AZ-900 Flashcards
A support engineer plans to perform several Azure management tasks by using the Azure CLI.
You install the CLI on a computer.
You need to tell the support engineer which tools to use to run the CLI.
Which two tools should you instruct the support engineer to use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Command Prompt
B. Azure Resource Explorer
C. Windows Defender Firewall
D. Network and Sharing Center
A and B
You need to identify the type of failure for which an Azure availability zone can be used to protect access to Azure services.
What should you identify?
A. physical server failure
B. Azure region failure
C. storage failure
D. Azure data center failure
D
You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region.
Which Azure service should you use from the Azure portal to view service failure notifications that can affect the availability of VM1?
A. Azure Service Fabric
B. Azure Monitor
C. Azure Virtual Machines
D. Azure Advisor
C
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
An Azure administrator plans to run a PowerShell script that creates Azure resources.
You need to recommend which computer configuration to use to run the script.
Solution: Run the script from a computer that runs Linux and has the Azure CLI tools installed.
Does this meet the goal?
No
You have an Azure environment that contains 10 virtual networks and 100 virtual machines.
You need to limit the amount of inbound traffic to all the Azure virtual networks.
What should you create?
A. One NSG
B. 10 VNG
C. 10 Azure ExpressRoute circuits
D. One Azure firewall
D
You have an Azure environment that contains multiple Azure virtual machines.
You plan to implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines.
You need to recommend which Azure resources must be created for the planned solution.
Which two Azure resources should you include in the recommendation? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Virtual Network Gateway
B. Load balancer
C. Virtual Network
D. Application Gateway
E. Gateway Subnet
A and E
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure environment.
You need to create a new Azure virtual machine from an Android laptop.
Solution: You use Bash in Azure Cloud Shell.
Does this meet the goal?
Yes
HOTSPOT -
You plan to create an Azure virtual machine.
You need to identify which storage service must be used to store the data disks of the virtual machine.
What should you identify? To answer, select the appropriate service in the answer area.
Hot Area:
A. Blob
B. Tables
C. Queues
D. Files
A
Your company plans to move several servers to Azure.
The company’s compliance policy states that a server named FinServer must be on a separate network segment.
You are evaluating which Azure services can be used to meet the compliance policy requirements.
Which Azure solution should you recommend?
A. Resource group for FinServer and another resource group for all the other servers
B. Virtual network for FinServer and another virtual network for all other servers
C. VPN for FinServer and a virtual network gateway for each other server
D. One resource group for all the servers and a resource lock for FinServer
B
You plan to map a network drive from several computers that run Windows 10 to Azure Storage. You need to create a storage solution in Azure for the planned mapped drive.
What should you create?
A. Azure SQL database
B. Virtual machine data disk
C. Files service in a storage account
D. Blobs service in a storage account
C
Your company plans to migrate all its network resources to Azure.
You need to start the planning process by exploring Azure.
What should you create first?
A. Subscription
B. Resource Group
C. Virtual Network
D. Management Group
A
You have an on-premises application that sends email notifications automatically based on a rule.
You plan to migrate the application to Azure.
You need to recommend a serverless computing solution for the application.
What should you include in the recommendation?
A. Web App
B. Server image in Azure Marketplace
C. Logic App
D. API App
C
You plan to deploy a website to Azure. The website will be accessed by users worldwide and will host large video files.
You need to recommend which Azure feature must be used to provide the best video playback experience.
What should you recommend?
A. Application gateway
B. Azure ExpressRoute circuit
C. Content Delivery Network
D. Azure Traffic Manager
C
You have a public load balancer that balances ports 80 and 443 across three virtual machines.
You need to direct all the Remote Desktop Protocol (RDP) connections to VM3 only.
What should you configure?
A. Inbound NAT Rule
B. Load balancing rule
C. New public load balancer for VM3
D. Frontend IP configuration
A
Create an inbound NAT port-forwarding rule:
Create a load balancer inbound network address translation (NAT) rule to forward traffic from a specific port of the front-end IP address to a specific port of a back-end VM.
