View Full Microsoft AZ-900 Exam Dumps and Practice Test Dumps.

 

Question 261

Which Azure concept describes the ability to increase or decrease resources automatically based on workload demand?

1. Scalability
2. Availability
3. Elasticity
4. Governance

Correct Answer: 3

Explanation

Elasticity is the ability of a cloud environment to automatically or dynamically add or remove resources as workload demand changes. For example, an application experiencing a sudden increase in users may require additional compute capacity, while resources can be reduced when demand decreases. This helps organizations avoid maintaining unnecessary capacity during periods of low usage. Scalability generally refers to increasing or decreasing capacity, while elasticity emphasizes the dynamic adjustment of resources. Availability focuses on keeping services accessible, and governance focuses on managing resources according to organizational requirements.

Question 262

Which Azure feature allows administrators to prevent accidental deletion or modification of resources?

1. Azure Tags
2. Resource Locks
3. Azure Advisor
4. Management Groups

Correct Answer: 2

Explanation

Azure resource locks help prevent accidental deletion or modification of important Azure resources. Administrators can apply locks at different scopes, depending on organizational requirements. A delete lock prevents resources from being deleted, while a read-only lock prevents changes and deletion. Tags are used for organization and cost management, Advisor provides recommendations, and management groups provide hierarchical governance across subscriptions. Resource locks are therefore particularly useful when an organization wants an additional safeguard against unintended administrative actions on critical resources.

Question 263

Which Azure service provides centralized management of encryption keys, secrets, certificates, and other sensitive information?

1. Azure Key Vault
2. Azure Monitor
3. Azure Front Door
4. Azure Storage Explorer

Correct Answer: 1

Explanation

Azure Key Vault is designed to securely store and manage sensitive information such as cryptographic keys, secrets, certificates, and other protected credentials. Applications and administrators can retrieve these items without placing sensitive values directly in application code or configuration files. Key Vault also supports access control and integration with Azure identity services. Azure Monitor focuses on monitoring, Front Door provides global application delivery, and Storage Explorer helps manage storage resources. Key Vault is therefore the appropriate Azure service for centralized protection and management of sensitive security information.

Question 264

Which Azure identity feature allows users to access multiple applications after signing in once?

1. Conditional Access
2. Multi-factor authentication
3. Single sign-on
4. Role-based access control

Correct Answer: 3

Explanation

Single sign-on, or SSO, allows users to authenticate once and then access multiple supported applications without repeatedly entering their credentials. This can improve the user experience while reducing the number of times users need to provide authentication information. Multi-factor authentication adds additional verification factors, Conditional Access applies access rules based on conditions, and role-based access control manages permissions to resources. SSO is therefore the identity feature that specifically addresses accessing multiple applications after a single authentication event.

Question 265

Which Azure security feature can require users to satisfy specific conditions before gaining access to applications?

1. Azure Bastion
2. Conditional Access
3. Azure Advisor
4. Azure CDN

Correct Answer: 2

Explanation

Microsoft Entra Conditional Access allows organizations to create access policies based on conditions such as user identity, location, device state, application, or risk signals. Depending on the configured policy, users may be required to complete additional authentication or may be blocked from accessing a resource. This provides organizations with more flexible identity-based security controls. Azure Bastion provides secure virtual machine access, Advisor provides recommendations, and CDN improves content delivery. Conditional Access is therefore the appropriate feature for applying access decisions based on defined conditions.

Question 266

Which Azure access control model assigns permissions to users based on their job responsibilities?

1. Azure RBAC
2. Azure CDN
3. Azure DNS
4. Azure Storage Explorer

Correct Answer: 1

Explanation

Azure role-based access control, commonly called Azure RBAC, manages access to Azure resources by assigning roles that define specific permissions. Roles can be assigned to users, groups, service principals, and managed identities at appropriate scopes. This allows organizations to follow the principle of least privilege by granting only the permissions required for a particular responsibility. CDN provides content delivery, DNS provides name resolution, and Storage Explorer helps manage storage resources. Azure RBAC is therefore the appropriate access control mechanism for assigning permissions according to responsibilities.

Question 267

Which Azure resource hierarchy level is directly above a resource group?

1. Resource
2. Management group
3. Subscription
4. Region

Correct Answer: 3

Explanation

An Azure subscription is directly above the resource group level in the standard Azure resource hierarchy. Resources are organized into resource groups, and resource groups belong to subscriptions. Subscriptions can then be organized under management groups. This hierarchy helps organizations apply governance, access control, billing, and management at appropriate levels. A region identifies a physical geographic location rather than a hierarchy level. Therefore, when moving upward from a resource group in the Azure management hierarchy, the next level is the subscription.

