AZ-900 Practice Test - SET A
AZ-900 Azure Fundamentals Practice Exam Outline:
Preparation Course for Microsoft Azure Fundamentals Certification
At certify.otechy.com, we prepare you for the Microsoft Azure Fundamentals AZ-900 exam with our comprehensive practice test course. Gain essential skills and hands-on experience in cloud concepts, Azure architecture, and governance, focusing on:
{getToc} $title={Table of Contents}
- Cloud Basics: Understand cloud computing, service models (IaaS, PaaS, SaaS), and deployment models (public, private, hybrid).
- Azure Architecture: Learn about core Azure components, including compute, networking, and storage.
- Azure Management: Master Azure tools like the Portal, CLI, PowerShell, Security Center, Active Directory, and governance strategies (Azure Policy, Blueprints).
- Timed Practice Tests: Simulate the real exam environment to refine your time management and test-taking strategies.
- Active Recall & Immediate Feedback: Reinforce your learning with active recall techniques and detailed explanations to turn mistakes into lessons.
- Final Prep: Review key services and take mock exams to assess your readiness.
This course provides you with the knowledge and confidence to ace your AZ-900 exam, with real-world Azure scenarios and expert guidance. Start your path to Azure certification today!
AZ-900 Practice Test: SET A
Question 1:
Your company has several business units. Each business unit requires 20
different Azure resources for daily operation. All the business units require
the same type of Azure resources. You need to recommend a solution to automate
the creation of the Azure resources. What should you include in the
recommendations?
○ Azure Resource Manager templates
○ Virtual machine scale sets
○ The Azure API Management service
○ Management groups
Question 2:
What can you use to identify underutilized or unused Azure virtual machines?
○ Azure Advisor
○ Azure Cost Management + Billing
○ Azure reservations
○ Azure Policy
Question 3:
A team of developers at your company plans to deploy, and then remove, 50
customized virtual machines each week. Thirty of the virtual machines run
Windows Server 2016 and 20 of the virtual machines run Ubuntu Linux. You need
to recommend which Azure service will minimize the administrative effort
required to deploy and remove the virtual machines. What should you recommend?
○ Azure Reserved Virtual Machines (VM) Instances
○ Azure virtual machine scale sets
○ Azure DevTest Labs
○ Microsoft Managed Desktop
Question 4:
A support engineer plans to perform several Azure management tasks by using the
Azure CLI. You install the CLI on a computer. You need to tell the support
engineer which tools to use to run the CLI. Which two tools should you instruct
the support engineer to use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
☐ Command Prompt
☐ Azure Resource Explorer
☐ Windows PowerShell
☐ Windows Defender Firewall
Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct
solution, while others might not have a correct solution. After you answer a
question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen. You have an Azure
environment. You need to create a new Azure virtual machine from a tablet that
runs the Android operating system. Solution: You use PowerShell in Azure Cloud
Shell. Does this meet the goal?
○ Yes
○ No
Question 6:
Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution. After you answer a question in
this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen. You have an Azure environment.
You need to create a new Azure virtual machine from a tablet that runs the
Android operating system. Solution: You use the PowerApps portal. Does this
meet the goal?
○ Yes
○ No
Question 7:
Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct
solution, while others might not have a correct solution. After you answer a
question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen. You have an Azure
environment. You need to create a new Azure virtual machine from a tablet that
runs the Android operating system. Solution: You use the Azure portal. Does
this meet the goal?
○ Yes
○ No
Question 8:
Which Azure service provides a set of version control tools to manage code?
○ Azure Repos
○ Azure DevTest Labs
○ Azure Storage
○ Azure Cosmos DB
You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in
the East US Azure region. Which Azure service should you use from the Azure
portal to view service failure notifications that can affect the availability
of VM1?
○ Azure Service Fabric
○ Azure Monitor
○ Azure virtual machines
○ Azure Advisor
Question 10:
Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct
solution, while others might not have a correct solution. After you answer a
question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen. Your Azure environment
contains multiple Azure virtual machines. You need to ensure that a virtual
machine named VM1 is accessible from the Internet over HTTP. Solution: You
modify an Azure Traffic Manager profile. Does this meet the goal?
○ Yes
○ No
Your company plans to deploy several web servers and several database servers
to Azure. You need to recommend an Azure solution to limit the types of
connections from the web servers to the database servers. What should you
include in the recommendation?
