AZ-900 Flashcards

1
Q

Which calculator is used to estimate cost savings by migrating to Azure?

A. Azure Price Calculator
B. TCO Calculator

A

TCO Calculator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Multi-factor authentication (MFA) provides additional security for your identities by requiring two or more elements for full authentication?
True or False?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a feature of Azure Active Directory?

A. B2B identity services
B. Application management
C. Device Management
D. Single Sign-On (SSO)
E. Authentication
F. All of the above

A

All of the above

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the options for a Policy Definition?

Allowed VM SKU’s
Locations
Allowed Resource Type
Allowed Storage Account SKUs
All of the above

A

All of the above

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the logical breakup of Virtual Network known as?

A Hyper - V
B VM Ware
C SubNet
D NoNet

A

SubNet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

In which solution requires the least amount of management for users?

A SaaS
B IaaS
C DaaS
D PaaS

A

SaaS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

A Video file is an example of what kind of data type?

A Semi-structured data
B Structured data
C Unstructured data
D None of the above

A

Unstructured data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

______________ is a workflow-based risk assessment dashboard within the Trust Portal that enables you to track, assign, and verify your organization’s regulatory compliance activities related to Microsoft professional services and Microsoft cloud service?

A Service Trust Portal
B Microsoft Trust Center
C Microsoft Privacy Statement
D Compliance Manager

A

Compliance Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Azure Security Center is available with what options?

A Standard
B Free
C Both
D None

A

Both

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

A virtual network allows Azure resources to securely communicate with each other, the internet, and on-premises networks.

Yes Y
No N

A

Y

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

You hold the most technical responsibility in what kind of solution?

A DaaS (Database as a Service)
B PaaS
C SaaS
D IaaS

A

SaaS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

__________is a service that monitors the availability, performance, and usage of your web applications, whether they’re hosted in the cloud or on-premises?

A Azure Service Health
B Azure Monitor
C Compliance Manager
D Application Insights

A

Application Insights

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Option of SSD and HDD is an option for what kind of Azure database service?

A Data Lake
B Azure Queue
C Disk Storage
D Azure Files
E Cosmos DB

A

Disk Storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the right formation?

A. Management Group > Policy > Initiative
B. Initiative > Management Group > Policy
C. Management Group > Initiative > Policy
D. Policy > Management Group > Initiative

A

Management Group > Initiative > Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is a logical container for resources deployed on Azure?

A Resource Group
B Resource Manager
C Tags
D Azure Group

A

Resource Group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

You hold the most technical responsibility in what kind of solution?

A On Premises
B SaaS
C IaaS
D PaaS

A

On Premises

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Azure SQL database is designed to support what type of database?

A Structured data
B Semi-structured data
C Unstructured data
D None of the above

A

Structured data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which is an Azure Encryption service?

Azure Storage Service Encryption
Azure Disk Encryption
Transparent data encryption (TDE)
All of the above

A

All of the above

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is a load balancer designed for web applications at a TCP(Transport Level)?

Gateway
Load Balancer
Network security group
Traffic Manager

A

Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which option has the maximum responsibility of Customer?

IaaS
PaaS
SaaS
Equal in all options

A

IaaS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are Azure services for Network Security?

Virtual network security
Azure Application Gateway
Azure Application Gateway
Azure Firewall
All of the above

A

All of the above

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is the maximum of Tag on an Resource

10
25
20
15

A

15

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

_______________is a suite of experiences that provide personalized guidance and support when issues with Azure services affect you?

Azure Service Health
Azure Monitor for VMs
Application Insights
Azure Monitor for Containers

A

Azure Service Health

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What are the valid ways to create a resource group?

A. Portal, PowerShell, templates & SDK
B. Portal, CLI, PowerShell, templates, SDK
C. Portal, CLI, PowerShell & SDK
D. Portal, CLI, PowerShell, templates

A

Portal, CLI, PowerShell, templates, SDK

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is a service in Azure that you use to define, assign, and, manage standards for resources in your environment?

