AZ-900 Flashcards Flashcards by Paul Payway

Which calculator is used to estimate cost savings by migrating to Azure?

A. Azure Price Calculator
B. TCO Calculator

TCO Calculator

How well did you know this?

Not at all

Perfectly

Multi-factor authentication (MFA) provides additional security for your identities by requiring two or more elements for full authentication?
True or False?

True

How well did you know this?

Not at all

Perfectly

What is a feature of Azure Active Directory?

A. B2B identity services
B. Application management
C. Device Management
D. Single Sign-On (SSO)
E. Authentication
F. All of the above

All of the above

How well did you know this?

Not at all

Perfectly

What are the options for a Policy Definition?

Allowed VM SKU’s
Locations
Allowed Resource Type
Allowed Storage Account SKUs
All of the above

All of the above

How well did you know this?

Not at all

Perfectly

What is the logical breakup of Virtual Network known as?

A Hyper - V
B VM Ware
C SubNet
D NoNet

SubNet

How well did you know this?

Not at all

Perfectly

In which solution requires the least amount of management for users?

A SaaS
B IaaS
C DaaS
D PaaS

SaaS

How well did you know this?

Not at all

Perfectly

A Video file is an example of what kind of data type?

A Semi-structured data
B Structured data
C Unstructured data
D None of the above

Unstructured data

How well did you know this?

Not at all

Perfectly

______________ is a workflow-based risk assessment dashboard within the Trust Portal that enables you to track, assign, and verify your organization’s regulatory compliance activities related to Microsoft professional services and Microsoft cloud service?

A Service Trust Portal
B Microsoft Trust Center
C Microsoft Privacy Statement
D Compliance Manager

Compliance Manager

How well did you know this?

Not at all

Perfectly

Azure Security Center is available with what options?

A Standard
B Free
C Both
D None

Both

How well did you know this?

Not at all

Perfectly

A virtual network allows Azure resources to securely communicate with each other, the internet, and on-premises networks.

Yes Y
No N

How well did you know this?

Not at all

Perfectly

You hold the most technical responsibility in what kind of solution?

A DaaS (Database as a Service)
B PaaS
C SaaS
D IaaS

SaaS

How well did you know this?

Not at all

Perfectly

__________is a service that monitors the availability, performance, and usage of your web applications, whether they’re hosted in the cloud or on-premises?

A Azure Service Health
B Azure Monitor
C Compliance Manager
D Application Insights

Application Insights

How well did you know this?

Not at all

Perfectly

Option of SSD and HDD is an option for what kind of Azure database service?

A Data Lake
B Azure Queue
C Disk Storage
D Azure Files
E Cosmos DB

Disk Storage

How well did you know this?

Not at all

Perfectly

What is the right formation?

A. Management Group > Policy > Initiative
B. Initiative > Management Group > Policy
C. Management Group > Initiative > Policy
D. Policy > Management Group > Initiative

Management Group > Initiative > Policy

How well did you know this?

Not at all

Perfectly

What is a logical container for resources deployed on Azure?

A Resource Group
B Resource Manager
C Tags
D Azure Group

Resource Group

How well did you know this?

Not at all

Perfectly

You hold the most technical responsibility in what kind of solution?

A On Premises
B SaaS
C IaaS
D PaaS

On Premises

How well did you know this?

Not at all

Perfectly

Azure SQL database is designed to support what type of database?

A Structured data
B Semi-structured data
C Unstructured data
D None of the above

Structured data

How well did you know this?

Not at all

Perfectly

Which is an Azure Encryption service?

Azure Storage Service Encryption
Azure Disk Encryption
Transparent data encryption (TDE)
All of the above

All of the above

How well did you know this?

Not at all

Perfectly

What is a load balancer designed for web applications at a TCP(Transport Level)?

Gateway
Load Balancer
Network security group
Traffic Manager

Gateway

How well did you know this?

Not at all

Perfectly

Which option has the maximum responsibility of Customer?

IaaS
PaaS
SaaS
Equal in all options

IaaS

How well did you know this?

Not at all

Perfectly

What are Azure services for Network Security?

Virtual network security
Azure Application Gateway
Azure Application Gateway
Azure Firewall
All of the above

All of the above

How well did you know this?

Not at all

Perfectly

What is the maximum of Tag on an Resource

10
25
20
15

How well did you know this?

Not at all

Perfectly

_______________is a suite of experiences that provide personalized guidance and support when issues with Azure services affect you?

Azure Service Health
Azure Monitor for VMs
Application Insights
Azure Monitor for Containers

Azure Service Health

How well did you know this?

Not at all

Perfectly

What are the valid ways to create a resource group?

