View Full Microsoft AZ-900 Exam Dumps and Practice Test Dumps.

 

Question 381

Which Azure tool allows users to run Azure CLI and PowerShell commands directly from a browser?

1. Azure Cloud Shell
2. Azure Marketplace
3. Azure Advisor
4. Azure Monitor

Correct Answer: 1

Explanation

Azure Cloud Shell provides an interactive command-line environment that can be accessed through a web browser. It supports both Azure CLI and Azure PowerShell, allowing administrators and developers to manage Azure resources without installing command-line tools locally. Cloud Shell can be accessed through the Azure portal and other supported Azure interfaces. Marketplace provides software solutions, Advisor provides recommendations, and Monitor handles monitoring and telemetry. Azure Cloud Shell is therefore the appropriate option when users need browser-based access to command-line management tools.

Question 382

Which Azure management option is specifically designed for scripting and automation using PowerShell commands?

1. Azure Portal
2. Azure PowerShell
3. Azure Storage Explorer
4. Azure Service Health

Correct Answer: 2

Explanation

Azure PowerShell is a collection of PowerShell commands and modules designed to manage Azure resources through scripts and command-line operations. It is particularly useful for automation because administrators can repeatedly execute tasks without manually navigating through the Azure portal. Azure Portal provides a graphical interface, Storage Explorer focuses on storage management, and Service Health provides information about Azure service issues. Azure PowerShell is therefore the appropriate management option when administrators prefer PowerShell-based automation and scripting.

Question 383

Which Azure management tool is a command-line interface designed specifically for managing Azure resources?

1. Microsoft Entra ID
2. Azure Advisor
3. Azure CLI
4. Azure Service Bus

Correct Answer: 3

Explanation

Azure CLI is a cross-platform command-line interface that allows users to create, configure, monitor, and manage Azure resources through commands. It can run on Windows, Linux, macOS, and supported cloud environments. Azure CLI is useful for scripting repetitive administrative tasks and integrating Azure operations into automation workflows. Microsoft Entra ID manages identities, Advisor provides recommendations, and Service Bus provides messaging capabilities. Azure CLI is therefore the correct choice when users need command-line management of Azure resources.

Question 384

Which Azure feature provides a centralized interface for viewing and managing Azure resources through a graphical user interface?

1. Azure CLI
2. Azure PowerShell
3. Azure Portal
4. Azure Resource Manager template

Correct Answer: 3

Explanation

Azure Portal is a web-based graphical interface that provides centralized access to Azure services and resources. Users can create and configure resources, review resource properties, monitor services, manage access, and perform many administrative tasks through the portal. Azure CLI and Azure PowerShell are command-line management options, while Resource Manager templates provide infrastructure deployment through declarative definitions. Azure Portal is therefore the most suitable option when users want to manage Azure resources through an interactive graphical interface rather than commands or templates.

Question 385

Which Azure feature allows infrastructure to be described in a declarative format so that deployments can be repeated consistently?

1. Azure Monitor
2. Azure Resource Manager templates
3. Azure Service Health
4. Azure Cost Management

Correct Answer: 2

Explanation

Azure Resource Manager templates allow Azure infrastructure and configuration to be described declaratively. Instead of manually creating each resource, administrators can define the desired environment in a template and deploy it repeatedly. This supports consistent and repeatable infrastructure deployment and can reduce configuration errors. Azure Monitor focuses on monitoring, Service Health reports Azure platform events, and Cost Management tracks spending. Resource Manager templates are therefore appropriate when an organization wants to automate infrastructure deployment using a defined configuration.

Question 386

Which Azure service provides a browser-based environment where developers can create and test applications without managing the underlying operating system?

1. Azure App Service
2. Azure Virtual Machines
3. Azure Data Box
4. Azure ExpressRoute

Correct Answer: 1

Explanation

Azure App Service is a platform-as-a-service offering that allows developers to host web applications, APIs, and supported application workloads without managing the underlying operating system infrastructure. Microsoft manages much of the platform maintenance, while developers can concentrate on application development and deployment. Virtual Machines provide greater infrastructure control but require more management. Data Box is designed for physical data transfer, and ExpressRoute provides private connectivity to Azure. App Service is therefore the appropriate choice for managed application hosting without direct operating system administration.

Question 387

Which Azure service is designed to provide a managed platform for building and running containerized applications without requiring direct management of the underlying container orchestration infrastructure?

