Microsoft Azure Fundamental AZ-900 Questions 26-50

Exam Preparation for AZ-900

Questions 26-50 (out of 185)

QUESTION 26
You plan to provision Infrastructure as a Service (IaaS) resources in Azure.
Which resource is an example of IaaS?
A. an Azure web app
B. an Azure virtual machine
C. an Azure logic app
D. an Azure SQL database
Correct Answer: B
Section: Understand Cloud Concepts
Explanation
Explanation/Reference:
Explanation:
An Azure virtual machine is an example of Infrastructure as a Service (IaaS).
Azure web app, Azure logic app and Azure SQL database are all examples of Platform as a Service (Paas).
References:
https://azure.microsoft.com/en-gb/overview/what-is-iaas/
https://azure.microsoft.com/en-gb/overview/what-is-paas/

QUESTION 27
A team of developers at your company plans to deploy, and then remove, 50 virtual machines each week. All
the virtual machines are configured by using Azure Resource Manager templates.
You need to recommend which Azure service will minimize the administrative effort required to deploy and
remove the virtual machines.
What should you recommend?
A. Azure Reserved Virtual Machine (VM) Instances
B. Azure DevTest Labs
C. Azure virtual machine scale sets
D. Microsoft Managed Desktop

Correct Answer: B
Section: Understand Cloud Concepts
Explanation
Explanation/Reference:
Explanation:
DevTest Labs creates labs consisting of pre-configured bases or Azure Resource Manager templates.
By using DevTest Labs, you can test the latest versions of your applications by doing the following tasks:
Quickly provision Windows and Linux environments by using reusable templates and artifacts.
Easily integrate your deployment pipeline with DevTest Labs to provision on-demand environments.
Scale up your load testing by provisioning multiple test agents and create pre-provisioned environments for
training and demos.
Reference:
https://docs.microsoft.com/en-us/azure/lab-services/devtest-lab-overview

QUESTION 28
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
You plan to deploy several Azure virtual machines.
You need to ensure that the services running on the virtual machines are available if a single data center fails.
Solution: You deploy the virtual machines to two or more resource groups.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
Section: Understand Cloud Concepts
Explanation
Explanation/Reference:
Explanation:
A resource group is a logical container for Azure resources. When you create a resource group, you specify
which location to create the resource group in. However, when you create a virtual machine and place it in the
resource group, the virtual machine can still be in a different location (different datacenter). Therefore, creating
multiple resource groups, even if they are in separate datacenters does not ensure that the services running on
the virtual machines are available if a single data center fails.
References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/overview#resource-groups
QUESTION 29
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Section: Understand Cloud Concepts
Explanation
Explanation/Reference:
Explanation:
Box 1: No
You cannot add physical servers to the public cloud. You can only deploy virtual servers in the public cloud.
You can extend a private cloud by deploying virtual servers in a public cloud. This would create a hybrid cloud.
Box 2: Yes
A hybrid cloud is a combination of a private cloud and public cloud. Therefore, to create a hybrid cloud, you
must deploy resources to a public cloud.
Box 3: No.
It is not true that a private cloud must be disconnected from the Internet. Private clouds can be and most
commonly are connected to the Internet. “Private cloud” means that the physical servers are managed by you.
It does not mean that it is disconnected from the Internet.
References:
https://azure.microsoft.com/en-gb/overview/what-are-private-public-hybrid-clouds/

QUESTION 30
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You plan to deploy several Azure virtual machines.
You need to ensure that the services running on the virtual machines are available if a single data center fails.
Solution: You deploy the virtual machines to a scale set.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
Section: Understand Cloud Concepts
Explanation
Explanation/Reference:
Explanation:
This answer does not specify that the scale set will be configured across multiple data centers so this solution does not meet the goal. Azure virtual machine scale sets let you create and manage a group of load balanced VMs. The number of VM
instances can automatically increase or decrease in response to demand or a defined schedule. Scale sets
provide high availability to your applications, and allow you to centrally manage, configure, and update many
VMs.
Virtual machines in a scale set can be deployed across multiple update domains and fault domains to maximize
availability and resilience to outages due to data center outages, and planned or unplanned maintenance
events.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/availability
QUESTION 31
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Section: Understand Cloud Concepts
Explanation
Explanation/Reference:
Explanation:
Box 1: No
A PaaS solution does not provide access to the operating system. The Azure Web Apps service provides an environment for you to host your web applications. Behind the scenes, the web apps are hosted on virtual
machines running IIS. However, you have no direct access to the virtual machine, the operating system or IIS.
Box 2: Yes
Box 3: Yes
A PaaS solution that hosts web apps in Azure does provide the ability to scale the platform automatically. This is known as autoscaling. Behind the scenes, the web apps are hosted on virtual machines running IIS.
Autoscaling means adding more load balanced virtual machines to host the web apps.
References:
https://azure.microsoft.com/en-gb/overview/what-is-paas/