Question 268

Which Azure governance feature can enforce organizational rules across resources?

1. Azure Policy
2. Azure Advisor
3. Azure Monitor
4. Azure Marketplace

Correct Answer: 1

Explanation

Azure Policy helps organizations enforce and assess rules for Azure resources. Policies can require specific configurations, restrict certain resource types or locations, and evaluate whether resources comply with organizational standards. This makes Policy useful for governance and regulatory requirements. Azure Advisor provides recommendations rather than enforcing rules, Monitor focuses on telemetry, and Marketplace provides third-party and Microsoft solutions. Azure Policy is therefore the appropriate service when an organization needs to establish and enforce standards across its Azure environment.

Question 269

Which Azure service can provide private dedicated connectivity between an organization’s on-premises network and Azure?

1. Azure VPN Gateway
2. Azure ExpressRoute
3. Azure Traffic Manager
4. Azure Application Gateway

Correct Answer: 2

Explanation

Azure ExpressRoute provides a private connection between an organization’s network and Microsoft cloud services. Instead of sending traffic through the public internet, ExpressRoute uses connectivity provided by a supported connectivity provider. This can provide more predictable network performance and support enterprise hybrid connectivity requirements. VPN Gateway can also connect networks securely, but it generally uses encrypted connections over the internet or supported network paths. Traffic Manager provides DNS-based routing, while Application Gateway manages application traffic. ExpressRoute is therefore appropriate for dedicated private connectivity.

Question 270

Which Azure service can provide encrypted connectivity between an on-premises network and an Azure virtual network over the public internet?

1. Azure VPN Gateway
2. Azure Service Bus
3. Azure Data Box
4. Azure CDN

Correct Answer: 1

Explanation

Azure VPN Gateway provides encrypted network connectivity between Azure virtual networks and other networks, including on-premises environments. A site-to-site VPN can use the public internet while protecting traffic through encryption. This makes VPN Gateway a common choice for organizations that need secure hybrid connectivity without establishing a dedicated private circuit. Service Bus provides messaging, Data Box supports offline data transfer, and CDN improves content delivery. VPN Gateway is therefore the appropriate Azure service for establishing an encrypted connection between an on-premises network and Azure.

Question 271

Which Azure service is designed to help detect and respond to security threats across cloud resources?

1. Azure Service Health
2. Microsoft Defender for Cloud
3. Azure Pricing Calculator
4. Azure Storage Explorer

Correct Answer: 2

Explanation

Microsoft Defender for Cloud provides security management and threat protection capabilities for cloud resources. It can help organizations assess security posture, identify vulnerabilities, receive security recommendations, and detect certain threats across supported environments. Service Health focuses on Azure service incidents and planned maintenance rather than security threats. Pricing Calculator estimates costs, while Storage Explorer is a management tool for storage resources. Defender for Cloud is therefore the appropriate service when an organization needs capabilities for improving security posture and protecting supported cloud workloads.

Question 272

Which Azure service provides centralized application performance monitoring and telemetry for supported applications?

1. Azure Application Insights
2. Azure Resource Manager
3. Azure Data Box
4. Azure Policy

Correct Answer: 1

Explanation

Azure Application Insights is an application performance monitoring capability within Azure Monitor. It can collect telemetry that helps developers and administrators understand application performance, availability, failures, and user interactions. This information can be used to investigate errors and identify performance problems in supported applications. Azure Resource Manager manages Azure resources, Data Box supports physical data transfer, and Policy provides governance. Application Insights is therefore the appropriate service when an organization needs detailed application-level telemetry and performance monitoring.

Question 273

Which Azure feature allows administrators to organize resources for identification, management, and cost analysis without changing the resource hierarchy?

1. Resource Locks
2. Tags
3. Management Groups
4. Availability Zones

Correct Answer: 2

Explanation

Azure tags are name-value pairs that can be assigned to resources to help organize and identify them. Organizations can use tags to record information such as department, environment, application, project, or cost center. Tags can support reporting and cost analysis without changing the actual resource hierarchy. Resource locks protect resources from accidental actions, management groups organize subscriptions, and availability zones provide physical separation within regions. Tags are therefore the appropriate feature for adding organizational metadata to Azure resources.

Question 274

Which Azure storage redundancy option replicates data across three availability zones in a single Azure region?