- Select All resources in the left-hand menu, and then select MyLoadBalancer from the resource list.
- Under Settings, select Inbound NAT rules, and then select Add.
- On the Add inbound NAT rule page, type or select the following values:
- Name: Type MyNATRuleVM1.
- Port: Type 4221.
- Target virtual machine: Select MyVM1 from the drop-down.
- Port mapping: Select Custom.
- Target port: Type 3389.
- Select OK.
A. if you have Azure resources deployed to every region, you can implement availability zones in all regions
B. Only virtaul machines that run Windows Server can be created in availability zones
C. Availability Zones are used to replicate data and applications to multiple regions
D. None of the above
D
You plan to implement an Azure database solution.
You need to implement a database solution that meets the following requirement:
NoSQL support
A. Azure Cosmos dB
B. SQL Servers
A
What is guaranteed in an Azure Service Level Agreement (SLA)?
A. Uptime
B. Feature availability
C. Bandwidth
D. Performance
A
For each of the following statements, select Yes if the statement is true. Otherwise, select No
Azure provides flexibility between CapEx and OpEX?
If you create two Azure VM will always generate the same monthly Cost?
When an Azure VM is stopped you continue to pay storage costs associated to the VM?
Y
N
Y
This question requires that you evaluate the highlighted text to determine if it is correct.
When you are implementing a software as a service (SaaS) solution, you are responsible for configuring high availability.
Instructions: Review the highlighted text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct
A. No change needed
B. defining scalability rules
C. Installing the SaaS solution
D. configuring the SaaS solution
D
You have an on-premises network that contains several servers.
You plan to migrate all the servers to Azure.
You need to recommend a solution to ensure that some of the servers are available if a single Azure data center goes offline for an extended period.
What should you include in the recommendation?
A. Fault Tolerance
B. Elasticity
C. Scalability
D. Low Latency
A
This question requires that you evaluate the text in ** to determine if it is correct.
An organization that hosts its infrastructure in a ** private cloud** can decommission its data center.
Instructions: Review the above text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. in a hybrid cloud
C. in the public cloud
D. on a Hyper-V host
C
What are two characteristics of the public cloud? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Dedicated Hardware
B. Unsecured Connections
C. Limited Storage
D. Metered Pricing
E. Self-Service Management
D and E
This question requires that you evaluate the text in ** to determine if it is correct.
When planning to migrate a public website to Azure, you must plan to ** pay monthly ** usage costs.
Instructions: Review the above text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A.No change is needed
B. Deploy a VPN
C. pay to transfer all the websites data to Azure
D. Reduce the number of connections to the websites
A
This question requires that you evaluate the text in ** to determine if it is correct.
When planning to migrate a public website to Azure, you must plan to ** pay monthly ** usage costs.
Instructions: Review the above text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A.No change is needed
B. Deploy a VPN
C. pay to transfer all the websites data to Azure
D. Reduce the number of connections to the websites
A
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company plans to migrate all its data and resources to Azure.
The company’s migration plan states that only platform as a service (PaaS) solutions must be used in Azure.
You need to deploy an Azure environment that supports the planned migration.
Solution: You create an Azure App Service and Azure SQL databases.
Does this meet the goal?
Yes
Your company plans to migrate all its data and resources to Azure.
The company’s migration plan states that only platform as a service (PaaS) solutions must be used in Azure.
You need to deploy an Azure environment that supports the planned migration.
Solution: You create an Azure App Service and Azure virtual machines that have Microsoft SQL Server installed.
Does this solution meet the goal?
No
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
Your company plans to migrate all its data and resources to Azure.
The company’s migration plan states that only platform as a service (PaaS) solutions must be used in Azure.
You need to deploy an Azure environment that supports the planned migration.
Solution: You create an Azure App Service and Azure Storage accounts.
Does this meet the goal?
No
Your company hosts an accounting named App1 that is used by all the customers of the company.
