AZ-900 Microsoft Prep Exam Questions and Answers

AZ-900 Microsoft Prep Exam Questions and Answers A private cloud requires * the use of custom developed software. * data to be stored in an on-premises datacenter. * the infrastructure to be on a private network * each tenant to access apps and dat thru a different URL A private cloud requires the infrastructure to be on a private network You want to ensure that on SQL DB instances can be added to a resource group named database-rg * Lock * Policy * RBAC * Initiative Policy when you want to ensure that on SQL DB instances can be added to a resource group named database-rg. Previous Play Next Rewind 10 seconds Move forward 10 seconds Unmute 0:00 / 0:15 Full screen Brainpower Read More You want to ensure that only members of the Sales group can access VMs in the sales-rg resource group. * Lock * Policy * RBAC * Initiative RBAC when you want to ensure that only members of the Sales group can access VMs in the sales-rg resource group. RBAC assigns permissions that apply to users and groups. You want to prevent new resources form being added to a resource group by anyone. * Lock * Policy * RBAC * Initiative Lock - when you want to prevent new resources form being added to a resource group by anyone. It prevents the accidental mdification of a resource group. You need to bring Azure Storage into your VNet with a dedicted IP address, which solution should you use? * Create a site-to-site VPN with Azure VPN Gateway * Create a privte endpoint with Azure Private Link * Create a private connction with Azure ExpressRoute * Peer your Azure VNet with Azure Storage VNet. Create a privte endpoint with Azure Private Link. A private endpoint is a network interface that connects you privately and securely to a service powered by Azure Private Link. Private endpoints use a private IP address from your VNet, and they communicate with the service over a secure connection. When running Azure PowerShell with Cloud Shell, both Linux- specific and Windows-specific functionality is available. * Yes * No No, when running Azure PowerShell with Cloud Shell, only Linux- specific functionality is available. Cloud Shell provides a way to run Azure Command-Line Interface (CLI) and Azure PowerShell on iOS and Android mobile devices. * Yes * No Yes, Cloud Shell provides a way to run Azure Command-Line Interface (CLI) and Azure PowerShell on iOS and Android mobile devices. Locking a resource group as read-only locks all resources contained in the group. * Yes * No Yes, Locking a resource group as read-only locks all resources contained in the group. You can apply locks to a resource grp or subscription to prevent deletion or make contained resources read-only. You can also apply locks directly to a resource. A resource group can contain resources from the same region as the resource group only. * Yes * No No, a resource group can contain resources from any region, not just the region in which the resource group is located. You can add a resource to or remove a resource from a resource group as long as the resource group us not locked. * Yes * No Yes, You can add a resource to or remove a resource from a resource group as long as the resource group us not locked. A resources can reside in only 1 resource grp at a time. Deleting a resource group will delete all resources contained in that grp. Resources can interact with other resources in a different resource group. * Yes * No Yes, Resources can interact with other resources in a different resource group. Azure PowerShell can be used to create scripts to automate Azure management tasks. * Yes * No Yes, Azure PowerShell can be used to create scripts to automate Azure management tasks. Azure Resources Manager templates use Azure PowerShell syntax. * Yes * No No, Azure Resource Manager templates use basic JavaScript Object Notations (JSON) syntax with support for expressions and functions that extend JSON values. JSON is a language-independent data format that is supported by a variety of programming lanugages. Which Azure resource can be managed as SaaS? * API Management * Azure Internt of Things (IoT) Central * Azure SQL Database * VMs Azure Internt of Things (IoT) Central can be managed as SaaS. IoT Central service makes it easy for users to manage and monitor IoT devices at scale. An initiative is limited to being assigned to resource groups or subscriptions only * Yes * No No, an initiative is a collection of Azure policy definitions, which are usually grouped with the aim of acheiving a single goal. The same initiative can be assigned to multiple scopes in order to include resources, resource groups, subscriptions, or management groupts. When an initiative assignment is evaluated, all of the policies in that initiative are evaluated. * Yes * No Yes, When an initiative assignment is evaluated, all of the policies in that initiative are evaluated. An initiative can only contain policies that are located in the same subscription. * Yes * No Yes, An initiative can only contain policies that are located in the same subscription. Microsoft Defender for Cloud can automatically discover and assess security for new Azure resources as they are deployed. * Yes * No Yes, Microsoft Defender for Cloud can automatically discover and assess security for new Azure resources as they are deployed. You want to control the users who are allowed to create VNets. * Policy * Advisor * Lock * RBAC * Initiative RBAC to control the users who are allowed to create VNets. You want to review security recommendations related to your deployed resources. * Policy * Advisor * Lock * RBAC * Initiative Advisor is used to review security recommendations related to your deployed resources.