AZ-900, Question Set-03

-

 

Question 21:

TRUE or FALSE: Customer is responsible for availability when using Platform as a Service (PaaS) like Azure SQL Database

A.    TRUE

B.    FALSE

 

 (Correct B) Explanation

When using PaaS, Cloud provider is responsible for: OS (incl. upgrades and patches), Application Runtime, Auto scaling, Availability & Load balancing etc. You are responsible for Configuration (of Application and Services) and Application code (if needed).

 

Question 22:

We are using a private datacenter to host infrastructure, web applications and databases for in28minutes.com. We would want to expand further by using infrastructure provided by Azure. Which model are we expanding to?

A.    Private Cloud

B.    Hybrid Cloud

C.    Public Cloud

 

(Correct B) Explanation

Hybrid Cloud : Combination of both (Public & Private) Clouds. Using Public Cloud for some workloads and Private cloud for others. Example: Connecting an on-premise app to Azure Cosmos DB.

 

Question 23:

Which of these is an Azure environment specifically built to meet compliance and security requirements for US government?

A.    Azure Government

B.    Azure Global

C.    Azure China

 

(Correct A) Explanation

Azure Government is a cloud environment specifically built to meet compliance and security requirements for US government. Uses physically isolated data centers and networks located in US. Only US government entities and contractors are eligible to use Azure Government services.

 

Question 24:

You are concerned about encryption and security of documents and emails created by your team. You want a flexible service to protect and encrypt document and emails. Which of these services would you recommend?

A.    Azure Storage account

B.    Azure Information Protection

C.    Azure Security center

 

(Correct B) Explanation

Azure Information Protection helps you classify and protect your documents and emails. You can add labels indicating what kind of protection/encryption you want. It uses Azure Rights Management (Azure RMS) - Integrates with Office 365, Azure Active Directory etc.

 

Question 25:

Installing a SQL Server Database Manually in Windows Virtual Machine is classified as ______________.

A.    Platform as a Service (PaaS)

B.    Infrastructure as a Service (IaaS)

C.    Hybrid Solution

D.    Software as a Service (SaaS)

 

(Correct B) Explanation

Using Virtual Machines to deploy applications or databases is considered as Infrastructure as a Service (IaaS)

 

Question 26:

You have created a Resource group in Region - West Europe. Can you provision a resource (say, a VM) in a different region and attach it with the resource group?

A.    No

B.    Yes

 

(Correct B) Explanation

By default , a Resource Group can have resources from multiple regions.

 

Question 27:

Which of the following is a characteristic of Public Cloud?

A.    Elasticity

B.    All of the above

C.    Easy Geo-distribution

D.    Pay per use

 

(Correct B) Explanation

Public Cloud Advantages: Stop guessing capacity (Elasticity). Pay only for resources you use - stop spending money running and maintaining data centers. Go global in minutes (Easy Geo-distribution).

 

Question 28:

You are running a web application on an Azure VM. You want to ensure that the application is accessible from internet by opening up access to ports 80 and 443 on the VM. Which of these would you need to configure?

A.    Network Security Groups

B.    Subnet

C.    VPN

 

(Correct A) Explanation

Network Security Groups allow you to configure multiple inbound and outbound security rules. You can allow or block traffic based on source/destination IP address, protocol and port. You can restrict traffic between resources such as virtual machines and subnets.

 

Question 29:

An enterprise plans to study the rise of temperature across the country due to CO2 emissions. They are deploying millions of sensors across the country to record temperatures at regular intervals. Which Azure Service can help manage the devices and receive telemetry?

A.    Azure Analytics Service

B.    Azure Machine Learning

C.    IOT Hub

 

(Correct C) Explanation

Azure IoT Hub: Managed message hub for IoT devices

 

Question 30:

Which of these can be used to provide Just-in-time (JIT) Virtual Machine access?

A.    Azure Security Center

B.    Azure Sentinel

C.    Azure Defender

D.    Azure Information Protection

 

(Correct A) Explanation

Just-in-time (JIT) VM access feature in Azure Security Center helps you lock down inbound traffic to Azure VMs (open up only when you need to access the VM Just-in-time (JIT))

 


Comments

Post a Comment

Popular posts from this blog

AZ-900, Question Set-05

-
  Question 41: You want to build a serverless workflow with a GUI involving reading feed from Twitter to your Organization Twitter handle and store the message them using Azure Table Storage. Which of these services would you recommend? A.     Azure Kubernetes Service B.     Azure Logic Apps C.     Azure Functions   (Correct B) Explanation Logic Apps is a serverless orchestration service recommended for automating workflows.   Question 42: TRUE or FALSE: All virtual machines in a Virtual Network can communicate with other machines inside the same Virtual Network irrespective of the subnets they are in. A.     TRUE B.     FALSE   (Correct A) Explanation Resources in the same VNet can communicate using private IP addresses even if they are in different subnets   Question 43: TRUE or FALSE: Customer is responsible for scalability when using Pla...
Read more

AZ-900 Practice Test A (01-10)

-
Question 1: What makes a system highly available? A.      If it maintains 100% availability B.      A system specifically designed to be resilient, with no single point of failures C.      Must have a minimum of two VMs D.      It's not possible to make a highly available system   (Correct - B) Explanation: - High Availability - a system specifically designed to be resilient when some component of the system fails See:  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/availability Question 2: Your organization has implemented an Azure Policy that restricts the type of Virtual Machine instances you can use. How can you create a VM that is blocked by the policy? A.      Use an account that has Contributor or above permissions to the resource group B.      Subscription Owners (Administrators) can create resources regardless of what the policy ...
Read more

AZ-900, Question Set-01

-
Azure Certification AZ-900 - Microsoft Azure  Fundamentals           Question 1:  TRUE or FALSE: You have created an Azure SQL database instance using Free Tier Subscription. You have now upgraded to pay-as-you-go subscription. To use the database, you need to move the database to the new subscription. A.      TRUE B.      FALSE   (Correct B) Explanation You can convert a Free Trial to a Pay as you go subscription. All resources will be available as is in the new subscription.   Question 2:  Which of these configurations provide 99.99% availability for your VM based deployment? A.      Multiple VM's in One Availability Zone B.      Multiple VM's in two or more Availability Zones (or Regions) C.      Single VM in One Azure Region   (Correct B) Explanation Two or more instances in two or m...
Read more