The latest Microsoft AZ-900 Azure Fundamentals certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Microsoft AZ-900 Azure Fundamentals exam and earn Microsoft AZ-900 Azure Fundamentals certification.
AZ-900 Question 371
Exam Question
You have been informed by your superiors of the company’s intentions to automate server deployment to Azure. There is, however, some concern that administrative credentials could be uncovered during this process.
You are required to make sure that during the deployment, the administrative credentials are encrypted using a suitable Azure solution.
Solution: You recommend the use of Azure Multi-Factor Authentication (MFA).
Does the solution meet the goal?
A. Yes
B. No
Correct Answer
B. No
AZ-900 Question 372
Exam Question
The company would like to develop a cloud solution by making use of Azure Government. Azure Government can only be used by certain types of clients to develop cloud solutions.
Which of the following are the types of customers that can make use of Azure Government in this situation? Answer by dragging the correct option from the list to the answer area.
A. A government contractor from any country.
B. A government entity from any country.
C. A European government contractor.
D. A European government entity.
E. A United States government contractor.
F. A United States government entity.
Correct Answer
E. A United States government contractor.
F. A United States government entity.
Reference
Introduction to Azure Government > What is Azure Government?
AZ-900 Question 373
Exam Question
Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to Azure AD via the Internet.
You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords.
Solution: You configure the use of Azure AD Identity Protection.
Does the solution meet the goal?
A. Yes
B. No
Correct Answer
A. Yes
Reference
Azure > Active Directory > Identity protection > How To: Configure and enable risk policies
AZ-900 Question 374
Exam Question
Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to Azure AD via the Internet.
You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords.
Solution: You configure the use of Azure AD Privileged Identity Management.
Does the solution meet the goal?
A. Yes
B. No
Correct Answer
B. No
Reference
Azure > Active Directory > Identity protection > How To: Configure and enable risk policies
AZ-900 Question 375
Exam Question
You are planning a strategy to deploy numerous web servers and database servers to Azure.
This strategy should allow for connection types between the web servers and database servers to be controlled.
Solution: You include network security groups (NSGs) in your strategy.
Does the solution meet the goal?
A. Yes
B. No
Correct Answer
A. Yes
AZ-900 Question 376
Exam Question
You are planning a strategy to deploy numerous web servers and database servers to Azure.
This strategy should allow for connection types between the web servers and database servers to be controlled.
Solution: You include a local network gateway in your strategy.
Does the solution meet the goal?
A. Yes
B. No
Correct Answer
B. No
AZ-900 Question 377
Exam Question
Your company’s Active Directory forest includes thousands of user accounts.
You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises data center will be retired.
You are required to employ a strategy that reduces the effect on users, once the planned migration has been completed.
Solution: You plan to require Azure Multi-Factor Authentication (MFA).
Does the solution meet the goal?
A. Yes
B. No
Correct Answer
A. Yes
AZ-900 Question 378
Exam Question
Which cloud deployment solution is used for Azure virtual machines and Azure SQL databases? To answer, select the appropriate options in the answer area.
Azure virtual machines:
- Infrastructure as a Service (IaaS)
- Platform as a Service (PaaS)
- Software as a Service (SaaS)
Azure SQL databases:
- Infrastructure as a Service (IaaS)
- Platform as a Service (PaaS)
- Software as a Service (SaaS)
Correct Answer
Azure virtual machines: Infrastructure as a Service (IaaS)
Azure SQL databases: Platform as a Service (PaaS)
Explanation
Box 1:
Azure virtual machines are Infrastructure as a Service (IaaS).
Infrastructure as a Service is the most flexible category of cloud services. It aims to give you complete control over the hardware that runs your application (IT infrastructure servers and virtual machines (VMs), storage, networks, and operating systems). Instead of buying hardware, with IaaS, you rent it.
Box 2:
Azure SQL databases are Platform as a Service (Paas).
Azure SQL Database is a fully managed Platform as a Service (PaaS) Database Engine that handles most of the database management functions such as upgrading, patching, backups, and monitoring without user involvement. Azure SQL Database is always running on the latest stable version of SQL Server
Database Engine and patched OS with 99.99% availability. PaaS capabilities that are built-in into Azure SQL database enable you to focus on the domain specific database administration and optimization activities that are critical for your business.
Reference:
Discuss Azure fundamental concepts
Azure SQL Database > What is Azure SQL Database?
AZ-900 Question 379
Exam Question
To achieve a hybrid cloud model, a company must always migrate from a private cloud model.
A. Yes
B. No
Correct Answer
B. No
Explanation
It is not true that a company must always migrate from a private cloud model to implement a hybrid cloud. You could start with a public cloud and then combine that with an on-premise infrastructure to implement a hybrid cloud.
Reference
AZ-900 Question 380
Exam Question
A company can extend the capacity of its internal network by using the public cloud.
A. Yes
B. No
Correct Answer
A. Yes
Explanation
A company can extend the capacity of its internal network by using the public cloud. This is very common. When you need more capacity, rather than pay out for new on-premises infrastructure, you can configure a cloud environment and connect your on-premises network to the cloud environment by using a VPN.