View Full Microsoft AZ-900 Exam Dumps and Practice Test Dumps.

 

Question 201

Which Azure service provides a centralized identity platform for authentication, authorization, and access management?

1. Azure Monitor
2. Microsoft Entra ID
3. Azure Advisor
4. Azure Storage

Correct Answer: 2

Explanation

Microsoft Entra ID is Microsoft’s cloud-based identity and access management service. It helps organizations manage users, groups, applications, and access to resources. Entra ID supports capabilities such as authentication, single sign-on, multifactor authentication, and application identity management. It can integrate with Azure resources and many external applications, allowing organizations to manage access centrally. Azure Monitor focuses on telemetry, Advisor provides recommendations, and Azure Storage provides data storage. Entra ID is therefore the appropriate service for centralized identity and access management in Azure environments.

Question 202

Which Azure service allows organizations to deploy and manage resources using infrastructure-as-code templates?

1. Azure Resource Manager
2. Azure Service Health
3. Azure Bastion
4. Azure Traffic Manager

Correct Answer: 1

Explanation

Azure Resource Manager, commonly called ARM, provides the management layer for Azure resources and supports infrastructure-as-code deployments through templates. ARM templates can describe the resources and configurations required for an Azure solution, allowing deployments to be repeated consistently. This approach can reduce manual configuration and improve deployment consistency across environments. Service Health provides information about Azure platform events, Bastion provides secure VM access, and Traffic Manager handles DNS-based routing. Azure Resource Manager is therefore central to managing and deploying Azure resources in a consistent manner.

Question 203

Which Azure service provides scalable message queues that allow applications to process work asynchronously?

1. Azure Files
2. Azure Blob Storage
3. Azure Queue Storage
4. Azure SQL Database

Correct Answer: 3

Explanation

Azure Queue Storage provides a simple and scalable messaging service for storing large numbers of messages. It can help separate application components by allowing one component to place messages into a queue while another processes them later. This asynchronous approach can improve application responsiveness and help manage temporary differences between message producers and consumers. Azure Files provides file shares, Blob Storage stores objects, and SQL Database provides relational data storage. Queue Storage is therefore appropriate when an application needs straightforward asynchronous message processing.

Question 204

Which Azure service is designed to provide distributed, scalable storage for NoSQL table data?

1. Azure Table Storage
2. Azure Managed Disks
3. Azure Files
4. Azure Key Vault

Correct Answer: 1

Explanation

Azure Table Storage is a NoSQL key-value store designed for storing large amounts of structured, non-relational data. It can provide scalable storage for applications that do not require the full capabilities of a relational database. Table Storage organizes data into tables containing entities and properties rather than traditional relational rows and columns with complex relationships. Managed Disks provide storage for virtual machines, Azure Files provides file shares, and Key Vault stores sensitive information. Table Storage is therefore suitable for applications needing scalable NoSQL table-style storage.

Question 205

Which Azure networking service provides private connectivity between Azure virtual networks and on-premises networks through encrypted tunnels?

1. Azure VPN Gateway
2. Azure DNS
3. Azure Front Door
4. Azure CDN

Correct Answer: 1

Explanation

Azure VPN Gateway provides secure connectivity between Azure virtual networks and other networks, including on-premises environments. A common configuration uses a site-to-site VPN to create an encrypted tunnel over the public internet. This allows organizations to establish hybrid connectivity without requiring a dedicated private circuit. Azure DNS provides name resolution, Front Door provides global application delivery, and CDN distributes cached content. VPN Gateway is therefore appropriate when an organization needs encrypted network connectivity between Azure and an external or on-premises network.

Question 206

Which Azure service can automatically distribute traffic across healthy virtual machine instances?

1. Azure Policy
2. Azure Load Balancer
3. Azure Key Vault
4. Azure Data Box

Correct Answer: 2

Explanation

Azure Load Balancer distributes incoming network traffic across backend resources such as virtual machines. It can use health probes to determine whether backend instances are available and route traffic toward healthy resources. This supports application availability and helps prevent a single virtual machine from becoming the only point of service. Azure Policy provides governance, Key Vault manages secrets and keys, and Data Box supports physical data transfer. Load Balancer is therefore the appropriate Azure service when network traffic needs to be distributed across multiple backend instances.

Question 207

Which Azure storage redundancy option keeps multiple copies of data within a single physical location?

1. GRS
2. ZRS
3. GZRS
4. LRS

Correct Answer: 4

Explanation

Locally redundant storage, or LRS, maintains multiple copies of data within a single physical location in the primary Azure region. It is designed to protect against certain localized hardware failures but provides less geographic resilience than redundancy options that replicate data across zones or regions. ZRS replicates data across availability zones, while GRS and GZRS include geographic replication to a secondary region. LRS can be appropriate when the workload does not require protection against a regional failure and the primary goal is local redundancy at a lower storage cost.