QUESTION 32
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company plans to migrate all its data and resources to Azure.
The company’s migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure. You need to deploy an Azure environment that meets the company migration plan.
Solution: You create an Azure virtual machines, Azure SQL databases, and Azure Storage accounts.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
Section: Understand Cloud Concepts
Explanation
Explanation/Reference:
Explanation:
Platform as a service (PaaS) is a complete development and deployment environment in the cloud. PaaS includes infrastructure—servers, storage, and networking—but also middleware, development tools, business
intelligence (BI) services, database management systems, and more. PaaS is designed to support the complete web application lifecycle: building, testing, deploying, managing, and updating.
References:
https://azure.microsoft.com/en-us/overview/what-is-paas/

QUESTION 33
Your company plans to deploy several custom applications to Azure. The applications will provide invoicing services to the customers of the company. Each application will have several prerequisite applications and
services installed.
You need to recommend a cloud deployment solution for all the applications.
What should you recommend?
A. Software as a Service (SaaS)
B. Platform as a Service (PaaS)
C. Infrastructure as a Service (laaS)
Correct Answer: C
Section: Understand Cloud Concepts
Explanation
Explanation/Reference:
Explanation:
Infrastructure as a service (IaaS) is an instant computing infrastructure, provisioned and managed over the
internet. The IaaS service provider manages the infrastructure, while you purchase, install, configure, and
manage your own software
Incorrect Answers:
A: Software as a service (SaaS) allows users to connect to and use cloud-based apps over the Internet.
Common examples are email, calendaring, and office tools. In this scenario, you need to run your own apps,
and therefore require an infrastructure.
B:
Platform as a service (PaaS) is a complete development and deployment environment in the cloud. PaaS
includes infrastructure—servers, storage, and networking—but also middleware, development tools, business
intelligence (BI) services, database management systems, and more. PaaS is designed to support the
complete web application lifecycle: building, testing, deploying, managing, and updating.
References:
https://azure.microsoft.com/en-us/overview/what-is-iaas/
https://azure.microsoft.com/en-us/overview/what-is-saas/
https://azure.microsoft.com/en-us/overview/what-is-paas/
QUESTION 34
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Section: Understand Cloud Concepts
Explanation
Explanation/Reference:
Explanation:
Box 1: No
An Azure AD tenant can have multiple subscriptions but an Azure subscription can only be associated with one
Azure AD tenant.
Box 2: Yes
Box 3: No
If your subscription expires, you lose access to all the other resources associated with the subscription.
However, the Azure AD directory remains in Azure. You can associate and manage the directory using a
different Azure subscription.
References:
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-how-subscriptionsassociated-directory

QUESTION 35
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Section: Understand Cloud Concepts
Explanation
Explanation/Reference:
References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources

QUESTION 36
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Section: Understand Cloud Concepts
Explanation
Explanation/Reference:
Explanation:
Box 1: No
North America has several Azure regions, including West US, Central US, South Central US, East Us, and
Canada East.
Box 2: Yes
A region is a set of datacenters deployed within a latency-defined perimeter and connected through a dedicated
regional low-latency network.
Box 3: No
Outbound data transfer is charged at the normal rate and inbound data transfer is free.
References:
https://azure.microsoft.com/en-us/global-infrastructure/regions/
https://azure.microsoft.com/en-us/pricing/details/bandwidth/
QUESTION 37
This question requires that you evaluate the underlined text to determine if it is correct.
Azure Cosmos DB is an example of a platform as a service (PaaS) offering.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed.” If the
statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. infrastructure as a service (IaaS)
C. serverless
D. software as a service (SaaS)
Correct Answer: A
Section: Understand Cloud Concepts
Explanation
Explanation/Reference:
Explanation:
Azure Cosmos DB is an example of a platform as a service (PaaS) cloud database provider.
References:
https://docs.microsoft.com/en-us/azure/cosmos-db/database-security
QUESTION 38
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Box 1: Yes
There are different replication options available with a storage account. The ‘minimum’ replication option is
Locally Redundant Storage (LRS). With LRS, data is replicated synchronously three times within the primary
region.
Box 2: No
Data is not backed up automatically to another Azure Data Center although it can be depending on the
replication option configured for the account. Locally Redundant Storage (LRS) is the default which maintains
three copies of the data in the data center.
Geo-redundant storage (GRS) has cross-regional replication to protect against regional outages. Data is
replicated synchronously three times in the primary region, then replicated asynchronously to the secondary
region.
Box 3: No
The limits are much higher than that. The current storage limit is 2 PB for US and Europe, and 500 TB for all
other regions (including the UK) with no limit on the number of files.
References:
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview
QUESTION 39
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Box 1: No
Not all Azure regions support availability zones.
Box 2: No
Regions that support availability zones support Linux virtual machines.
Box 3: Yes
Availability Zones is a high-availability offering that protects your applications and data from datacenter failures.
Availability Zones are unique physical locations within an Azure region. Each zone is made up of one or more
datacenters equipped with independent power, cooling, and networking. To ensure resiliency, there’s a
minimum of three separate zones in all enabled regions. The physical separation of Availability Zones within a
region protects applications and data from datacenter failures. Zone-redundant services replicate your
applications and data across Availability Zones to protect from single-points-of-failure. With Availability Zones,
Azure offers industry best 99.99% VM uptime SLA.
References:
https://docs.microsoft.com/en-gb/azure/availability-zones/az-overview

