View Full Microsoft AZ-900 Exam Dumps and Practice Test Dumps.

 

Question 41

Which cloud service model provides users with a complete software application that is managed primarily by the cloud provider?

1. Infrastructure as a Service (IaaS)
2. Platform as a Service (PaaS)
3. Software as a Service (SaaS)
4. Local infrastructure

Correct Answer: 3

Explanation

Software as a Service, or SaaS, delivers a complete software application over the internet. The cloud provider manages most of the underlying infrastructure, operating system, application platform, and often application maintenance. Customers generally configure and use the software rather than managing the servers that host it. SaaS can reduce infrastructure administration and simplify application access. Examples include Microsoft 365 services. IaaS provides greater infrastructure control, while PaaS provides a managed platform for application development and deployment.

Question 42

Which Azure service can help protect web applications from common web-based attacks such as SQL injection?

1. Azure Web Application Firewall
2. Azure Storage
3. Azure DNS
4. Azure Cost Management

Correct Answer: 1

Explanation

Azure Web Application Firewall, or WAF, helps protect web applications from common web-based attacks. It can inspect incoming HTTP or HTTPS traffic and apply rules designed to detect and block malicious requests, including common attack patterns such as SQL injection and cross-site scripting. WAF capabilities can be integrated with supported Azure networking services. Azure Storage provides storage, Azure DNS provides name resolution, and Cost Management helps manage spending. WAF is therefore an important security layer for applications exposed to web traffic.

Question 43

Which Azure service is primarily used to provide domain name resolution for Azure resources and applications?

1. Azure Monitor
2. Azure DNS
3. Azure Advisor
4. Azure Policy

Correct Answer: 2

Explanation

Azure DNS is a hosting service for Domain Name System domains that provides name resolution using Microsoft’s Azure infrastructure. DNS translates human-readable domain names into IP addresses and supports the process by which applications and users locate network resources. Azure DNS can host DNS zones and records for domains managed by an organization. Azure Monitor focuses on telemetry, Advisor provides optimization recommendations, and Azure Policy provides governance controls. DNS is an important component of application connectivity because users generally interact with services through recognizable domain names.

Question 44

What does the principle of economies of scale mean in cloud computing?

1. Every customer receives identical resource configurations
2. Cloud providers can achieve lower costs by operating infrastructure at large scale
3. Cloud services always cost less than on-premises systems
4. Customers must purchase infrastructure in bulk

Correct Answer: 2

Explanation

Economies of scale occur when a cloud provider operates infrastructure at a very large scale and can achieve efficiencies that may reduce the cost of providing services. Microsoft can purchase, operate, and maintain large amounts of infrastructure more efficiently than many individual organizations could manage independently. These efficiencies can contribute to competitive cloud pricing. However, cloud services are not automatically cheaper for every workload. Actual cost depends on architecture, usage, management practices, pricing options, and resource utilization.

Question 45

Which Azure service can be used to create and manage virtual networks, subnets, and network security configurations?

1. Azure Virtual Network
2. Azure Functions
3. Azure Key Vault
4. Azure Advisor

Correct Answer: 1

Explanation

Azure Virtual Network provides networking capabilities for Azure resources. It allows organizations to create virtual networks and subnets and configure routing and network security components. Virtual Network enables communication between Azure resources and can also support connectivity with on-premises environments. Network security groups and other supported services can be used to control traffic. Azure Functions provides serverless compute, Key Vault manages secrets, and Advisor provides recommendations. Virtual Network is therefore fundamental for designing private and controlled communication between cloud resources.

Question 46

Which Azure service provides recommendations for improving the security, reliability, performance, and cost efficiency of Azure resources?

1. Azure DNS
2. Azure Advisor
3. Azure Files
4. Azure Queue Storage

Correct Answer: 2

Explanation

Azure Advisor analyzes resource configurations and usage information to provide personalized recommendations. Its recommendations can address areas such as cost optimization, performance, reliability, and security. For example, it may identify underutilized resources or suggest configuration improvements. Advisor helps organizations make informed decisions about their Azure environment rather than requiring administrators to manually analyze every resource. Azure DNS handles name resolution, Azure Files provides file shares, and Queue Storage supports messaging. Advisor is therefore a useful optimization and recommendation service.

Question 47

Which Azure service provides centralized management of cryptographic keys, secrets, and certificates?

