View Full Microsoft AZ-900 Exam Dumps and Practice Test Dumps.

 

Question 181

Which Azure service provides a centralized marketplace where customers can discover and purchase software solutions from Microsoft and third-party providers?

1. Azure Marketplace
2. Azure Monitor
3. Azure Advisor
4. Azure Service Health

Correct Answer: 1

Explanation

Azure Marketplace is an online store where organizations can discover, evaluate, and acquire applications, services, and solutions from Microsoft and third-party providers. Marketplace offerings can include software applications, security products, consulting services, and infrastructure solutions that can be deployed in Azure. It can simplify the process of finding solutions that meet specific business or technical requirements. Azure Monitor focuses on telemetry, Advisor provides recommendations, and Service Health reports Azure platform events. Azure Marketplace is therefore the appropriate service for discovering and acquiring partner solutions.

Question 182

Which Azure concept describes the geographical area containing one or more Azure datacenters connected by a low-latency network?

1. Availability zone
2. Azure region
3. Management group
4. Resource group

Correct Answer: 2

Explanation

An Azure region is a geographical area containing one or more datacenters connected through a dedicated regional network. Azure provides many regions around the world so organizations can deploy resources closer to users or meet data residency and regulatory requirements. Availability zones are physically separate locations within certain Azure regions and provide additional resilience. Management groups organize subscriptions, while resource groups organize resources. An Azure region is therefore the broader geographical deployment area used to host Azure services and resources.

Question 183

Which Azure feature consists of physically separate locations within an Azure region that are designed to protect applications from datacenter failures?

1. Availability zones
2. Resource groups
3. Management groups
4. Azure geographies

Correct Answer: 1

Explanation

Availability zones are physically separate locations within an Azure region, each with independent power, cooling, and networking infrastructure. Deploying application components across multiple availability zones can help protect workloads from failures affecting a single datacenter location. Availability zones are different from regions because multiple zones exist within a supported region, while regions represent larger geographic areas. Resource groups and management groups are organizational structures, and geographies are broader geographic boundaries. Availability zones are therefore an important option for improving workload resilience against localized infrastructure failures.

Question 184

Which Azure service provides a secure way to store and manage application secrets without embedding them directly in source code?

1. Azure Monitor
2. Azure Policy
3. Azure Key Vault
4. Azure Traffic Manager

Correct Answer: 3

Explanation

Azure Key Vault provides secure storage and management for sensitive information such as passwords, connection strings, secrets, certificates, and cryptographic keys. Applications can retrieve required secrets from Key Vault instead of placing sensitive values directly in source code or configuration files. This reduces the risk of exposing credentials and makes secret management easier. Azure Monitor collects telemetry, Azure Policy enforces governance requirements, and Traffic Manager provides DNS-based traffic routing. Key Vault is therefore the appropriate service for securely managing application secrets and cryptographic material.

Question 185

Which Azure service is primarily used to provide object storage for unstructured data?

1. Azure Files
2. Azure Blob Storage
3. Azure Queue Storage
4. Azure SQL Database

Correct Answer: 2

Explanation

Azure Blob Storage is an object storage service designed for large amounts of unstructured data. It can store images, videos, documents, backups, logs, and other files that do not require a traditional relational database structure. Blob Storage is highly scalable and can support different access tiers depending on how frequently data is used. Azure Files provides managed file shares, Queue Storage supports asynchronous messaging, and SQL Database provides relational database functionality. Blob Storage is therefore the appropriate Azure service for scalable object storage of unstructured data.

Question 186

Which Azure service allows organizations to create and manage virtual machines in the cloud?

1. Azure Virtual Machines
2. Azure Functions
3. Azure Logic Apps
4. Azure Event Grid

Correct Answer: 1

Explanation

Azure Virtual Machines provides infrastructure-as-a-service compute resources that allow organizations to deploy Windows or Linux virtual machines in Azure. Customers have significant control over the operating system, installed software, configuration, and networking. This flexibility also means customers are responsible for more management tasks than they would be with a PaaS service. Azure Functions provides serverless compute, Logic Apps automates workflows, and Event Grid handles event routing. Azure Virtual Machines are therefore appropriate when an organization requires virtualized servers with operating-system-level control.

Question 187

Which cloud model combines resources from a private environment with resources from a public cloud?

1. Public cloud
2. Private cloud
3. Hybrid cloud
4. Community cloud

Correct Answer: 3

Explanation

A hybrid cloud combines private infrastructure or on-premises resources with public cloud resources. Organizations may choose this model when they need to keep certain workloads in an existing environment while using Azure for scalability, modern applications, disaster recovery, or other services. A public cloud uses provider-hosted resources, while a private cloud is dedicated to a single organization. Hybrid cloud architectures can provide flexibility but may require careful planning for networking, identity, security, and management. Hybrid cloud is therefore the correct model for combining private and public cloud environments.

