AZ-900 Microsoft Azure Fundamentals Exam Prep: Full
Study Guide, Real Practice Tests, and Certification
Success Strategies
Scenario 1: Your company has virtual machines (VMs) hosted in Microsoft Azure. The VMs are
located in a single Azure virtual network named VNet1. The company has users that work
remotely. The remote workers require access to the VMs on VNet1. You need to provide access
for the remote workers.
Question: What should you do?
A. Configure a Site-to-Site (S2S) VPN.
B. Configure a VNet-to-VNet VPN.
C. Configure a Point-to-Site (P2S) VPN.
D. Configure DirectAccess on a Windows Server 2012 server VM.
E. Configure a Multi-Site VPN.
Correct Answer: C. Configure a Point-to-Site (P2S) VPN.
Rationale:
• Point-to-Site (P2S) VPN connections allow individual client computers (remote workers)
to connect securely to an Azure Virtual Network. This is the ideal solution when you
have individual remote users who need to access resources within Azure.
• Site-to-Site (S2S) VPN is used to connect an entire on-premises network to an Azure
Virtual Network, which isn't the requirement here (individual remote users).
• VNet-to-VNet VPN connects two Azure Virtual Networks, which is not applicable to
connecting remote users.
• DirectAccess on a Windows Server 2012 server VM is an on-premises technology for
remote access, not directly an Azure native solution for connecting remote users to
Azure VMs.
, • Multi-Site VPN is a variation of Site-to-Site, connecting multiple on-premises locations to
Azure, again not for individual remote users.
Scenario 2: You need to compare a company's cloud usage to industry standard best practices.
Question: What should you use?
A. Azure Monitor
B. Azure Service Health
C. Application Insights in Azure Monitor
D. Azure Advisor
Correct Answer: D. Azure Advisor
Rationale:
• Azure Advisor is a personalized cloud consultant that helps you follow best practices to
optimize your Azure deployments. It analyzes your resource configuration and usage
telemetry and recommends solutions to improve high availability, security, performance,
cost-effectiveness, and operational excellence. The keyword "Best practices" directly
points to Azure Advisor.
• Azure Monitor collects, analyzes, and acts on telemetry from your Azure and on-
premises environments, primarily for monitoring performance and availability.
• Azure Service Health provides a personalized view of the health of the Azure services
and regions you're using.
• Application Insights in Azure Monitor is an Application Performance Management
(APM) service for web developers, used for monitoring live web applications.
Scenario 3: This question requires that you evaluate the underlined text to determine if it is
correct.
The Azure Standard support plan is the lowest cost option to receive 24x7 access to support
engineers by phone.
Instructions: Review the underlined text. If it makes the statement correct, select "No change is
needed". If the statement is incorrect, select the answer choice that makes the statement
correct.
, A. No change is needed
B. Developer
C. Basic
D. Professional Direct
Correct Answer: A. No change is needed
Rationale:
• The Standard support plan is indeed the lowest-cost option that provides 24x7 access to
support engineers by phone for critical issues.
• The Basic plan has limited support options and no 24x7 phone access.
• The Developer plan offers email support during business hours but no 24x7 phone
access.
• The Professional Direct plan offers more comprehensive support with faster response
times and designated resources, but it is a higher-cost option than Standard.
Scenario 4: Your company has an Azure subscription that contains the following unused
resources:
• 20 user accounts in Azure Active Directory (Azure AD)
• Five groups in Azure AD
• 10 public IP addresses
• 10 network interfaces
You need to reduce the Azure costs for the company.
Question: Which unused resources should you remove?
A. the network interfaces
B. the public IP addresses
C. the groups
D. the user accounts
Correct Answer: B. the public IP addresses
Study Guide, Real Practice Tests, and Certification
Success Strategies
Scenario 1: Your company has virtual machines (VMs) hosted in Microsoft Azure. The VMs are
located in a single Azure virtual network named VNet1. The company has users that work
remotely. The remote workers require access to the VMs on VNet1. You need to provide access
for the remote workers.
Question: What should you do?
A. Configure a Site-to-Site (S2S) VPN.
B. Configure a VNet-to-VNet VPN.
C. Configure a Point-to-Site (P2S) VPN.
D. Configure DirectAccess on a Windows Server 2012 server VM.
E. Configure a Multi-Site VPN.
Correct Answer: C. Configure a Point-to-Site (P2S) VPN.
Rationale:
• Point-to-Site (P2S) VPN connections allow individual client computers (remote workers)
to connect securely to an Azure Virtual Network. This is the ideal solution when you
have individual remote users who need to access resources within Azure.
• Site-to-Site (S2S) VPN is used to connect an entire on-premises network to an Azure
Virtual Network, which isn't the requirement here (individual remote users).
• VNet-to-VNet VPN connects two Azure Virtual Networks, which is not applicable to
connecting remote users.
• DirectAccess on a Windows Server 2012 server VM is an on-premises technology for
remote access, not directly an Azure native solution for connecting remote users to
Azure VMs.
, • Multi-Site VPN is a variation of Site-to-Site, connecting multiple on-premises locations to
Azure, again not for individual remote users.
Scenario 2: You need to compare a company's cloud usage to industry standard best practices.
Question: What should you use?
A. Azure Monitor
B. Azure Service Health
C. Application Insights in Azure Monitor
D. Azure Advisor
Correct Answer: D. Azure Advisor
Rationale:
• Azure Advisor is a personalized cloud consultant that helps you follow best practices to
optimize your Azure deployments. It analyzes your resource configuration and usage
telemetry and recommends solutions to improve high availability, security, performance,
cost-effectiveness, and operational excellence. The keyword "Best practices" directly
points to Azure Advisor.
• Azure Monitor collects, analyzes, and acts on telemetry from your Azure and on-
premises environments, primarily for monitoring performance and availability.
• Azure Service Health provides a personalized view of the health of the Azure services
and regions you're using.
• Application Insights in Azure Monitor is an Application Performance Management
(APM) service for web developers, used for monitoring live web applications.
Scenario 3: This question requires that you evaluate the underlined text to determine if it is
correct.
The Azure Standard support plan is the lowest cost option to receive 24x7 access to support
engineers by phone.
Instructions: Review the underlined text. If it makes the statement correct, select "No change is
needed". If the statement is incorrect, select the answer choice that makes the statement
correct.
, A. No change is needed
B. Developer
C. Basic
D. Professional Direct
Correct Answer: A. No change is needed
Rationale:
• The Standard support plan is indeed the lowest-cost option that provides 24x7 access to
support engineers by phone for critical issues.
• The Basic plan has limited support options and no 24x7 phone access.
• The Developer plan offers email support during business hours but no 24x7 phone
access.
• The Professional Direct plan offers more comprehensive support with faster response
times and designated resources, but it is a higher-cost option than Standard.
Scenario 4: Your company has an Azure subscription that contains the following unused
resources:
• 20 user accounts in Azure Active Directory (Azure AD)
• Five groups in Azure AD
• 10 public IP addresses
• 10 network interfaces
You need to reduce the Azure costs for the company.
Question: Which unused resources should you remove?
A. the network interfaces
B. the public IP addresses
C. the groups
D. the user accounts
Correct Answer: B. the public IP addresses
