Lead4Pass updates Microsoft AZ-900 dumps throughout the year, and more importantly, provides some free exam questions each time to help candidates practice their tests online!
September AZ-900 dumps have been updated, and verified by the Microsoft team, as true and effective! Now! Take the newest AZ-900 online practice test! also available for download
AZ-900 dumps with PDF and VCE format: https://www.lead4pass.com/az-900.html (contains 580 latest exam questions and answers!).
Microsoft AZ-900 Exam Questions Online Practice Test:
| Type | Number of exam questions | Exam name | Exam code |
| Free | 13 | Microsoft Azure Fundamentals | AZ-900 |
QUESTION 1:
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Box 1: Yes
With Azure ExpressRoute, all inbound data transfer is free of charge.
Box 2: No
Inbound data traffic is free but outbound data traffic is not.
Box 3: Yes
Reference:
https://azure.microsoft.com/en-us/pricing/details/expressroute/
https://azure.microsoft.com/en-us/pricing/details/bandwidth/
QUESTION 2:
This question requires that you evaluate the underlined text to determine if it is correct.
You plan to deploy 20 virtual machines to an Azure environment. To ensure that a virtual machine named VM1 cannot connect to the other virtual machines, VM1 must be deployed to a separate virtual network.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. run a different operating system than the other virtual machines
C. be deployed to a separate resource group
D. have two network interfaces
Correct Answer: A
Azure automatically routes traffic between subnets in a virtual network. Therefore, all virtual machines in a virtual network can connect to the other virtual machines in the same virtual network. Even if the virtual machines are on separate subnets within the virtual network, they can still communicate with each other.
To ensure that a virtual machine cannot connect to the other virtual machines, the virtual machine must be deployed to a separate virtual network.
References: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
QUESTION 3:
This question requires that you evaluate the underlined text to determine if it is correct.
From Access Control (IAM), you can view which user turned off a specific virtual machine during the last 14 days.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. Azure Event Hubs
C. Azure Activity Log
D. Azure Service Health
Correct Answer: C
You would use the Azure Activity Log, not Access Control to view which user turned off a specific virtual machine during the last 14 days.
Activity logs are kept for 90 days. You can query for any range of dates, as long as the starting date isn’t more than 90 days in the past.
In this question, we would create a filter to display shut down operations on the virtual machine in the last 14 days.
References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-audit
QUESTION 4:
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 5:
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Box 1: Yes
A reservation is where you commit to pay for a resource (for example a virtual machine) for one or three years. This gives you a discounted price on the resource for the reservation period.
Box 2: No
There are other factors that influence the cost of a virtual machine such as the virtual hard disks attached to the virtual machine. You could have multiple virtual machines with the same ‘size’ (B2S in this case) but with different virtual hard disk configurations.
Box 3: Yes
When a virtual machine is stopped (deallocated), the virtual machine is unloaded/dismounted from the physical server in Azure. In this state, you are not charged for the virtual machine itself. However, you are still charged for the storage costs of the virtual hard disks attached to the virtual machine.
If the virtual machine is stopped but not deallocated (this happens if you shut down the virtual machine from the operating system of the virtual machine), the virtual machine is still mounted on the physical server in Azure and you are charged for the virtual machine itself as well as the storage costs. To ensure that a virtual machine is ‘stopped (deallocated)’, you need to stop the virtual machine in the Azure portal.
Reference:
https://azure.microsoft.com/en-us/reservations/
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/b-series-burstable
QUESTION 6:
Which Azure service should you use to store certificates?
A. Azure Security Center
B. an Azure Storage account
C. Azure Key Vault
D. Azure Information Protection
Correct Answer: C
Azure Key Vault is a secure store for storage of various types of sensitive information including passwords and certificates.
Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets.
Secrets and keys are safeguarded by Azure, using industry-standard algorithms, key lengths, and hardware security modules (HSMs). The HSMs used are Federal Information Processing Standards (FIPS) 140-2 Level 2 validated.
Access to a key vault requires proper authentication and authorization before a caller (user or application) can get access. Authentication establishes the identity of the caller, while authorization determines the operations that they are allowed to perform.
References:
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview
QUESTION 7:
Your company plans to migrate to Azure. The company has several departments. All the Azure resources used by each department will be managed by a department administrator.
What are two possible techniques to segment Azure for the departments? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. multiple subscriptions
B. multiple Azure Active Directory (Azure AD) directories
C. multiple regions
D. multiple resource groups
Correct Answer: AD
An Azure subscription is a container for Azure resources. It is also a boundary for permissions to resources and for billing. You are charged monthly for all resources in a subscription. A single Azure tenant (Azure Active Directory) can contain multiple Azure subscriptions.
A resource group is a container that holds related resources for an Azure solution. The resource group can include all the resources for the solution or only those resources that you want to manage as a group.
To enable each department administrator to manage the Azure resources used by that department, you will need to create a separate subscription per department.
