AZ 900: Azure Fundamentals Exam
What types of attacks can a Web Application Firewall (WAF) protect from? - ✔Cross
Site Scripting (XSS) attacks
Not DDoS (DDoS protection is offered separately, not part of the firewall)
Scenario: You have an application in the cloud that has 10 servers with various roles.
Six servers are D2S machines, two servers are D4S, and two are D8S instance types.
This application is expected to run for years, but the business has concerns about the
cost. What is the one thing you can do almost immediately to reduce the cost of this
solution by at least 50%? - ✔Use Azure Reserved Instances with Hybrid Benefit
You can get 80% savings without a single change to your application
Which tool within the Azure Portal will make specific recommendations based on your
actual usage for how you can improve your use of Azure? - ✔Azure Advisor
Which Azure AD licenses (select two) are made available through Azure? - ✔Free
Office 365
Premium 1
Premium 2
Which of the following scenarios would Azure Policy be a recommended method for
enforcement? - ✔Prevent certain azure VM instance types from being used in a
resource group
What are the two features that Azure AD provides? Choose two. - ✔Authentication and
Application Management
What is the basic way of protecting an Azure Virtual Network subnet? - ✔Network
Security Group
Which of the following elements is considered part of the "network" layer of network
security? - ✔Separate servers into distinct subnets by role
Which feature within Azure collects all of the logs from various resources into a central
dashboard, where you can run queries, view graphs, and create alerts on certain
events? - ✔Azure Monitor
Azure Advisor - ✔a tool that will analyze your use of Azure and make you specific
recommendations based on your usage across availability, security, performance and
cost categories
Azure Service Health - ✔feature that alerts you to service issues that happen in Azure
itself, not specifically related to your own resources
,Azure Policy - ✔a service to create policies
the policies allow you to enforce and control the properties of a resource
can add restrictions on storage account SKUs, virtual machine instance types, and rules
relating to tagging of resources and groups, it cannot prompt a user to ask them if they
are sure
Network Security Group (NSG) - ✔**a virtual firewall at the subnet level
a virtual firewall for subnets instead of vnets
a fairly basic set of rules that you can apply to both inbound traffic and outbound traffic
that lets you specify what sources, destinations and ports are allowed to travel through
from outside the virtual network to inside the virtual network
Azure Monitor - ✔a centralized dashboard that collects all the logs, metrics and events
from your resources for telemetry
An IT needs to create a VM in Azure. Currently, the IT Engineer has an Android OS
based workstation. Which of the following can the IT Engineer use to create the desired
VM in Azure
Microsoft PowerApps
Azure Cloud Shell
Azure Powershell
Azure CLI - ✔Azure Cloud Shell
Azure Powershell
Azure CLI
Microsoft PowerApps - ✔is not used to create VMs
it allows you to build mobile apps from selectable templates
Does the Azure Free Account allow you to host production-based resources? - ✔Yes
Does Azure AD have capabilities to implement authorization using Azure RBAC to
secure resources? - ✔Yes
Does the Azure AD Premium P2 tier come with an SLA of 99.9%? - ✔Yes
A company needs to store 2 TB worth of data this is infrequently used. The data needs
to be accessed via PowerBI. Which of the following could be used as a cost-effective
data layer for this requirement? - ✔Azure Data Lake
A company needs to create around 50 customized VMs. 20 are windows base and 30
are Ubuntu. Which of the following would help reduce the administrative effort required
to deploy the machines? - ✔Azure Scale Sets
, A company want to use Azure for the deployment of various solutions. They want to
ensure that whenever users authenticate to Azure, they have to make use of MFA.
Which can help them achieve this? - ✔Azure Privileged Identity Management
When a VM is stopped, will you still incur costs for the storage attached to the VM? -
✔Yes
Azure Powershell - ✔powershell is a task automation and configuration management
framework
*a commands line shell and scripting language
PowerShell 5.1 on Windows and PowerShell 7.x and higher on all platforms
Cloud Shell - ✔interactive, authenticated, browser accessible shell for managing azure
resources
allows access to the CLI and Powershell consoles in the Azure Portal
you access from the azure portal
you can use either bash or powershell
A tool that provides guidance and recommendations to improve an Azure environment -
✔Azure Advisor
A tool used to monitor Web applications hosted in production-based environments -
✔Azure Applications Insights
What data solution would you consider for these requirements?
- no need for schema or index management
- ensure low latency access to data from around the world - ✔Azure Cosmos DB
A company is planning to deploy Azure resources to a resource group. The company is
planning to assign tags to the resource groups. Would the resources in the resource
group also inherit the same tags? - ✔No
Would the Azure Advisor tool alone be able to give recommendations on how to
improve the security of the Azure AD environment? - ✔No
Which of the following could be used to automate the deployment of 10 Azure resources
for several departments using infrastructure as code? - ✔Azure Resource Manager
templates
A company has hosted its solutions on the Azure Cloud. They need to implement MFA
for identities hosted in Azure. It is necessary to deploy a federation solution or sync on-
premise identities to the cloud? - ✔No
What types of attacks can a Web Application Firewall (WAF) protect from? - ✔Cross
Site Scripting (XSS) attacks
Not DDoS (DDoS protection is offered separately, not part of the firewall)
Scenario: You have an application in the cloud that has 10 servers with various roles.
