Pass AZ-900 with These 100% Verified Exam Questions

Microsoft Certified: Azure Fundamentals

Want to cover all the fundamentals of AZ-900? Trust this guide:, ***check this link***

AZ-900 Questions and Answers

Question 1 When implementing a Software as a Service (SaaS) solution, you are responsible for:

A. No change is needed. B. defining scalability rules C. installing the SaaS solution D. configuring the SaaS solution

Correct Answer: D

Question 2 You need to recommend a solution to ensure servers are available if a single Azure data center goes offline for an extended period. What should you include?

A. fault tolerance B. elasticity C. scalability D. low latency

Correct Answer: A

Question 3 An organization that hosts its infrastructure in a private cloud can close its data center.

A. No change is needed. B. in a hybrid cloud C. in the public cloud D. on a Hyper-V host

Correct Answer: C

Question 4 What are two characteristics of the public cloud?

A. dedicated hardware B. unsecured connections C. limited storage D. metered pricing E. self-service management

Correct Answer: DE

Question 5 Your company plans to migrate all data and resources to Azure using only Platform as a Service (PaaS) solutions. Does creating an Azure App Service and Azure SQL databases meet this goal?

A. Yes B. No

Correct Answer: A

Question 6 Your company plans to migrate all data and resources to Azure using only Platform as a Service (PaaS) solutions. Does creating an Azure App Service and Azure virtual machines with Microsoft SQL Server installed meet this goal?

A. Yes B. No

Correct Answer: B

Question 7 Your company plans to migrate all data and resources to Azure using only Platform as a Service (PaaS) solutions. Does creating an Azure App Service and Azure Storage accounts meet this goal?

A. Yes B. No

Correct Answer: B

Question 8 Which benefit of Azure Cloud Services supports cost management for an accounting application with low usage during the first three weeks of each month and very high usage during the last week?

A. high availability B. high latency C. elasticity D. load balancing

Correct Answer: C

Question 9 What is an advantage of using a public cloud service over an on-premises network?

A. The public cloud is owned by the public, NOT a private corporation B. The public cloud is a crowd-sourcing solution that provides corporations with the ability to enhance the cloud C. All public cloud resources can be freely accessed by every member of the public D. The public cloud is a shared entity whereby multiple corporations each use a portion of the resources in the cloud

Correct Answer: D

Question 10 Does deploying virtual machines to two or more scale sets ensure services are available if a single data center fails?

A. Yes B. No

Correct Answer: B

Question 11 Does deploying virtual machines to two or more availability zones ensure services are available if a single data center fails?

A. Yes B. No

Correct Answer: A

Question 12 Which expenditure model should you identify for migrating 1,000 virtual machines from Hyper-V hosts to an Azure pay-as-you-go subscription?

A. operational B. elastic C. capital D. scalable

Correct Answer: A

Question 13 Which two administrative responsibilities will be eliminated after migrating servers to Azure virtual machines?

A. Replacing failed server hardware B. Backing up application data C. Managing physical server security D. Updating server operating systems E. Managing permissions to shared documents

Correct Answer: AC

Question 14 Which Azure service will minimize administrative effort for deploying and removing 50 virtual machines weekly using Azure Resource Manager templates?

A. Azure Reserved Virtual Machine (VM) Instances B. Azure DevTest Labs C. Azure virtual machine scale sets D. Microsoft Managed Desktop

Correct Answer: B

Question 15 Does deploying virtual machines to two or more resource groups ensure services are available if a single data center fails?

A. Yes B. No

Correct Answer: B

Question 16 Does deploying virtual machines to a scale set ensure services are available if a single data center fails?

A. Yes B. No

Correct Answer: B

Question 17 Does creating Azure virtual machines, Azure SQL databases, and Azure Storage accounts meet the requirement for using only Platform as a Service (PaaS) solutions?

A. Yes B. No

Correct Answer: A

Question 18 What cloud deployment solution should you recommend for custom applications with several prerequisite applications and services installed?

A. Software as a Service (SaaS) B. Platform as a Service (PaaS) C. Infrastructure as a Service (laaS)

Correct Answer: C

Question 19 Azure Cosmos DB is an example of:

A. No change is needed (platform as a service (PaaS) offering) B. infrastructure as a service (IaaS) C. serverless D. software as a service (SaaS)

Correct Answer: A

Question 20 An Azure region contains:

A. No change is needed (one or more data centers that are connected by using a low-latency network) B. Is found in each country where Microsoft has a subsidiary office C. Can be found in every country in Europe and the Americas only D. Contains one or more data centers that are connected by using a high-latency network

Correct Answer: A

Question 21 To ensure a virtual machine cannot connect to other virtual machines:

A. No change is needed (VM1 must be deployed to a separate virtual network) B. run a different operating system than the other virtual machines C. be deployed to a separate resource group D. have two network interfaces

Correct Answer: A

Question 22 When you need to delegate permissions to several Azure virtual machines simultaneously, you must:

A. No change is needed B. by using the same Azure Resource Manager template C. to the same resource group D. to the same availability zone

Correct Answer: C

Question 23 Which Azure service will minimize administrative effort for deploying and removing 50 customized virtual machines each week?

