Share Microsoft Azure Fundamentals exam questions and answers online for free from Lead4Pass AZ-900: https://www.leads4pass.com/az-900.html (606 Q&A).
Lead4Pass AZ-900 is updated 1-2 times a month to ensure real-time effectiveness! You can download the latest Microsoft Azure Fundamentals exam questions and answers at any time, and provide PDF and VCE learning formats to help you practice easily and efficiently.
Download AZ-900 Free Microsoft Azure Fundamentals Exam Questions and Answers Online: https://drive.google.com/file/d/1O4rrrbCq0qfMek0lA3RrNgoFtlJ4dLoO/
Practice AZ-900 Free Microsoft Azure Fundamentals Exam Questions and Answers Online
| From | Number of exam questions | Exam name | Exam code | Last updated |
| Lead4Pass | 15 | Microsoft Azure Fundamentals | AZ-900 | AZ-900 dumps |
Question 1:
Your company uses management groups to manage resources in your Azure tenant more efficiently.
User1 should be able to assign access and assign policies to management groups. You need to determine to which role-based access control (RBAC) role User1 should be added.
Your solution should follow the principle of least privilege. To which role should you add User1?
A. Owner
B. User Access Administrator
C. Management Group Contributor
D. Contributor
Correct Answer: B
Question 2:
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
Your company\’s on-premises network includes a large number of servers.
They would like to make extra resources available to their users while keeping capital and operational overheads to a minimum.
You are required to make recommendations that should be included in the overall solution.
Solution: You should endorse the use of an added data center as part of the solution.
Does the solution meet the goal?
A. Yes
B. No
Correct Answer: B
Question 3:
Which Azure service should you use to store certificates?
A. Azure Security Center
B. an Azure Storage account
C. Azure Key Vault
D. Azure Information Protection
Correct Answer: C
Azure Key Vault is a secure store for storing various types of sensitive information including passwords and certificates.
Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets.
Secrets and keys are safeguarded by Azure, using industry-standard algorithms, key lengths, and hardware security modules (HSMs). The HSMs used are Federal Information Processing Standards (FIPS) 140-2 Level 2 validated.
Access to a key vault requires proper authentication and authorization before a caller (user or application) can get access. Authentication establishes the identity of the caller, while authorization determines the operations that they are allowed
to perform.
References:
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview
Question 4:
HOTSPOT
Select the answer that correctly completes the sentence.
Hot Area:
Correct Answer:
Explanation:
Microsoft Service Trust Portal.
The Microsoft Service Trust Portal provides a variety of content, tools, and other resources about Microsoft security, privacy, and compliance practices.
Trust Documents
Provides a wealth of security implementation and design information with the goal of making it easier for you to meet regulatory compliance objectives by understanding how Microsoft Cloud services keep your data secure. To review content, select one of the following options on the Trust Documents pull-down menu.
*
Audit Reports: A list of independent audit and assessment reports on Microsoft\’s Cloud services is displayed. These reports provide information about Microsoft Cloud service’s compliance with data protection standards and regulatory requirements.
*
Data Protection: Contains a wealth of resources such as audited controls, white papers, FAQs, penetration tests, risk assessment tools, and compliance guides.
*
Azure Security and Compliance Blueprints: Resources that help you build secure and compliant cloud-based applications. This area contains blueprint guidance for government, finance, healthcare, and retail verticals.
Incorrect:
Note: Microsoft Defender for Cloud.
Defender for Cloud is a tool for security posture management and threat protection. It strengthens the security posture of your cloud resources, and with its integrated Microsoft Defender plans, Defender for Cloud protects workloads running in Azure, hybrid, and other cloud platforms.
Defender for Cloud provides the tools needed to harden your resources, track your security posture, protect against cyber attacks, and streamline security management.
Note: the Microsoft 365 Compliance Center
The Security and Compliance Center lets you grant permissions to people who perform compliance tasks like device management, data loss prevention, eDiscovery, retention, and so on. These people can perform only the tasks that you explicitly grant them access to.
Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-service-trust-portal
Question 5:
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Question 6:
HOTSPOT
To complete the sentence, select the appropriate option in the answer area.
Hot Area:
Correct Answer:
The Microsoft Privacy Statement explains what personal data Microsoft processes, how Microsoft processes the data, and the purpose of processing the data
Reference: https://privacy.microsoft.com/en-us/privacystatement
Question 7:
HOTSPOT
For each of the following statements, select Yes if the statement is true, Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Question 8:
This question requires that you evaluate the underlined text to determine if it is correct.
You plan to deploy 20 virtual machines to an Azure environment. To ensure that a virtual machine named VM1 cannot connect to the other virtual machines, VM1 must be deployed to a separate virtual network.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. run a different operating system than the other virtual machines
C. be deployed to a separate resource group
D. have two network interfaces
Correct Answer: A
Azure automatically routes traffic between subnets in a virtual network. Therefore, all virtual machines in a virtual network can connect to the other virtual machines in the same virtual network. Even if the virtual machines are on separate subnets within the virtual network, they can still communicate with each other.