○ Network security groups (NSGs)
○ Azure Service Bus
○ A local network gateway
○ A route filter
Question 12:
Which service provides network traffic filtering across multiple Azure
subscriptions and virtual networks?
○ Azure Firewall
○ An application security group
○ Azure DDoS protection
○ A network security group (NSG)
Question 13:
Which Azure service should you use to store certificates?
○ Azure Security Center
○ An Azure Storage account
○ Azure Key Vault
○ Azure Information Protection
Question 14:
Which Azure service can you use as a security information and event management
(SIEM) solution?
○ Azure Analysis Services
○ Azure Sentinel
○ Azure Information Protection
○ Azure Cognitive Services
Question 15:
You have an Azure virtual machine named VM1. You plan to encrypt VM1 by using
Azure Disk Encryption. Which Azure resource must you create first?
○ An Azure Storage account
○ An Azure Key Vault
○ An Azure Information Protection policy
○ An Encryption key
Question 16:
Which resources can be used as a source for a Network security group inbound
security rule?
○ Service Tags only
○ IP Addresses, Service tags and Application security groups
○ Application security groups only
○ IP Addresses only
Question 17:
You have an Azure Sentinel workspace. You need to automate responses to threats
detected by Azure Sentinel. What should you use?
○ Adaptive network hardening in Azure Security Center
○ Azure Service Health
○ Azure Monitor workbooks
○ Adaptive application controls in Azure Security Center
Question 18:
Which Azure service can you use as a security information and event management
(SIEM) solution?
○ Azure Analysis Services
○ Microsoft Sentinel
○ Azure Information Protection
○ Azure Cognitive Services
Question 19:
You have an Azure subscription. You need to review your secure score. What
should you use?
○ Azure Monitor
○ Azure Advisor
○ Help + support
○ Microsoft Defender for Cloud
Question 20:
You need to collect and automatically analyze security events from Microsoft
Entra ID (Azure AD). What should you use?
○ Microsoft Sentinel
○ Azure Synapse Analytics
○ Azure AD Connect
○ Azure Key Vault
Question 21:
Your company plans to automate the deployment of servers to Azure. Your manager
is concerned that you may expose administrative credentials during the
deployment. You need to recommend an Azure solution that encrypts the
administrative credentials during the deployment. What should you include in
the recommendation?
○ Azure Key Vault
○ Azure Information Protection
○ Microsoft Defender for Cloud
○ Azure Multi-Factor Authentication (MFA)
Question 22:
You need to configure an Azure solution that meets the following requirements:
- Secures
websites from attacks
- Generates
reports that contain details of attempted attacks
What should you include in the solution?
○ Azure Firewall
○ A network security group (NSG)
○ Azure Information Protection
○ DDoS protection
Question 23:
Your Azure environment contains multiple Azure virtual machines. You need to
ensure that a virtual machine named VM1 is accessible from the Internet over
HTTP. What are two possible solutions? Each correct answer presents a complete
solution. NOTE: Each correct selection is worth one point.
○ Modify an Azure Traffic Manager profile
○ Modify a network security group (NSG)
○ Modify a DDoS protection plan
○ Modify an Azure firewall
Question 24:
You have an Azure environment that contains 10 virtual networks and 100 virtual
machines. You need to limit the amount of inbound traffic to all the Azure
virtual networks. What should you create?
○ One application security group (ASG)
○ 10 virtual network gateways
○ 10 Azure ExpressRoute circuits
○ One Azure firewall
Question 25:
This question requires that you evaluate the underlined text to determine if it
is correct. Azure Key Vault is used to store secrets for Microsoft Entra ID
(Azure AD) user accounts. Instructions: Review the underlined text. If it makes
the statement correct, select No change is needed. If the statement is
incorrect, select the answer choice that makes the statement correct.
○ No change is needed
○ Microsoft Entra ID (Azure AD) administrative accounts
○ Personally Identifiable Information (PII)
○ Server applications
Question 26:
Your company plans to automate the deployment of servers to Azure. Your manager
is concerned that you may expose administrative credentials during the
deployment. You need to recommend an Azure solution that encrypts the
administrative credentials during the deployment. What should you include in
the recommendation?
