Microsoft

AZ-900 Free Practice Questions — Page 20

Question 188

Who can use the Azure Total Cost of Ownership (TCO) calculator?

A. billing readers for an Azure subscription only
B. owners for an Azure subscription only
C. anyone
D. all users who have an account in Azure Active Directory (Azure AD) that is linked to an Azure subscription only
Show Answer
Correct Answer: C
Explanation:
The Azure Total Cost of Ownership (TCO) Calculator is a publicly accessible web-based tool for estimating the cost of migrating workloads to Azure. It does not require Azure subscription ownership or specific Azure AD permissions, so anyone can use it.

Question 189

HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:

Illustration for AZ-900 question 189
Show Answer
Correct Answer: automatically respond to threats.
Explanation:
Azure Sentinel playbooks use Azure Logic Apps to automate and orchestrate responses to alerts and incidents.

Question 190

Your company has an Azure subscription that contains resources in several regions. You need to create the Azure resource that must be used to meet the policy requirement. What should you create?

A. a read-only lock
B. an Azure policy
C. a management group
D. a reservation
Show Answer
Correct Answer: B
Explanation:
The only Azure resource/service designed to implement and enforce governance policy requirements across Azure resources is Azure Policy. A read-only lock prevents modification or deletion, a management group organizes subscriptions and provides scope for governance but is not itself the policy mechanism, and a reservation is a pricing discount construct. Sources: https://learn.microsoft.com/en-us/answers/questions/5536554/his-policy-maintains-a-set-of-best-available-regio

Question 191

You have an Azure virtual machine named VM1. You plan to encrypt VM1 by using Azure Disk Encryption. Which Azure resource must you create first?

A. an Azure Storage account
B. an Azure Key Vault
C. an Azure Information Protection policy
D. an Encryption key
Show Answer
Correct Answer: B
Explanation:
Azure Disk Encryption requires an Azure Key Vault to securely store and manage the disk encryption keys and secrets (or key encryption keys) used by BitLocker/DM-Crypt. The VM already exists, so its managed disks/storage are already provisioned. An Azure Information Protection policy is unrelated, and while encryption keys can be customer-managed, the prerequisite Azure resource to create is the Key Vault.

Question 192

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for AZ-900 question 192
Show Answer
Correct Answer: Yes Yes Yes
Explanation:
Azure AD can manage access to on-premises applications via Application Proxy, provides single sign-on (SSO), and supports registration of iOS devices (registered, not Azure AD joined).

Question 193

HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:

Illustration for AZ-900 question 193
Show Answer
Correct Answer: Network Address Translation (NAT) rules
Explanation:
Inbound internet access to a server in an Azure virtual network is enabled using Azure Firewall DNAT (Destination NAT) rules, which translate incoming public traffic to the private server.

Question 194

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for AZ-900 question 194
Show Answer
Correct Answer: No Yes No
Explanation:
Archive tier is set at the blob level, not the storage account level. Hot tier is for frequently accessed and modified data. Long-term backups are better suited to the Archive tier; Cool is for infrequently accessed data with shorter retention.

Question 195

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for AZ-900 question 195
Show Answer
Correct Answer: Yes Yes Yes
Explanation:
Azure Cost Management supports cost analysis at management group and resource group scopes, and can report resource usage (including virtual machines) over historical periods such as the last three months.

Question 196

What is the first stage in the Microsoft Cloud Adoption Framework for Azure?

A. Adopt the cloud.
B. Make a plan.
C. Ready your organization.
D. Define your strategy.
Show Answer
Correct Answer: D
Explanation:
The Microsoft Cloud Adoption Framework for Azure follows the lifecycle: Strategy, Plan, Ready, Adopt, Govern, and Manage. Therefore, the first stage is to define your strategy.

Question 197

Your developers have created a portal web app for users in the Miami branch office. The web app will be publicly accessible and used by the Miami users to retrieve customer and product information. The web app is currently running in an on-premises test environment. You plan to host the web app on Azure. You need to determine which Azure web tier plan to host the web app. The web tier plan must meet the following requirements: ✑ The website will use the miami.weyland.com URL. ✑ The website will be deployed to two instances. ✑ SSL support must be included. ✑ The website requires 12 GB of storage. ✑ Costs must be minimized. Which web tier plan should you use?

A. Standard
B. Basic
C. Free
D. Shared
Show Answer
Correct Answer: A
Explanation:
The Standard App Service plan is the lowest tier that satisfies all stated requirements. Free and Shared do not support the needed production features. Basic supports custom domains, SSL, and multiple instances, but the classic tier limits it to 10 GB of storage, which does not meet the 12 GB requirement. Standard provides sufficient storage (50 GB in the classic tier), supports custom domains, SSL, and scaling to two or more instances while minimizing cost among the tiers that meet all requirements.

$19

Get all 428 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.