A. Azure Reserved Virtual Machines (VM) Instances B. Azure virtual machine scale sets C. Azure DevTest Labs D. Microsoft Managed Desktop

Correct Answer: C

Question 24 One of the benefits of Azure SQL Data Warehouse is:

A. No change is needed (high availability is built into the platform) B. automatic scaling C. data compression D. versioning

Correct Answer: A

Question 25 Which two tools can be used to run the Azure CLI?

A. Command Prompt B. Azure Resource Explorer C. Windows PowerShell D. Windows Defender Firewall E. Network and Sharing Center

Correct Answer: AC

Question 26 What type of failure can an Azure Availability Zone protect against?

A. a physical server failure B. an Azure region failure C. a storage failure D. an Azure data center failure

Correct Answer: D

Question 27 Which Azure service should you use to view service failure notifications that can affect VM1?

A. Azure Service Fabric B. Azure Monitor C. Azure virtual machines D. Azure Advisor

Correct Answer: C

Question 28 Does running a PowerShell script from a computer that runs Linux and has the Azure CLI tools installed meet the goal?

A. Yes B. No

Correct Answer: B

Question 29 Does running a PowerShell script from a computer that runs Chrome OS and uses Azure Cloud Shell meet the goal?

A. Yes B. No

Correct Answer: A

Question 30 Does running a PowerShell script from a computer that runs macOS and has PowerShell Core 6.0 installed meet the goal?

A. Yes B. No

Correct Answer: A

Question 31 What should you create to limit inbound traffic to all Azure virtual networks?

A. one application security group (ASG) B. 10 virtual network gateways C. 10 Azure ExpressRoute circuits D. one Azure firewall

Correct Answer: D

Question 32 Which two Azure resources should you include to enable on-premises network communication to Azure virtual machines?

A. a virtual network gateway B. a load balancer C. an application gateway D. a virtual network E. a gateway subnet

Correct Answer: AE

Question 33 Does using Bash in Azure Cloud Shell meet the goal of creating a new Azure virtual machine from an Android tablet?

A. Yes B. No

Correct Answer: A

Question 34 Which Azure solution should you recommend to meet compliance policy requirements for a server named FinServer to be on a separate network segment?

A. a resource group for FinServer and another resource group for all the other servers B. a virtual network for FinServer and another virtual network for all the other servers C. a VPN for FinServer and a virtual network gateway for each other server D. one resource group for all the servers and a resource lock for FinServer

Correct Answer: B

Question 35 What should you create to map a network drive from Windows 10 computers to Azure Storage?

A. an Azure SQL database B. a virtual machine data disk C. a Files service in a storage account D. a Blobs service in a storage account

Correct Answer: C

Question 36 What serverless computing solution should you recommend for an application that sends email notifications automatically based on a rule?

A. a web app B. a server image in Azure Marketplace C. a logic app D. an API app

Correct Answer: C

Question 37 What should you recommend to provide the best video playback experience for a website accessed by users worldwide?

A. an application gateway B. an Azure ExpressRoute circuit C. a content delivery network (CDN) D. an Azure Traffic Manager profile

Correct Answer: C

Question 38 Data stored in the Archive access tier of an Azure Storage account:

A. No change is needed B. can only be read by using Azure Backup C. must be restored before the data can be accessed D. must be rehydrated before the data can be accessed

Correct Answer: D

Question 39 Does running the command “az vm create — resource-group RG1 — name VM1 — image UbuntuLTS — generate-ssh-keys” from Azure Cloud Shell with PowerShell meet the goal?

A. Yes B. No

Correct Answer: A

Question 40 Does running the command “az vm create — resource-group RG1 — name VM1 — image UbuntuLTS — generate-ssh-keys” from PowerShell on a Windows 10 computer with Azure CLI installed meet the goal?

A. Yes B. No

Correct Answer: A

Question 41 Does running the command “az vm create — resource-group RG1 — name VM1 — image UbuntuLTS — generate-ssh-keys” from a command prompt on a Windows 10 computer with Azure CLI installed meet the goal?