App1 has low usage during the first three weeks of each month and very high usage during the last week of each month.
Which benefit of Azure Cloud Services supports cost management for this type of usage pattern?
A. High Availability
B. High Latency
C. elasticity
D. load balancing
C
You plan to migrate a web application to Azure. The web application is accessed by external users.
You need to recommend a cloud deployment solution to minimize the amount of administrative effort used to manage the web application.
What should you include in the recommendation?
A. Saas
B. IaaS
C. PaaS
D. DaaS
C
Consider the following scenario. Then choose the best response for each question that follows and select
Check your answers.
Tailwind Traders is moving its online payment system from its datacenter to the cloud. The payment system consists of virtual machines (VMs) and SQL Server databases.
Here are a few security requirements that the company identifies as it plans the migration:
It wants to ensure a good security posture across all of its systems, both on Azure and on-premises.
In the datacenter, access to virtual machines requires a TLS certificate. The company needs a place to safely store and manage its certificates.
Here are some additional requirements that relate to regulatory compliance:
Tailwind Traders must store certain customer data on-premises, in its datacenter.
For certain workloads, the company must be the only customer running VMs on the physical hardware.
The company must only run approved business applications on each VM.
Here’s a diagram that shows the proposed architecture:
A. Connect your VM’s to Azure Sentinel
B. Create and application control rule in Azure Security Center
C. Periodically run a script that lists the running processes on each VM. The IT manager can then shut down any application that shouldn’t be running.
B
Consider the following scenario. Then choose the best response for each question that follows and select
Check your answers.
Tailwind Traders is moving its online payment system from its datacenter to the cloud. The payment system consists of virtual machines (VMs) and SQL Server databases.
Here are a few security requirements that the company identifies as it plans the migration:
It wants to ensure a good security posture across all of its systems, both on Azure and on-premises.
In the datacenter, access to virtual machines requires a TLS certificate. The company needs a place to safely store and manage its certificates.
Here are some additional requirements that relate to regulatory compliance:
Tailwind Traders must store certain customer data on-premises, in its datacenter.
For certain workloads, the company must be the only customer running VMs on the physical hardware.
The company must only run approved business applications on each VM.
Here’s a diagram that shows the proposed architecture:
On Azure, Tailwind Traders will use both standard virtual machines and virtual machines that run on dedicated physical hardware. In the datacenter, the company will run virtual machines that can connect to databases within its internal network.
What’s the easiest way for Tailwind Traders to combine security data from all of its monitoring tools into a single report that it can take action on?
A. Collect security data in Azure Sentinel
B. Build a custom tool that collects security data and displays a report through a web application
C. Lok through each security log daily and email a summary to your team
A
Consider the following scenario. Then choose the best response for each question that follows and select
Check your answers.
Tailwind Traders is moving its online payment system from its datacenter to the cloud. The payment system consists of virtual machines (VMs) and SQL Server databases.
Here are a few security requirements that the company identifies as it plans the migration:
It wants to ensure a good security posture across all of its systems, both on Azure and on-premises.
In the datacenter, access to virtual machines requires a TLS certificate. The company needs a place to safely store and manage its certificates.
Here are some additional requirements that relate to regulatory compliance:
Tailwind Traders must store certain customer data on-premises, in its datacenter.
For certain workloads, the company must be the only customer running VMs on the physical hardware.
The company must only run approved business applications on each VM.
Here’s a diagram that shows the proposed architecture:
On Azure, Tailwind Traders will use both standard virtual machines and virtual machines that run on dedicated physical hardware. In the datacenter, the company will run virtual machines that can connect to databases within its internal network.
Which is the best way for Tailwind Traders to safely store its certificates so that they’re accessible to cloud VMs?
A. Place the certificates on a network share
B. Store them on a VM that is protected by a password
C. Store the certificates in Azure Key Vault
C
Consider the following scenario. Then choose the best response for each question that follows and select Check your answers.