Question 208

Which Azure service can help organizations collect security recommendations and identify potential security issues across cloud workloads?

1. Azure Defender for Cloud
2. Azure Files
3. Azure Logic Apps
4. Azure Queue Storage

Correct Answer: 1

Explanation

Microsoft Defender for Cloud provides security posture management and workload protection capabilities for cloud environments. It can assess resources against security recommendations, identify potential security weaknesses, and provide guidance for improving an organization’s security posture. It can also integrate with security capabilities that help protect workloads. Azure Files provides file storage, Logic Apps automates workflows, and Queue Storage provides messaging. Defender for Cloud is therefore the appropriate service when organizations need centralized visibility into security posture and recommendations for improving cloud workload protection.

Question 209

Which Azure service provides a managed disk storage solution for virtual machines?

1. Azure Blob Storage
2. Azure Managed Disks
3. Azure Queue Storage
4. Azure Event Hubs

Correct Answer: 2

Explanation

Azure Managed Disks provide persistent disk storage for Azure virtual machines. Microsoft manages the underlying storage resources, simplifying disk provisioning, availability, and management for virtual machine workloads. Managed Disks are available in different performance options to support varying application requirements. Blob Storage is intended for object storage, Queue Storage is designed for messaging, and Event Hubs handles large-scale event ingestion. Managed Disks are therefore the appropriate storage option when virtual machines require persistent operating system or data disks managed through Azure.

Question 210

Which cloud benefit allows an organization to use resources from a cloud provider without purchasing and maintaining the underlying physical infrastructure?

1. Resource tagging
2. Capital expenditure reduction
3. Network isolation
4. Physical ownership

Correct Answer: 2

Explanation

One major benefit of cloud computing is that organizations can use provider-managed infrastructure without purchasing and maintaining the physical hardware themselves. This can reduce upfront capital expenditure and shift spending toward operational or consumption-based models, depending on the services used. Organizations can provision resources as needed and avoid many responsibilities associated with owning physical datacenters. Resource tagging is a management feature, network isolation is a security or networking concept, and physical ownership is not a typical public cloud benefit. Reduced capital expenditure is therefore the best answer.

Question 211

Which Azure service provides event-driven serverless compute for executing code without managing virtual machines?

1. Azure Functions
2. Azure Virtual Machines
3. Azure Managed Disks
4. Azure ExpressRoute

Correct Answer: 1

Explanation

Azure Functions is a serverless compute service that allows code to execute in response to events or triggers without requiring customers to manage virtual machines. Functions can respond to HTTP requests, timers, messages, and events from supported Azure services. The serverless model allows developers to focus on application logic while Azure manages much of the underlying infrastructure. Virtual Machines provide infrastructure-level compute, Managed Disks provide storage, and ExpressRoute provides private network connectivity. Azure Functions is therefore the best choice for event-driven serverless application code.

Question 212

Which Azure service provides a managed private file-sharing solution that can be accessed by multiple systems?

1. Azure Files
2. Azure Event Grid
3. Azure Key Vault
4. Azure Service Health

Correct Answer: 1

Explanation

Azure Files provides fully managed cloud file shares that can be accessed by multiple systems using supported file-sharing protocols. It is useful for applications that require shared folders, file-based workloads, or migration from traditional file servers. Microsoft manages the underlying storage infrastructure, reducing the need to maintain physical file servers. Event Grid provides event routing, Key Vault protects secrets and keys, and Service Health provides information about Azure platform events. Azure Files is therefore the appropriate choice for managed shared file storage in Azure.

Question 213

Which Azure service helps organizations enforce consistent resource configurations and governance standards?

1. Azure Advisor
2. Azure Policy
3. Azure Monitor
4. Azure Service Bus

Correct Answer: 2

Explanation

Azure Policy enables organizations to define and enforce rules for Azure resources. Policies can help maintain consistent configurations, support compliance requirements, and prevent deployments that violate organizational standards. For example, policies can require specific tags, restrict allowed regions, or enforce certain resource configurations. Advisor provides recommendations rather than enforcement, Monitor collects telemetry, and Service Bus provides messaging. Azure Policy is therefore the appropriate governance service when organizations need to ensure that Azure resources follow defined organizational requirements.

Question 214

Which Azure service can provide recommendations to optimize Azure resource performance?