A. Yes B. No

Correct Answer: A

Question 42 Does running a PowerShell script from a computer that runs Windows 10 and has the Azure PowerShell module installed meet the goal?

A. Yes B. No

Correct Answer: A

Question 43 Which service provides serverless computing in Azure?

A. Azure Virtual Machines B. Azure Functions C. Azure storage account D. Azure Container Instances

Correct Answer: B

Question 44 Does running the command “az vm create — resource-group RG1 — name VM1 — image UbuntuLTS — generate-ssh-keys” from Azure Cloud Shell with Bash meet the goal?

A. Yes B. No

Correct Answer: A

Question 45 What should you include in recommendations to automate the creation of Azure resources for multiple business units requiring the same types of resources?

A. Azure Resource Manager templates B. virtual machine scale sets C. the Azure API Management service D. management groups

Correct Answer: A

Question 46 Which Azure service should you use to collect events from multiple resources into a centralized repository?

A. Azure Event Hubs B. Azure Analysis Services C. Azure Monitor D. Azure Stream Analytics

Correct Answer: A

Question 47 Does using PowerShell in Azure Cloud Shell meet the goal of creating a new Azure virtual machine from an Android tablet?

A. Yes B. No

Correct Answer: A

Question 48 Does using the PowerApps portal meet the goal of creating a new Azure virtual machine from an Android tablet?

A. Yes B. No

Correct Answer: B

Question 49 Does using the Azure portal meet the goal of creating a new Azure virtual machine from an Android tablet?

A. Yes B. No

Correct Answer: A

Question 50 Azure Databricks is:

A. No change is needed (an Apache Spark-based analytics service) B. Azure Data Factory C. Azure DevOps D. Azure HDInsight

Correct Answer: A

Question 51 Which Azure service provides a set of version control tools to manage code?

A. Azure Repos B. Azure DevTest Labs C. Azure Storage D. Azure Cosmos DB

Correct Answer: A

Question 52 Azure Site Recovery provides:

A. No change is needed (fault tolerance for virtual machines) B. disaster recovery C. elasticity D. high availability

Correct Answer: A

Question 53 An Availability Zone in Azure has physically separate locations:

A. No change is needed B. within a single Azure region C. within multiple Azure regions D. within a single Azure datacenter

Correct Answer: B

Question 54 What should you include in a solution that secures websites from attacks and generates reports with details of attempted attacks?

A. Azure Firewall B. a network security group (NSG) C. Azure Information Protection D. DDoS protection

Correct Answer: D

Question 55 What should you use to identify whether Azure complies with your company’s regional requirements?

A. the Knowledge Center B. Azure Marketplace C. the MyApps portal D. the Trust Center

Correct Answer: D

Question 56 Azure Key Vault is used to store secrets for:

A. No change is needed B. Azure Active Directory (Azure AD) administrative accounts C. Personally Identifiable Information (PII) D. server applications

Correct Answer: D

Question 57 What should you include in a recommendation to encrypt administrative credentials during deployment to Azure?

A. Azure Key Vault B. Azure Information Protection C. Azure Security Center D. Azure Multi-Factor Authentication (MFA)

Correct Answer: A

Question 58 What should you use to control the ports that devices on the Internet can use to access Azure virtual machines?

A. a network security group (NSG) B. an Azure Active Directory (Azure AD) role C. an Azure Active Directory group D. an Azure key vault

Correct Answer: A

Question 59 If a resource group named RG1 has a delete lock:

A. No change is needed B. the delete lock must be removed before an administrator C. an Azure policy must be modified before an administrator D. an Azure tag must be added before an administrator

Correct Answer: B

Question 60 Azure Germany can be used by:

A. no change is needed B. only enterprises that are registered in Germany C. only enterprises that purchase their azure licenses from a partner based in Germany D. any user or enterprise that requires its data to reside in Germany

Correct Answer: D

Question 61 After creating a virtual machine, to allow connections to TCP port 8080, you need to modify:

A. No change is needed (the network security group (NSG)) B. virtual network gateway C. virtual network D. route table

Correct Answer: A

Question 62 Does modifying a network security group (NSG) meet the goal of ensuring a virtual machine named VM1 is accessible from the Internet over HTTP?

A. Yes B. No

Correct Answer: A

Question 63 Does modifying a DDoS protection plan meet the goal of ensuring a virtual machine named VM1 is accessible from the Internet over HTTP?

A. Yes B. No

Correct Answer: B

Question 64 Does modifying an Azure firewall meet the goal of ensuring a virtual machine named VM1 is accessible from the Internet over HTTP?

