AZ-900 Azure Fundamentals exam, part3

What does the letter R in RBAC stand for?. Rule. Role. Rights. Review.

With Azure public cloud, anyone with a valid credit card can sign up and get services immediately. False. True.

What are resource groups?. A folder structure in azure in which you organize resources like database, virtual machines, virtual networks, or almost any resource. Automatically assigned groups of resources that all have the same type (virtual machine, app service, etc). Based on the tag assigned to a resource by the deployment script, it is assigned to a group. Within azure security model, users are organized into groups, and those groups are granted permissions to resources.

What happens if Azure does not meet its own Service Level Agreement guarantee (SLA)?. The service will be free that month. It's not possible. Azure always meet it's SLA?. You will be financially refunded a small amount of your monthly fee.

TRUE OR FALSE: Through Azure Active Directory one can control access to an application but not the resources of the application. True. False.

What are groups of subscriptions called?. Azure policy. Management groups. ARM groups. Subscription groups.

What operating systems does an Azure Virtual Machine support?. Linux. Windows and linux. Windows linux and macOS. macOS.

How do you stop your Azure account from incurring costs above a certain level without your knowledge?. Set up a billing alert to send you an email when it reaches a certain level. Implement the azure spending limit in the Account Center. Switch to Azure Reserved Instances with Hybrid Benefit for VMs. Only use Azure Functions which have significant free limit.

What type of documents does the Microsoft Service Trust Portal provide?. Specific recommendations about your usage of Azure and ways you can improve. A tool that helps you manage your compliance to various standars. Documentation on the individual Azure service and solutions. A list of standars that Microsoft follows, pentest results, security assessments, white papers, faqs, and other documents that can be used to show Microsoft's compliance effort.

What advantage does an Application Gateway have over a Load Balancer?. Application gateway is more like an enterprise-grade product. You should not use a load balancer in production. Application gateway understands the HTTP protocol and can interpret the URL and make decisions based on the URL. Application gateway can be scaled so that two, three or more instances of the gateway can support your application.

How many minutes per month downtime is 99.99% availability?. 40. 100. 4. 1.

What data format are ARM templates created in?. JSON. HTML. YAML. XML.

Which database product offers "sub 5 millisecond" response times as a feature?. SQL server in a VM. Azure SQL database. Cosmos DB. SQL data Warehouse.

Which tool within the Azure Portal will make specific recommendations based on your actual usage for how you can improve your use of Azure?. Azure dashboard. Azure Monitor. Azure Service health. Azure Advisor.

Which feature within Azure alerts you to service issues that happen in Azure itself, not specifically related to your own resources?. Azure Security center. Azure Service Health. Azure monitor. Azure Portal dashboard.

TRUE OR FALSE: If you wanted to deploy a virtual machine to China, you would just choose the China region from the drop down. True. False.

Which Azure management tool analyzes your usage of Azure and makes suggestions specifically targeted to help you optimize your usage of Azure regarding cost, security and performance?. Azure Firewall. Azure Advisor. Azure Service Health. Azure Mobile App.

Which two features does Virtual Machine Scale Sets provide as part of the core product? Pick two. Firewall. Automatic installation on supporting apps and deployment of custom code. Load balancing between virtual machines. Autoscalling of virtual machines. Content delivery Network.

What does it mean that security is a "shared model" in Azure?. Azure takes no responsibility for security. Both users and Azure have responsibilities for security. You must keep your security keys private and ensure it doesn't get out. Azure takes care of security completely.

True or false: If your feature is in the General Availability phase, then your feature will receive support from all Microsoft support channels. True. False.

What is the recommended way within Azure to store secrets such as private cryptographic keys?. Within the application code. Azure advanced Threat Protection (ATP). Azure Key Vault. In an Azure Storage account private blow container.

What is the service level agreement for two or more Azure Virtual Machines that have been placed into the same Availability Set in the same region?. 99,95%. 100%. 99,90%. 99,99%.

What does it mean if a service is in Private Preview mode?. Anyone can use the serive but it must not be for production use. The service is generally available for use, and Microsoft will provide support for it. Anyone can use the service for any reason. You have to apply to get selected in order to use that service.

What is the goal of a DDoS attack?. To overwhelm and exhaust application resources. To crack the password from administrator accounts. To trick users into giving up personal information. To extract data from a database.

Which of the following elements is considered part of the "network" layer of network security?. Lock on the datacenter doors. All of the above. Keeping operating systems up to date with patches. Separate servers into distinct subnets by role.

How does Multi-Factor Authentication make a system more secure?. It allows the user to log in without a password because the have already previously been validated using a browser cookie. It doesn't make it more secure. It requires the user to have access to their verified phone in order to log in. It is another password that a user has to memorize, making it more secure.

What is the name of the open source project run by the Apache foundation that maps to the HDInsight tools within Azure?. Apache cayenne. Apache Jazz. Apache Jaguar. Apache Hadoop.