1. LRS
2. GRS
3. ZRS
4. RA-GRS

Correct Answer: 3

Explanation

Zone-redundant storage, or ZRS, replicates data synchronously across multiple availability zones within a single Azure region. Because the copies are placed in separate physical locations within the region, ZRS can help protect data against failures affecting an individual availability zone. LRS keeps copies within a single physical location, while GRS replicates data to a secondary region. RA-GRS provides read access to the secondary region in addition to geo-replication. ZRS is therefore the correct choice for zone-level redundancy within one region.

Question 275

Which Azure storage redundancy option replicates data to a secondary geographic region?

1. LRS
2. ZRS
3. GRS
4. Premium SSD

Correct Answer: 3

Explanation

Geo-redundant storage, or GRS, replicates Azure Storage data to a secondary geographic region. This provides protection against a major regional failure and can improve data durability across geographic locations. LRS maintains copies within a single physical location, while ZRS replicates data across availability zones in the primary region. Premium SSD refers to a disk performance option rather than a storage redundancy model. GRS is therefore the appropriate choice when an organization wants storage replication across separate Azure geographic regions.

Question 276

Which Azure service is designed to transfer very large amounts of data to Azure using physical devices rather than network transfer?

1. Azure Data Box
2. Azure Functions
3. Azure Monitor
4. Azure Firewall

Correct Answer: 1

Explanation

Azure Data Box provides physical devices that organizations can use to transfer large amounts of data to and from Azure. Instead of sending all data over a network connection, an organization can copy data to the device and send it to Microsoft for transfer into Azure. This can be useful when network bandwidth is limited or when the data volume is extremely large. Azure Functions provides serverless compute, Monitor provides telemetry, and Firewall provides network security. Data Box is therefore appropriate for large-scale offline data transfer.

Question 277

Which Azure service provides a distributed NoSQL database designed for globally distributed applications?

1. Azure SQL Database
2. Azure Cosmos DB
3. Azure Files
4. Azure Queue Storage

Correct Answer: 2

Explanation

Azure Cosmos DB is a globally distributed NoSQL database service designed for applications that require flexible data models, low-latency access, and geographic distribution. It supports distributed application scenarios where data may need to be available across multiple locations. Azure SQL Database is a relational database service, Azure Files provides managed file shares, and Queue Storage provides messaging. Cosmos DB is therefore the appropriate choice when an application requires a highly scalable, globally distributed NoSQL database platform.

Question 278

Which Azure service provides analytics capabilities for processing large-scale data and supporting data warehousing workloads?

1. Azure Synapse Analytics
2. Azure Bastion
3. Azure Key Vault
4. Azure VPN Gateway

Correct Answer: 1

Explanation

Azure Synapse Analytics is an analytics service designed to support large-scale data processing, data warehousing, and analytical workloads. It brings together capabilities for querying and analyzing data from various sources and can support organizations in building data-driven solutions. Bastion provides secure virtual machine access, Key Vault manages sensitive information, and VPN Gateway provides secure network connectivity. Synapse Analytics is therefore the appropriate Azure service when an organization needs a platform for large-scale analytics and data warehousing scenarios.

Question 279

Which Azure service can process and analyze real-time streams of data?

1. Azure Data Box
2. Azure Stream Analytics
3. Azure Resource Manager
4. Azure Advisor

Correct Answer: 2

Explanation

Azure Stream Analytics is a managed service designed to process and analyze real-time streaming data. It can consume event streams, apply queries and transformations, and produce results for downstream applications or services. Common scenarios include analyzing telemetry, monitoring devices, processing application events, and identifying patterns in incoming data. Data Box is designed for physical data transfer, Resource Manager manages Azure resources, and Advisor provides recommendations. Stream Analytics is therefore the appropriate service for real-time processing of continuously arriving data streams.

Question 280

Which Azure concept refers to the contractual commitment regarding the availability and performance of a service?

1. Service Health
2. Service Level Agreement
3. Azure Policy
4. Resource Lock

Correct Answer: 2

Explanation

A Service Level Agreement, or SLA, defines Microsoft’s contractual commitments regarding the availability or performance of an Azure service under specified conditions. SLAs help customers understand expected service reliability and the remedies that may apply if Microsoft’s commitments are not met. Service Health provides information about service incidents and maintenance, while Azure Policy manages governance and resource locks help prevent accidental changes. Therefore, when the question refers to a contractual commitment concerning service availability or performance, the correct concept is the Service Level Agreement.