1. Azure Virtual Machines
2. Azure Container Apps
3. Azure DNS
4. Azure Storage Explorer

Correct Answer: 2

Explanation

Azure Container Apps is a managed platform designed for running containerized applications while reducing the infrastructure management required from developers and administrators. It supports modern application patterns such as microservices, APIs, and event-driven workloads. Users can focus on application containers rather than managing the underlying servers and orchestration infrastructure themselves. Virtual Machines require more infrastructure management, DNS provides name resolution, and Storage Explorer manages storage resources. Azure Container Apps is therefore the most suitable option for managed container application hosting.

Question 388

Which Azure concept refers to separating users’ identity verification from determining what resources they are permitted to access?

1. Authentication and authorization
2. Geographic redundancy
3. Data replication
4. Resource scaling

Correct Answer: 1

Explanation

Authentication verifies the identity of a user, application, or service, while authorization determines what that authenticated identity is allowed to access or perform. Azure uses identity and access management capabilities to support both processes. For example, a user may successfully authenticate with Microsoft Entra ID but still require appropriate permissions before accessing a specific Azure resource. Geographic redundancy, replication, and scaling address infrastructure and availability concerns. Authentication and authorization are therefore the concepts that distinguish identity verification from permission management.

Question 389

Which Azure networking feature can control inbound and outbound network traffic at the subnet or network interface level?

1. Azure Front Door
2. Network Security Group
3. Azure Traffic Manager
4. Azure DNS

Correct Answer: 2

Explanation

A Network Security Group, or NSG, contains security rules that can allow or deny inbound and outbound network traffic associated with supported Azure network resources. NSGs can be associated with subnets or network interfaces, helping organizations control traffic according to source, destination, port, and protocol. Front Door provides global application delivery, Traffic Manager performs DNS-based traffic routing, and Azure DNS provides name resolution. A Network Security Group is therefore the appropriate feature for controlling network traffic at the subnet or network interface level.

Question 390

Which Azure networking capability allows a private connection to a supported Azure service through a private endpoint in a virtual network?

1. Public IP address
2. Private Endpoint
3. Azure CDN
4. Azure Load Balancer

Correct Answer: 2

Explanation

An Azure Private Endpoint creates a private network interface within a virtual network that connects privately to supported Azure services. Traffic can remain on private connectivity rather than requiring access through a publicly exposed endpoint. This can help organizations improve network isolation and reduce exposure to the public internet. Public IP addresses provide public connectivity, CDN improves content delivery, and Load Balancer distributes traffic. A Private Endpoint is therefore the appropriate Azure networking capability when private access to supported services is required.

Question 391

Which Azure service provides DNS hosting and name resolution for domains?

1. Azure DNS
2. Azure Backup
3. Azure Monitor
4. Azure Files

Correct Answer: 1

Explanation

Azure DNS is a hosting service for DNS domains that uses Azure’s infrastructure to provide name resolution. DNS translates human-readable domain names into information that applications and network clients can use to locate services. Organizations can manage DNS records and zones through Azure management tools. Azure Backup protects data, Monitor collects telemetry, and Azure Files provides managed file shares. Azure DNS is therefore the appropriate service when an organization needs to host and manage DNS zones and records within Azure.

Question 392

Which Azure service can provide a private dedicated connection between an organization’s on-premises network and Azure without traversing the public internet?

1. Azure VPN Gateway
2. Azure ExpressRoute
3. Azure Traffic Manager
4. Azure CDN

Correct Answer: 2

Explanation

Azure ExpressRoute provides a dedicated private connection between an organization’s network and Microsoft cloud services. Unlike a typical internet-based connection, ExpressRoute uses connectivity provided through supported networking providers or exchange locations. This can offer more predictable network performance and private connectivity for suitable enterprise scenarios. VPN Gateway can also provide secure connectivity, but it commonly uses encrypted connections over the internet. Traffic Manager manages traffic routing, while CDN distributes content. ExpressRoute is therefore the correct choice for dedicated private connectivity to Azure.

Question 393

Which Azure service can help organizations discover opportunities to improve reliability, security, performance, and cost efficiency?

1. Azure Resource Health
2. Azure Advisor
3. Azure DNS
4. Azure Data Box

Correct Answer: 2

Explanation

Azure Advisor provides personalized recommendations that can help organizations optimize their Azure environments. Its recommendations can address areas such as cost, security, reliability, operational excellence, and performance. These recommendations are based on information about resources and usage patterns within the environment. Resource Health focuses on the status of individual resources, DNS provides name resolution, and Data Box supports large-scale physical data transfer. Azure Advisor is therefore the appropriate service when administrators want recommendations for improving their Azure deployments.

Question 394

Which Azure service is primarily used to collect and analyze metrics, logs, and other telemetry from Azure resources and applications?

