The latest Microsoft AZ-900 Azure Fundamentals certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Microsoft AZ-900 Azure Fundamentals exam and earn Microsoft AZ-900 Azure Fundamentals certification.
Question 131
You have an Azure environment that contains 10 web apps.
To which URL should you connect to manage all the Azure resources?
A. https://admin.azure.com
B. https://admin.azurewebsites.com
C. https://admin.microsoft.com
* D. https://portal.azure.com
E. https://portal.azurewebsites.com
F. https://portal.microsoft.com
G. https://www.azure.com
H. https://www.azurewebsites.com
I. https://www.microsoft.com
Question 132
You have an Azure subscription that contains the resources in the following table.
***
Name: VNet1,??????????????????Type: Virtual network,????????Details: Not applicable
Name: Subnet1,????????????????Type: Subnet,?????????????????Details: Hosted on VNet1
Name: VM1,????????????????????Type: Virtual machine,????????Details: On Subnet1
Name: VM2,????????????????????Type: Virtual machine,????????Details: On Subnet1
***
VM1 and VM2 are deployed from the same template and host line-of-business applications accessed by using Remote Desktop.
You need to prevent users of VM2 and VM2 from accessing websites on the Internet over TCP port 80.
What should you do?
A. Change the DenyWebSites outbound security rule.
B. Change the Port_80 inbound security rule.
C. Disassociate the NSG from a network interface.
* D. Associate the NSG to Subnet1.
Explanation
You can associate or dissociate a network security group from a network interface or subnet.
The NSG has the appropriate rule to block users from accessing the Internet. We just need to associate it with Subnet1.
Question 133
You have an Azure subscription named Subscription1 that contains two Azure virtual networks named VNet1 and VNet2.
VNet1 contains a VPN gateway named VPNGW1 that uses static routing.
There is a site-to-site VPN connection between your on-premises network and VNet1.
On a computer named Client1 that runs Windows 10, you configure a point-to-site VPN connection to VNet1.
You configure virtual network peering between VNet1 and VNet2.
You verify that you can connect to VNet2 from the on-premises network.
Client1 is unable to connect to VNet2.
You need to ensure that you can connect Client1 to VNet2.
What should you do?
A. Select Allow gateway transit on VNet2.
B. Enable BGP on VPNGW1.
C. Select Allow gateway transit on VNet1.
* D. Download and re-install the VPN client configuration package on Client1.
Explanation
If you make a change to the topology of your network and have Windows VPN clients, the VPN client package for Windows clients must be downloaded and installed again in order for the changes to be applied to the client.
P2S VPN routing behavior is dependent on the client OS, the protocol used for the VPN connection, and how the virtual networks (VNets) are connected to each other.
Azure currently supports two protocols for remote access, IKEv2 and SSTP. IKEv2 is supported on many client operating systems including Windows, Linux, MacOS, Android, and iOS. SSTP is only supported on Windows. If you make a change to the topology of your network and have Windows VPN clients, the VPN client package for Windows clients must be downloaded and installed again in order for the changes to be applied to the client.
Question 134
A team of developers at your company plans to deploy, and then remove, 50 customized virtual machines each week.
Thirty of the virtual machines run Windows Server 2016 and 20 of the virtual machines run Ubuntu Linux.
You need to recommend which Azure service will minimize the administrative effort required to deploy and remove the virtual machines.
What should you recommend?
A. Azure Reserved Virtual Machines (VM) Instances
B. Azure virtual machine scale sets
* C. Azure DevTest Labs
D. Microsoft Managed Desktop
Explanation
By using DevTest Labs, you can test the latest versions of your applications by doing the following tasks:
- Quickly provision Windows and Linux environments by using reusable templates and artifacts.
- Easily integrate your deployment pipeline with DevTest Labs to provision on-demand environments.
- Scale up your load testing by provisioning multiple test agents and create pre-provisioned environments for training and demos.
Question 135
A platform as a service (PaaS) solution that hosts web apps in Azure provides full control of the operating systems that host applications.
A. Yes
* B. No
Explanation
A PaaS solution does not provide access to the operating system. The Azure Web Apps service provides an environment for you to host your web applications. Behind the scenes, the web apps are hosted on virtual machines running IIS. However, you have no direct access to the virtual machine, the operating system or IIS.
Question 136
A platform as a service (PaaS) solution that hosts web apps in Azure provides the ability to scale the platform automatically.
* A. Yes
B. No
Explanation
A PaaS solution that hosts web apps in Azure does provide the ability to scale the platform automatically. This is known as autoscaling. Behind the scenes, the web apps are hosted on virtual machines running IIS. Autoscaling means adding more load balanced virtual machines to host the web apps.
Question 137
A platform as a service (PaaS) solution that hosts web apps in Azure provides professional development services to continuously add features to custom applications.
* A. Yes
B. No
Explanation
PaaS provides a framework that developers can build upon to develop or customize cloud-based applications. PaaS development tools can cut the time it takes to code new apps with pre-coded application components built into the platform, such as workflow, directory services, security features, search and so on.
Question 138
Azure resources can only access other resources in the same resource group.
A. Yes
* B. No
Explanation
A resource can interact with resources in other resource groups.
Question 139
If you delete a resource group, all the resources in the resource group will be deleted.
* A. Yes
B. No
Explanation
Deleting the resource group will remove the resource group as well as all the resources in that resource group. This can be useful for the management of resources. For example, a virtual machine has several components (the VM itself, virtual disks, network adapter etc.). By placing the VM in its own resource group, you can delete the VM along with all its associated components by deleting the resource group.
Question 140
A resource group can contain resources from multiple Azure regions.
* A. Yes
B. No
Explanation
Resources from multiple different regions can be placed in a resource group. The resource group only contains metadata about the resources it contains.