AZ 900 Azure Fundamentals Exam questions and answers

What types of attacks can a Web Application Firewall (WAF) protect from? Cross Site Scripting (XSS) attacks Not DDoS (DDoS protection is offered separately, not part of the firewall) Scenario: You have an application in the cloud that has 10 servers with various roles. Six servers are D2S machines, two servers are D4S, and two are D8S instance types. This application is expected to run for years, but the business has concerns about the cost. What is the one thing you can do almost immediately to reduce the cost of this solution by at least 50%? Use Azure Reserved Instances with Hybrid Benefit You can get 80% savings without a single change to your application Which tool within the Azure Portal will make specific recommendations based on your actual usage for how you can improve your use of Azure? Azure Advisor Which Azure AD licenses (select two) are made available through Azure? Free Office 365 Premium 1 Premium 2 Which of the following scenarios would Azure Policy be a recommended method for enforcement? Prevent certain azure VM instance types from being used in a resource group What are the two features that Azure AD provides? Choose two. Authentication and Application Management What is the basic way of protecting an Azure Virtual Network subnet? Network Security Group Which of the following elements is considered part of the "network" layer of network security? Separate servers into distinct subnets by role Which feature within Azure collects all of the logs from various resources into a central dashboard, where you can run queries, view graphs, and create alerts on certain events? Azure Monitor Azure Advisor a tool that will analyze your use of Azure and make you specific recommendations based on your usage across availability, security, performance and cost categories Azure Service Health feature that alerts you to service issues that happen in Azure itself, not specifically related to your own resources Azure Policy a service to create policies the policies allow you to enforce and control the properties of a resource can add restrictions on storage account SKUs, virtual machine instance types, and rules relating to tagging of resources and groups, it cannot prompt a user to ask them if they are sure Network Security Group (NSG) **a virtual firewall at the subnet level a virtual firewall for subnets instead of vnets a fairly basic set of rules that you can apply to both inbound traffic and outbound traffic that lets you specify what sources, destinations and ports are allowed to travel through from outside the virtual network to inside the virtual network Azure Monitor a centralized dashboard that collects all the logs, metrics and events from your resources for telemetry An IT needs to create a VM in Azure. Currently, the IT Engineer has an Android OS based workstation. Which of the following can the IT Engineer use to create the desired VM in Azure Microsoft PowerApps Azure Cloud Shell Azure Powershell Azure CLI Azure Cloud Shell Azure Powershell Azure CLI Microsoft PowerApps is not used to create VMs it allows you to build mobile apps from selectable templates Does the Azure Free Account allow you to host production-based resources? Yes Does Azure AD have capabilities to implement authorization using Azure RBAC to secure resources? Yes Does the Azure AD Premium P2 tier come with an SLA of 99.9%? Yes A company needs to store 2 TB worth of data this is infrequently used. The data needs to be accessed via PowerBI. Which of the following could be used as a cost-effective data layer for this requirement? Azure Data Lake A company needs to create around 50 customized VMs. 20 are windows base and 30 are Ubuntu. Which of the following would help reduce the administrative effort required to deploy the machines? Azure Scale Sets A company want to use Azure for the deployment of various solutions. They want to ensure that whenever users authenticate to Azure, they have to make use of MFA. Which can help them achieve this? Azure Privileged Identity Management When a VM is stopped, will you still incur costs for the storage attached to the VM? Yes Azure Powershell powershell is a task automation and configuration management framework *a commands line shell and scripting language PowerShell 5.1 on Windows and PowerShell 7.x and higher on all platforms Cloud Shell interactive, authenticated, browser accessible shell for managing azure resources allows access to the CLI and Powershell consoles in the Azure Portal you access from the azure portal you can use either bash or powershell A tool that provides guidance and recommendations to improve an Azure environment Azure Advisor A tool used to monitor Web applications hosted in production-based environments Azure Applications Insights What data solution would you consider for these requirements? - no need for schema or index management - ensure low latency access to data from around the world Azure Cosmos DB A company is planning to deploy Azure resources to a resource group. The company is planning to assign tags to the resource groups. Would the resources in the resource group also inherit the same tags? No Would the Azure Advisor tool alone be able to give recommendations on how to improve the security of the Azure AD environment? No Which of the following could be used to automate the deployment of 10 Azure resources for several departments using infrastructure as code? Azure Resource Manager templates A company has hosted its solutions on the Azure Cloud. They need to implement MFA for identities hosted in Azure. It is necessary to deploy a federation solution or sync on-premise identities to the cloud? No Using Azure AD, they have the requirement that they are prompted to change password is they login from unknown IP address. Which of the following should the company consider for this? Azure AD Identity Protection Company wants to ensure that when resource groups are created, they have to contain a tag with a name of org and value of labs Would Azure policies work? Yes Company wants to purchase support plan requires that it provides architectural support for the company's Azure environment from Pooled Team of Microsoft's ProDirect Delivery Managers What plan should they purchase? Premier Which stroage tiers fro Azure Blob storage would be suitable for this type of requirement? company wants to create multiple data stores in Azure, the storage layers will be used to store data infrequently Cool Storage Archive Storage A company wants to have an Enterprise messaging solution integrated with their existing application hosted in Azure. What should they use Service Bus company is planning on hosting an application on a set of VMs. VMs will be running for a longer period. Which of the following should be considered to reduce the overall cost of VM usage? Azure reservations A company is having issues provisioning additional VMs What can be done? raise a support ticket with Microsoft Company has segregated their users into groups for their different Azure subscriptions. They want to ensure that they set the right permissions for users and administrators. They need to manage the permissions effectively. You recommend using Azure Management Groups. Does this work? Yes Company wants to host app on Azure using serverless components. they dont want to manage the underlying infrastucutre. which could be used to implement a workflow that could run on a serverless infrastrucutre? Azure Logic Apps it allows you to build serverless workflows An IT engineer has a Windows desktop along with the CLI. Which would allow the IT engineer to use the Azure CLI Powershell and Command Prompt How many Azure Free Accounts can a customer have? one Can an admin give access to partners who do not have an Azure AD account to access resources in Azure? Yes Which of the following is a feature of the Azure SQL Datawarehouse architecture? High Availability Scalability Disaster Recovery Visualization Scalability Requirements - storage of 2 TB of data - storage of a million files Would Azure Storage fulfil these requirements? Yes What are the main offerings of Azure Advisor? High Availability Security Performance Cost not tenancy A company need to be ensured that the application can be accessed over the Internet via HTTP using port ranges and prioritized security rules using the 5-tuple information. You make modifications to the azure firewall? Is this right? No What is Azure Traffic Manager vs Load Balance Traffic Manager - a DNS-based traffic load balancer Traffic Manager distributes traffic globally (Multiregional environments) Azure Load Balancer can only route traffic inside an Azure region, as it only works with Virtual Machines in the same region A company needs to ensure that their application can be accessed over the Internet via HTTP. You modify Traffic Manager profile. Is this correct? No Who is Azure government made for? US government agencies or their partners Explain Azure Support Plans Basic - free, no SLA, no support line Developer - $29/month, only support during business hours Standard - $100/month, 24/7 support Professional Direct - $1000/month, 24/7 support Company needs to deploy several identical machines. Each of these VMs will have the same set of permissions. To minimize the admin overhead, where would you deploy the Azure VMs? Azure Resource Groups