Six servers are D2S machines, two servers are D4S, and two are D8S instance types.
This application is expected to run for years, but the business has concerns about the
cost. What is the one thing you can do almost immediately to reduce the cost of this
solution by at least 50%? - ✔Use Azure Reserved Instances with Hybrid Benefit
You can get 80% savings without a single change to your application
Which tool within the Azure Portal will make specific recommendations based on your
actual usage for how you can improve your use of Azure? - ✔Azure Advisor
Which Azure AD licenses (select two) are made available through Azure? - ✔Free
Office 365
Premium 1
Premium 2
Which of the following scenarios would Azure Policy be a recommended method for
enforcement? - ✔Prevent certain azure VM instance types from being used in a
resource group
What are the two features that Azure AD provides? Choose two. - ✔Authentication and
Application Management
What is the basic way of protecting an Azure Virtual Network subnet? - ✔Network
Security Group
Which of the following elements is considered part of the "network" layer of network
security? - ✔Separate servers into distinct subnets by role
Which feature within Azure collects all of the logs from various resources into a central
dashboard, where you can run queries, view graphs, and create alerts on certain
events? - ✔Azure Monitor
Azure Advisor - ✔a tool that will analyze your use of Azure and make you specific
recommendations based on your usage across availability, security, performance and
cost categories
Azure Service Health - ✔feature that alerts you to service issues that happen in Azure
itself, not specifically related to your own resources
,Azure Policy - ✔a service to create policies
the policies allow you to enforce and control the properties of a resource
can add restrictions on storage account SKUs, virtual machine instance types, and rules
relating to tagging of resources and groups, it cannot prompt a user to ask them if they
are sure
Network Security Group (NSG) - ✔**a virtual firewall at the subnet level
a virtual firewall for subnets instead of vnets
a fairly basic set of rules that you can apply to both inbound traffic and outbound traffic
that lets you specify what sources, destinations and ports are allowed to travel through
from outside the virtual network to inside the virtual network
Azure Monitor - ✔a centralized dashboard that collects all the logs, metrics and events
from your resources for telemetry
An IT needs to create a VM in Azure. Currently, the IT Engineer has an Android OS
based workstation. Which of the following can the IT Engineer use to create the desired
VM in Azure
Microsoft PowerApps
Azure Cloud Shell
Azure Powershell
Azure CLI - ✔Azure Cloud Shell
Azure Powershell
Azure CLI
Microsoft PowerApps - ✔is not used to create VMs
it allows you to build mobile apps from selectable templates
Does the Azure Free Account allow you to host production-based resources? - ✔Yes
Does Azure AD have capabilities to implement authorization using Azure RBAC to
secure resources? - ✔Yes
Does the Azure AD Premium P2 tier come with an SLA of 99.9%? - ✔Yes
A company needs to store 2 TB worth of data this is infrequently used. The data needs
to be accessed via PowerBI. Which of the following could be used as a cost-effective
data layer for this requirement? - ✔Azure Data Lake
A company needs to create around 50 customized VMs. 20 are windows base and 30
are Ubuntu. Which of the following would help reduce the administrative effort required
to deploy the machines? - ✔Azure Scale Sets
, A company want to use Azure for the deployment of various solutions. They want to
ensure that whenever users authenticate to Azure, they have to make use of MFA.
Which can help them achieve this? - ✔Azure Privileged Identity Management
When a VM is stopped, will you still incur costs for the storage attached to the VM? -
✔Yes
Azure Powershell - ✔powershell is a task automation and configuration management
framework
*a commands line shell and scripting language
PowerShell 5.1 on Windows and PowerShell 7.x and higher on all platforms
Cloud Shell - ✔interactive, authenticated, browser accessible shell for managing azure
resources
allows access to the CLI and Powershell consoles in the Azure Portal
you access from the azure portal
you can use either bash or powershell
A tool that provides guidance and recommendations to improve an Azure environment -
✔Azure Advisor
A tool used to monitor Web applications hosted in production-based environments -
✔Azure Applications Insights
What data solution would you consider for these requirements?
- no need for schema or index management
- ensure low latency access to data from around the world - ✔Azure Cosmos DB
A company is planning to deploy Azure resources to a resource group. The company is
planning to assign tags to the resource groups. Would the resources in the resource
group also inherit the same tags? - ✔No
Would the Azure Advisor tool alone be able to give recommendations on how to
improve the security of the Azure AD environment? - ✔No
Which of the following could be used to automate the deployment of 10 Azure resources
for several departments using infrastructure as code? - ✔Azure Resource Manager
templates
A company has hosted its solutions on the Azure Cloud. They need to implement MFA
for identities hosted in Azure. It is necessary to deploy a federation solution or sync on-
premise identities to the cloud? - ✔No