1. Azure Key Vault
2. Azure Load Balancer
3. Azure Monitor
4. Azure App Service

Correct Answer: 1

Explanation

Azure Key Vault is designed to securely store and manage sensitive information such as secrets, encryption keys, and certificates. Applications can retrieve secrets from Key Vault instead of storing credentials directly in source code or configuration files. This helps improve security and centralizes management of sensitive values. Access to Key Vault can be controlled through Azure identity and authorization mechanisms. Load Balancer distributes traffic, Monitor collects telemetry, and App Service hosts applications. Key Vault is specifically designed for protecting important cryptographic and secret information.

Question 48

Which cloud characteristic allows resources to be increased or decreased as workload requirements change?

1. Governance
2. Elasticity
3. Compliance
4. Predictability

Correct Answer: 2

Explanation

Elasticity is the ability of cloud resources to expand or contract in response to changing workload requirements. For example, an application may need additional compute capacity during a period of high demand and fewer resources when demand decreases. Cloud platforms such as Azure provide various scaling capabilities that support this behavior. Elasticity can help organizations maintain performance while avoiding unnecessary resource consumption during periods of lower demand. It is different from governance and compliance, which address management and regulatory requirements rather than dynamic resource capacity.

Question 49

Which Azure service is designed to provide centralized governance across multiple Azure subscriptions?

1. Azure Functions
2. Azure Blob Storage
3. Azure Management Groups
4. Azure Files

Correct Answer: 3

Explanation

Azure management groups provide a hierarchy for organizing multiple Azure subscriptions. Governance policies and access controls can be applied at the management group level and inherited by subscriptions and resources below it, depending on configuration. This makes management groups useful for organizations with multiple subscriptions that need consistent governance. They do not provide compute or storage services. Functions provides serverless compute, Blob Storage provides object storage, and Azure Files provides managed file shares. Management groups help establish an organizational governance structure above individual subscriptions.

Question 50

Which Azure pricing factor can cause the cost of a resource to vary based on where the resource is deployed?

1. Azure region
2. Resource naming convention
3. User display name
4. Subscription description

Correct Answer: 1

Explanation

Azure pricing can vary by region because infrastructure costs, demand, available services, and other factors can differ between geographic locations. When estimating Azure costs, organizations should consider the region where resources will be deployed. Region selection can also be influenced by data residency, latency, service availability, and compliance requirements. Naming conventions and subscription descriptions do not normally determine service pricing. Understanding regional pricing is useful when comparing deployment options and estimating the overall cost of a cloud architecture.

Question 51

What is the primary purpose of Azure Resource Manager locks?

1. To increase virtual machine performance
2. To prevent certain resources from being accidentally deleted or modified
3. To provide DNS resolution
4. To automatically scale applications

Correct Answer: 2

Explanation

Azure Resource Manager locks provide an additional protection mechanism that can help prevent accidental deletion or modification of Azure resources. Locks can be applied at different scopes, including subscriptions, resource groups, and individual resources. Depending on the lock type, users may be prevented from deleting or modifying protected resources even if they otherwise have sufficient permissions. Resource locks do not replace role-based access control, and they do not provide scaling or DNS capabilities. They are primarily intended to protect important resources from unintended administrative actions.

Question 52

Which Azure service provides a managed NoSQL database designed for globally distributed applications?

1. Azure Cosmos DB
2. Azure SQL Database
3. Azure Database Migration Service
4. Azure Files

Correct Answer: 1

Explanation

Azure Cosmos DB is a managed NoSQL database service designed for globally distributed applications. It provides capabilities for global distribution, elastic scalability, and low-latency access. Cosmos DB supports flexible data models and is commonly used for applications that require rapid response and geographically distributed data access. Azure SQL Database is a relational database service, Database Migration Service helps migrate databases, and Azure Files provides file storage. Cosmos DB is particularly appropriate when an application needs scalable NoSQL data management across multiple geographic locations.

Question 53

Which Azure tool provides a web-based interface for creating, configuring, and managing Azure resources?

1. Azure CLI
2. Azure PowerShell
3. Azure portal
4. Azure Resource Manager template engine only

Correct Answer: 3

Explanation

The Azure portal is a web-based graphical interface that allows users to create, configure, monitor, and manage Azure resources. It provides access to many Azure services and management features without requiring command-line knowledge. Azure CLI and Azure PowerShell provide command-line and scripting alternatives for automation and administration. The Azure portal is particularly useful for users who prefer a graphical management experience or need to inspect resources interactively. Different management tools can often be used together depending on operational and automation requirements.

Question 54

Which Azure service is designed to provide cloud-based backup and disaster recovery capabilities?