Tailwind Traders is moving its online payment system from its datacenter to the cloud. The payment system consists of virtual machines (VMs) and SQL Server databases.
Here are a few security requirements that the company identifies as it plans the migration:
It wants to ensure a good security posture across all of its systems, both on Azure and on-premises.
In the datacenter, access to virtual machines requires a TLS certificate. The company needs a place to safely store and manage its certificates.
Here are some additional requirements that relate to regulatory compliance:
Tailwind Traders must store certain customer data on-premises, in its datacenter.
For certain workloads, the company must be the only customer running VMs on the physical hardware.
The company must only run approved business applications on each VM.
Here’s a diagram that shows the proposed architecture:
On Azure, Tailwind Traders will use both standard virtual machines and virtual machines that run on dedicated physical hardware. In the datacenter, the company will run virtual machines that can connect to databases within its internal network.
How can Tailwind Traders ensure that certain VM workloads are physically isolated from workloads being run by other Azure customers?
A. Configure the network to ensure that VM’s on the same physical host are isolate
B. This is not possible, These workloads need to be run on-prem
C. Run the VMs on Azure Dedicated Host
C
HOTSPOT -
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Hot Area:
The achieve a hybrid cloud model, a company mist always migrate from a private cloud?
A company can extend the capacity of its internal network by using the public cloud?
In a public cloud model, only guest users at your company can access the resources in the cloud?
No
Yes
No
You plan to migrate several servers from an on-premises network to Azure.
You need to identify the primary benefit of using a public cloud service for the servers.
What should you identify?
A. The public cloud is owned by the public, NOT a private connection
B. The public cloud is a crows-sourcing solution that provides corporations with the ability to enhance the cloud
C. All public cloud resources can be freely accessed by every member of the public
D. The public cloud a shared entity whereby multiple corporations each use a portion of the resources in the cloud
D
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
You plan to deploy several Azure virtual machines.
You need to ensure that the services running on the virtual machines are available if a single data center fails.
Solution: You deploy the virtual machines to two or more scale sets.
Does this meet the goal?
No
You plan to deploy several Azure virtual machines.
You need to ensure that the services running on the virtual machines are available if a single data center fails.
Solution: You deploy the virtual machines to two or more availability zones.
Does this meet the goal?
Yes
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
You plan to deploy several Azure virtual machines.
You need to ensure that the services running on the virtual machines are available if a single data center fails.
Solution: You deploy the virtual machines to two or more regions.
Does this meet the goal?
Yes
You have 1,000 virtual machines hosted on the Hyper-V hosts in a data center.
You plan to migrate all the virtual machines to an Azure pay-as-you-go subscription.
You need to identify which expenditure model to use for the planned Azure solution.
Which expenditure model should you identify?
A. operational
B. Elastic
C. capital
D. scalable
A
Match the Azure Cloud Services benefit to the correct description.
Your company has an on-premises network that contains multiple servers.
The company plans to reduce the following administrative responsibilities of network administrators:
✑ Backing up application data
✑ Replacing failed server hardware
✑ Managing physical server security
✑ Updating server operating systems
✑ Managing permissions to shared documents
The company plans to migrate several servers to Azure virtual machines.
You need to identify which administrative responsibilities will be reduced after the planned migration.
Which two responsibilities should you identify? Each correct answer presents a complete solution.
A. Replacing failed server hardware
B. Backing up application data
C. Managing physical server security
D. Updating server operating system
E. Managing permissions to shared documents
A and C
Consider the following scenario. Then choose the best response for each question that follows and select Check your answers.
Tailwind Traders is moving its online payment system to Azure. The processing of online orders begins through a website, which Tailwind Traders manages through Azure App Service. (App Service is a way to host web applications on Azure.)
The web application that runs the website passes order information to virtual machines (VMs), which further process each order. These VMs exist on an Azure virtual network, but they need to access the internet to retrieve software packages and system updates.