Question 188

Which Azure service provides serverless compute that can automatically scale based on workload demand?

1. Azure Virtual Machines
2. Azure Functions
3. Azure Managed Disks
4. Azure Files

Correct Answer: 2

Explanation

Azure Functions is a serverless compute service that allows developers to execute code without managing traditional server infrastructure. Functions can be triggered by events such as HTTP requests, timers, messages, and changes in supported Azure services. Depending on the hosting configuration, the platform can automatically scale compute resources according to workload requirements. Virtual Machines require customers to manage operating systems and configurations, while Managed Disks and Azure Files provide storage capabilities. Azure Functions is therefore well suited for event-driven workloads requiring flexible serverless execution.

Question 189

Which Azure governance feature can require resources to use only approved Azure regions?

1. Azure Policy
2. Azure Advisor
3. Azure Monitor
4. Azure Service Health

Correct Answer: 1

Explanation

Azure Policy can be used to enforce organizational requirements regarding how resources are deployed and configured. For example, an organization can create a policy that permits resource deployments only in approved Azure regions. This helps support governance, regulatory requirements, and organizational standards. Advisor provides recommendations, Monitor collects and analyzes telemetry, and Service Health provides information about Azure platform events. Azure Policy is therefore the appropriate governance feature when an organization needs to enforce specific deployment or configuration requirements across Azure resources.

Question 190

Which Azure service provides a managed solution for backing up supported data and workloads?

1. Azure Site Recovery
2. Azure Backup
3. Azure Traffic Manager
4. Azure Front Door

Correct Answer: 2

Explanation

Azure Backup is a managed service that provides backup capabilities for supported Azure and on-premises workloads. It can help protect important data from accidental deletion, corruption, ransomware, or other data-loss scenarios. Backup and disaster recovery are related but serve different purposes. Azure Site Recovery primarily focuses on replicating workloads and supporting recovery during major outages, while Traffic Manager and Front Door provide traffic-routing and application delivery capabilities. Azure Backup is therefore the appropriate service when the primary requirement is creating and managing recoverable copies of data or workloads.

Question 191

Which cloud benefit allows organizations to avoid purchasing physical servers before knowing how much computing capacity they will need?

1. Capital expenditure reduction
2. Physical isolation
3. Manual scaling
4. Hardware ownership

Correct Answer: 1

Explanation

Cloud computing can reduce the need for large upfront capital expenditures because organizations can provision cloud resources without purchasing and maintaining physical servers themselves. Instead of investing heavily in infrastructure before workloads are deployed, organizations can use cloud services and pay according to applicable pricing models. This can make it easier to start projects and adjust capacity as requirements change. Physical isolation and hardware ownership are not general benefits of public cloud services, while manual scaling does not describe the financial advantage. Reduced upfront capital expenditure is therefore a key cloud benefit.

Question 192

Which Azure service is designed to provide a managed database platform for globally distributed NoSQL applications?

1. Azure SQL Database
2. Azure Cosmos DB
3. Azure Files
4. Azure Database for PostgreSQL

Correct Answer: 2

Explanation

Azure Cosmos DB is a fully managed database service designed for globally distributed applications and NoSQL workloads. It supports multiple APIs and provides capabilities for flexible data models, global distribution, and scalable performance. Cosmos DB is particularly useful when applications require low-latency access across geographic locations and do not depend exclusively on a traditional relational database model. Azure SQL Database and Azure Database for PostgreSQL provide relational database capabilities, while Azure Files provides file storage. Cosmos DB is therefore the best fit for globally distributed NoSQL applications.

Question 193

Which Azure feature allows resources to be identified and organized using custom metadata such as department, environment, or project?

1. Resource locks
2. Azure Policy
3. Tags
4. Availability zones

Correct Answer: 3

Explanation

Azure tags are name-value pairs that can be assigned to Azure resources to help organize and identify them. Organizations can use tags such as Department, Environment, Owner, Project, or CostCenter to improve resource management and reporting. Tags can also support cost analysis and operational processes when consistently applied. Resource locks protect resources from deletion or modification, Azure Policy enforces governance rules, and availability zones provide infrastructure resiliency. Tags are therefore the appropriate Azure feature for adding custom organizational metadata to resources.

Question 194

Which Azure service can provide recommendations for improving the reliability of Azure resources?

