Free AZ-900 Dump

Question #140Topic 1

DRAG DROP –

Match the Azure services to the correct descriptions.

Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.

NOTE: Each correct match is worth one point.

Select and Place:

Correct Answer: 

Box 1: Azure virtual machines –

Box 2: Azure Container instances

Azure Container Instances (ACI) is a managed service that allows you to run containers directly on the Microsoft Azure public cloud, without requiring the use of virtual machines (VMs).

Develop apps fast without managing virtual machines or having to learn new tools”it’s just your application, in a container, running in the cloud.

Box 3: Azure App Service –

Azure App Service is a fully managed platform for building web applications.

Applications run and scale with ease on both Windows and Linux-based environments.

Box 4: Azure Functions –

Azure Functions (from Microsoft Azure) is a cloud-based serverless service that allows running event-triggered code in a scalable way without providing or managing infrastructure.

Reference:

https://docs.microsoft.com/en-us/azure/container-instances

https://azure.microsoft.com/en-us/services/app-service/

What Azure Functions Are and Their Common Use Cases

Question #141Topic 1

HOTSPOT –

To answer, select the appropriate option in the answer area.

Hot Area:

Correct Answer: 

Box: The virtual machines can be moved to the new subscription.

You can move a VM and its associated resources to a different subscription by using the Azure portal.

Note: Repeat the process below for each Resource Group containing the VMs.

1. Go to the Azure portal to manage the resource group containing the VM to move. Search for and select Resource groups.

2. Choose the resource group containing the VM that you would like to move.

3. At the top of the page for the resource group, select Move and then select Move to another subscription. The Move resources page opens.

4. Select each of the resources to move. In most cases, you should move all of the related resources that are listed.

5. Select the Subscription where you want the VM to be moved.

6. Select an existing Resource group, or enter a name to have a new resource group created.

7. When you are done, select that you understand that new resource IDs will be created and that the new IDs will need to be used with the VM after it is moved, and then select OK.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm

Question #142Topic 1

You need to purchase a third-party virtual security appliance that you will deploy to an Azure subscription.

What should you use?

• A. Azure subscriptions
• B. Microsoft Defender for Cloud
• C. Azure Marketplace
• D. Microsoft Store

Correct Answer: C

You can access these enhanced network security features by using an Azure partner solution. You can find the most current Azure partner network security solutions by visiting the Azure Marketplace, and searching for “security” and “network security.”

Some third-party reseller services available on Azure Marketplace now consume your Enterprise Agreement (EA) Azure Prepayment balance.

Reference:

https://docs.microsoft.com/en-us/azure/security/fundamentals/network-overview https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/ea-azure-marketplace

Community vote distribution

C (100%)

Question #143Topic 1

HOTSPOT –

Select the answer that correctly completes the sentence.

Hot Area:

Correct Answer: 

Microsoft’s Azure Sphere hardware and service designed to better secure Internet of Things (IoT) devices.

Azure Sphere consists of Microsoft-certified microcontrollers ” single-chip computers with processors, storage, memory and IoT capabilities ” plus the Azure

Sphere Linux-based OS and the Azure Sphere cloud security service.

Reference:

https://www.zdnet.com/article/microsofts-azure-sphere-its-linux-based-microcontroller-plus-cloud-service-hits-general-availability/

Question #144Topic 1

You plan to deploy a service to Azure virtual machines.

You need to ensure that the service will be available if a datacenter fails.

What should you use as part of the virtual machine deployment?

• A. availability sets
• B. proximity placement groups
• C. host groups
• D. availability zones

Correct Answer: D

Azure availability zones are physically separate locations within each Azure region that are tolerant to local failures. Failures can range from software and hardware failures to events such as earthquakes, floods, and fires. Tolerance to failures is achieved because of redundancy and logical isolation of Azure services. To ensure resiliency, a minimum of three separate availability zones are present in all availability zone-enabled regions.

Reference:

https://docs.microsoft.com/en-us/azure/availability-zones/az-overview

Community vote distribution

D (100%)

Question #145Topic 1

Your company has an Azure subscription that contains resources in several regions.

You need to ensure that administrators can only create resources in those regions.

What should you use?

• A. a read-only lock
• B. an Azure policy
• C. a management group
• D. a reservation

Correct Answer: B

Community vote distribution

B (100%)

Question #146Topic 1

HOTSPOT –

Select the answer that correctly completes the sentence.

Hot Area:

Correct Answer: 

Box: contains one or more data centers that are connected by using a low-latency network.

Each Azure region features datacenters deployed within a latency-defined perimeter. They’re connected through a dedicated regional low-latency network. This design ensures that Azure services within any region offer the best possible performance and security.

Reference:

https://docs.microsoft.com/en-us/azure/availability-zones/az-overview

Question #147Topic 1

HOTSPOT –

Select the answer that correctly completes the sentence.

Hot Area:

Correct Answer: 

The Azure File Sync agent enables data on a Windows Server to be synchronized with an Azure File share.