A. Portal, PowerShell, templates & SDK
B. Portal, CLI, PowerShell, templates, SDK
C. Portal, CLI, PowerShell & SDK
D. Portal, CLI, PowerShell, templates

Portal, CLI, PowerShell, templates, SDK

How well did you know this?

Not at all

Perfectly

What is a service in Azure that you use to define, assign, and, manage standards for resources in your environment? A Azure DevOps B Azure Locations C Azure Policy D Azure Police

Azure Policy

Which of the following is designed for data analytics? A CosmosDB B BLOB Storage C SQL database D Data Lake

Data Lake

Which of the following is not a Data Storage tier? A. Archived B. Warm C. Hot D. Cold

Warm

You company is running an extremely predictable solution with known workload for foreseen long turn future. What can be a viable solution? A CapEx Computing Solution B OpEx - Operational Expense cloud solution C Both D None

CapEx Computing Solution

Each policy definition in Azure Policy has a what kind of effect? A Single B Mutliple C Double D None

Single

Which is NOT a feature of Azure Application Gateway? A Web application firewall B URL rule-based routes C SSL termination D Cookie affinity E None of the above

None of the above

You don't need to manage the application in what kind of service? A SaaS B PaaS C On-Premises D IaaS

SaaS

What can be used to enforce standards? A Policies B Resource Group C Tags D All of the Above

Policies

Which service allows or denies inbound network traffic to your Azure resources? A Load Balancer B Gateway C Network security group D Traffic manager

Network security group

A NoSQL data is an example of what kind of data type? A. Unstructured data B. Structured data C. Semi-structured data D. None of the above

Semi-structured data

What is the way to encrypt data at rest? A. Client-side encryption B. Azure Storage Service Encryption (SSE) C. Both D. None of the above

Azure Storage Service Encryption (SSE)

Buying and installing your own datacenter is what kind of solution? A. CapEx Computing Solution B. OpEx - Operating Expense Cloud solution C. None D. Both

CapEx Computing Solution

Which of the following is ideal for Video and Audio streaming? A. SQL Database B. Cosmos DB C. Data Lake D. BLOB storage

BLOB storage

_______ hosts the Compliance Manager service, and is the Microsoft public site for publishing audit reports and other compliance-related information relevant to Microsoft cloud services. A. Microsoft Trust Center B. Compliance Manager C. Service Trust Portal D. Microsoft Privacy Statement

Service Trust Portal

Which of the following is designed for decoupled data transfer? A. Azure Files B. Azure Queue C. Cosmos DB

B. Azure Queue

What is a Tag in Azure? A. Name/value pairs of text data that you can apply to resources and resource groups B. Name/value pairs of text data that you can apply to resource groups C. A movie D. Name/value pairs of text data that you can apply to resources

Name/value pairs of text data that you can apply to resources and resource groups

What is the process of establish what level of access an authenticated person or service has? A. Authorization B. Identification C. Authentication D. None of the Above

Authorization

Suppose you have limited budget, How does Azure helps in terms of storage? A. Secures your data B. Pay As You go is cheaper than setting up own data center C. Helps with buying hardware D. All of the above

Pay As You go is cheaper than setting up own data center

What is a service you can use to create, assign, and manage policies. These policies apply and enforce rules that your resources need to follow A. Tags B. Azure Manager C. Policies D. Resource Group

Policies

Which is the most expensive data storage type? A. Archived B. Cold C. Hot D. Warm

Hot

Which of the following is Quickly scale able?

OpEx

What refers to a system's ability to stay operational during abnormal conditions? A. Availability B. Resiliency C. Both D. None

Resiliency

Azure SQL Database is what kind of service? A. SaaS B. PaaS C. IaaS D. None of the above

Resiliency

Azure SQL Database is what kind of service? A. SaaS B. PaaS C. IaaS D. None of the above

PaaS

_______helps you diagnose and obtain support when an Azure service issue affects your resources? A. Azure Status B. Resource Health C. Azure Monitor D. Azure Service Health

Azure Monitor

What uses the DNS server that's closest to the user to direct user traffic to a globally distributed endpoint? A. Traffic Manager B. Gateway C. Network security group D. Load balancer

Traffic Manager

What is a complete development and deployment environment in the cloud, with resources that enable organizations to deliver everything from simple cloud-based apps to sophisticated cloud-enabled enterprise applications? A. SaaS B. DaaS C. PaaS D. IaaS

PaaS

Which of the following Azure service is accessible thru Service message block(SMB)? A. Cosmos DB B. Azure Files C. Azure files D. Azure Queue E. Disk Storage