QUESTION 40
This question requires that you evaluate the underlined text to determine if it is correct.
An Azure region contains one or more data centers that are connected by using a low-latency network.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the
statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. Is found in each country where Microsoft has a subsidiary office
C. Can be found in every country in Europe and the Americas only
D. Contains one or more data centers that are connected by using a high-latency network
Correct Answer: A
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
A region is a set of data centres deployed within a latency-defined perimeter and connected through a
dedicated regional low-latency network.
Microsoft Azure currently has 55 regions worldwide.
Regions are divided into Availability Zones. Availability Zones are physically separate locations within an Azure
region. Each Availability Zone is made up of one or more datacenters equipped with independent power,
cooling, and networking.
References:
https://azure.microsoft.com/en-gb/global-infrastructure/regions/

QUESTION 41
This question requires that you evaluate the underlined text to determine if it is correct.
You plan to deploy 20 virtual machines to an Azure environment. To ensure that a virtual machine named VM1
cannot connect to the other virtual machines, VM1 must be deployed to a separate virtual network.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the
statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. run a different operating system than the other virtual machines
C. be deployed to a separate resource group
D. have two network interfaces
Correct Answer: A
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Azure automatically routes traffic between subnets in a virtual network. Therefore, all virtual machines in a
virtual network can connect to the other virtual machines in the same virtual network. Even if the virtual
machines are on separate subnets within the virtual network, they can still communicate with each other.
To ensure that a virtual machine cannot connect to the other virtual machines, the virtual machine must be
deployed to a separate virtual network.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview

QUESTION 42
This question requires that you evaluate the underlined text to determine if it is correct.
When you need to delegate permissions to several Azure virtual machines simultaneously, you must deploy the
Azure virtual machines to the same Azure region.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the
statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. by using the same Azure Resource Manager template
C. to the same resource group
D. to the same availability zone
Correct Answer: C
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
A resource group is a logical container for Azure resources. Resource groups make the management of Azure
resources easier.
With a resource group, you can allow a user to manage all resources in the resource group, such as virtual
machines, websites, and subnets. The permissions you apply to the resource group apply to all resources
contained in the resource group.
References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/overview#resource-groups
https://docs.microsoft.com/en-us/azure/role-based-access-control/overview

QUESTION 43
A team of developers at your company plans to deploy, and then remove, 50 customized virtual machines each
week. Thirty of the virtual machines run Windows Server 2016 and 20 of the virtual machines run Ubuntu
Linux.
You need to recommend which Azure service will minimize the administrative effort required to deploy and
remove the virtual machines.
What should you recommend?
A. Azure Reserved Virtual Machines (VM) Instances
B. Azure virtual machine scale sets
C. Azure DevTest Labs
D. Microsoft Managed Desktop
Correct Answer: C
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
DevTest Labs creates labs consisting of pre-configured bases or Azure Resource Manager templates.
By using DevTest Labs, you can test the latest versions of your applications by doing the following tasks:
Quickly provision Windows and Linux environments by using reusable templates and artifacts.
Easily integrate your deployment pipeline with DevTest Labs to provision on-demand environments.
Scale up your load testing by provisioning multiple test agents and create pre-provisioned environments for
training and demos.
Reference:
https://docs.microsoft.com/en-us/azure/lab-services/devtest-lab-overview

QUESTION 44
This question requires that you evaluate the underlined text to determine if it is correct.
One of the benefits of Azure SQL Data Warehouse is that high availability is built into the platform.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the
statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. automatic scaling
C. data compression
D. versioning
Correct Answer: A
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Azure Data Warehouse (now known as Azure Synapse Analytics) is a PaaS offering from Microsoft. As with all
PaaS services from Microsoft, SQL Data Warehouse offers an availability SLA of 99.9%. Microsoft can offer
99.9% availability because it has high availability features built into the platform.
References:
https://docs.microsoft.com/en-us/azure/sql-data-warehouse/sql-data-warehouse-overview-faq