A Azure DevOps
B Azure Locations
C Azure Policy
D Azure Police

A

Azure Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Which of the following is designed for data analytics?

A CosmosDB
B BLOB Storage
C SQL database
D Data Lake

A

Data Lake

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Which of the following is not a Data Storage tier?

A. Archived
B. Warm
C. Hot
D. Cold

A

Warm

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

You company is running an extremely predictable solution with known workload for foreseen long turn future. What can be a viable solution?

A CapEx Computing Solution
B OpEx - Operational Expense cloud solution
C Both
D None

A

CapEx Computing Solution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Each policy definition in Azure Policy has a what kind of effect?

A Single
B Mutliple
C Double
D None

A

Single

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Which is NOT a feature of Azure Application Gateway?

A Web application firewall
B URL rule-based routes
C SSL termination
D Cookie affinity
E None of the above

A

None of the above

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

You don’t need to manage the application in what kind of service?

A SaaS
B PaaS
C On-Premises
D IaaS

A

SaaS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What can be used to enforce standards?

A Policies
B Resource Group
C Tags
D All of the Above

A

Policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Which service allows or denies inbound network traffic to your Azure resources?

A Load Balancer
B Gateway
C Network security group
D Traffic manager

A

Network security group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

A NoSQL data is an example of what kind of data type?

A. Unstructured data
B. Structured data
C. Semi-structured data
D. None of the above

A

Semi-structured data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is the way to encrypt data at rest?

A. Client-side encryption
B. Azure Storage Service Encryption (SSE)
C. Both
D. None of the above

A

Azure Storage Service Encryption (SSE)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Buying and installing your own datacenter is what kind of solution?

A. CapEx Computing Solution
B. OpEx - Operating Expense Cloud solution
C. None
D. Both

A

CapEx Computing Solution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Which of the following is ideal for Video and Audio streaming?

A. SQL Database
B. Cosmos DB
C. Data Lake
D. BLOB storage

A

BLOB storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

_______ hosts the Compliance Manager service, and is the Microsoft public site for publishing audit reports and other compliance-related information relevant to Microsoft cloud services.

A. Microsoft Trust Center
B. Compliance Manager
C. Service Trust Portal
D. Microsoft Privacy Statement

A

Service Trust Portal

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Which of the following is designed for decoupled data transfer?

A. Azure Files
B. Azure Queue
C. Cosmos DB

A

B. Azure Queue

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What is a Tag in Azure?

A. Name/value pairs of text data that you can apply to resources and resource groups
B. Name/value pairs of text data that you can apply to resource groups
C. A movie
D. Name/value pairs of text data that you can apply to resources

A

Name/value pairs of text data that you can apply to resources and resource groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What is the process of establish what level of access an authenticated person or service has?

A. Authorization
B. Identification
C. Authentication
D. None of the Above

A

Authorization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Suppose you have limited budget, How does Azure helps in terms of storage?

A. Secures your data
B. Pay As You go is cheaper than setting up own data center
C. Helps with buying hardware
D. All of the above

A

Pay As You go is cheaper than setting up own data center

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What is a service you can use to create, assign, and manage policies. These policies apply and enforce rules that your resources need to follow

A. Tags
B. Azure Manager
C. Policies
D. Resource Group

A

Policies

44
Q

Which is the most expensive data storage type?

A. Archived
B. Cold
C. Hot
D. Warm

A

Hot

45
Q

Which of the following is Quickly scale able?

A

OpEx

46
Q

What refers to a system’s ability to stay operational during abnormal conditions?

A. Availability
B. Resiliency
C. Both
D. None

A

Resiliency

47
Q

Azure SQL Database is what kind of service?

A. SaaS
B. PaaS
C. IaaS
D. None of the above

A

Resiliency

48
Q

Azure SQL Database is what kind of service?