To ensure that a virtual machine cannot connect to the other virtual machines, the virtual machine must be deployed to a separate virtual network.
References: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
Question 9:
DRAG DROP
Match the Azure service to the correct description.
Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
NOTE: Each correct selection is worth one point.
Select and Place:
Correct Answer:
Box 1:
Azure virtual machines provide operation system virtualization.
Azure Virtual Machines (VM) is one of several types of on-demand, scalable computing resources that Azure offers. Typically, you choose a VM when you need more control over the computing environment than the other choices offer.
Box 2:
Azure Container Instances provide portable environments for virtualized applications.
Containers are becoming the preferred way to package, deploy, and manage cloud applications. Azure Container Instances offers the fastest and simplest way to run a container in Azure, without having to manage any virtual machines and without having to adopt a higher-level service.
Containers offer significant startup benefits over virtual machines (VMs). Azure Container Instances can start containers in Azure in seconds, without the need to provision and manage VMs.
Box 3:
Azure App Service is used to build, deploy and scale web apps.
Azure App Service is a platform-as-a-service (PaaS) offering that lets you create web and mobile apps for any platform or device and connect to data anywhere, in the cloud or on-premises. App Service includes the web and mobile capabilities that were previously delivered separately as Azure Websites and Azure Mobile Services.
Box 4:
Azure Functions provide a platform for serverless code.
Azure Functions is a serverless compute service that lets you run event-triggered code without having to explicitly provision or manage infrastructure.
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/overview
https://docs.microsoft.com/en-us/azure/security/fundamentals/paas-applications-using-app-services
https://docs.microsoft.com/en-us/azure/azure-functions/
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-overview
Question 10:
You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region.
Which Azure service should you use from the Azure portal to view service failure notifications that can affect the availability of VM1?
A. Azure Service Fabric
B. Azure Monitor
C. Azure virtual machines
D. Azure Advisor
Correct Answer: C
In the Azure virtual machines page in the Azure portal, there is a named Maintenance Status. This column will display service issues that could affect your virtual machine. A service failure is rare but host server maintenance that could affect your virtual machines is more common.
Azure periodically updates its platform to improve the reliability, performance, and security of the host infrastructure for virtual machines. The purpose of these updates ranges from patching software components in the hosting environment to upgrading networking components or decommissioning hardware.
References: https://docs.microsoft.com/en-us/azure/virtual-machines/maintenance-and-updates
Question 11:
HOTSPOT
Select the answer that correctly completes the sentence.
Hot Area:
Correct Answer:
Question 12:
A company uses Microsoft 365.
The company is considering using My Analytics.
You need to identify the features of My Analytics.
What are two features of My Analytics? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. suggestions in Microsoft Outlook to review outstanding tasks
B. suggestions in Microsoft Teams to delay delivery of chat messages
C. suggestions in Microsoft Outlook to delay delivery of emails
D. suggestions in Teams to review outstanding tasks
Correct Answer: AC
Reference: https://docs.microsoft.com/en-us/workplace-analytics/myanalytics/use/mya-notifications
Question 13:
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Box 1: No
Azure Advisor provides you with a consistent, consolidated view of recommendations for all your Azure resources. It integrates with Azure Security Center to bring you security recommendations. You can get security recommendations from the Security tab on the Advisor dashboard.
Examples of recommendations include restricting access to virtual machines by configuring Network Security Groups, enabling storage encryption, and installing vulnerability assessment solutions.
However, Azure Advisor does not provide recommendations on how to improve the security of an Azure AD environment.
Box 2: Yes
The advisor helps you optimize and reduce your overall Azure spend by identifying idle and underutilized resources. You can get cost recommendations from the Cost tab on the Advisor dashboard.
Box 3: No.
Azure Advisor does not provide recommendations on how to configure network settings on Azure virtual machines.
References:
https://docs.microsoft.com/en-us/azure/advisor/advisor-security-recommendations
https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations
Question 14:
Which term represents the ability to increase the computing capacity of a virtual machine by adding memory or CPUs?
A. horizontal scaling
B. agility
C. elasticity
D. vertical scaling
Correct Answer: D
Question 15:
HOTSPOT
To complete the sentence, select the appropriate option in the answer area.
Hot Area:
Correct Answer:
Preview features are made available to you on the condition that you accept additional terms which supplement the regular Azure terms. The supplemental terms state:
PREVIEWS ARE PROVIDED “AS-IS,” “WITH ALL FAULTS,” AND “AS AVAILABLE,” AND ARE EXCLUDED FROM THE SERVICE LEVEL AGREEMENTS AND LIMITED WARRANTY.
Reference:
https://azure.microsoft.com/en-gb/support/legal/preview-supplemental-terms/
…
Now! Download the latest and complete Microsoft Azure Fundamentals exam questions and answers for AZ-900: https://www.leads4pass.com/az-900.html (606 Q&A), to help you pass the exam 100% successfully.