AZ 900: Azure Fundamentals Exam graded A+

AZ 900: Azure Fundamentals Exam graded A+What types of attacks can a Web Application Firewall (WAF) protect from? - correct answer Cross Site Scripting (XSS) attacks Not DDoS (DDoS protection is offered separately, not part of the firewall) Scenario: You have an application in the cloud that has 10 servers with various roles. Six servers are D2S machines, two servers are D4S, and two are D8S instance types. This application is expected to run for years, but the business has concerns about the cost. What is the one thing you can do almost immediately to reduce the cost of this solution by at least 50%? - correct answer Use Azure Reserved Instances with Hybrid Benefit You can get 80% savings without a single change to your application Which tool within the Azure Portal will make specific recommendations based on your actual usage for how you can improve your use of Azure? - correct answer Azure Advisor Which Azure AD licenses (select two) are made available through Azure? - correct answer Free Office 365 Premium 1 Premium 2 Which of the following scenarios would Azure Policy be a recommended method for enforcement? - correct answer Prevent certain azure VM instance types from being used in a resource group What are the two features that Azure AD provides? Choose two. - correct answer Authentication and Application Management What is the basic way of protecting an Azure Virtual Network subnet? - correct answer Network Security Group Which of the following elements is considered part of the "network" layer of network security? - correct answer Separate servers into distinct subnets by role Which feature within Azure collects all of the logs from various resources into a central dashboard, where you can run queries, view graphs, and create alerts on certain events? - correct answer Azure Monitor Azure Advisor - correct answer a tool that will analyze your use of Azure and make you specific recommendations based on your usage across availability, security, performance and cost categories Azure Service Health - correct answer feature that alerts you to service issues that happen in Azure itself, not specifically related to your own resources Azure Policy - correct answer a service to create policies the policies allow you to enforce and control the properties of a resource can add restrictions on storage account SKUs, virtual machine instance types, and rules relating to tagging of resources and groups, it cannot prompt a user to ask them if they are sure Network Security Group (NSG) - correct answer **a virtual firewall at the subnet level a virtual firewall for subnets instead of vnets a fairly basic set of rules that you can apply to both inbound traffic and outbound traffic that lets you specify what sources, destinations and ports are allowed to travel through from outside the virtual network to inside the virtual network Azure Monitor - correct answer a centralized dashboard that collects all the logs, metrics and events from your resources for telemetry