○ Azure Key Vault
○ Azure Information Protection
○ Azure Security Center
○ Azure Multi-Factor Authentication (MFA)
Question 27:
You plan to deploy several Azure virtual machines. You need to control the
ports that devices on the Internet can use to access the virtual machines. What
should you use?
○ A network security group (NSG)
○ Microsoft Entra ID (Azure AD) role
○ Microsoft Entra ID group
○ An Azure key vault
Question 28:
Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct
solution, while others might not have a correct solution. After you answer a
question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen. Your Azure environment
contains multiple Azure virtual machines. You need to ensure that a virtual
machine named VM1 is accessible from the Internet over HTTP. Solution: You
modify a network security group (NSG). Does this meet the goal?
○ Yes
○ No
Question 29:
Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct
solution, while others might not have a correct solution. After you answer a
question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen. Your Azure environment
contains multiple Azure virtual machines. You need to ensure that a virtual
machine named VM1 is accessible from the Internet over HTTP. Solution: You
modify a DDoS protection plan. Does this meet the goal?
○ Yes
○ No
Question 30:
You need to collect and automatically analyze security events from Microsoft
Entra ID (Azure AD). What should you use?
○ Azure Sentinel
○ Azure Synapse Analytics
○ Azure Key Vault
○ Azure AD Connect
Question 31:
Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct
solution, while others might not have a correct solution. After you answer a
question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen. Your Azure environment
contains multiple Azure virtual machines. You need to ensure that a virtual
machine named VM1 is accessible from the Internet over HTTP. Solution: You
modify an Azure firewall. Does this meet the goal?
○ Yes
○ No
Question 32:
This question requires that you evaluate the underlined text to determine if it
is correct. Azure Germany can be used by legal residents of Germany only.
Instructions: Review the underlined text. If it makes the statement correct,
select No change is needed. If the statement is incorrect, select the answer
choice that makes the statement correct.
○ No change is needed
○ Only enterprises that are registered in Germany
○ Only enterprises that purchase their Azure licenses from a partner based in
Germany
○ Any user or enterprise that requires its data to reside in Germany
Question 33:
What should you use to evaluate whether your company's Azure environment meets
regulatory requirements?
○ Azure Service Health
○ Azure Knowledge Center
○ Azure Security Center
○ Azure Advisor
Question 34:
Which two types of customers are eligible to use Azure Government to develop a
cloud solution? Each correct answer presents a complete solution. NOTE: Each
correct selection is worth one point.
○ A Canadian government contractor
○ A European government contractor
○ A United States government entity
○ A United States government contractor
Question 35:
You need to ensure that when Microsoft Entra ID (Azure AD) users connect to
Azure AD from the Internet by using an anonymous IP address, the users are
prompted automatically to change their password. Which Azure service should you
use?
○ Azure AD Connect Health
○ Azure AD Privileged Identity Management
○ Azure Advanced Threat Protection (ATP)
○ Azure AD Identity Protection
Question 36:
To what should an application connect to retrieve security tokens?
○ An Azure Storage account
○ Microsoft Entra ID (Azure AD)
○ A certificate store
○ An Azure key vault
Question 37:
Your network contains an Active Directory forest. The forest contains 5,000
user accounts. Your company plans to migrate all network resources to Azure and
to decommission the on-premises data center. You need to recommend a solution
to minimize the impact on users after the planned migration. What should you
recommend?
○ Implement Azure Multi-Factor Authentication (MFA)
○ Sync all the Active Directory user accounts to Microsoft Entra ID (Azure AD)
○ Instruct all users to change their password
○ Create a guest user account in Microsoft Entra ID (Azure AD) for each user
Question 38:
You have a resource group named RG1. You need to prevent the creation of
virtual machines in RG1. The solution must ensure that other objects can be
created in RG1. What should you use?
○ A lock
○ An Azure role
○ A tag
○ An Azure policy
Question 39:
You have an Azure subscription and 100 Windows 10 devices. You need to ensure
that only users whose devices have the latest security patches installed can
access Microsoft Entra ID (Azure AD)-integrated applications. What should you
implement?
○ A conditional access policy
○ Azure Bastion
○ Azure Firewall
○ Azure Policy
Question 40:
What can Azure Information Protection encrypt?
○ Network traffic
○ Documents and email messages
○ An Azure Storage account
○ An Azure SQL database
Question 41:
What should you use to evaluate whether your company's Azure environment meets
regulatory requirements?