1. Azure Monitor
2. Azure Marketplace
3. Azure Policy
4. Azure Key Vault

Correct Answer: 1

Explanation

Azure Monitor collects and analyzes telemetry from Azure resources, applications, and other supported environments. It can provide metrics, logs, alerts, and other monitoring capabilities that help administrators understand resource performance and identify potential issues. Marketplace provides software and services, Policy enforces organizational rules, and Key Vault manages secrets and cryptographic keys. Azure Monitor is therefore the appropriate service when an organization needs centralized monitoring and analysis of operational data from Azure resources and applications.

Question 395

Which Azure storage feature helps protect data by retaining deleted blobs for a configurable period so they can be restored?

1. Storage tiers
2. Blob soft delete
3. Azure Files
4. Data Box

Correct Answer: 2

Explanation

Blob soft delete helps protect Azure Blob Storage data from accidental deletion or overwrite. When enabled, deleted blobs can remain recoverable for a configured retention period before they are permanently removed. This provides an additional layer of data protection and can help organizations recover from accidental operations or certain application errors. Storage tiers control how frequently accessed data is stored, Azure Files provides managed file shares, and Data Box supports physical data transfer. Blob soft delete is therefore the appropriate feature for temporary recovery of deleted blobs.

Question 396

Which Azure service provides managed file shares that can be accessed using common file-sharing protocols?

1. Azure Blob Storage
2. Azure Queue Storage
3. Azure Files
4. Azure Table Storage

Correct Answer: 3

Explanation

Azure Files provides fully managed cloud file shares that can be accessed by applications and users through supported file-sharing protocols. It is useful when workloads require a shared file system that can be accessed by multiple machines or applications. Blob Storage is designed primarily for object storage, Queue Storage provides message storage, and Table Storage provides NoSQL key-value data storage. Azure Files is therefore the appropriate Azure storage service when applications require managed shared file storage.

Question 397

Which Azure concept describes the ability to increase or decrease resources automatically according to workload demand?

1. Availability
2. Scalability
3. Elasticity
4. Redundancy

Correct Answer: 3

Explanation

Elasticity describes the ability of a cloud environment to dynamically increase or decrease resources as workload demand changes. For example, an application may require additional compute resources during periods of heavy traffic and fewer resources when demand decreases. This can help organizations maintain performance while avoiding unnecessary resource consumption during quieter periods. Scalability generally refers to the ability to increase capacity to handle greater workloads, while availability and redundancy focus on service continuity. Elasticity specifically emphasizes automatic adjustment based on changing demand.

Question 398

Which Azure pricing concept means customers are charged according to the resources and services they actually consume?

1. Consumption-based pricing
2. Fixed hardware ownership
3. Capital expenditure
4. Perpetual licensing

Correct Answer: 1

Explanation

Consumption-based pricing means customers are generally charged according to the amount of Azure services and resources they use. This model allows organizations to align cloud spending more closely with actual consumption rather than purchasing and maintaining physical infrastructure in advance. It can be particularly useful when workloads change over time because resources can be added or removed as needed. Capital expenditure relates to upfront infrastructure investment, while fixed hardware ownership and perpetual licensing describe different traditional purchasing approaches. Consumption-based pricing is therefore a key cloud pricing concept.

Question 399

Which Azure concept allows an organization to estimate the cost difference between running workloads on-premises and in Azure?

1. Azure Service Health
2. Total Cost of Ownership calculator
3. Azure Resource Health
4. Azure Network Watcher

Correct Answer: 2

Explanation

The Total Cost of Ownership, or TCO, calculator helps organizations estimate and compare costs associated with running workloads in their existing environment versus using Azure. It can consider factors such as servers, storage, networking, and other infrastructure-related expenses. This comparison can help organizations evaluate potential financial benefits of cloud migration before making a decision. Service Health monitors Azure platform events, Resource Health reports individual resource status, and Network Watcher provides network monitoring tools. The TCO calculator is therefore the appropriate cost comparison tool.

Question 400

Which Azure feature allows an organization to apply rules that can restrict or control how resources are configured across its environment?

1. Azure Policy
2. Azure Advisor
3. Azure Monitor
4. Azure Marketplace

Correct Answer: 1

Explanation

Azure Policy allows organizations to define and enforce rules for Azure resources. Policies can help ensure that resources comply with organizational requirements, such as permitted locations, required configurations, or allowed resource types. This supports governance and helps maintain consistency across cloud environments. Advisor provides recommendations rather than enforcing configuration rules, Monitor collects telemetry, and Marketplace provides third-party and Microsoft solutions. Azure Policy is therefore the appropriate feature when an organization needs to enforce or audit resource configuration requirements across its Azure environment.