Reference:

https://www.microsoft.com/en-us/download/details.aspx?id=57159

Question #148Topic 1

What is the function of a Site-to-Site VPN?

• A. provides a secure connection between a computer on a public network and the corporate network
• B. provides a dedicated private connection to Azure that does NOT travel over the internet
• C. provides a connection from an on-premises VPN device to an Azure VPN gateway

Correct Answer: C

A Site-to-Site VPN gateway connection is used to connect your on-premises network to an Azure virtual network over an IPsec/IKE (IKEv1 or IKEv2) VPN tunnel.

This type of connection requires a VPN device located on-premises that has an externally facing public IP address assigned to it.

Example:

Reference:

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-classic-portal

Community vote distribution

C (100%)

Question #149Topic 1

DRAG DROP –

Match the cloud service models to the appropriate offerings.

To answer, drag the appropriate model from the column on the left to its offering on the right. Each model may be used once, more than once, or not at all.

NOTE: Each correct match is worth one point.

Select and Place:

Correct Answer: 

Box 1: Platform as a service (PaaS)

Azure App Service is a fully managed platform for building web applications.

Platform as a service (PaaS) is a complete development and deployment environment in the cloud, with resources that enable you to deliver everything from simple cloud-based apps to sophisticated, cloud-enabled enterprise applications.

Box 2: Infrastructure as a service (IaaS)

Windows Azure Virtual Machines, an Infrastructure-as-a-Service (IaaS) offering in Windows Azure, was released back in 2012.

Box 3: Software as a service (SaaS)

Dynamics 365 is a set of interconnected, modular Software-as-a-Service (SaaS) applications and services designed to both transform and enable your core customers, employees, and business activities.

Reference:

https://azure.microsoft.com/en-us/overview/what-is-paas/

https://azure.microsoft.com/en-us/blog/infrastructure-as-a-service-series-virtual-machines-and-windows/ https://pipol.com/what-is-microsoft-dynamics-365

Question #150Topic 1

DRAG DROP –

Match the cloud service models to the appropriate solutions.

To answer, drag the appropriate cloud service model from the column on the left to its solution on the right Each cloud service model may be used once, more than once, or not at all.

NOTE: Each correct match is worth one point.

Select and Place:

Correct Answer: 

Box 1: Infrastructure as a service (IaaS)

Azure Files is a simple, secure, and serverless enterprise-grade cloud file shares.

Infrastructure as a service (IaaS) is a type of cloud computing service that offers essential compute, storage, and networking resources on demand, on a pay-as- you-go basis.

Box 2: Software as a service (SaaS)

Dynamics 365 is a set of interconnected, modular Software-as-a-Service (SaaS) applications and services designed to both transform and enable your core customers, employees, and business activities. It includes Dynamics 365 Finance: use the guided, rules-based chart of accounts and no-code configuration service to simplify regulatory reporting, electronic invoicing, and global payments.

Box 3: Platform as a service (PaaS)

Platform as a service (PaaS) is a complete development and deployment environment in the cloud, with resources that enable you to deliver everything from simple cloud-based apps to sophisticated, cloud-enabled enterprise applications.

Reference:

https://azure.microsoft.com/en-us/overview/what-is-iaas

https://azure.microsoft.com/en-us/overview/what-is-paas/

Question #151Topic 1

You need to manage containers.

Which two services can you use? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

• A. Azure Virtual Desktop
• B. Azure virtual machines
• C. Azure Functions
• D. Azure Container Instances
• E. Azure Kubernetes Service (AKS)

Correct Answer: DE

Run Docker containers on-demand in a managed, serverless Azure environment. Azure Container Instances is a solution for any scenario that can operate in isolated containers, without orchestration. Run event-driven applications, quickly deploy from your container development pipelines, and run data processing and build jobs.

You can manage containers at scale with a fully managed Kubernetes container management and orchestration service that integrates with Azure Active

Directory.

Azure Kubernetes Service is a robust and cost-effective container orchestration service that helps you to deploy and manage containerized applications in seconds where additional resources are assigned automatically without the headache of managing additional servers.

Reference:

https://docs.microsoft.com/en-us/azure/container-instances/

Azure Kubernetes Service (AKS): What Is It and Why Do We Use It?

Community vote distribution

DE (100%)

Question #152Topic 1

HOTSPOT –

To complete the sentence, select the appropriate option in the answer area.

Hot Area:

Correct Answer: 

A resource group is a logical container for Azure resources. Resource groups make the management of Azure resources easier.

With a resource group, you can allow a user to manage all resources in the resource group, such as virtual machines, websites, and subnets. The permissions you apply to the resource group apply to all resources contained in the resource group.

Reference:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/overview#resource-groups https://docs.microsoft.com/en-us/azure/role-based-access-control/overview

Question #153Topic 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You plan to deploy several Azure virtual machines.

You need to ensure that the services running on the virtual machines are available if a single data center fails.

Solution: You deploy the virtual machines to two or more availability zones.

Does this meet the goal?