A. SaaS
B. PaaS
C. IaaS
D. None of the above

A

PaaS

49
Q

_______helps you diagnose and obtain support when an Azure service issue affects your resources?

A. Azure Status
B. Resource Health
C. Azure Monitor
D. Azure Service Health

A

Azure Monitor

50
Q

What uses the DNS server that’s closest to the user to direct user traffic to a globally distributed endpoint?

A. Traffic Manager
B. Gateway
C. Network security group
D. Load balancer

A

Traffic Manager

51
Q

What is a complete development and deployment environment in the cloud, with resources that enable organizations to deliver everything from simple cloud-based apps to sophisticated cloud-enabled enterprise applications?

A. SaaS
B. DaaS
C. PaaS
D. IaaS

A

PaaS

52
Q

Which of the following Azure service is accessible thru Service message block(SMB)?

A. Cosmos DB
B. Azure Files
C. Azure files
D. Azure Queue
E. Disk Storage

A

Azure Files

53
Q

Which is ideal for large distributed data storage?

A. Cosmos DB
B. SQL database
C. Data Lake
D. Blob Storage

A

Cosmos DB

54
Q

What delivers a comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments?

A. Application Insights
B. Compliance Manager
C. Azure Service Health
D. Azure Monitor

A

Azure Monitor

55
Q

Which is an example of Azure unstructured data storage?

A. Cosmos DB
B. SQL Database
C. BLOB storage
D. Data lake

A

BLOB storage

56
Q

What is the cost effective way to store your rarely used data?

A. Cold
B. Hot
C. Archived
D. Warm

A

Archived

57
Q

What is a monitoring service that provides threat protection across all of your services both in Azure, and on-premises

A. Azure Watch
B. Azure Monitor
C. Azure Police
D. Azure Security Center

A

Azure Security Center

58
Q

What Assigns user friendly name to IP address?

A. CDN (Content Delivery Network)
B. DNS
C. HTTP
D. Load Balancer

A

DNS

59
Q

__________ maintains relationship with resources even after deployment?

A. Azure Blueprint
B. Azure Resource Manager Templates
C. Both
D. None

A

Azure Blueprint

60
Q

Microsoft Excel macro is an example of what kind of service?

A. PaaS
B. DaaS
C. SaaS
D. IaaS

A

PaaS

61
Q

Primary services to monitor the health of your apps and resources is/are?

A. Azure Monitor
B. Azure Service Health
C. None
D. Both

A

Both

62
Q

Application security is a ________?

A. User Responsibility
B. Shared Responsibility
C. Azure Responsibility
D. Government Responsibility

A

Shared Responsibility

63
Q

What is the most flexible category of cloud services?

A. PaaS
B. IaaS
C. DaaS
D. SaaS

A

IaaS

64
Q

What is a distributed network of servers that can efficiently deliver web content to users?

A. CDN (Content Delivery Network)
B. HTTP
C. Load Balancer
D. DNS

A

CDN (Content Delivery Network)

65
Q

Your company is experimenting with a new solution with high risk of failure. What is preferred way to go?

A. CapEx
B. OpEx
C. Both
D. None

A

OpEx

66
Q

What is an identity that is used by a service or application?

A. Service Principals
B. MFA
C. SSO
D. All of the Above

A

Service Principals

67
Q

Which of the following service is DaaS(Database as a Service) and based on MS SQL server?

A. BLOB Storage
B. Data Lake
C. SQL database
D. Cosmos DB

A

SQL database

68
Q

Tags can be used for automated actions and organization of Resources?
True or False

A

True

69
Q

Which of the following solution is Agile?

A

OpEx

70
Q

What could be the most efficient way to ensure a naming convention was followed across your subscription?

A. Send Memo
B. Create Tag
C. Run Reports
D. Create Policy

A

Create Policy

71
Q

One resource can be part of many resource group?

