The latest Microsoft AZ-900 Azure Fundamentals certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Microsoft AZ-900 Azure Fundamentals exam and earn Microsoft AZ-900 Azure Fundamentals certification.
Question 611
Match the Azure governance feature to the correct description.
Instructions: To answer, drag the appropriate feature from the column on the left to its description on the right. Each feature may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Features:
- Azure Blueprints
- Azure Policy
- Azure resource locks
- Azure tags
Answer Area:
- Restrict which virtual machine types can be created in a subscription.
- Identify Azure resources that are associated with specific cost centers.
- Deploy a complete Azure application environment including resources configuration and role assignments.
Answer:
Azure Policy: Restrict which virtual machine types can be created in a subscription.
Azure tags: Identify Azure resources that are associated with specific cost centers.
Azure Blueprints: Deploy a complete Azure application environment including resources configuration and role assignments.
Question 612
Match the Azure services to the correct descriptions.
Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Services:
- Azure Functions
- Azure App Services
- Azure virtual machines
- Azure Container Instances
Answer Area:
- Provide operating system virtualization.
- Provide portable environment for virtualized applications.
- Used to build, deploy, and scale web apps.
- Provide a platform for serverless code.
Answer:
Azure virtual machines: Provide operating system virtualization.
Azure Container Instances: Provide portable environment for virtualized applications.
Azure App Services: Used to build, deploy, and scale web apps.
Azure Functions: Provide a platform for serverless code.
Explanation
Box 1: Azure virtual machines –
Box 2: Azure Container instances
Azure Container Instances (ACI) is a managed service that allows you to run containers directly on the Microsoft Azure public cloud, without requiring the use of virtual machines (VMs).
Develop apps fast without managing virtual machines or having to learn new tools – “it’s just your application, in a container, running in the cloud.
Box 3: Azure App Service –
Azure App Service is a fully managed platform for building web applications.
Applications run and scale with ease on both Windows and Linux-based environments.
Box 4: Azure Functions –
Azure Functions (from Microsoft Azure) is a cloud-based serverless service that allows running event-triggered code in a scalable way without providing or managing infrastructure.
Question 613
To complete the sentence, select the appropriate option in the answer area.
You have several virtual machines in an Azure subscription. You create a new subscription. __________
Answer Area:
A. The virtual machines cannot be moved to the new subscription.
*B. The virtual machines can be moved to the new subscription.
C. The virtual machines can be moved to the new subscription only if they are all in the same resource group.
D. The virtual machines can be moved to the new subscription only if they run Windows Server 2019.
Explanation
Box: The virtual machines can be moved to the new subscription.
You can move a VM and its associated resources to a different subscription by using the Azure portal.
Note: Repeat the process below for each Resource Group containing the VMs.
- Go to the Azure portal to manage the resource group containing the VM to move. Search for and select Resource groups.
- Choose the resource group containing the VM that you would like to move.
- At the top of the page for the resource group, select Move and then select Move to another subscription. The Move resources page opens.
- Select each of the resources to move. In most cases, you should move all of the related resources that are listed.
- Select the Subscription where you want the VM to be moved.
- Select an existing Resource group, or enter a name to have a new resource group created.
- When you are done, select that you understand that new resource IDs will be created and that the new IDs will need to be used with the VM after it is moved, and then select OK.
Question 614
You need to purchase a third-party virtual security appliance that you will deploy to an Azure subscription.
What should you use?
A. Azure subscriptions
B. Microsoft Defender for Cloud
*C. Azure Marketplace
D. Microsoft Store
Explanation
You can access these enhanced network security features by using an Azure partner solution. You can find the most current Azure partner network security solutions by visiting the Azure Marketplace, and searching for “security” and “network security.”
Some third-party reseller services available on Azure Marketplace now consume your Enterprise Agreement (EA) Azure Prepayment balance.
Question 615
__________________ is a highly secure IoT solution that includes a microcontroller unit (MCU) and a customized Linux operating system.
A. Azure Arc
B. Azure IoT Central
C. Azure IoT Hub
*D. Azure Sphere
Explanation
Microsoft’s Azure Sphere hardware and service designed to better secure Internet of Things (IoT) devices.
Azure Sphere consists of Microsoft-certified microcontrollers ” single-chip computers with processors, storage, memory and IoT capabilities” plus the Azure Sphere Linux-based OS and the Azure Sphere cloud security service.
Question 616
You plan to deploy a service to Azure virtual machines.
You need to ensure that the service will be available if a datacenter fails.
What should you use as part of the virtual machine deployment?
A. availability sets
B. proximity placement groups
C. host groups
*D. availability zones
Explanation
Azure availability zones are physically separate locations within each Azure region that are tolerant to local failures. Failures can range from software and hardware failures to events such as earthquakes, floods, and fires. Tolerance to failures is achieved because of redundancy and logical isolation of Azure services. To ensure resiliency, a minimum of three separate availability zones are present in all availability zone-enabled regions.
Question 617
Your company has an Azure subscription that contains resources in several regions.
You need to ensure that administrators can only create resources in those regions.
What should you use?
A. a read-only lock
*B. an Azure policy
C. a management group
D. a reservation
Question 618
You can use the Azure File Sync agent to sync on-premises data to an Azure _____________ .
A. blob container
B. Data Lake Storage container
*C. file share
D. queue
Explanation
The Azure File Sync agent enables data on a Windows Server to be synchronized with an Azure File share.
Question 619
What is the function of a Site-to-Site VPN?
A. provides a secure connection between a computer on a public network and the corporate network
B. provides a dedicated private connection to Azure that does NOT travel over the internet
*C. provides a connection from an on-premises VPN device to an Azure VPN gateway
Explanation
A Site-to-Site VPN gateway connection is used to connect your on-premises network to an Azure virtual network over an IPsec/IKE (IKEv1 or IKEv2) VPN tunnel.
This type of connection requires a VPN device located on-premises that has an externally facing public IP address assigned to it.
Example:
Question 620
Match the cloud service models to the appropriate offerings.
To answer, drag the appropriate model from the column on the left to its offering on the right. Each model may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Models:
- Infrastructure as a Service (IaaS)
- Platform as a Service (PaaS)
- Software as a Service (SaaS)
Answer Area:
- Azure App Service
- Azure virtual machines
- Microsoft Dynamics 365
Answer:
Platform as a Service (PaaS): Azure App Service
Infrastructure as a Service (IaaS): Azure virtual machines
Software as a Service (SaaS): Microsoft Dynamics 365
Explanation
Box 1: Platform as a service (PaaS)
Azure App Service is a fully managed platform for building web applications.
Platform as a service (PaaS) is a complete development and deployment environment in the cloud, with resources that enable you to deliver everything from simple cloud-based apps to sophisticated, cloud-enabled enterprise applications.
Box 2: Infrastructure as a service (IaaS)
Windows Azure Virtual Machines, an Infrastructure-as-a-Service (IaaS) offering in Windows Azure, was released back in 2012.
Box 3: Software as a service (SaaS)
Dynamics 365 is a set of interconnected, modular Software-as-a-Service (SaaS) applications and services designed to both transform and enable your core customers, employees, and business activities.