○ The Knowledge Center website
○ The Advisor blade from the Azure portal
○ Compliance Manager from the Service Trust Portal
○ The Solutions blade from the Azure portal
Question 42:
You have an Azure subscription. Where will you find details on the personal
data collected by Microsoft, how Microsoft uses the data, and what the data is
used for?
○ The Data Protection Addendum
○ The Microsoft Online Services Terms
○ The Microsoft Privacy Statement
○ Azure Security Center
Question 43:
What should you use to evaluate whether your company's Azure environment meets
regulatory requirements?
○ Azure Service Health
○ Azure Knowledge Center
○ Microsoft Defender for Cloud
○ Azure Advisor
Question 44:
Your company has an Azure subscription that contains resources in several
regions. You need to create the Azure resource that must be used to meet the
policy requirement. What should you create?
○ A read-only lock
○ An Azure policy
○ A management group
○ A reservation
Question 45:
This question requires that you evaluate the underlined text to determine if it
is correct. From Azure Cloud Shell, you can track your company's regulatory
standards and regulations, such as ISO 27001. Instructions: Review the
underlined text. If it makes the statement correct, select No change is needed.
If the statement is incorrect, select the answer choice that makes the
statement correct.
○ No change is needed.
○ The Microsoft Cloud Partner Portal
○ Compliance Manager
○ The Trust Center
Question 46:
Your company plans to migrate all on-premises data to Azure. You need to
identify whether Azure complies with the company's regional requirements. What
should you use?
○ The Knowledge Center
○ Azure Marketplace
○ The MyApps portal
○ The Trust Center
Question 47:
What is guaranteed in an Azure Service Level Agreement (SLA) for virtual
machines?
○ Uptime
○ Feature availability
○ Bandwidth
○ Performance
Question 48:
Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct
solution, while others might not have a correct solution. After you answer a
question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen. Your company plans to
purchase an Azure subscription. The company's support policy states that the
Azure environment must provide an option to access support engineers by phone
or email. You need to recommend which support plan meets the support policy
requirement. Solution: Recommend a Basic support plan. Does this meet the goal?
○ Yes
○ No
Question 49:
Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct
solution, while others might not have a correct solution. After you answer a
question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen. Your company plans to
purchase an Azure subscription. The company's support policy states that the
Azure environment must provide an option to access support engineers by phone
or email. You need to recommend which support plan meets the support policy
requirement. Solution: Recommend a Standard support plan. Does this meet the
goal?
○ Yes
○ No
Question 50:
Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct
solution, while others might not have a correct solution. After you answer a
question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen. Your company plans to
purchase an Azure subscription. The company's support policy states that the
Azure environment must provide an option to access support engineers by phone
or email. You need to recommend which support plan meets the support policy
requirement. Solution: Recommend a Premier support plan. Does this meet the
goal?
○ Yes
○ No
Question 51:
Your company plans to request an architectural review of an Azure environment
from Microsoft. The company currently has a Basic support plan. You need to
recommend a new support plan for the company. The solution must minimize costs.
Which support plan should you recommend?
○ Premier
○ Developer
○ Professional Direct
○ Standard
What is required to use Azure Cost Management?
○ A Dev/Test subscription
○ Software Assurance
○ An Enterprise Agreement (EA)
○ A pay-as-you-go subscription
Question 53:
Your company plans to purchase an Azure subscription. The company's support
policy states that the Azure environment must provide an option to access
support engineers by phone or email. You need to recommend which support plan
meets the support policy requirement. Solution: Recommend a Professional Direct
support plan. Does this meet the goal?
○ Yes
○ No
Question 54:
Your company has a Software Assurance agreement that includes Microsoft SQL
Server licenses. You plan to deploy SQL Server on Azure virtual machines. What
should you do to minimize licensing costs for the deployment?
○ Deallocate the virtual machines during off hours
○ Use Azure Hybrid Benefit
○ Configure Azure Cost Management budgets
○ Use Azure reservations
Question 55:
Your company has 10 departments. The company plans to implement an Azure
environment. You need to ensure that each department can use a different
payment option for the Azure services it consumes. What should you create for
each department?
○ A reservation
○ A subscription
○ A resource group
○ A container instance
Question 56:
Which statement accurately describes the Modern Lifecycle Policy for Azure
services?