• A. Yes
• B. No

Correct Answer: A

Availability zones expand the level of control you have to maintain the availability of the applications and data on your VMs. An Availability Zone is a physically separate zone, within an Azure region. There are three Availability Zones per supported Azure region.

Each Availability Zone has a distinct power source, network, and cooling. By architecting your solutions to use replicated VMs in zones, you can protect your apps and data from the loss of a datacenter. If one zone is compromised, then replicated apps and data are instantly available in another zone.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/availability

Community vote distribution

A (100%)

Question #154Topic 1

This question requires that you evaluate the underlined text to determine if it is correct.

One of the benefits of Azure SQL Data Warehouse is that high availability is built into the platform.

Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed`. If the statement is incorrect, select the answer choice that makes the statement correct.

• A. No change is needed
• B. automatic scaling
• C. data compression
• D. versioning

Correct Answer: A

Azure Data Warehouse (now known as Azure Synapse Analytics) is a PaaS offering from Microsoft. As with all PaaS services from Microsoft, SQL Data

Warehouse offers an availability SLA of 99.9%. Microsoft can offer 99.9% availability because it has high availability features built into the platform.

References:

https://docs.microsoft.com/en-us/azure/sql-data-warehouse/sql-data-warehouse-overview-faq

Community vote distribution

A (100%)

Question #155Topic 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You plan to deploy several Azure virtual machines.

You need to ensure that the services running on the virtual machines are available if a single data center fails.

Solution: You deploy the virtual machines to two or more regions.

Does this meet the goal?

• A. Yes
• B. No

Correct Answer: A

By deploying the virtual machines to two or more regions, you are deploying the virtual machines to multiple datacenters. This will ensure that the services running on the virtual machines are available if a single data center fails.

Azure operates in multiple datacenters around the world. These datacenters are grouped in to geographic regions, giving you flexibility in choosing where to build your applications.

You create Azure resources in defined geographic regions like ‘West US’, ‘North Europe’, or ‘Southeast Asia’. You can review the list of regions and their locations.

Within each region, multiple datacenters exist to provide for redundancy and availability.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/regions

Community vote distribution

A (72%)

B (28%)

Question #156Topic 1

HOTSPOT –

Select the answer that correctly completes the sentence.

Hot Area:

Correct Answer: 

The term compute refers to the hosting model for the computing resources that your application runs on. For Azure this include:

Azure Container Instances. The fastest and simplest way to run a container in Azure, without having to provision any virtual machines and without having to adopt a higher-level service.

Note, and also the following:

Azure App Service. A managed service for hosting web apps, mobile app back ends, RESTful APIs, or automated business processes.

Azure Spring Cloud. A managed service designed and optimized for hosting Spring Boot apps.

Azure Kubernetes Service (AKS). A managed Kubernetes service for running containerized applications.

Azure Batch. A managed service for running large-scale parallel and high-performance computing (HPC) applications

Azure Functions. A managed FaaS service.

Azure Service Fabric. A distributed systems platform that can run in many environments, including Azure or on premises.

Azure Virtual machines. Deploy and manage VMs inside an Azure virtual network.

Azure Container Apps. Deploy and manage VMs inside an Azure virtual network.

Reference:

https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/compute-decision-tree

Question #157Topic 1

At which OSI layer does ExpressRoute operate?

• A. Layer 2
• B. Layer 3
• C. Layer 5
• D. Layer 7

Correct Answer: A

ExpressRoute circuit. A layer 2 or layer 3 circuit supplied by the connectivity provider that joins the on-premises network with Azure through the edge routers. The circuit uses the hardware infrastructure managed by the connectivity provider.

In OSI terms, you start from layer 2¦ The Network Service Provider concept was a managed concept, where you got a layer 3 solution (in OSI terms). The telecom provider took care of all the complexity for you.

Reference:

https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/expressroute

Community vote distribution

B (98%)

2%

Question #158Topic 1

HOTSPOT –

Select the answer that correctly completes the sentence.

Hot Area:

Correct Answer: 

Application Insights is a feature of Azure Monitor that provides extensible application performance management (APM) and monitoring for live web apps.

Reference:

https://docs.microsoft.com/en-us/azure/azure-monitor/app/app-insights-overview

Question #159Topic 1

HOTSPOT –

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer: 

Box 1: No –

A resource can interact with resources in other resource groups.

Box 2: Yes –

Deleting the resource group will remove the resource group as well as all the resources in that resource group. This can be useful for the management of resources. For example, a virtual machine has several components (the VM itself, virtual disks, network adapter etc.). By placing the VM in its own resource group, you can delete the VM along with all its associated components by deleting the resource group.

Another example is when creating a test environment. You could place the entire test environment (Network components, virtual machines etc.) in one resource group. You can then delete the entire test environment by deleting the resource group.

Box 3: Yes –

Resources from multiple different regions can be placed in a resource group. The resource group only contains metadata about the resources it contains.

References:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-overview https://www.codeisahighway.com/effective-ways-to-delete-resources-in-a-resource-group-on-azure/