Microsoft

AZ-900 Free Practice Questions — Page 22

Question 219

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are planning a strategy to deploy numerous web servers and database servers to Azure. This strategy should allow for connection types between the web servers and database servers to be controlled. Solution: You include network security groups (NSGs) in your strategy. Does the solution meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: A
Explanation:
Network Security Groups (NSGs) are designed to control inbound and outbound network traffic to Azure resources using allow and deny rules based on source, destination, port, and protocol. Including NSGs in the deployment strategy enables control over the connection types between web servers and database servers.

Question 220

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. Sixty percent of the virtual machines have Windows Server 2016 installed, while the other forty percent has Ubuntu Linux installed. You are required to make sure that the administrative effort, needed for this process, is reduced by employing a suitable Azure service. Solution: You recommend the use of Azure Reserved Virtual Machines (VM) Instances. Does the solution meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: B
Explanation:
Azure Reserved VM Instances are a pricing/discount mechanism for predictable long-term VM usage (typically one- or three-year commitments). They do not reduce the administrative effort of rapidly deploying and deleting large numbers of custom VMs each week. A service such as Azure DevTest Labs, with reusable templates and artifacts, is designed to streamline this type of development/test VM lifecycle.

Question 221

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's infrastructure includes a number of business units that each need a large number of various Azure resources for everyday operation. The resources required by each business unit are identical. You are required to sanction a strategy to create Azure resources automatically. Solution: You recommend that the Azure Resource Manager templates be included in the strategy. Does the solution meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: A
Explanation:
Azure Resource Manager (ARM) templates are designed to automate the deployment of Azure infrastructure as code. When multiple business units require the same set of Azure resources, a reusable ARM template can consistently provision identical environments, meeting the requirement for automatic resource creation.

Question 222

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's infrastructure includes a number of business units that each need a large number of various Azure resources for everyday operation. The resources required by each business unit are identical. You are required to sanction a strategy to create Azure resources automatically. Solution: You recommend that the Azure API Management service be included in the strategy. Does the solution meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: B
Explanation:
Azure API Management is used to publish, secure, monitor, and manage APIs, not to automate the creation of Azure infrastructure. For automatically deploying identical Azure resources across business units, appropriate solutions include Azure Resource Manager (ARM) templates, Bicep, Terraform, or similar infrastructure-as-code tools. Therefore, the proposed solution does not meet the stated goal.

Question 224

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are tasked with deploying Azure virtual machines for your company. You need to make use of the appropriate cloud deployment solution. Solution: You should make use of Platform as a Service (PaaS). Does the solution meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: B
Explanation:
Deploying Azure virtual machines is an Infrastructure as a Service (IaaS) scenario, because you provision and manage virtual machines, operating systems, networking, and related infrastructure. Platform as a Service (PaaS) is intended for deploying and managing applications without managing the underlying virtual machines. Therefore, the proposed solution does not meet the goal.

Question 225

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are tasked with deploying Azure virtual machines for your company. You need to make use of the appropriate cloud deployment solution. Solution: You should make use of Software as a Service (SaaS). Does the solution meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: B
Explanation:
The solution does not meet the goal. Deploying Azure virtual machines is an Infrastructure as a Service (IaaS) scenario, where you provision and manage virtualized compute resources. SaaS provides complete software applications to end users and is not the appropriate deployment model for creating Azure VMs.

Question 226

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. Sixty percent of the virtual machines have Windows Server 2016 installed, while the other forty percent has Ubuntu Linux installed. You are required to make sure that the administrative effort, needed for this process, is reduced by employing a suitable Azure service. Solution: You recommend the use of Azure DevTest Labs. Does the solution meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: A
Explanation:
Azure DevTest Labs is designed for development and test scenarios where VMs are frequently created and deleted. It supports both Windows and Linux custom images, enables rapid provisioning, self-service environments, and automation, reducing administrative effort for developers.

Question 227

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are planning to migrate a company to Azure. Each of the company's numerous divisions will have an administrator in place to manage the Azure resources used by their respective division. You want to make sure that the Azure deployment you employ allows for Azure to be segmented for the divisions, while keeping administrative effort to a minimum. Solution: You plan to make use of several Azure Active Directory (Azure AD) directories. Does the solution meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: B
Explanation:
Using several Azure AD directories (separate tenants) increases administrative overhead rather than minimizing it. To segment resources by division while allowing each division to have its own administrator, the recommended approach is a single Azure AD tenant with Azure governance constructs such as management groups, subscriptions, resource groups, and Azure RBAC. Therefore, the proposed solution does not meet the goal.

Question 228

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to Azure AD via the Internet. You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords. Solution: You configure the use of Azure AD Privileged Identity Management. Does the solution meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: B
Explanation:
No. Azure AD Privileged Identity Management (PIM) is used to manage and control privileged role activation, not to detect risky sign-ins or require password changes based on sign-in risk such as an unknown IP address. That capability is provided by Azure AD Identity Protection (now Microsoft Entra ID Protection), which can identify risky sign-ins and enforce a password change through risk-based policies.

Question 229

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to Azure AD via the Internet. You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords. Solution: You configure the use of Azure AD Identity Protection. Does the solution meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: A
Explanation:
Azure AD Identity Protection (now Microsoft Entra ID Protection) detects risky sign-ins, including those involving anonymous or unfamiliar IP addresses, and supports user risk policies that can require users to change their password as remediation. Therefore, configuring Identity Protection meets the requirement to automatically prompt password changes for risky sign-ins from unidentified IP addresses.

$19

Get all 427 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.