○ Microsoft provides mainstream support for a service for
five years.
○ Microsoft provides a minimum of 12 months' notice before ending support for a
service.
○ After a service is made generally available, Microsoft provides support for
the service for a minimum of four years.
○ When a service is retired, you can purchase extended support for the service
for up to five years.
Question 57:
Your company has an Azure subscription that contains the following unused
resources:
- 20
user accounts in Microsoft Entra ID (Azure AD)
- Five
groups in Azure AD
- 10
public IP addresses
- 10
network interfaces
You need to reduce the Azure costs for the company. Which
unused resources should you remove?
○ The network interfaces
○ The public IP addresses
○ The groups
○ The user accounts
Question 58:
Who can use the Azure Total Cost of Ownership (TCO) calculator?
○ Billing readers for an Azure subscription only
○ Owners for an Azure subscription only
○ Anyone
○ All users who have an account in Microsoft Entra ID (Azure AD) that is linked
to an Azure subscription only
Question 59:
Which task can you perform by using Azure Advisor?
○ Integrate Active Directory and Microsoft Entra ID (Azure
AD).
○ Estimate the costs of an Azure solution.
○ Confirm that Azure subscription security follows best practices.
○ Evaluate which on-premises resources can be migrated to Azure.
Question 60:
You have 1,000 virtual machines hosted on the Hyper-V hosts in a data center.
You plan to migrate all the virtual machines to an Azure pay-as-you-go
subscription. You need to identify which expenditure model to use for the
planned Azure solution. Which expenditure model should you identify?
○ Scalable
○ Operational
○ Elastic
○ Capital
Question 61:
Which Service Level Agreement (SLA) is provided for Azure services in public
preview?
○ Each service defines its own SLA
○ The SLA will be 99%
○ The SLA will be 1% less than the general availability (GA) SLA
○ The SLA will be 99.95%
Question 62:
What is the longest term you can purchase for Azure Reserved VM instances?
○ One year
○ Five years
○ Four years
○ Three years
Question 63:
Your company has 10 offices. You plan to generate several billing reports from
the Azure portal. Each report will contain the Azure resource utilization of
each office. Which Azure Resource Manager feature should you use before you
generate the reports?
○ Tags
○ Templates
○ Locks
○ Policies
Question 64:
This question requires that you evaluate the underlined text to determine if it
is correct. If Microsoft plans to end support for an Azure service that does
NOT have a successor service, Microsoft will provide notification at least 12
months before. Instructions: Review the underlined text. If it makes the
statement correct, select No change is needed. If the statement is incorrect,
select the answer choice that makes the statement correct.
○ No change is needed
○ 6 months
○ 90 days
○ 30 days
Question 65:
Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct
solution, while others might not have a correct solution. After you answer a
question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen. Your company has an Azure
subscription that contains the following unused resources:
- 20
user accounts in Microsoft Entra ID (Azure AD)
- Five
groups in Azure AD
- 10
public IP addresses
- 10
network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused network interfaces. Does this meet the goal?
○ Yes
○ No
Question 66:
Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct
solution, while others might not have a correct solution. After you answer a
question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen. Your company has an Azure
subscription that contains the following unused resources:
- 20
user accounts in Microsoft Entra ID (Azure AD)
- Five
groups in Azure AD
- 10
public IP addresses
- 10
network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused public IP addresses. Does this meet the goal?
○ Yes
○ No
Question 67:
Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct
solution, while others might not have a correct solution. After you answer a
question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen. Your company has an Azure
subscription that contains the following unused resources:
- 20
user accounts in Microsoft Entra ID (Azure AD)
- Five
groups in Azure AD
- 10
public IP addresses
- 10
network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused user accounts. Does this meet the goal?
○ Yes
○ No
Question 68:
This question requires that you evaluate the underlined text to determine if it
is correct. A support plan solution that gives you best practice information,
health status and notifications, and 24/7 access to billing information at the
lowest possible cost is a Standard support plan. Instructions: Review the
underlined text. If it makes the statement correct, select No change is needed.
If the statement is incorrect, select the answer choice that makes the
statement correct.
○ No change is needed
○ Developer
○ Basic
Question 69:
In which Azure support plans can you open a new support request?