Here’s a diagram that shows the basic architecture of the company’s payment system:
The security team wants to ensure that only valid network traffic reaches the company’s Azure resources. As an extra layer of defense, the team also wants to ensure that the VMs can reach only trusted hosts on specific ports.
An attacker can bring down your website by sending a large volume of network traffic to your servers. Which Azure service can help Tailwind Traders protect its App Service instance from this kind of attack?
A. Azure Firewall
B. Network Security Groups
C. Azure DDoS Protection
C
Consider the following scenario. Then choose the best response for each question that follows and select Check your answers.
Tailwind Traders is moving its online payment system to Azure. The processing of online orders begins through a website, which Tailwind Traders manages through Azure App Service. (App Service is a way to host web applications on Azure.)
The web application that runs the website passes order information to virtual machines (VMs), which further process each order. These VMs exist on an Azure virtual network, but they need to access the internet to retrieve software packages and system updates.
Here’s a diagram that shows the basic architecture of the company’s payment system:
The security team wants to ensure that only valid network traffic reaches the company’s Azure resources. As an extra layer of defense, the team also wants to ensure that the VMs can reach only trusted hosts on specific ports.
What’s the best way for Tailwind Traders to limit all outbound traffic from VMs to known hosts?
A. Configure Azure DDoS Protection to limit network access to trusted ports and hosts
B. Create application riles in Azure Firewall
C. Ensure that all running applications communicate with only trusted ports and hosts
B
Consider the following scenario. Then choose the best response for each question that follows and select Check your answers.
Tailwind Traders is moving its online payment system to Azure. The processing of online orders begins through a website, which Tailwind Traders manages through Azure App Service. (App Service is a way to host web applications on Azure.)
The web application that runs the website passes order information to virtual machines (VMs), which further process each order. These VMs exist on an Azure virtual network, but they need to access the internet to retrieve software packages and system updates.
Here’s a diagram that shows the basic architecture of the company’s payment system:
The security team wants to ensure that only valid network traffic reaches the company’s Azure resources. As an extra layer of defense, the team also wants to ensure that the VMs can reach only trusted hosts on specific ports.
How can Tailwind Traders most easily implement a deny by default policy so that VMs can’t connect to each other?
A. Allocate each VM on its own virtual network
B. Create a network security group rule that prevents access from another VM on the same network
C. Configure Azure DDoS Protection to limit network access within the virtual network
B
Consider the following scenario. Then choose the best response for each question that follows, and select Check your answers.
Tailwind Traders has created environments for development and testing for its e-commerce system.
Here’s a diagram that shows the basic compute, database, and networking components found in each environment.
These environments provide a way for the team to build and test new application features.
Although the development and test teams report to different departments, both environments exist under the same Azure subscription.
The IT manager wants to implement governance controls to help ensure that only authorized users can access these systems. Having these controls in place will also help them track and manage operating costs.
How can Tailwind Traders allow some users to control the virtual machines in each environment but prevent them from modifying networking and other resources in the same resource group or Azure subscription?
A. Create a role assignment through Azure role-based access control (Azure RBAC)
B. Create a policy in Azure Policy that audits resource useage
C. Split the env into separate resource groups
A
Consider the following scenario. Then choose the best response for each question that follows, and select
Check your answers.
Tailwind Traders has created environments for development and testing for its e-commerce system.
Here’s a diagram that shows the basic compute, database, and networking components found in each environment.
These environments provide a way for the team to build and test new application features.
Although the development and test teams report to different departments, both environments exist under the same Azure subscription.
The IT manager wants to implement governance controls to help ensure that only authorized users can access these systems. Having these controls in place will also help them track and manage operating costs.
Which is the best way for Tailwind Traders to ensure that the team deploys only cost-effective virtual machine SKU sizes?
A. Creates a policy in Azure Policy that specifies the allowed SKU sizes
B. Periodically inspect the deployment manually to see which SKU sizes are used
C. Create an Azure RBAC role that defines the allowed virtual machine SKU
A
Consider the following scenario. Then choose the best response for each question that follows, and select Check your answers.