A

False

72
Q

What is a cloud-based security solution that identifies, detects, and helps you investigate advanced threats, compromised identities, and malicious insider actions directed at your organization?

A. Azure Disk Encryption
B. Azure Firewall
C. MSIPE - Microsoft Azure Information Protection
D. Azure Advanced Threat Protection (Azure ATP)

A

Azure Advanced Threat Protection (Azure ATP)

73
Q

Resource Groups can be nested?
T or F?

A

F

74
Q

Which of the following is NOT a benefit of storing data in Azure cloud?

A. Cost Effective
B. Auto backup
C. Mutliple data types
D. Global replication for safety
E. Difficult to analyze

A

Difficult to analyze

75
Q

___________is a service that is designed to monitor the performance of container workloads?

A. Azure Monitor for containers
B. Azure Service Health
C. Application Insights
D. Azure Monitor for VMs

A

Azure Monitor for containers

76
Q

What option will you use to protect credit card information in document?

A. Azure Firewall
B. Azure Disk Encryption
C. MSIPE - MS Azure Information Protection
D. Azure Application Gateway

A

MSIPE - MS Azure Information Protection

77
Q

What defines the set of controls that are recommended for resources within that specified subscription or resource group?

A. Security Policy
B. Azure Monitor
C. Azure Watch
D. Azure Security Center

A

Security Policy

78
Q

________ is a website resource containing information and details about how Microsoft implements and supports security, privacy, compliance, and transparency in all Microsoft cloud products and services.

A. Microsoft Privacy Statement
B. Microsoft Trust Center
C. Compliance Manager
D. Service Trust Portal

A

Microsoft Trust Center

79
Q

What can be the organizing principle for Resource Groups?

A. Organizing for lifecycle
B. Organization for Authorization
C. Organizing for billing
D. All of the above

A

All of the above

80
Q

Almost all attackers are after?

A. Firewall
B. Network
C. Data
D. Compute

A

Data

81
Q

What is the process of managing and assigning policy definitions by grouping a set of policies into a single item?

A. Grouping
B. Cluster
C. Initiative
D. Startup

A

Initiative

82
Q

What does RBAC stands for in Azure?

A. Role-based Azure control
B. Role-based access commitment
C. Role based access control
D. Retro based access control

A

Role based access control

83
Q

What Azure service is used to move data to the cloud?

A. Data immigration service
B. Data backup service
C. Data Migration Service
D. All of the above

A

Data Migration Service

84
Q

What allows you to define a repeatable set of Azure resources that implement and adhere to your organization’s standards, patterns, and requirements?

A. Management Group
B. Initiative
C. Azure Resource Manager Templates
D. Azure Blueprint

A

Azure Blueprint

85
Q

In which format does the data adheres to a schema?

A. Unstructured data
B. Structured data
C. Semi-structure data
D. None of the above

A

Structured data

86
Q

Udemy is an example of what kind of service?

A. SaaS
B. PaaS
C. IaaS
D. None of the above

A

SaaS

87
Q

Your company maintains and stores legal information and needs to follow security norms and procedure which is far more aggressive then the industry standards. What is an optimal solution?

A. Wait for next gen cloud
B. Private Cloud
C. Hybrid cloud
D. Public Cloud - Azure, AWS, etc

A

Private Cloud

88
Q

_____________explains what personal data Microsoft processes, how Microsoft processes it, and for what purposes?

A. Compliance Manager
B. Microsoft Privacy Statement
C. Microsoft Trust Center
D. Service Trust Portal

A

Microsoft Privacy Statement

89
Q

What kind of data storage is most beneficial in Azure?

A. Predictable Data
B. Consistent small data
C. Data that fluctuates significantly with demanid
D. None of the above

A

Data that fluctuates significantly with demanid

90
Q

What is a setting that can be applied to any resource to block modification or deletion?

A. Resource Groups
B. Tags
C. Policies
D. Resource Locks

A

Resource Locks

91
Q

Which of the following has an upfront cost?