1. Azure Backup
2. Azure DNS
3. Azure Advisor
4. Azure Load Balancer

Correct Answer: 1

Explanation

Azure Backup provides backup capabilities for supported Azure and hybrid workloads. It helps organizations protect data and recover it after accidental deletion, corruption, or other disruptive events. Backup is an important component of business continuity and disaster recovery planning because it provides recoverable copies of important information. Azure DNS manages name resolution, Advisor provides recommendations, and Load Balancer distributes traffic. Azure Backup should be configured according to recovery requirements, retention needs, workload characteristics, and organizational policies.

Question 55

Which Azure concept describes the ability to automatically adjust computing resources based on demand?

1. High availability
2. Fault tolerance
3. Scalability
4. Governance

Correct Answer: 3

Explanation

Scalability refers to the ability of a system to handle increasing or decreasing workload demands by adjusting available resources. In Azure, scaling can involve increasing the capacity of an existing resource or adding additional instances. Automatic scaling capabilities can help applications respond to changing demand while controlling resource consumption. High availability focuses on keeping services accessible, fault tolerance focuses on continuing operation despite failures, and governance focuses on managing resources according to organizational requirements. Scalability is therefore directly associated with changing workload capacity.

Question 56

Which Azure service helps protect applications by distributing traffic across multiple healthy backend instances?

1. Azure Load Balancer
2. Azure Key Vault
3. Azure Policy
4. Azure Cost Management

Correct Answer: 1

Explanation

Azure Load Balancer distributes network traffic across backend resources and can use health probes to determine whether instances are available to receive traffic. By directing requests toward healthy resources, it can improve application availability and support scalable architectures. Load Balancer is different from security services such as Key Vault and Policy and from financial management tools such as Cost Management. Proper load-balancing configuration can help applications handle increased demand and reduce dependence on a single backend resource.

Question 57

Which Azure service can provide a private connection between on-premises infrastructure and an Azure virtual network using an encrypted tunnel over the internet?

1. Azure VPN Gateway
2. Azure DNS
3. Azure Storage
4. Azure Advisor

Correct Answer: 1

Explanation

Azure VPN Gateway provides encrypted connectivity between Azure virtual networks and other networks, including on-premises environments, using VPN technologies. A site-to-site VPN can establish an encrypted tunnel across the public internet, allowing resources in connected networks to communicate securely. VPN Gateway differs from ExpressRoute, which provides private connectivity through a connectivity provider rather than using a typical internet-based VPN tunnel. VPN Gateway is useful for hybrid connectivity when organizations need secure communication without requiring dedicated private network connectivity.

Question 58

Which cloud benefit allows organizations to avoid maintaining physical datacenter hardware themselves?

1. Physical isolation
2. Managed infrastructure
3. Unlimited free storage
4. Permanent fixed capacity

Correct Answer: 2

Explanation

Cloud providers manage the physical infrastructure that supports their cloud services, allowing customers to consume computing, networking, storage, and other capabilities without maintaining equivalent physical datacenter hardware themselves. This reduces the operational burden associated with hardware procurement, maintenance, power, cooling, and physical facilities. Customers still remain responsible for the aspects of a service covered by their chosen cloud model. Cloud services do not provide unlimited free storage or permanent fixed capacity. Managed infrastructure is a key advantage of public cloud adoption.

Question 59

Which Azure service can be used to automate the deployment of infrastructure using declarative templates?

1. Azure Resource Manager templates
2. Azure DNS
3. Azure Monitor
4. Azure Service Health

Correct Answer: 1

Explanation

Azure Resource Manager templates, commonly called ARM templates, allow organizations to define Azure infrastructure declaratively. A template can describe resources, configurations, dependencies, and other deployment requirements so that environments can be created consistently and repeatedly. This supports infrastructure as code and can reduce manual configuration errors. Azure Monitor handles monitoring, Azure DNS manages domain name resolution, and Service Health provides information about Azure service incidents and maintenance. Declarative deployment is particularly useful when organizations need repeatable development, testing, and production environments.

Question 60

Which principle recommends granting users only the permissions required to perform their assigned tasks?

1. Defense in depth
2. Shared responsibility
3. Least privilege
4. High availability

Correct Answer: 3

Explanation

The principle of least privilege recommends granting users, applications, and services only the permissions required to perform their intended tasks. Limiting unnecessary permissions reduces the potential impact if an account or application is compromised. Azure RBAC supports this principle by allowing administrators to assign appropriate roles at suitable scopes. Defense in depth involves multiple layers of security, while shared responsibility describes security responsibilities between the cloud provider and customer. Least privilege is therefore a fundamental access-control principle for reducing unnecessary authorization.