QUESTION 45
A support engineer plans to perform several Azure management tasks by using the Azure CLI. You install the CLI on a computer.
You need to tell the support engineer which tools to use to run the CLI.
Which two tools should you instruct the support engineer to use? Each correct answer presents a complete
solution.
NOTE: Each correct selection is worth one point.
A. Command Prompt
B. Azure Resource Explorer
C. Windows PowerShell
D. Windows Defender Firewall
E. Network and Sharing Center
Correct Answer: AC
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
For Windows the Azure CLI is installed via an MSI, which gives you access to the CLI through the Windows
Command Prompt (CMD) or PowerShell.
References:
https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-windows?view=azure-cli-latest

QUESTION 46
HOTSPOT
You need to manage Azure by using Azure Cloud Shell.
Which Azure portal icon should you select? To answer, select the appropriate icon in the answer area.
Hot Area:

Correct Answer:

Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
You can access Azure Cloud Shell in the Azure portal by clicking the icon.
Azure Cloud Shell is an interactive, authenticated, browser-accessible shell for managing Azure resources. It
provides the flexibility of choosing the shell experience that best suits the way you work, either Bash or
PowerShell.
Cloud Shell enables access to a browser-based command-line experience built with Azure management tasks
in mind.
References:
https://docs.microsoft.com/en-us/azure/cloud-shell/overview?view=azure-cli-latest

QUESTION 47
You plan to store 20 TB of data in Azure. The data will be accessed infrequently and visualized by using
Microsoft Power BI.
You need to recommend a storage solution for the data.
Which two solutions should you recommend? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Azure Data Lake
B. Azure Cosmos DB
C. Azure SQL Data Warehouse
D. Azure SQL Database
E. Azure Database for PostgreSQL
Correct Answer: AC
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
You can use Power BI to analyze and visualize data stored in Azure Data Lake and Azure SQL Data
Warehouse.
Azure Data Lake includes all of the capabilities required to make it easy for developers, data scientists and
analysts to store data of any size and shape and at any speed, and do all types of processing and analytics
across platforms and languages. It removes the complexities of ingesting and storing all your data while making
it faster to get up and running with batch, streaming and interactive analytics. It also integrates seamlessly with
operational stores and data warehouses so that you can extend current data applications.
References:
https://docs.microsoft.com/en-us/azure/data-lake-store/data-lake-store-power-bi
https://azure.microsoft.com/en-gb/solutions/data-lake/
https://docs.microsoft.com/en-us/azure/data-lake-store/data-lake-store-power-bi
QUESTION 48
HOTSPOT
You have an Azure environment that contains 10 web apps. To which URL should you connect to manage all
the Azure resources? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
The Azure portal is a web-based management interface where you can view and manage all your Azure
resources in one unified hub, including web apps, databases, virtual machines, virtual networks, storage and
Visual Studio team projects.
The URL of the Azure portal is https://portal.azure.com.
References:
https://azure.microsoft.com/en-gb/features/azure-portal/
QUESTION 49
You need to identify the type of failure for which an Azure availability zone can be used to protect access to
Azure services.
What should you identify?
A. a physical server failure
B. an Azure region failure
C. a storage failure
D. an Azure data center failure
Correct Answer: D
Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
Availability zones expand the level of control you have to maintain the availability of the applications and data on
your VMs. An Availability Zone is a physically separate zone, within an Azure region. There are three Availability
Zones per supported Azure region.
Each Availability Zone has a distinct power source, network, and cooling. By architecting your solutions to use
replicated VMs in zones, you can protect your apps and data from the loss of a datacenter. If one zone is
compromised, then replicated apps and data are instantly available in another zone.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/availability
QUESTION 50
HOTSPOT
You plan to extend your company’s network to Azure. The network contains a VPN appliance that uses an IP
address of 131.107.200.1.
You need to create an Azure resource that identifies the VPN appliance in Azure.
Which Azure resource should you create? To answer, select the appropriate resource in the answer area.
Hot Area:

Correct Answer:

Section: Understand Core Azure Services
Explanation
Explanation/Reference:
Explanation:
A Local Network Gateway is an object in Azure that represents your on-premise VPN device. A Virtual Network
Gateway is the VPN object at the Azure end of the VPN. A ‘connection’ is what connects the Local Network
Gateway an the Virtual Network Gateway to bring up the VPN.
The local network gateway typically refers to your on-premises location. You give the site a name by which
Azure can refer to it, then specify the IP address of the on-premises VPN device to which you will create a
connection. You also specify the IP address prefixes that will be routed through the VPN gateway to the VPN
device. The address prefixes you specify are the prefixes located on your on-premises network. If your onpremises network changes or you need to change the public IP address for the VPN device, you can easily
update the values later.
References:
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

Previous Page Next Page