AZ_900_Part3

Which statement best describes a Hybrid Cloud architecture?. Does not require any on-premise hardware. Cannot be used with Microsoft Azure. pecial use case for secure Government workloads. Utilizes services of both Public and Private Clouds.

You need to reference how Microsoft secures their cloud infrastructure to meet strict compliance controls. What do you need to reference for this information?. Azure Arc. Conditional Access policies. Compliance Manager. Service Trust Portal.

Your organization is planning to migrate your entire datacenter to Azure. You are required to recommend an architected solution that will allow operations to continue if an entire Azure region becomes unavailable. Which cloud attribute should you factor into your solution?. Predictability. Reliability. Security. Security.

You need to create an Azure storage solution that will store messages created by an Azure web role. The messages will then be processed by an Azure worker role. What type of storage solution should you create?. A File service in a storage account. A Blob service in a storage account. A virtual machine data disk. A Queue service in a storage account.

Which of the following are benefits of Azure geographies?. Data residency is honored within the geographical boundary. Azure has geographies throughout the world. Any Azure geography can be used by anyone. They are fault tolerant and can often withstand complete region failure.

You need a service to define and enforce compliance standards in multiple Azure subscriptions. What service or feature should you use?. ARM templates. Azure Policy. Azure Sentinel. Conditional Access policy.

Define the concept of "scalability.". The ability of a system to handle increased load. A cloud service that responds quickly when demand increases and needs to be manually scaled down when demand decreases. The ability of a cloud service to be accessed quickly from any location via the internet. A cloud service that remains available after a failure occurs.

What is the purpose of Azure Blueprints?. Automated and repeatable resource deployment in Azure. Synchronize on-premises AD with Azure AD. Collect security data from across all your Azure and non-Azure resources, providing a single pane of glass for security monitoring and management. Automated and repeatable environment setup in Azure.

Which of the following are valid Azure storage redundancy types. Zone redundant storage (ZRS). Read-access geo-zone-redundant storage (RA-GZRS). Locally redundant storage (LRS). Global zone storage (GZS).

What are Azure Resource Manager (ARM) templates?. Azure's management construct that manages and controls access to all interaction with Azure. Azure's native Infrastructure-as-Code (IaC) solution. A declarative method to orchestrate the deployment of resource templates and other artifacts such as role assignments, policy assignments, resource templates, and resource groups. A component of Azure AD to allow authentication based on conditions (i.e., if-then statements) that must be met to either allow or deny access.

You are the Systems Administrator for a local university. You are deploying several sets of systems that will be used for research and development teams. Each set of systems will be uniform in nature, containing the same number and type of Azure resources. What should you recommend to automate the creation of these Azure resources?. Virtual machine scale sets. Multiple Azure Subscriptions. Management groups. Azure Resource Manager templates.

Which of the following components are required to establish communication between on-premises resources and resources in Azure?. Route tables. Azure Virtual Network. VPN Gateway. VNet peer.

Your company uses a single, critical virtual machine that will be in place for years. You want to save costs on long-running virtual machines. What should you do?. Management groups. Use an Azure Reserved Virtual Machine Instance. Use an Azure Spot Virtual Machine. Azure Scale Sets.

You need to create a network drive in Azure Storage. The drive needs to be accessible from several computers that run Windows 8.1. What storage solution should you create?. A File service in a storage account. A Blob service in a storage account. A virtual machine data disk. A Queue service in a storage account.

Which of the following statements are true about horizontal scaling?. Horizontal scaling can occur automatically with no manual interaction. Horizontal scaling requires downtime to increase compute capacity. Horizontal scaling adds additional copies of a resource, like a VM or container, to a resource pool. Horizontal scaling does not require downtime.

Which Azure service can host your web apps without you having to manage underlying infrastructure?. Azure App Service. Azure WebJobs. Application Insights. Azure DataBricks.

You are the system administrator for T-Bones Restaurant Group, Inc. You currently have an on-premises data center that consists of 50 Windows servers running IIS and SQL Server. IT management has dictated that all systems should be moved to Azure in the coming year. They also state that only platform-as-a-service (PaaS) solutions should be implemented. Which of the following meet these requirements?. Azure Virtual Machines. Azure App Service. Azure Virtual Network. Azure SQL Database.

What are the three components necessary for any role-based access control (RBAC) assignment?. Security principal. Scope. Conditional Access policy. Role definition.

What is the purpose of the Cost Management feature in Azure?. Track your Azure environment's adherence to your company's compliance requirements. Monitors and analyzes the cost of your current Azure resources. Estimate the cost savings you can realize by migrating your existing workloads to Azure. Create accurate estimates of hourly or monthly Azure costs across the entire Azure portfolio.

What are region pairs?. Two geographies working together to host an application. A region that is linked with another region in the same geography. Two or more regions in an Availability Set. A method to route traffic between two Availability Zones.

You need to implement multi-factor authentication (MFA) for Microsoft Cloud apps across your entire organization. The requirement for MFA needs to be centrally rolled out and enforced. What Azure functionality should you use to accomplish this task?. Azure AD Connect. Use a Conditional Access policy to roll out MFA to the entire organization. Azure Information Protection. Network Security Groups (NSG).

What are the advantages of the Zero Trust security model?. Restricts access to sensitive resources to users in trusted locations. Allows extending the Azure management control plane to non-Azure resources. Limits rogue actors from accessing sensitive resources. Allows access from any location once identity has been verified.

