AZ-900 Microsoft Azure Fundamentals Exam Questions and Answers – Page 3

The latest Microsoft AZ-900 Azure Fundamentals certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Microsoft AZ-900 Azure Fundamentals exam and earn Microsoft AZ-900 Azure Fundamentals certification.

AZ-900 Microsoft Azure Fundamentals Exam Questions and Answers

Exam Question 211

Azure Firewall will encrypt all the network traffic sent from Azure to the Internet.

A. Yes
B. No

Correct Answer:
B. No
Answer Description:
Azure firewall does not encrypt network traffic. It is used to block or allow traffic based on source/destination IP address, source/destination ports and protocol.

Exam Question 212

A network security group (NSG) will encrypt all the network traffic sent from Azure to the Internet.

A. Yes
B. No

Correct Answer:
B. No
Answer Description:
A network security group does not encrypt network traffic. It works in a similar way to a firewall in that it is used to block or allow traffic based on source/destination IP address, source/destination ports and protocol.

Exam Question 213

Azure virtual machines that run Windows Server 2016 can encrypt the network traffic sent from the virtual machies to a host on the Internet.

A. Yes
B. No

Correct Answer:
B. No
Answer Description:
The question is rather vague as it would depend on the configuration of the host on the Internet. Windows Server does come with a VPN client and it also supports other encryption methods such IPSec encryption or SSL/TLS so it could encrypt the traffic if the Internet host was configured to require or accept the encryption. However, the VM could not encrypt the traffic to an Internet host that is not configured to require the encryption.

Exam Question 214

You have an Azure environment.
You need to create a new Azure virtual machine from an Android laptop.
Solution: You use the Azure portal.
Does this meet the goal?

A. Yes
B. No

Correct Answer:
A. Yes
Answer Description:
The Azure portal is a web-based, unified console that provides an alternative to command-line tools. With the Azure portal, you can manage your Azure subscription using a graphical user interface. You can build, manage, and monitor everything from simple web apps to complex cloud deployments. Create custom dashboards for an organized view of resources. Configure accessibility options for an optimal experience. Being web-based, the Azure portal can be run on a browser from a tablet that runs the Android operating system.

Exam Question 215

When using an Azure ExpressRoute connection, inbound data traffic from an on-premises network to Azure is always free.

A. Yes
B. No

Correct Answer:
A. Yes
Answer Description:
With Azure ExpressRoute, all inbound data transfer is free of charge.

Exam Question 216

Outbound data traffic from Azure to an on-premises network is always free.

A. Yes
B. No

Correct Answer:
B. No
Answer Description:
Inbound data traffic is free but outbound data traffic is not.

Exam Question 217

Data traffic between Azure services within the same Azure region is always free.

A. Yes
B. No

Correct Answer:
A. Yes

Exam Question 218

Azure Monitor can monitor the performance of on-premises computers.

A. Yes
B. No

Correct Answer:
A. Yes
Answer Description:
Azure Monitor maximizes the availability and performance of your applications and services by delivering a comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments.

Exam Question 219

Azure Monitor can send alerts to Azure Directory security groups.

A. Yes
B. No

Correct Answer:
A. Yes
Answer Description:
Alerts in Azure Monitor proactively notify you of critical conditions and potentially attempt to take corrective action.

Exam Question 220

Azure Monitor can trigger alerts based on data in an Azure Log Analytics workspace.

A. Yes
B. No

Correct Answer:
A. Yes
Answer Description:
Azure Monitor uses Target Resource, which is the scope and signals available for alerting. A target can be any Azure resource. Example targets: a virtual machine, a storage account, a virtual machine scale set, a Log Analytics workspace, or an Application Insights resource.