A. Yes B. No

Correct Answer: A

Question 65 Does modifying an Azure Traffic Manager profile meet the goal of ensuring a virtual machine named VM1 is accessible from the Internet over HTTP?

A. Yes B. No

Correct Answer: B

Question 66 Which two types of customers are eligible to use Azure Government?

A. a Canadian government contractor B. a European government contractor C. a United States government entity D. a United States government contractor E. a European government entity

Correct Answer: CD

Question 67 Which Azure service should you use to ensure Azure AD users connecting from anonymous IP addresses are prompted to change their password?

A. Azure AD Connect Health B. Azure AD Privileged Identity Management C. Azure Advanced Threat Protection (ATP) D. Azure AD Identity Protection

Correct Answer: D

Question 68 What should you include in a recommendation to limit the types of connections from web servers to database servers in Azure?

A. network security groups (NSGs) B. Azure Service Bus C. a local network gateway D. a route filter

Correct Answer: A

Question 69 What provides organizations with the ability to manage the compliance of Azure resources across multiple subscriptions?

A. No change is needed B. Management groups C. Azure policies D. Azure App Service plans

Correct Answer: C

Question 70 What should you recommend to minimize impact on users when migrating 5,000 user accounts from on-premises Active Directory to Azure?

A. Implement Azure Multi-Factor Authentication (MFA) B. Sync all the Active Directory user accounts to Azure Active Directory (Azure AD) C. Instruct all users to change their password D. Create a guest user account in Azure Active Directory (Azure AD) for each user

Correct Answer: B

Question 71 Which service provides network traffic filtering across multiple Azure subscriptions and virtual networks?

A. Azure Firewall B. an application security group C. Azure DDoS protection D. a network security group (NSG)

Correct Answer: A

Question 72 Which Azure service should you use to store certificates?

A. Azure Security Center B. an Azure Storage account C. Azure Key Vault D. Azure Information Protection

Correct Answer: C

Question 73 What should you use to prevent the creation of virtual machines only in a resource group RG1?

A. a lock B. an Azure role C. a tag D. an Azure policy

Correct Answer: D

Question 74 What can Azure Information Protection encrypt?

A. network traffic B. documents and email messages C. an Azure Storage account D. an Azure SQL database

Correct Answer: B

Question 75 What should you use to evaluate whether your company’s Azure environment meets regulatory requirements?

A. the Knowledge Center website B. the Advisor blade from the Azure portal C. Compliance Manager from the Security Trust Portal D. the Security Center blade from the Azure portal

Correct Answer: D

Question 76 Your company implements policies to automatically add a watermark to Microsoft Word documents containing credit card information using:

A. No change is needed B. DDoS protection C. Azure Information Protection D. Azure Active Directory (Azure AD) Identity Protection

Correct Answer: C

Question 77 To view which user turned off a specific virtual machine during the last 14 days, you would use:

A. No change is needed B. Azure Event Hubs C. Azure Activity Log D. Azure Service Health

Correct Answer: C

Question 78 If you assign an Azure Policy definition of Not Allowed Resource Type for virtual networks to a resource group containing VNET1, the virtual network:

A. No change is needed B. is moved automatically to another resource group C. continues to function normally D. is now a read-only object

Correct Answer: C

Question 79 What should you create to ensure administrators can only create Azure resources in regions where their office is located?

A. a read-only lock B. an Azure policy C. a management group D. a reservation

Correct Answer: B

Question 80 From where can you track your company’s regulatory standards and regulations, such as ISO 27001?

A. No change is needed B. the Microsoft Cloud Partner Portal C. Compliance Manager D. the Trust Center

Correct Answer: C

Question 81 What explains what data Microsoft processes, how Microsoft processes the data, and the purpose of processing the data?

A. No change is needed (Microsoft Online Services Privacy Statement) B. Microsoft Online Services Terms C. Microsoft Online Service Level Agreement D. Online Subscription Agreement for Microsoft Azure

Correct Answer: A

Question 82 The process of verifying a user’s credentials is:

A. No change is needed B. Authentication C. Federation D. Ticketing

Correct Answer: B

Question 83 If you have several virtual machines in an Azure subscription and create a new subscription:

A. No change is needed B. The virtual machines can be moved to the new subscription C. The virtual machines can be moved to the new subscription only if they are all in the same resource group D. The virtual machines can be moved to the new subscription only if they run Windows Server 2016

Correct Answer: B

Question 84 What should you do to increase Azure subscription limits when attempting to create several managed SQL Server instances?