A. IaaS
B. PaaS
C. SaaS
D. None of the above

A

None of the above

92
Q

You want to deploy your own web application quickly without taking any responsibility of Operating System, Web server or system updates. What is the right solution for you?

A. DaaS
B. SaaS
C. PaaS
D. IaaS

A

PaaS

93
Q

What distributes traffic evenly among each system in a pool and can help you achieve both high availability and resiliency?

A. Load Balancer
B. Network Security Group
C. Traffic Manager
D. Gateway

A

Load Balancer

94
Q

You want to setup a website or blog quickly. What could be an optimal solution?

A. Hybrid
B. Private Cloud
C. Public Cloud
D. Wait for the next gen cloud

A

Public Cloud

95
Q

What is Azure service to stop Distributed Denial of Service attacks

A. Azure Application Gateway
B. Azure DDoS Protection
C. Azure Firewall

A

Azure DDoS Protection

96
Q

What helps protect Azure SQL Database and Azure Data Warehouse against the threat of malicious activity?

A. Transparent Data encryption (TDE)
B. Azure Storage Service Encryption
C. Azure Disk Encryption
D. All of the above

A

Transparent Data encryption (TDE)

97
Q

Suppose you work at a startup with limited funding. Why might you prefer Azure data storage over an on-premises solution?

A. To ensure you run on a specific brand of hardware which will let you to form a marketing partnership with that hardware vendor.
B. The Azure pay-as-you-go billing model lets you avoid buying expensive hardware.
C. To get exact control over the location of your data store.

A

The Azure pay-as-you-go billing model lets you avoid buying expensive hardware.

98
Q

Which of the following situations would yield the most benefits from relocating an on-premises data store to Azure?

A. Unpredictable storage demand that increases and decreases multiple times throughout the year.
B. Long-term, steady growth in storage demand.
C. Consistent, unchanging storage demand.

A

Unpredictable storage demand that increases and decreases multiple times throughout the year.

99
Q

What is an Azure region?

A. One or more Azure data centers within a specific geographical location.
B. A way of breaking networks into smaller networks.
C. Firewall rules which define the flow of traffic in and out of Azure.

A

One or more Azure data centers within a specific geographical location.

100
Q

Which of the following is true about virtual networks?

A. You configure virtual networks through software.
B. A virtual network accepts network traffic on all ports. You configure the firewall through virtual machines.
C. Virtual networks are always reachable from the internet.

A

You configure virtual networks through software.

101
Q

Which is true about Azure Load Balancer?

A. You must use Azure Load Balancer if you want to distribute traffic among your virtual machines running in Azure.
B. Azure Load Balancer works with internet-facing traffic only.
C. Azure Load Balancer distributes traffic among similar systems, making your services more highly available.

A

Azure Load Balancer distributes traffic among similar systems, making your services more highly available.

102
Q

What is network latency?

A. The amount of data that can fit on the connection.
B. The distance data must travel to reach its destination.
C. The time it takes for data to travel over the network.

A

The time it takes for data to travel over the network.

103
Q

How does Azure Traffic Manager reduce latency?

A. It chooses only the fastest networks between endpoints.
B. It chooses the endpoint that’s closest to the user’s DNS server.
C. It caches content, similar to how content delivery networks work.

A

It chooses the endpoint that’s closest to the user’s DNS server.

104
Q

Cloud security is a shared responsibility between you and your cloud provider. Which category of cloud services requires the greatest security effort on your part?

A. Infrastructure as a service (IaaS)
B. Platform as a service (PaaS)
C. Software as a service (SaaS)

A

Infrastructure as a service (IaaS)

105
Q

Which of these helps you most easily disable an account when an employee leaves your company?

A. Enforce multi-factor authentication (MFA)
B. Monitor sign-on attempts
C. Use single sign-on (SSO)

A

Use single sign-on (SSO)