AZ 900 Azure Fundamentals Exam Already Solved

What types of attacks can a Web Application Firewall (WAF) protect from? - Answer Cross Site Scripting (XSS) attacks Not DDoS (DDoS protection is offered separately, not part of the firewall) Scenario: You have an application in the cloud that has 10 servers with various roles. Six servers are D2S machines, two servers are D4S, and two are D8S instance types. This application is expected to run for years, but the business has concerns about the cost. What is the one thing you can do almost immediately to reduce the cost of this solution by at least 50%? - Answer Use Azure Reserved Instances with Hybrid Benefit You can get 80% savings without a single change to your application Which tool within the Azure Portal will make specific recommendations based on your actual usage for how you can improve your use of Azure? - Answer Azure Advisor Which Azure AD licenses (select two) are made available through Azure? - Answer Free Office 365 Premium 1 Premium 2 Which of the following scenarios would Azure Policy be a recommended method for enforcement? - Answer Prevent certain azure VM instance types from being used in a resource group What are the two features that Azure AD provides? Choose two. - Answer Authentication and Application Management What is the basic way of protecting an Azure Virtual Network subnet? - Answer Network Security Group Which of the following elements is considered part of the "network" layer of network security? - Answer Separate servers into distinct subnets by role Which feature within Azure collects all of the logs from various resources into a central dashboard, where you can run queries, view graphs, and create alerts on certain events? - Answer Azure Monitor Azure Advisor - Answer a tool that will analyze your use of Azure and make you specific recommendations based on your usage across availability, security, performance and cost categories Azure Service Health - Answer feature that alerts you to service issues that happen in Azure itself, not specifically related to your own resources Azure Policy - Answer a service to create policies the policies allow you to enforce and control the properties of a resource can add restrictions on storage account SKUs, virtual machine instance types, and rules relating to tagging of resources and groups, it cannot prompt a user to ask them if they are sure Network Security Group (NSG) - Answer **a virtual firewall at the subnet level a virtual firewall for subnets instead of vnets a fairly basic set of rules that you can apply to both inbound traffic and outbound traffic that lets you specify what sources, destinations and ports are allowed to travel through from outside the virtual network to inside the virtual network Azure Monitor - Answer a centralized dashboard that collects all the logs, metrics and events from your resources for telemetry An IT needs to create a VM in Azure. Currently, the IT Engineer has an Android OS based workstation. Which of the following can the IT Engineer use to create the desired VM in Azure Microsoft PowerApps Azure Cloud Shell Azure Powershell Azure CLI - Answer Azure Cloud Shell Azure Powershell Azure CLI Microsoft PowerApps - Answer is not used to create VMs it allows you to build mobile apps from selectable templates Does the Azure Free Account allow you to host production-based resources? - Answer Yes Does Azure AD have capabilities to implement authorization using Azure RBAC to secure resources? - Answer Yes Does the Azure AD Premium P2 tier come with an SLA of 99.9%? - Answer Yes A company needs to store 2 TB worth of data this is infrequently used. The data needs to be accessed via PowerBI. Which of the following could be used as a cost-effective data layer for this requirement? - Answer Azure Data Lake A company needs to create around 50 customized VMs. 20 are windows base and 30 are Ubuntu. Which of the following would help reduce the administrative effort required to deploy the machines? - Answer Azure Scale Sets A company want to use Azure for the deployment of various solutions. They want to ensure that whenever users authenticate to Azure, they have to make use of MFA. Which can help them achieve this? - Answer Azure Privileged Identity Management When a VM is stopped, will you still incur costs for the storage attached to the VM? - Answer Yes Azure Powershell - Answer powershell is a task automation and configuration management framework *a commands line shell and scripting language PowerShell 5.1 on Windows and PowerShell 7.x and higher on all platforms Cloud Shell - Answer interactive, authenticated, browser accessible shell for managing azure resources allows access to the CLI and Powershell consoles in the Azure Portal you access from the azure portal you can use either bash or powershell A tool that provides guidance and recommendations to improve an Azure environment - Answer Azure Advisor A tool used to monitor Web applications hosted in production-based environments - Answer Azure Applications Insights What data solution would you consider for these requirements? - no need for schema or index management - ensure low latency access to data from around the world - Answer Azure Cosmos DB A company is planning to deploy Azure resources to a resource group. The company is planning to assign tags to the resource groups. Would the resources in the resource group also inherit the same tags? - Answer No Would the Azure Advisor tool alone be able to give recommendations on how to improve the security of the Azure AD environment? - Answer No Which of the following could be used to automate the deployment of 10 Azure resources for several departments using infrastructure as code? - Answer Azure Resource Manager templates A company has hosted its solutions on the Azure Cloud. They need to implement MFA for identities hosted in Azure. It is necessary to deploy a federation solution or sync on-premise identities to the cloud? - Answer No Using Azure AD, they have the requirement that they are prompted to change password is they login from unknown IP address. Which of the following should the company consider for this? - Answer Azure AD Identity Protection Company wants to ensure that when resource groups are created, they have to contain a tag with a name of org and value of labs Would Azure policies work? - Answer Yes Company wants to purchase support plan requires that it provides architectural support for the company's Azure environment from Pooled Team of Microsoft's ProDirect Delivery Managers What plan should they purchase? - Answer Premier Which stroage tiers fro Azure Blob storage would be suitable for this type of requirement? company wants to create multiple data stores in Azure, the storage layers will be used to store data infrequently - Answer Cool Storage Archive Storage A company wants to have an Enterprise messaging solution integrated with their existing application hosted in Azure. What should they use - Answer Service Bus company is planning on hosting an application on a set of VMs. VMs will be running for a longer period. Which of the following should be considered to reduce the overall cost of VM usage? - Answer Azure reservations A company is having issues provisioning additional VMs What can be done? - Answer raise a support ticket with Microsoft Company has segregated their users into groups for their different Azure subscriptions. They want to ensure that they set the right permissions for users and administrators. They need to manage the permissions effectively. You recommend using Azure Management Groups. Does this work? - Answer Yes Company wants to host app on Azure using serverless components. they dont want to manage the underlying infrastucutre. which could be used to implement a workflow that could run on a serverless infrastrucutre? - Answer Azure Logic Apps