Blueprints

Sometimes Cloud environment grow beyond just one subscription, in that case Azure Blueprints help to scale the configuration. Azure Blueprints help with repeatable tasks so that development teams rapidly build and deploy new environments and speed the overall development and deployment phases.Blueprints are a declarative way to orchestrate the deployment of various resource templates.
Match the services to the correct descriptions

Services
A. Infrastructure as a service (IaaS)
B. Platform as a service (PaaS)
C. Software as a service (SaaS)

Descriptions
1. Provides hosting and management of an application and its underlying infrastructure, as well as any maintenance, upgrades, and security patching

2. Provides a fully managed environment for developing, testing, delivering, and managing cloud-based applications

3. Provides servers and virtual machines, storage, networks, and operating systems on a pay-as-you-go basis
A3, B2, C1
Infrastructure as a service (IaaS) -Offers necessary compute, storage, and networking assets on demand, on a pay-as-you-go basis.Platform as a service (PaaS) - Provide complete development and deployment environment in the cloud, with assets that enable to deliver simple cloud-based apps to cloud-enabled enterprise applications.Software as a service (SaaS) -Host and manage the software application and underlying infrastructure.
Which cloud approach is used by organizations to take full advantage of on-premises technology investments and allows data and applications to be shared between two environments?
A. public cloud
B. private cloud
C. hybrid cloud
D. on-premises datacenter
C. hybrid cloud
A Hybrid cloud is a type of cloud computing that combines on-premises infrastructure or a private cloud with a public cloud. Hybrid clouds allow data and apps to move between the two environments.
__________ copies data to a secondary region from the primary region across multiple datacenters that are located many miles apart.
A. Premium storage
B. Zone redundant storage (ZRS)
C. Geo-redundant storage (GRS)
D. Locally-redundant storage (LRS)
C. Geo-redundant storage (GRS)
Geo-redundant storage (GRS) -Replicates your data to a secondary region that is in different geographic locations from the primary region.
Which option is used to set the communication between an on-premises VPN device and an Azure VPN gateway through an encrypted tunnel over the internet?
A. ExpressRoute
B. Point-to-Site (P2S) VPN
C. Site-to-Site VPN
C. Site-to-Site VPN
Site-to-site VPN: Established between on-premises VPN device and an Azure VPN Gateway that is deployed in a virtual network. This connection type allow communication between any on-premises authorize resource to access a virtual network through an encrypted tunnel.
You use __________ to organize resources in an Azure subscription.
A. Azure regions
B. Resource groups
C. Management groups
D. Administrative units
B. Resource groups
Azure resources are combined into resource groups, which act as logical containers into which Azure resources like web apps, databases, and storage accounts are deployed and managed.
Which defense in depth layer uses distributed denial of service (DDoS) protection?
A. Physical security layer
B. Perimeter layer
C. Network layer
D. Application layer
B. Perimeter layer
The perimeter layer uses distributed denial of service (DDoS) protection to filter large-scale attacks before they can cause a denial of service for users.
Which Azure serverless computing technology provides the ability to execute workflows to automate business scenarios by using triggers without writing any code? A. Azure Functions B. Azure Logic Apps C. Azure Front Door D. Azure DevOpsB. Azure Logic Apps Azure Logic Apps are designed in a web-based designer and can execute logic triggered by Azure services without writing any code.What can you use to launch the Azure Cloud Shell? A. Azure portal B. Azure PowerShell C. Azure Command Line Interface (CLI) D. Azure Resource Manager (ARM) templateA. Azure portal Azure You can access the Cloud Shell in three ways:• Direct link: Open a browser to https://shell.azure.com.• Azure portal: Select the Cloud Shell icon on the Azure portal.• Code snippets: On learn.microsoft.com and Microsoft Learn, select the Try It button__________ enables you to scale to thousands of virtual machines for high-performance computing and large-scale parallel jobs. A. An Azure virtual machine scale set B. An availability set C. Azure Batch D. An availability zoneC. Azure Batch Azure Batch allows you to scale to thousands of virtual machines for high-performance computing (HPC) and large-scale parallel jobs. Other Azure functionalities allow you to scale multiple VMs, but only Azure Batch will allow for thousands of VMs for HPC.Match the services to the correct descriptions Services A. Azure Resource Locks B. Azure Blueprints C. Azure Policy Descriptions 1. Rapidly provisions and runs new environments with the knowledge that they are in line with the organization's compliance requirements 2. Enforces standards and assess compliance across your organization 3. Prevents resources from being accidentally deleted or changedA3, B1, C2 - Resource locks can be used to prevent resources from being accidentally deleted or changed. - Azure Blueprints provide a way to define a repeatable set of Azure resources. - Azure Policy is designed to help enforce standards and assess compliance across your organization.__________ enables you to provision a group of matching and load-balanced virtual machines in Azure. A. Azure Logic Apps B. An availability set C. An Azure virtual machine scale set D. Azure Load BalancerC. An Azure virtual machine scale set Virtual machine scale enables you to provision a group of matching and load-balanced virtual machines in Azure._________in Azure enables you to deploy Azure resources close to the users. A. Elasticity B. Scalability C. Geo-distribution D. High availabilityC. Geo-distribution Because of geo-distribution you can deploy apps and data to regional datacenters around the globe, thereby ensuring that your customers always have the best performance in their region.__________ is supported by ExpressRoute for connecting an on-premises network to Azure. A. A Point-to-Site VPN B. A point-to-point Ethernet connection C. A Site-to-Site VPN D. Azure Peering serviceB. A point-to-point Ethernet connection - A Point-to-point Ethernet connection is supported by ExpressRoute for connecting your on-premises network to Azure. - The three models that ExpressRoute supports are:• CloudExchange colocation• Point-to-point Ethernet connection• Any-to-any-connectionWhich Azure feature enables you to organize multiple subscriptions in hierarchies for unified policies and compliance? A. Resource groups B. Management groups C. Azure Active Directory (Azure AD) D. Azure Container InstancesB. Management groups - Management groups help you manage access, policy, and compliance for multiple subscriptions. - All subscriptions in a management group automatically inherit the conditions applied to the management group.__________ alerts you when service issues occur in an Azure environment, such as a regional Azure outage that affects all Azure customers. A. Azure Monitor B. Azure Advisor C. Azure Service Health D. Azure Application InsightsC. Azure Service Health Azure Service Health alerts you about service issues that happen in Azure itself, such as a regional Azure outageMatch the services to the correct descriptions Services A. Authorization B. Authentication Descriptions 1. Confirms the identity of a person who wants access 2. Grants the proper access to a legitimate userA2, B1 -Authentication - To confirm the identity of a person who wants access. - Authorization - To grant the proper access to a legitimate user.