1. Azure Advisor
2. Azure VPN Gateway
3. Azure Files
4. Azure DNS

Correct Answer: 1

Explanation

Azure Advisor provides personalized recommendations that can help organizations improve the performance, reliability, security, and cost efficiency of Azure resources. Performance recommendations can identify configuration or usage patterns that may be limiting resource efficiency. Administrators can review these recommendations and decide which changes are appropriate for their workloads. VPN Gateway provides network connectivity, Azure Files provides file storage, and Azure DNS handles name resolution. Advisor is therefore the Azure service most directly associated with recommendations for improving resource performance and overall optimization.

Question 215

Which Azure concept describes a system’s ability to remain available even when individual components experience failures?

1. Scalability
2. High availability
3. Elasticity
4. Consumption-based pricing

Correct Answer: 2

Explanation

High availability refers to designing systems so that services remain accessible and operational for as much time as possible, even when individual components fail. Azure solutions can improve availability by using redundant resources, multiple instances, availability zones, and resilient architectures. Scalability concerns increasing capacity, elasticity concerns dynamically adjusting capacity according to demand, and consumption-based pricing concerns how customers are charged. High availability is therefore the concept most closely associated with minimizing service downtime and maintaining access to applications and resources.

Question 216

Which Azure service can help deliver web content faster by caching content closer to end users?

1. Azure Site Recovery
2. Azure CDN
3. Azure Policy
4. Azure Key Vault

Correct Answer: 2

Explanation

Azure Content Delivery Network, or CDN, improves content delivery by caching supported content at edge locations that are geographically closer to users. When users request cached content, it can often be delivered from a nearby edge location instead of traveling to the application’s original server. This can reduce latency and improve performance for suitable workloads. Site Recovery focuses on disaster recovery, Policy provides governance, and Key Vault manages secrets and cryptographic material. Azure CDN is therefore the appropriate service for improving the delivery speed of cacheable web content.

Question 217

Which Azure service allows organizations to create workflows that integrate different applications and services with minimal custom code?

1. Azure Logic Apps
2. Azure Managed Disks
3. Azure Load Balancer
4. Azure Bastion

Correct Answer: 1

Explanation

Azure Logic Apps provides a workflow automation platform that can connect applications, services, and data sources through triggers, actions, and connectors. It can automate processes such as sending notifications, processing approvals, synchronizing information, and responding to events. Many integrations can be created using built-in connectors, reducing the amount of custom code required. Managed Disks provide virtual machine storage, Load Balancer distributes network traffic, and Bastion provides secure administrative access. Logic Apps is therefore well suited for application integration and business process automation.

Question 218

Which Azure feature allows an organization to organize resources by adding metadata such as owner, department, or environment?

1. Resource locks
2. Tags
3. Availability zones
4. Management groups

Correct Answer: 2

Explanation

Azure tags are custom name-value pairs that can be assigned to resources to help organize and identify them. Organizations can use tags such as Owner, Department, Environment, Project, or CostCenter. Tags can support resource organization, cost analysis, reporting, and operational processes. Resource locks protect resources from deletion or modification, availability zones provide infrastructure resiliency, and management groups organize subscriptions. Tags are therefore the most appropriate feature when an organization needs to add descriptive metadata to individual Azure resources.

Question 219

Which Azure service provides information about the health of Azure services that are relevant to a customer’s resources?

1. Azure Service Health
2. Azure Functions
3. Azure Storage
4. Azure App Service

Correct Answer: 1

Explanation

Azure Service Health provides personalized information about Azure service incidents, planned maintenance, and health advisories that may affect an organization’s resources. It helps administrators understand whether Azure platform events could impact their workloads. This differs from Azure Monitor, which focuses more on resource and application telemetry. Azure Functions provides serverless compute, Storage provides data storage, and App Service provides managed application hosting. Service Health is therefore the appropriate service for receiving information about Azure platform health events relevant to an organization’s environment.

Question 220

Which Azure networking service provides a dedicated private connection between an organization’s on-premises network and Azure through a connectivity provider?

1. Azure VPN Gateway
2. Azure Traffic Manager
3. Azure ExpressRoute
4. Azure DNS

Correct Answer: 3

Explanation

Azure ExpressRoute provides private connectivity between an organization’s on-premises infrastructure and Microsoft cloud services through an ExpressRoute connectivity provider. Unlike a typical VPN connection over the public internet, ExpressRoute provides a private connection that can offer more predictable network performance and connectivity characteristics. VPN Gateway can provide encrypted connections over the public internet, Traffic Manager provides DNS-based routing, and Azure DNS provides name resolution. ExpressRoute is therefore appropriate for organizations that require private hybrid connectivity for performance, security, or compliance requirements.