○ Premier and Professional Direct only
○ Premier, Professional Direct, and Standard only
○ Premier, Professional Direct, Standard, and Developer only
○ Premier, Professional Direct, Standard, Developer, and Basic
Question 70:
This question requires that you evaluate the underlined text to determine if it
is correct. You can create an Azure support request from support.microsoft.com.
Instructions: Review the underlined text. If it makes the statement correct,
select No change is needed. If the statement is incorrect, select the answer
choice that makes the statement correct.
○ No change is needed
○ The Azure portal
○ The Knowledge Center
○ The Security & Compliance admin center
Question 71:
Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct
solution, while others might not have a correct solution. After you answer a
question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen. Your company has an Azure
subscription that contains the following unused resources:
- 20
user accounts in Microsoft Entra ID (Azure AD)
- Five
groups in Azure AD
- 10
public IP addresses
- 10
network interfaces
You need to reduce the Azure costs for the company.
Solution: You remove the unused groups. Does this meet the goal?
○ Yes
○ No
Question 72:
This question requires that you evaluate the underlined text to determine if it
is correct. The Azure Standard support plan is the lowest cost option to
receive 24x7 access to support engineers by phone. Instructions: Review the
underlined text. If it makes the statement correct, select No change is needed.
If the statement is incorrect, select the answer choice that makes the
statement correct.
○ No change is needed
○ Developer
○ Basic
Question 73:
You need to compare a company's cloud usage to industry standard best
practices. What should you use?
○ Azure Monitor
○ Azure Service Health
○ Application Insights in Azure Monitor
○ Azure Advisor
Question 74:
You need to start Azure Cloud Shell. What should you use?
○ The Azure portal
○ Azure Command-Line Interface (CLI)
○ Azure PowerShell
○ An Azure Resource Manager (ARM) template
Question 75:
How many copies of data are maintained by an Azure Storage account that uses
locally-redundant storage (LRS)?
○ 3
○ 4
○ 6
○ 9
Question 76:
What enables a cloud service to adapt quickly to changing requirements?
○ High availability
○ Predictability
○ Manageability
○ Agility
Question 77:
What is an example of vertical scaling in a cloud environment?
○ Adding an additional CPU to an existing Azure virtual
machine
○ Adding an additional Azure virtual machine
○ Adding an additional Azure Virtual Desktop session host
○ Adding an additional Azure App Service instance automatically
Question 78:
What additional resource is required by an Azure virtual machine?
○ A virtual network
○ A service endpoint
○ Azure Firewall
○ A public IP address
Question 79:
How many copies of data are maintained by an Azure Storage account that uses
geo-redundant storage (GRS)?
○ 3
○ 4
○ 6
○ 9
Question 80:
What is used to grant permission to Azure Virtual Desktop resources?
○ Tags
○ Role-based access control (RBAC) roles
○ Resource groups
○ Application security groups
Question 81:
Which cloud service model minimizes the management responsibility of a
customer?
○ Infrastructure as a service (IaaS)
○ Platform as a service (PaaS)
○ Software as a service (SaaS)
Question 82:
You have an Azure web app. You need to manage the settings of the web app from
an iPhone. What are two Azure management tools that you can use? Each correct
answer presents a complete solution. NOTE: Each correct selection is worth one
point.
○ Windows PowerShell
○ Azure Cloud Shell
○ The Azure portal
○ Azure Storage Explorer
Question 83:
What should you use to prevent traffic from an Azure virtual network from being
routed to an Azure Storage account via the internet?
○ A network security group (NSG)
○ A public endpoint
○ Azure VPN Gateway
○ A service endpoint
Question 84:
Which service can replace a resource lock automatically if the lock is removed?
○ Azure Information Protection (AIP)
○ Azure Blueprints
○ Azure Backup
○ Azure Advisor
Question 85:
You plan to collect and analyze event details for five Azure virtual machines.
You need to run queries to compare the event details collected from all the
virtual machines. Which two tools should you use? Each correct answer presents
part of the solution. NOTE: Each correct selection is worth one point.
○ Azure Service Health
○ Azure Service Bus
○ Azure Monitor
○ Log Analytics
Question 86:
What should you use to track the costs of Azure resources?
○ Azure Quickstart templates
○ Tags
○ Budgets
○ Usage and quotas
Question 87:
You plan to reduce ongoing Azure expenditures. You need to identify which
factors affect the costs of a resource. Which three factors should you
identify? Each correct answer presents a complete solution. NOTE: Each correct
selection is worth one point.