Tailwind Traders has created environments for development and testing for its e-commerce system.
Here’s a diagram that shows the basic compute, database, and networking components found in each environment.
These environments provide a way for the team to build and test new application features.
Although the development and test teams report to different departments, both environments exist under the same Azure subscription.
The IT manager wants to implement governance controls to help ensure that only authorized users can access these systems. Having these controls in place will also help them track and manage operating costs.
Which is likely the best way for Tailwind Traders to identify which billing department each Azure resource belongs to?
A. Track resource usage in a spreadsheet
B. Split the deployment into separate Azure subscriptions, where each subscriptions belongs to its own billing
C. Apply a tag to each resource that includes the associated billing department
C
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
All the azure resources deployed to a single resource group must share same Azure region?
If you assign a tag to a resource group, all the Azure resources in that group are assigned the same tag?
If you set permissions to a resource group, all the Azure resources in that group inherit.
No
No
Yes
Your company plans to deploy an Artificial Intelligence (AI) solution in Azure.
What should the company use to build, test, and deploy predictive analytics solutions?
A. Azure Logic Apps
B. Azure Machine Learning Studio
C. Azure Batch
D. Azure Cosmos DB
B
This question requires that you evaluate the text in ** to determine if it is correct.
**Azure policies provide ** a common platform for deploying objects to a cloud infrastructure and for implementing consistency across the Azure environment.
Instructions: Review the text in **. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change needed
B. Resource groups provide
C.Azure Resources Manager provide
D. Management groups provide
C
Azure Resource Manager is the deployment and management service for Azure. It provides a management layer that enables you to create, update, and delete resources in your Azure subscription. You use management features, like access control, locks, and tags, to secure and organize your resources after deployment
Your company has several business units.
Each business unit requires 20 different Azure resources for daily operation. All the business units require the same type of Azure resources.
You need to recommend a solution to automate the creation of the Azure resources.
What should you include in the recommendations?
A. Azure Resource Manager Templates
B. virtual machine scale sets
C. Azure API Management service
D. management groups
A
Consider the following scenario. Then choose the best response for each question that follows, and select Check your answers.
Before they migrate their existing e-commerce system from their datacenter to production environments on Azure, the Tailwind Traders team wants to first set up environments for development and testing.
Here’s a diagram that shows the basic compute, database, and networking components found in each environment:
An e-commerce system might require a website, the products database, a payment system, and so on. Because developers can’t always run the entire service from their local development environment, the Dev environment is the first place where everything the app needs comes together.
After the development team verifies changes to the Dev environment, they promote changes to the Test environment. The Test environment is where the testing team verifies new app features and also verifies that no regressions, or breaks to existing features, happen as new features are added.
The team will map each component in their existing infrastructure to the appropriate Azure service.
Which is the best first step the team should take to compare the cost of running these environments on Azure versus in their datacenter?
A. They’re just test environments. Spinning them up and check the bill at the end of the month
B. Assume that running in the cloud costs about the same as running in the datacenter
C. run the Total Cost of Ownership Calculator
C
Consider the following scenario. Then choose the best response for each question that follows, and select Check your answers.
Before they migrate their existing e-commerce system from their datacenter to production environments on Azure, the Tailwind Traders team wants to first set up environments for development and testing.
Here’s a diagram that shows the basic compute, database, and networking components found in each environment:
An e-commerce system might require a website, the products database, a payment system, and so on. Because developers can’t always run the entire service from their local development environment, the Dev environment is the first place where everything the app needs comes together.
After the development team verifies changes to the Dev environment, they promote changes to the Test environment. The Test environment is where the testing team verifies new app features and also verifies that no regressions, or breaks to existing features, happen as new features are added.
The team will map each component in their existing infrastructure to the appropriate Azure service.
What’s the best way to ensure that the development team doesn’t provision too many virtual machines at the same time?