You can then assign each department administrator as an administrator for the subscription to enable them to manage all resources in that subscription.
https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/create-subscription
https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/add-change-subscription- administrator
QUESTION 8:
You need to be notified when Microsoft plans to perform maintenance that can affect the resources deployed to an Azure subscription. What should you use?
A. Azure Monitor
B. Azure Service Health
C. Azure Advisor
D. Microsoft Trust Center
Correct Answer: B
Azure Service Health provides a personalized view of the health of the Azure services and regions you\’re using.
This is the best place to look for service-impacting communications about outages, planned maintenance activities, and other health advisories because the authenticated Service Health experience knows which services and resources you currently use.
Reference: https://docs.microsoft.com/en-us/azure/service-health/overview
QUESTION 9:
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Box 1: Yes
There are different replication options available with a storage account. The ‘minimum’ replication option is Locally Redundant Storage (LRS). With LRS, data is replicated synchronously three times within the primary region.
Box 2: No
Data is not backed up automatically to another Azure Data Center although it can be depending on the replication option configured for the account. Locally Redundant Storage (LRS) is the default that maintains three copies of the data in the data center.
Geo-redundant storage (GRS) has cross-regional replication to protect against regional outages. Data is replicated synchronously three times in the primary region, then replicated asynchronously in the secondary region.
Box 3: No
The limits are much higher than that. The current storage limit is 2 PB for US and Europe and 500 TB for all other regions (including the UK) with no limit on the number of files.
References:
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview
QUESTION 10:
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Box 1: Yes
Traditionally, IT expenses have been considered a Capital Expenditure (CapEx). Today, with the move to the cloud and the pay-as-you-go model, organizations have the ability to stretch their budgets and are shifting their IT CapEx costs to Operating Expenditures (OpEx) instead. This flexibility, in accounting terms, is now an option due to the “as a Service” model of purchasing software, cloud storage, and other IT-related resources.
Box 2: No
Two virtual machines using the same size could have different disk configurations. Therefore, the monthly costs could be different.
Box 3: Yes
When an Azure virtual machine is stopped, you don’t pay for the virtual machine. However, you do still pay for the storage costs associated with the virtual machine. The most common storage costs are for the disks attached to the virtual machines. There are also other storage costs associated with a virtual machine such as storage for diagnostic data and virtual machine backups.
References:
https://meritsolutions.com/capex-vs-opex-cloud-computing-blog/
QUESTION 11:
Your company plans to automate the deployment of servers to Azure. Your manager is concerned that you may expose administrative credentials during the deployment.
You need to recommend an Azure solution that encrypts the administrative credentials during the deployment.
What should you include in the recommendation?
A. Azure Key Vault
B. Azure Information Protection
C. Azure Security Center
D. Azure Multi-Factor Authentication (MFA)
Correct Answer: A
Azure Key Vault is a secure store for storing various types of sensitive information. In this question, we would store the administrative credentials in the Key Vault. With this solution, there is no need to store the administrative credentials as plain text in the deployment scripts.
All information stored in the Key Vault is encrypted.
Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets.
Secrets and keys are safeguarded by Azure, using industry-standard algorithms, key lengths, and hardware security modules (HSMs). The HSMs used are Federal Information Processing Standards (FIPS) 140-2 Level 2 validated.
Access to a key vault requires proper authentication and authorization before a caller (user or application) can get access. Authentication establishes the identity of the caller, while authorization determines the operations that they are allowed to perform.
References:
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview
QUESTION 12:
A company has offices in multiple regions. The company has a Microsoft 365 subscription.
The company is developing a line-of-business (LOB) app. The app must meet the following requirements.
1.
Ensure availability regardless of an employee
2.
TMs location.
3.
Track the devices on which the app is installed by using Microsoft Cloud services.
4.
Minimize costs. Whatshouldyoudo?
A. Copy the app to Microsoft OneDrive. Allow employees to download and install the app from One Drive.
B. Deploy the app to all devices by using Microsoft Intune.
C. Copy the app to local servers. Allow employees to download and install the app from the servers.
D. Deploy the app to all devices by using the group policy.
Correct Answer: B
Reference: https://docs.microsoft.com/en-us/mem/intune/apps/apps-windows-10-app-deploy
https://docs.microsoft.com/en-us/mem/intune/apps/apps-monitor
QUESTION 13:
You have 50 virtual machines hosted on-premises and 50 virtual machines hosted in Azure. The on-premises virtual machines and the Azure virtual machines connect to each other.
Which type of cloud model is this?
A. hybrid
B. private
C. public
Correct Answer: A
References: https://azure.microsoft.com/en-gb/overview/what-is-hybrid-cloud-computing/
…
PS. Download the latest Microsoft AZ-900 exam practice questions online: https://drive.google.com/file/d/1gIksjpNQKmHiNSSaM_i9HoixWRHFepjM/
Every free sharing of Microsoft AZ-900 exam questions is the hard work of our Microsoft team, and we hope to help you improve your strength!
Now, use AZ-900 PDF dumps or AZ-900 VCE dumps: https://www.lead4pass.com/az-900.html (both formats contain the latest exam questions and answers!) Also, get 15% off with code “Microsoft” !