☐ The volume of outbound data
☐ The volume of inbound data
☐ The service tier
☐ The type of processed data
Question 88:
Your company has an Azure subscription that contains several resources. You
need to identify which department is responsible for the cost of each resource.
What should you use?
○ Budgets
○ Alerts
○ Tags
Question 89:
You have on-premises servers that run Windows Server. What should you implement
to manage the servers by using the Azure portal?
○ Azure Kubernetes Service (AKS)
○ Azure Arc
○ Docker
○ Role-based access control (RBAC)
You have a web app that runs in Azure. You need to identify the amount of time
it takes for web pages to load in a user's browser. What should you use?
○ Azure Monitor alerts
○ Application Insights in Azure Monitor
○ Log Analytics
○ Azure Network Watcher
Question 91:
What should a desktop application use to interact with Azure and manage
resources?
○ APIs
○ Azure Resource Manager (ARM) templates
○ Azure Command-Line Interface (CLI)
○ Azure Cloud Shell
Question 92:
Which two features or services can be integrated with Azure Monitor? Each
correct answer presents part of the solution. NOTE: Each correct selection is
worth one point.
○ Azure status
○ Application Insights
○ Azure Advisor
○ Log Analytics
Question 93:
What provides a unified way to project and manage non-Azure resources in Azure
Resource Manager (ARM)?
○ Azure Migrate
○ Azure AD Connect
○ Azure Arc
○ Azure Front Door
Question 94:
Your company has an Azure subscription and three business units. You plan to
deploy new resources for each business unit. You need to ensure that the new
resources are deployed by using a repeatable and reliable method that applies
the same configurations to each resource. What should you use?
○ Azure Policy
○ Azure Arc
○ A resource group
○ Azure Resource Manager (ARM) templates
Where does Azure Monitor store event data?
○ An Azure Blob Storage account
○ Azure Storage Queue
○ Azure SQL Database
○ A Log Analytics workspace
Question 96:
An Azure administrator plans to run a PowerShell script that creates Azure
resources. You need to recommend which computer configuration to use to run the
script. Which three computers can run the script? Each correct answer presents
a complete solution. NOTE: Each correct selection is worth one point.
☐ A computer that runs Windows 11 and has the Azure CLI
tools installed
☐ A computer that runs macOS and has PowerShell Core 6.0 installed
☐ A computer that runs Chrome OS and uses Azure Cloud Shell
☐ A computer that runs Windows 10 and has the Azure PowerShell module installed
Question 97:
In the infrastructure as a service (IaaS) cloud service model, which two
components are the responsibility of the cloud service provider? Each correct
answer presents a complete solution. NOTE: Each correct selection is worth one
point.
☐ The configuration and maintenance of storage
☐ The installation and configuration of the operating system
☐ Maintaining the hardware
☐ Physical security of the datacenter infrastructure
Question 98:
You have an Azure subscription. You plan to create a virtual machine. Where
will the virtual machine be placed in Azure?
○ In a storage account
○ In a resource group
○ In an administrative unit
○ In an application group
Question 99:
You have an Azure Storage account named storage1. You need to ensure that
containers can be created in, but not deleted from, storage1. What should you
do?
○ Create a ReadOnly lock for storage1
○ Create a delete lock for storage1
○ Enable container soft delete
○ Enable blob soft delete
Question 100:
You have an Azure subscription. You need to use Azure Cloud Shell to run a
deployment script. What should you use to access Cloud Shell?
○ Azure Resource Manager (ARM)
○ Microsoft Visual Studio
○ A Windows command prompt
○ A web browser
Question 101:
In the software as a service (SaaS) cloud service, which responsibility is
shared between Microsoft and the customer?
○ Identity and directory infrastructure management
○ Application management
○ Information and data management
○ Operating system updates
Question 102:
You need to migrate an on-premises server by using a lift-and-shift migration.
To which type of cloud service should you migrate?
○ Infrastructure as a service (IaaS)
○ Software as a service (SaaS)
○ Platform as a service (PaaS)
Question 103:
Microsoft 365 is an example of which cloud service model?
○ Infrastructure as a service (IaaS)
○ Platform as a service (PaaS)
○ Software as a service (SaaS)
Password: Otechy
