AZ 900: Azure Fundamentals Exam Questions and Answers Already Passed

AZ 900: Azure Fundamentals Exam Questions and Answers Already Passed What types of attacks can a Web Application Firewall (WAF) protect from? Cross Site Scripting (XSS) attacks Not DDoS (DDoS protection is offered separately, not part of the firewall) Scenario: You have an application in the cloud that has 10 servers with various roles. Six servers are D2S machines, two servers are D4S, and two are D8S instance types. This application is expected to run for years, but the business has concerns about the cost. What is the one thing you can do almost immediately to reduce the cost of this solution by at least 50%? Use Azure Reserved Instances with Hybrid Benefit You can get 80% savings without a single change to your application Which tool within the Azure Portal will make specific recommendations based on your actual usage for how you can improve your use of Azure? Azure Advisor Which Azure AD licenses (select two) are made available through Azure? Free Office 365 Premium 1 Premium 2 Which of the following scenarios would Azure Policy be a recommended method for enforcement? Prevent certain azure VM instance types from being used in a resource group What are the two features that Azure AD provides? Choose two. Authentication and Application Management What is the basic way of protecting an Azure Virtual Network subnet? Network Security Group Which of the following elements is considered part of the "network" layer of network security? Separate servers into distinct subnets by role Which feature within Azure collects all of the logs from various resources into a central dashboard, where you can run queries, view graphs, and create alerts on certain events? Azure Monitor Azure Advisor a tool that will analyze your use of Azure and make you specific recommendations based on your usage across availability, security, performance and cost categories Azure Service Health feature that alerts you to service issues that happen in Azure itself, not specifically related to your own resources Azure Policy a service to create policies the policies allow you to enforce and control the properties of a resource can add restrictions on storage account SKUs, virtual machine instance types, and rules relating to tagging of resources and groups, it cannot prompt a user to ask them if they are sure Network Security Group (NSG) **a virtual firewall at the subnet level a virtual firewall for subnets instead of vnets a fairly basic set of rules that you can apply to both inbound traffic and outbound traffic that lets you specify what sources, destinations and ports are allowed to travel through from outside the virtual network to inside the virtual network Azure Monitor a centralized dashboard that collects all the logs, metrics and events from your resources for telemetry An IT needs to create a VM in Azure. Currently, the IT Engineer has an Android OS based workstation. Which of the following can the IT Engineer use to create the desired VM in Azure Microsoft PowerApps Azure Cloud Shell Azure Powershell Azure CLI Azure Cloud Shell Azure Powershell Azure CLI Microsoft PowerApps is not used to create VMs it allows you to build mobile apps from selectable templates Does the Azure Free Account allow you to host production-based resources? Yes Does Azure AD have capabilities to implement authorization using Azure RBAC to secure resources? Yes Does the Azure AD Premium P2 tier come with an SLA of 99.9%? Yes A company needs to store 2 TB worth of data this is infrequently used. The data needs to be accessed via PowerBI. Which of the following could be used as a cost-effective data layer for this requirement? Azure Data Lake A company needs to create around 50 customized VMs. 20 are windows base and 30 are Ubuntu. Which of the following would help reduce the administrative effort required to deploy the machines? Azure Scale Sets A company want to use Azure for the deployment of various solutions. They want to ensure that whenever users authenticate to Azure, they have to make use of MFA. Which can help them achieve this? Azure Privileged Identity Management When a VM is stopped, will you still incur costs for the storage attached to the VM? Yes