AZ-900 Practice Test Questions Flashcards

1
Q

What type of documents does the Microsoft Service Trust Portal provide?

A

A list of standards that Microsoft follows, pen test results, security assessments, white papers, FAQs, and other documents that can be used to show Microsoft’s compliance efforts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What feature of a system makes it elastic?

A

The ability of it to add and reduce capacity based on actual demand

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What Azure tool gives you the ability to manage multiple subscriptions into nested hierarchies?

A

Management Groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Microsoft Entra ID

A

Enterprise identity service that provides SSO and MFA
Azure’s preferred Identity/Authentication service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Azure Policy

A

Can add restrictions on storage account SKUs, virtual machine instance types, and rules relating to tagging of resources and groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

True or False: Azure PowerShell scripts and CLI scripts are entirely compatible with each other

A

FALSE- these are different languages

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Resource Locks

A

Affect your ability to make changes to a resource within Azure but do not affect the resource itself.
A resource lock on a VM still allows it to operate, but prevents someone from restarting it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What affect does using a “read only” resource lock on an Azure Storage Account have?

A

The storage account cannot have its properties altered but it doesn’t affect the data itself.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Cloud Shell

A

Allows access to the CLI and PowerShell consoles in the Azure Portal

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

True or False: Azure is a public cloud, and has no private cloud offerings

A

FALSE- Azure Government and DoD services are private

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

True or False: you can create your own policies if built-in Azure Policy is not sufficient to your needs

A

TRUE, can create policies using JSON

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Azure charges for ____ bandwidth

A

Egress/Outbound

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Azure Monitor

A

Collects all of the logs from various resources into a central dashboard, where you can run queries, view graphs, and create alerts on certain events

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Azure Service Health

A

Lets you know about any Azure-related service issues including region-wide downtime

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

AzCopy

A

Allows you to copy files between two Azure Storage accounts without having to download the files to your local machine

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Single Sign-On?

A

The ability to log in once and use the existing userid and password to sign in to other applications, and not have to create/memorize a new one

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

ARM

A

Azure Resource Manager
Common resource deployment model that underlies all resource creation or modification
No matter whether you use the portal, PowerShell or the SDK, ARM takes those commands and executes them

18
Q

Resource Groups

A

A folder structure in Azure in which you organize resources like databases, virtual machines, virtual networks, or almost any resource

19
Q

Why would someone prefer a consumption-based pricing model as opposed to a time-based (fixed) pricing model?

A

You can save a lot of money if you don’t use the resource often as opposed to having it available for use 24/7

20
Q

Azure Availability Zones

A

A feature of Azure that allows you to manually specify into which data center your virtual machines are placed, which allows you to achieve higher availability than any other option

21
Q

Microsoft Entra ID provides what licenses?

A

Free
P1
P2
Governance

22
Q

What Azure Resources are required in order to have a virtual machine?

A

Virtual Network
Storage Account
Network Interface Card (NIC)

23
Q

How many availability zones are there in each region (for regions that have them)?

A

3

24
Q

What Azure resource allows you to evenly split traffic coming in and direct it to several identical virtual machines to do the work and respond to the request?

A

Load Balancer or Application Gateway

25
Q

LRS

A

Locally Redundant Storage
Copies your data synchronously three times within a single physical location in the primary region
Least expensive replication option, but isn’t recommended for applications requiring high availability or durability

26
Q

ZRS

A

Zone-Redundant Storage
Copies your data synchronously across three Azure availability zones in the primary region
For applications requiring high availability, Microsoft recommends using ZRS in the primary region and also replicating to a secondary region

27
Q

What OS does Microsoft supply Azure Virtual Machine images for?

A

Windows and Linux

28
Q

Which Azure technology allows you to login to Microsoft Entra ID device or application using your face, PIN, or a gesture instead of typing a password?

A

Passwordless

29
Q

Which Azure technology allows you to manage virtual machines running in Azure, your own environment, and other environments like AWS?

A

Azure Arc

30
Q

Availability Sets

A

Allow you to tell Azure which virtual machines are identical, so that Azure will keep them apart physically inside the datacenter to ensure availability

31
Q

True or False: An Azure Storage Account can have both a public endpoint and a private endpoint at the same time

A

TRUE- public endpoint can be enabled, restricted to certain networks or disabled. Multiple private endpoints can be created. No restriction preventing you from having both a public endpoint accessible from the internet and one or more private endpoints as well

32
Q

Total Cost of Ownership

A

Includes cost of hardware, software, hosting, electricity, real estate, internet, salaries of employees

33
Q

Azure Scalesets

A

Can manage groups of virtual machines as one unit

34
Q

Azure Blueprints

A

Allows you to create a “template” on which new subscriptions can be made. This way, new subscriptions can come with a pre-defined list of policies, ARM templates, and custom RBAC roles.

35
Q

Azure Sovereign Regions

A

Dedicated to specific sovereign entities
Azure US Government
Azure China

36
Q

Express Route

A

Private connection from your data center to a Microsoft Azure partner, which has a direct fiberoptic connection into Azure

37
Q

Public Endpoint

A

Effectively a URL that you can use to access data and applications from outside a virtual network

38
Q

Compute Services

A

Resources that perform some type of task that requires CPU cycles to perform the work

39
Q

Azure Advisor

A

A tool that will analyze your use of Azure and make you specific recommendations based on your usage across availability, security, performance, and cost categories

40
Q
A