1. Azure Advisor
2. Azure Files
3. Azure DNS
4. Azure Queue Storage

Correct Answer: 1

Explanation

Azure Advisor analyzes Azure resources and provides personalized recommendations in several areas, including reliability, security, performance, and cost. Reliability recommendations can help organizations identify configuration improvements that may increase the resilience of workloads. Advisor does not automatically replace the organization’s responsibility for designing highly available applications, but it can provide useful guidance based on resource configurations and usage. Azure Files provides file storage, DNS provides name resolution, and Queue Storage supports messaging. Advisor is therefore the appropriate service for reliability-focused recommendations.

Question 195

Which Azure service provides a DNS-based mechanism for directing users to different application endpoints?

1. Azure Application Gateway
2. Azure Traffic Manager
3. Azure Load Balancer
4. Azure Bastion

Correct Answer: 2

Explanation

Azure Traffic Manager is a DNS-based traffic routing service that directs users to appropriate application endpoints according to configured routing methods. It can route traffic based on factors such as endpoint priority, geographic location, performance, or other supported methods. Application Gateway provides regional application-layer traffic management, Load Balancer distributes network traffic across backend resources, and Bastion provides secure virtual machine access. Traffic Manager is therefore the appropriate choice when DNS-based routing between multiple application endpoints is required.

Question 196

Which authentication feature requires users to provide more than one form of verification when signing in?

1. Single sign-on
2. Role-based access control
3. Multifactor authentication
4. Resource locking

Correct Answer: 3

Explanation

Multifactor authentication, or MFA, requires users to provide multiple forms of verification when authenticating. These factors can involve something the user knows, something the user has, or something the user is. Requiring multiple factors can significantly reduce the risk associated with compromised passwords because an attacker may still need another verification method. Single sign-on simplifies access to multiple applications, RBAC controls authorization after authentication, and resource locking protects Azure resources. MFA is therefore an important security capability for strengthening user authentication.

Question 197

Which Azure service can provide a private endpoint that allows supported Azure services to be accessed through a private IP address in a virtual network?

1. Azure Private Link
2. Azure Traffic Manager
3. Azure Advisor
4. Azure Cost Management

Correct Answer: 1

Explanation

Azure Private Link enables private connectivity to supported Azure services and other services through private endpoints. A private endpoint uses a private IP address within an Azure virtual network, allowing supported services to be accessed without exposing the connection through a public endpoint. This can improve network isolation and security for applications. Traffic Manager performs DNS-based routing, Advisor provides recommendations, and Cost Management analyzes spending. Azure Private Link is therefore the appropriate service when an organization needs private network connectivity to supported services.

Question 198

Which Azure service can provide a managed platform for developing and deploying web APIs and web applications?

1. Azure Virtual Machines
2. Azure App Service
3. Azure Managed Disks
4. Azure Data Box

Correct Answer: 2

Explanation

Azure App Service is a managed platform for hosting web applications, web APIs, and related workloads. It provides a PaaS approach, allowing developers to deploy applications without managing the underlying operating system and physical infrastructure. App Service can support features such as scaling, deployment integration, authentication, and custom domains. Virtual Machines provide more infrastructure control but require greater management, Managed Disks provide storage, and Data Box supports physical data transfer. App Service is therefore a suitable choice for managed web application and API hosting.

Question 199

Which Azure service helps organizations estimate the cost of a planned solution before resources are deployed?

1. Azure Cost Management
2. Azure Pricing Calculator
3. Azure Service Health
4. Azure Monitor

Correct Answer: 2

Explanation

Azure Pricing Calculator is designed to help organizations estimate the expected cost of Azure services before deploying a solution. Users can select services and configure factors such as usage, region, and quantities to create an estimated pricing scenario. This can help compare different architecture options and identify potential cost drivers during planning. Cost Management is more focused on analyzing and managing actual spending after resources are used. Service Health reports platform events, while Monitor provides telemetry. Pricing Calculator is therefore best suited for pre-deployment cost estimation.

Question 200

Which Azure concept refers to the ability to increase a system’s capacity by adding more resources to support growing demand?

1. Fault tolerance
2. High availability
3. Scalability
4. Governance

Correct Answer: 3

Explanation

Scalability is the ability of a system to increase its capacity to support additional workload demand. Scaling can involve adding more resources or increasing the capacity of existing resources, depending on the architecture. Scalability helps applications handle growth in users, transactions, or data. Fault tolerance focuses on continuing operation when components fail, high availability focuses on keeping services accessible, and governance concerns organizational control and compliance. Scalability is therefore the cloud concept most directly associated with increasing capacity to support growing workload requirements.