Azure Files

Which is ideal for large distributed data storage? A. Cosmos DB B. SQL database C. Data Lake D. Blob Storage

Cosmos DB

What delivers a comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments? A. Application Insights B. Compliance Manager C. Azure Service Health D. Azure Monitor

Azure Monitor

Which is an example of Azure unstructured data storage? A. Cosmos DB B. SQL Database C. BLOB storage D. Data lake

BLOB storage

What is the cost effective way to store your rarely used data? A. Cold B. Hot C. Archived D. Warm

Archived

What is a monitoring service that provides threat protection across all of your services both in Azure, and on-premises A. Azure Watch B. Azure Monitor C. Azure Police D. Azure Security Center

Azure Security Center

What Assigns user friendly name to IP address? A. CDN (Content Delivery Network) B. DNS C. HTTP D. Load Balancer

DNS

__________ maintains relationship with resources even after deployment? A. Azure Blueprint B. Azure Resource Manager Templates C. Both D. None

Azure Blueprint

Microsoft Excel macro is an example of what kind of service? A. PaaS B. DaaS C. SaaS D. IaaS

PaaS

Primary services to monitor the health of your apps and resources is/are? A. Azure Monitor B. Azure Service Health C. None D. Both

Both

Application security is a ________? A. User Responsibility B. Shared Responsibility C. Azure Responsibility D. Government Responsibility

Shared Responsibility

What is the most flexible category of cloud services? A. PaaS B. IaaS C. DaaS D. SaaS

IaaS

What is a distributed network of servers that can efficiently deliver web content to users? A. CDN (Content Delivery Network) B. HTTP C. Load Balancer D. DNS

CDN (Content Delivery Network)

Your company is experimenting with a new solution with high risk of failure. What is preferred way to go? A. CapEx B. OpEx C. Both D. None

OpEx

What is an identity that is used by a service or application? A. Service Principals B. MFA C. SSO D. All of the Above

Service Principals

Which of the following service is DaaS(Database as a Service) and based on MS SQL server? A. BLOB Storage B. Data Lake C. SQL database D. Cosmos DB

SQL database

Tags can be used for automated actions and organization of Resources? True or False

True

Which of the following solution is Agile?

OpEx

What could be the most efficient way to ensure a naming convention was followed across your subscription? A. Send Memo B. Create Tag C. Run Reports D. Create Policy

Create Policy

One resource can be part of many resource group?

False

What is a cloud-based security solution that identifies, detects, and helps you investigate advanced threats, compromised identities, and malicious insider actions directed at your organization? A. Azure Disk Encryption B. Azure Firewall C. MSIPE - Microsoft Azure Information Protection D. Azure Advanced Threat Protection (Azure ATP)

Azure Advanced Threat Protection (Azure ATP)

Resource Groups can be nested? T or F?

Which of the following is NOT a benefit of storing data in Azure cloud? A. Cost Effective B. Auto backup C. Mutliple data types D. Global replication for safety E. Difficult to analyze

Difficult to analyze

___________is a service that is designed to monitor the performance of container workloads? A. Azure Monitor for containers B. Azure Service Health C. Application Insights D. Azure Monitor for VMs

Azure Monitor for containers

What option will you use to protect credit card information in document? A. Azure Firewall B. Azure Disk Encryption C. MSIPE - MS Azure Information Protection D. Azure Application Gateway

MSIPE - MS Azure Information Protection

What defines the set of controls that are recommended for resources within that specified subscription or resource group? A. Security Policy B. Azure Monitor C. Azure Watch D. Azure Security Center

Security Policy

________ is a website resource containing information and details about how Microsoft implements and supports security, privacy, compliance, and transparency in all Microsoft cloud products and services. A. Microsoft Privacy Statement B. Microsoft Trust Center C. Compliance Manager D. Service Trust Portal

Microsoft Trust Center

What can be the organizing principle for Resource Groups? A. Organizing for lifecycle B. Organization for Authorization C. Organizing for billing D. All of the above

All of the above

Almost all attackers are after? A. Firewall B. Network C. Data D. Compute

Data

What is the process of managing and assigning policy definitions by grouping a set of policies into a single item? A. Grouping B. Cluster C. Initiative D. Startup

Initiative

What does RBAC stands for in Azure? A. Role-based Azure control B. Role-based access commitment C. Role based access control D. Retro based access control

Role based access control

What Azure service is used to move data to the cloud? A. Data immigration service B. Data backup service C. Data Migration Service D. All of the above

Data Migration Service

What allows you to define a repeatable set of Azure resources that implement and adhere to your organization's standards, patterns, and requirements? A. Management Group B. Initiative C. Azure Resource Manager Templates D. Azure Blueprint