A. Create a service health alert B. Upgrade your support plan C. Modify an Azure policy D. Create a new support request

Correct Answer: D

Question 85 Which Azure Resource Manager feature should you use to generate billing reports for each of 10 offices showing their Azure resource utilization?

A. tags B. templates C. locks D. policies

Correct Answer: A

Question 86 If an Azure resource becomes unavailable due to a service outage, Microsoft will:

A. No change is needed B. migrate the resource to another subscription C. credit your account D. send you a coupon code that you can redeem for Azure credits

Correct Answer: C

Question 87 What are two possible techniques to segment Azure for different departments?

A. multiple subscriptions B. multiple Azure Active Directory (Azure AD) directories C. multiple regions D. multiple resource groups

Correct Answer: AD

Question 88 If Microsoft plans to end support for an Azure service that does NOT have a successor service, Microsoft will provide notification at least:

A. No change is needed (12 months before) B. 6 months C. 90 days D. 30 days

Correct Answer: A

Question 89 Does removing unused network interfaces from an Azure subscription reduce costs?

A. Yes B. No

Correct Answer: B

Question 90 Does removing unused public IP addresses from an Azure subscription reduce costs?

A. Yes B. No

Correct Answer: A

Question 91 Does removing unused user accounts from an Azure subscription reduce costs?

A. Yes B. No

Correct Answer: B

Question 92 A support plan that gives you best practice information, health status and notifications, and 24/7 access to billing information at the lowest possible cost is:

A. No change is needed B. Developer C. Basic D. Premier

Correct Answer: C

Question 93 In which Azure support plans can you open a new support request?

A. Premier and Professional Direct only B. Premier, Professional Direct, and Standard only C. Premier, Professional Direct, Standard, and Developer only D. Premier, Professional Direct, Standard, Developer, and Basic

Correct Answer: C

Question 94 You can create an Azure support request from:

A. No change is needed B. the Azure portal C. the Knowledge Center D. the Security & Compliance admin center

Correct Answer: B

Question 95 Does removing unused groups from an Azure subscription reduce costs?

A. Yes B. No

Correct Answer: B

Question 96 The lowest cost option to receive 24x7 access to support engineers by phone is:

A. No change is needed B. Developer C. Basic D. Professional Direct

Correct Answer: C

Question 97 Azure services in public preview are:

A. No change is needed B. only configurable from Azure CLI C. excluded from the Service Level Agreements D. only configurable from the Azure portal

Correct Answer: C

Question 98 What is guaranteed in an Azure Service Level Agreement (SLA) for virtual machines?

A. uptime B. feature availability C. bandwidth D. performance

Correct Answer: A

Question 99 An Azure service is available to all Azure customers when it is in:

A. No change is needed (public preview) B. private preview C. development D. an Enterprise Agreement (EA) subscription

Correct Answer: A

Question 100 Does a Basic support plan meet the requirement of providing access to support engineers by phone or email?

A. Yes B. No

Correct Answer: B

Question 101 Does a Standard support plan meet the requirement of providing access to support engineers by phone or email?

A. Yes B. No

Correct Answer: A

Question 102 Does a Premier support plan meet the requirement of providing access to support engineers by phone or email?

A. Yes B. No

Correct Answer: A

Question 103 Which support plan should you recommend for an architectural review of an Azure environment from Microsoft, while minimizing costs?

A. Premier B. Developer C. Professional Direct D. Standard

Correct Answer: A

Question 104 What is required to use Azure Cost Management?

A. a Dev/Test subscription B. Software Assurance C. an Enterprise Agreement (EA) D. a pay-as-you-go subscription

Correct Answer: C

Question 105 After your Azure trial account expires, what are you unable to do?

A. No change is needed B. start an existing Azure virtual machine C. access your data stored in Azure D. access the Azure portal

Correct Answer: B

Question 106 Does a Professional Direct support plan meet the requirement of providing access to support engineers by phone or email?

A. Yes B. No

Correct Answer: A

Question 107 What should you create for each department to ensure they can use different payment options for Azure services?

A. a reservation B. a subscription C. a resource group D. a container instance

Correct Answer: B

Question 108 Which statement accurately describes the Modern Lifecycle Policy for Azure services?

A. Microsoft provides mainstream support for a service for five years B. Microsoft provides a minimum of 12 months’ notice before ending support for a service C. After a service is made generally available, Microsoft provides support for the service for a minimum of four years D. When a service is retired, you can purchase extended support for the service for up to five years

Correct Answer: B

Question 109 You can use which feature to send email alerts when the cost of the current billing period for an Azure subscription exceeds a specified limit?

A. No change is needed B. Access control (IAM) C. Budget alerts D. Compliance

Correct Answer: C