A. do nothing. Let the development team use what they need
B. Apply spending limits to the development team’s Azure Sub
C. Verbally give the deployment lead a budget and hold them accountable for overages
B
Consider the following scenario. Then choose the best response for each question that follows, and select Check your answers.
Before they migrate their existing e-commerce system from their datacenter to production environments on Azure, the Tailwind Traders team wants to first set up environments for development and testing.
Here’s a diagram that shows the basic compute, database, and networking components found in each environment:
An e-commerce system might require a website, the products database, a payment system, and so on. Because developers can’t always run the entire service from their local development environment, the Dev environment is the first place where everything the app needs comes together.
After the development team verifies changes to the Dev environment, they promote changes to the Test environment. The Test environment is where the testing team verifies new app features and also verifies that no regressions, or breaks to existing features, happen as new features are added.
The team will map each component in their existing infrastructure to the appropriate Azure service.
Which is the most efficient way for the testing team to save costs on virtual machines on weekends, when testers are not at work?
A. Delete the virtual machines before the weekend and create a new set the following week
B. Deallocate virtual machines when they’re not in use
C. just let everything run. Azure bills you only for the CPU time that you use
B
Resources in the Dev and Test environments are each paid for by different departments. What’s the best way to categorize costs by department?
A. Apply a tag to each VM that identifies the appropriate billing department
B. Split the cost evenly between departments
C. Keep a spreadsheet that lists each team’s resources
A
You plan to deploy a critical line-of-business application to Azure.
The application will run on an Azure virtual machine.
You need to recommend a deployment solution for the application. The solution must provide a guaranteed availability of 99.99 percent.
What is the minimum number of virtual machines and the minimum number of availability zones you should recommend for the deployment? To answer, select the appropriate options in the answer area.
Min number of VM’s - 1, 2, 0r 3
Min number of availability zones - 1, 2, or 3
2
2
Which Azure service should you use to correlate events from multiple resources into a centralized repository ?
A. Azure PowerShell
B. Azure Analytics Services
C. Azure Monitor
D. Azure Log Analytics
C
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure environment. You need to create a new Azure virtual machine from an Android laptop.
Solution: You use PowerShell in Azure Cloud Shell.
Does this meet the goal?
Yes
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure environment. You need to create a new Azure virtual machine from an Android laptop.
Solution: You use the PowerApps portal.
Does this meet the goal?
No
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure environment. You need to create a new Azure virtual machine from an Android laptop.
Solution: You use the Azure portal.
Does this meet the goal?
yes
You are planning on hosting a web application using the Azure Web App service. Does the platform have the ability to scale automatically ?
Yes
You decide to create 2 Virtual machines. Each virtual machine is of the size “D2s_v3”. Would these machines always generate the same monthly cost
No
Your team needs to have a tool that provides a digital online assistant that can provide speech support. Which of the following service can be used for this purpose
A. Azure Machine Learning
B. Azure IoT Hub
C. Azure I bot
D. Azure Functions
C
Your team needs to have a tool that can use past trainings to provide predictions of very high probability. Which of the following service can be used for this purpose
A. Azure Machine Learning
B. Azure IoT hub
C. Azure AI both
D. zure Functions
A
Your team needs to have a tool that can provide serverless computing capabilities. Which of the following service can be used for this purpose
A. Azure Machine Learning
B. Azure IoT Hub
C. Azure AI bot
D. Azure Functions
D
Your team needs to have a tool that can be used to process data from millions of sensors. Which of the following service can be used for this purpose
A. Azure Machine Learning
B. Azure IoT Hub
C. Azure AI bot
D. Azure Functions
B
A company needs to deploy a set of resources to Azure. Below are the key requirements for the deployment
a) The resources need to be deployed across several departments
b) The resources that need to be deployed are all of the same type
You need to recommend a solution to automate the deployment of the Azure resources. Which of the following would you use for this requirement
A. VM Scale Sets
B. Management Groups
C. Azure AD
D. Azure Resource Manager Template
D