Which of the following statements about SaaS cloud services is correct?. The cloud service provider is responsible for all application upgrades. The client is responsible for purchasing all client software. Applications must be accessed from a secure network (aka VPN). The client has complete control over the application.

You are migrating an on-premises application to the Azure Cloud. The application communicates with a file share hosted on a Windows server that no other applications have access to. Which Azure storage services could be used to migrate the file share to?. Azure Virtual Machine. Azure Files. Azure Data Lake. Azure Disk Storage.

Which of the following Azure offerings provide a platform for serverless computing?. Azure App Service. Azure Functions. Azure Service Bus. Azure WebJobs.

You are the Azure Administrator for Radio Gaga, LTD. You have a resource group named RG-RG and need to ensure no other administrators can create virtual networks in this resource group. What can you implement to accomplish this?. Locks. Properties. Access Control (IAM). Azure policy.

What methods are available to connect to the Azure Public Cloud?. Over the internet. Client or Site to Site VPN. Express Route. Physically at the Azure datacentre.

You need to choose an Azure-native tool that enables you to manage, control, and monitor access to important resources in your organization. These resources include resources in Azure AD, Azure, and other Microsoft Online services such as Microsoft 365 or Microsoft Intune. What service should you choose?. Azure Privileged Identity Management (PIM). Azure Key Vault. Azure Firewall. Azure Sentinel.

Your organization repeatedly deploys the same collection of resources across multiple departments. Your technology director wants to know if there is a quicker, more reliable method for consistently deploying the same resources. Which method would you recommend as the team's first step in automating the repeated deployment of individual resources?. Azure Resource Manager (ARM) templates. Azure Resource Manager. Conditional Access policy. Azure Blueprints.

From a pricing perspective, select the two statements that are true regarding infrastructure as a service virtual machines (VMs) and serverless resources, such as Azure Functions. Serverless resources, such as Azure Functions, are only billed when a function is executed (or run) and no longer billed once the function is no longer active. Virtual machines are billed for the time they are running, whether or not they are in use. Virtual machines are billed only when actively in use, such as when remoting into the machine. Serverless resources, such as Azure Functions, are only billed for the entire time the function is created and ready to use.

Define "economy of scale". Spending money on products or services now and being billed for them now. You can deduct this expense from your tax bill in the same year. The ability to do things more efficiently or at a lower cost per unit when operating at a larger scale. Spending money on physical infrastructure up front, and then deducting that expense from your tax bill over time. Prices for individual resources and services are provided so you can predict how much you will spend in a given billing period based on your expected usage.

Which of the following attributes describe public cloud offerings?. Pay-as-you-go pricing. Upfront hardware purchases. Insecure connections to resources. Hardware configuration.

After enforcing multi-factor authentication via a Conditional Access policy, users are complaining about the extra steps required to log in to their Microsoft 365 accounts. What steps can you take to lessen the inconvenience of this additional authentication step while still maintaining a strong security posture?. Implement passwordless authentication. Users will not enter a password at the system login prompt. Instead, they will authenticate with the Google Authenticator app on their smartphones and answer a challenge after verifying ID with a PIN or biometric authorization. Implement passwordless authentication. Users will not enter a password at the system login prompt. Instead, they will authenticate using the Microsoft Authenticator app on their smartphones and answer a challenge after verifying ID with a PIN or biometric authorization. Remove multi-factor enforcement, which will remove the additional security layer. In the affected Conditional Access policy, create an exception only for Microsoft 365 applications to not enforce MFA, but require MFA everywhere else.

What kind of information does Azure Information Protection protect?. Email messages. Office documents. PDF documents. Azure Blob Storage.

While you are at a customer site, you have been asked to quickly create a new development virtual machine for your developers to experiment with new code features. The only computing device you have available is an Apple iPad tablet running iOS. Which methods can you use to create the virtual machine?. Create the VM with an ARM template via the iPad's command-line interface. Install PowerShell on the tablet, and install the Azure module in PowerShell to create the resources. Use the Azure portal. Install Bash on the tablet, and install the Azure module in PowerShell to create the resources.

You maintain a pool of identical virtual machines that serves an application behind a load balancer. When customer demand increases, you need to add additional copies of the virtual machine to the pool to meet customer demand. What cloud attribute does this demonstrate?. Security. Governance. Vertical scaling. Horizontal scaling.

What types of data does Azure Monitor collect?. Subscription monitoring data. Only logs. Only metrics. Metrics and logs. Physical hardware data.

You maintain a single virtual machine (VM) as an internal server. This server has two CPUs and 8 GB RAM. You decide to increase the capacity of the same server to four CPUs and 16 GB RAM. Which cloud attribute is this an example of?. Autoscaling. Vertical scaling. Load balancing. Horizontal scaling.

What is the preferred method to synchronize user identities on an on-premises Active Directory server with Azure AD?. It is not possible to synchronize an on-premises Active Directory server with Azure AD. For security reasons, they must be maintained separately. Use Azure Identity Protection in your on-premises environment to synchronize on-premises and Azure AD accounts. Use Azure AD Connect in your on-premises environment to synchronize on-premises and Azure AD accounts. Use Azure AD Connect in your Azure environment to synchronize on-premises and Azure AD accounts.

Which Azure service can help you collect, analyze, and act on telemetry from your cloud and on-premises environments?. Azure Analyzer. Azure App Service. Azure Monitor. Azure WebJobs.