Azure Blueprint

In which format does the data adheres to a schema? A. Unstructured data B. Structured data C. Semi-structure data D. None of the above

Structured data

Udemy is an example of what kind of service? A. SaaS B. PaaS C. IaaS D. None of the above

SaaS

Your company maintains and stores legal information and needs to follow security norms and procedure which is far more aggressive then the industry standards. What is an optimal solution? A. Wait for next gen cloud B. Private Cloud C. Hybrid cloud D. Public Cloud - Azure, AWS, etc

Private Cloud

_____________explains what personal data Microsoft processes, how Microsoft processes it, and for what purposes? A. Compliance Manager B. Microsoft Privacy Statement C. Microsoft Trust Center D. Service Trust Portal

Microsoft Privacy Statement

What kind of data storage is most beneficial in Azure? A. Predictable Data B. Consistent small data C. Data that fluctuates significantly with demanid D. None of the above

Data that fluctuates significantly with demanid

What is a setting that can be applied to any resource to block modification or deletion? A. Resource Groups B. Tags C. Policies D. Resource Locks

Resource Locks

Which of the following has an upfront cost? A. IaaS B. PaaS C. SaaS D. None of the above

None of the above

You want to deploy your own web application quickly without taking any responsibility of Operating System, Web server or system updates. What is the right solution for you? A. DaaS B. SaaS C. PaaS D. IaaS

PaaS

What distributes traffic evenly among each system in a pool and can help you achieve both high availability and resiliency? A. Load Balancer B. Network Security Group C. Traffic Manager D. Gateway

Load Balancer

You want to setup a website or blog quickly. What could be an optimal solution? A. Hybrid B. Private Cloud C. Public Cloud D. Wait for the next gen cloud

Public Cloud

What is Azure service to stop Distributed Denial of Service attacks A. Azure Application Gateway B. Azure DDoS Protection C. Azure Firewall

Azure DDoS Protection

What helps protect Azure SQL Database and Azure Data Warehouse against the threat of malicious activity? A. Transparent Data encryption (TDE) B. Azure Storage Service Encryption C. Azure Disk Encryption D. All of the above

Transparent Data encryption (TDE)

Suppose you work at a startup with limited funding. Why might you prefer Azure data storage over an on-premises solution? A. To ensure you run on a specific brand of hardware which will let you to form a marketing partnership with that hardware vendor. B. The Azure pay-as-you-go billing model lets you avoid buying expensive hardware. C. To get exact control over the location of your data store.

The Azure pay-as-you-go billing model lets you avoid buying expensive hardware.

Which of the following situations would yield the most benefits from relocating an on-premises data store to Azure? A. Unpredictable storage demand that increases and decreases multiple times throughout the year. B. Long-term, steady growth in storage demand. C. Consistent, unchanging storage demand.

Unpredictable storage demand that increases and decreases multiple times throughout the year.

What is an Azure region? A. One or more Azure data centers within a specific geographical location. B. A way of breaking networks into smaller networks. C. Firewall rules which define the flow of traffic in and out of Azure.

One or more Azure data centers within a specific geographical location.

Which of the following is true about virtual networks? A. You configure virtual networks through software. B. A virtual network accepts network traffic on all ports. You configure the firewall through virtual machines. C. Virtual networks are always reachable from the internet.

You configure virtual networks through software.

Which is true about Azure Load Balancer? A. You must use Azure Load Balancer if you want to distribute traffic among your virtual machines running in Azure. B. Azure Load Balancer works with internet-facing traffic only. C. Azure Load Balancer distributes traffic among similar systems, making your services more highly available.

Azure Load Balancer distributes traffic among similar systems, making your services more highly available.

What is network latency? A. The amount of data that can fit on the connection. B. The distance data must travel to reach its destination. C. The time it takes for data to travel over the network.

The time it takes for data to travel over the network.

How does Azure Traffic Manager reduce latency? A. It chooses only the fastest networks between endpoints. B. It chooses the endpoint that's closest to the user's DNS server. C. It caches content, similar to how content delivery networks work.

It chooses the endpoint that's closest to the user's DNS server.

Cloud security is a shared responsibility between you and your cloud provider. Which category of cloud services requires the greatest security effort on your part? A. Infrastructure as a service (IaaS) B. Platform as a service (PaaS) C. Software as a service (SaaS)

Infrastructure as a service (IaaS)

Which of these helps you most easily disable an account when an employee leaves your company? A. Enforce multi-factor authentication (MFA) B. Monitor sign-on attempts C. Use single sign-on (SSO)

Use single sign-on (SSO)