Your company needs to deploy an application to virtual machines hosted in Azure. The solution must ensure an SLA of 99.99%. What is the minimum number of virtual machines and availability zones that you need to recommend for the deployment
A. One VM and one availability zone
B. Two VM and one availability zone
C. One VM and two availability zone
D. Two VM and two availability zone
D
Your team needs a tool that can be used to correlate events from multiple resources into a central repository. Which of the following can be used for this purpose
A. Azure Events Hubs
B. Azure Security Center
C. Azure AD
D. Azure Log Analytics
D
A company is planning on hosting an application on an Azure Virtual Machine. It needs to be ensured that the application hosted on the virtual machine is accessible from the Internet over HTTPS. You decide to implement a DDoS protection plan. Would this satisfy the requirement
No
A company is planning on hosting an application on an Azure Virtual Machine. It needs to be ensured that the application hosted on the virtual machine is accessible from the Internet over HTTPS. You decide to implement an Azure Traffic Manager profile. Would this satisfy the requirement
No
Which of the following customers are eligible to use Azure Government to develop a cloud solution? Choose 2 answers from the options given below
A. A united states government Entity
B. A united states government contractor
C. A European government Entity
D. A European government contractor
A and B
A team is currently planning on using Azure for hosting resources. They are going to create users which would have access to Azure resources. They want to implement Multi-Factor authentication for the users. Is it required to deploy a federated solution to implement Multi-Factor authentication
No
A team is currently planning on using Azure for hosting resources. They are going to create users which would have access to the Azure resources. They want to implement Multi-Factor authentication for the users. Are two valid methods for Azure Multi-Factor authentication ,picture identification and entering a passport number
No
Which of the following support plan gives you access to best practice information, health status and notifications, and 24/7 access to billing information at the lowest possible cost
A. Basic
B. Developer
C. Standard
D. Professional Direct
A
Yes or No
If you plan to host a web application in the Azure platform as a service solution of Azure Web Apps, then you will have complete control over the underlying operating system
No
You decide to create a virtual machine which is of the size “D2s_v3”. If you plan to stop the virtual machine, will you incur any costs for the storage associated with the virtual machine
Yes
Your company is planning on using Azure for hosting Infrastructure level resources such as Azure Virtual Machines. When planning for the costing aspect for these resources, is there a flexibility offered when it comes to Capital and Operational Expenditure
Yes
You are looking at using a Software as a Solution service in Azure. Which of the following would you be responsible for
A. High Availability of the solution
B. Configuration of the solution
C. Installing the solution
D. Scalability of the solution
B
A company is planning on migrating all of their on-premise servers to Azure. Their business continuity department has advised that they need to ensure that servers hosted in Azure are available even if an Azure Data Center were to go down. Which of the following is a concept that would be involved in the design stage for this requirement
A. Scalability
B. Fault Tolerance
C. Low Latency
D. Elasticity
B
Under which of the following circumstances could a company look at decommissioning its data center
A. If they have their infrastructure hosted in a private cloud
B. If they have their infrastructure hosted in a public cloud
C. If they have their infrastructure in a hybrid cloud
B
A company is planning on migrating a web site to Azure. This is a public web site that is used by users on the Internet. Which of the following must the company plan for if they are planning to migrate the web site to Azure
A. They would need to deploy a VPN
B. They would need to pay for the cost to transfer the website to Azure
C. They would need to pay for the monthly costs incurred for hosting the web site
D. They would need to pay for the number of connections to the web site
C
An administrator needs to run a script written in Powershell. This script is going to create a virtual machine in Azure. Would the script run on a computer that runs Linux and has the Azure CLI tools installed
No
An administrator needs to run a script written in Powershell. This script is going to create a virtual machine in Azure. Would you be able to run the script on a machine that has Chrome OS installed and uses Azure Cloud Shell
Yes
An administrator needs to run a script written in Powershell. This script is going to create a virtual machine in Azure. Would you be able to run the script on a machine that has macOS and Powershell core installed
Yes