Where can you go to see what standards Microsoft is in compliance with?. Azure privacy page. Trust center. Azure security center. Azure Service Health.

Deploying Azure App Services applications consists of what two components? Pick two. Packaged code. Managing operating system updates. Configuration. Database scripts.

Which Azure service, when enabled, will automatically block traffic to or from known malicious IP addresses and domains?. Network Securit Groups. Azure Firewall. Azure Active Directory. Load Balancer.

TRUE OR FALSE: Azure Tenant is a dedicated and trusted instance of Azure Active Directory that's automatically created when your organization signs up for a Microsoft cloud service subscription. True. False.

If you wanted to get an alert every time a new virtual machine is created, where could you create that?. Azure Monitor. Subscription setting. Azure Dashboard. Azure Policy.

Which of the following are one of the advantages of running your cloud in a private cloud?. Private cloud is significantly cheaper than a public cloud. You own the hardware, so you can change private cloud hosting providers easily. Assurance that your code, data and applications are running on isolated hardware, and on a isolated network.

What is an Azure Subscription?. It is the level at which services are billed. All resources created under a subscription are billed to that subscription. Each user account is associated with a unique subscription. If you need more than one subscription, you need to create multiple user accounts.

Which Azure service can be enabled to enable Multi-Factor Authentication for administrators but not require it for regular users?. Priviliged identity management. Azure Firewall. Azure AD B2B. Advance Threat Protection.

What two advantages does cloud computing elasticity give to you? Pick two. You can serve users better during peak traffic periods by automatically adding more capacity. Servers have become a commodity and Microsoft doesn't even need to even fix servers that fail within Azure. You can do more regular backups and you won't lose as much when that backup get's restored. You can save money.

How many hours are available free when using the Azure B1S General Purpose Virtual Machines under a Azure free account in the first 12 months?. 500 hs. indefinite amount of hours. 750 hs. 300 hs.

Why should you divide your application into multiple subnets as opposed to having all your web, application and database servers running on the same subnet?. There are only a limited numbers of IP addresses available per subnet, so you need multiple subnets over a certain number. Each server type of your application requires it own subnet. It's not possible to mix web servers, database servers, and application servers on the same subnet. Separating your applications into multiple subnets allows you to have diferent NSG security rules for each subnet, which can make it harder for a hacker to get from one compromised server onto another.

What is the core problem that you need to solve in order to have a high-availability application?. You need to ensure the capacity of your servers exceeds you highest number of expected concurrent users. You need to ensure your servers has a lot of RAM and a lot of CPU's. You need to avoid single points of failure. You should have a backup copy of your applications on standby, ready to be started up when the main application fails.

What is a policy initiative in Azure?. A custom designed policy. The ability to group policies together. Assigning permissions to a role in Azure. Requiring all resources in Azure to use tags.

Which of the following would be an example of an Internet of Things (IoT) device?. A refrigerator that monitor how much milk you have left and sends you a text message when you are running low. A video game, installed on Windows client around the world, that keep user scores in the cloud. A web application that people use to perform their banking task. A mobile application that is used to watch only video courses.

What is the name of the collective set of APIs that provide machine learning and artificial intelligence services to your own applications like voice recognition, image tagging, and chat bot?. Cognitive services. Azure Machine learning studio. Natural Language Service, LUIS. Azure Batch.

What is the significance of the Azure region? Why is it important?. You must select a region when creating most resources, and the region is the area of the world where those resources will be physically located. Once you select a region, you cannot create resources outside that region. So selecting the right region is an important decision. Region is just a folder structure in which you organize resources, much like file folders on a computer. Even though you have to choose a region when creating resources, there's generally no consequence of what you select. You can create a network in one region and then create virtual machines for that network in another region.

Which of the following resources are not considered Compute resources?. Virtual Machine Scale Sets. Virtual Machines. Azure Batch. Function Apps. Load Balancer.

Which of the following services would NOT be considered Infrastructure as a Service?. Virtual network. Virtual Network interface Card (NIC). Virtual Machine. Azure Function App.

True or false: Azure PowerShell scripts and Command Line Interface (CLI) scripts are entirely compatible with each other?. True. False.

If you have an Azure free account, with a $200 credit for the first month, what happens when you reach the $200 limit?. Your account is automatically closed. Your credit card is automatically billed. You cannot create any more resources until you add more credit to the account. All services are stopped and you must decide whether you want to convert to a paid account or not.

Which style of computing is easiest when migrating an existing hosted application from your own data center into the cloud?. PaaS. IaaS. FaaS. Serverless.

For tax optimization, which type of expense is preferable?. OpEX. CapEX.

What software is used to synchronize your on premises AD with your Azure AD?. LDAP. AD Connect. Azure AD Domain Services. Azure AD Federation Services.