View Full Microsoft AZ-900 Exam Dumps and Practice Test Dumps.

 

Question 241

Which Azure service provides a managed platform for hosting web applications and APIs?

1. Azure App Service
2. Azure Blob Storage
3. Azure Event Hubs
4. Azure VPN Gateway

Correct Answer: 1

Explanation

Azure App Service is a platform-as-a-service offering designed for hosting web applications, APIs, and other supported application workloads. It allows organizations to deploy applications without managing the underlying physical infrastructure or operating system. App Service can provide capabilities such as scaling, authentication, deployment integration, and custom domains. Blob Storage is used for object storage, Event Hubs handles event ingestion, and VPN Gateway provides network connectivity. App Service is therefore a suitable choice when an organization wants managed application hosting while reducing infrastructure administration responsibilities.

Question 242

Which Azure service provides centralized monitoring of metrics, logs, and application telemetry?

1. Azure Policy
2. Azure Monitor
3. Azure Advisor
4. Azure Marketplace

Correct Answer: 2

Explanation

Azure Monitor collects and analyzes telemetry from Azure resources, applications, and supported environments. It can provide metrics, logs, alerts, and diagnostic information that help administrators understand resource performance and identify operational problems. Organizations can use Monitor to create alerts when specific conditions occur and investigate issues using collected data. Azure Policy focuses on governance, Advisor provides recommendations, and Marketplace provides access to software and solutions. Azure Monitor is therefore the appropriate service when an organization needs centralized monitoring and operational visibility.

Question 243

Which Azure service can provide recommendations for improving the security, reliability, performance, and cost efficiency of resources?

1. Azure Advisor
2. Azure DNS
3. Azure Files
4. Azure Service Bus

Correct Answer: 1

Explanation

Azure Advisor analyzes Azure resources and provides personalized recommendations across several areas, including cost, performance, reliability, and security. These recommendations can help administrators identify possible improvements and optimize their Azure environment. Advisor does not replace dedicated security, monitoring, or governance services, but it can provide useful guidance based on resource configurations and usage. Azure DNS handles name resolution, Azure Files provides shared file storage, and Service Bus provides messaging. Azure Advisor is therefore the service designed specifically for broad optimization recommendations.

Question 244

Which Azure service provides secure access to virtual machines through the Azure portal without requiring public IP addresses on the virtual machines?

1. Azure ExpressRoute
2. Azure Bastion
3. Azure Front Door
4. Azure Event Grid

Correct Answer: 2

Explanation

Azure Bastion provides secure browser-based access to Azure virtual machines through the Azure portal. It allows administrators to connect to supported virtual machines using RDP or SSH without exposing their management ports directly to the public internet. This can reduce the attack surface associated with publicly accessible administrative endpoints. ExpressRoute provides private network connectivity, Front Door provides global application delivery, and Event Grid provides event routing. Azure Bastion is therefore the appropriate service for secure administrative access to Azure virtual machines without requiring public IP addresses on those machines.

Question 245

Which Azure service provides centralized governance across multiple Azure subscriptions?

1. Azure Management Groups
2. Azure Blob Storage
3. Azure Functions
4. Azure CDN

Correct Answer: 1

Explanation

Azure management groups provide an organizational hierarchy above subscriptions. They allow organizations to group multiple subscriptions and apply governance, access controls, and policies consistently across those subscriptions. This is especially useful for large organizations that have separate subscriptions for departments, environments, projects, or business units. Blob Storage provides object storage, Functions provides serverless compute, and CDN improves content delivery. Management groups are therefore the appropriate Azure feature when an organization needs to manage and govern multiple subscriptions from a higher-level scope.

Question 246

Which Azure service provides a managed message queue for decoupling application components?

1. Azure Queue Storage
2. Azure Key Vault
3. Azure Monitor
4. Azure Virtual Network

Correct Answer: 1

Explanation

Azure Queue Storage provides a simple, scalable messaging service that can help decouple different components of an application. One component can place messages into a queue while another component retrieves and processes them later. This asynchronous design can improve application responsiveness and help handle temporary differences between producers and consumers. Key Vault protects secrets, Monitor provides telemetry, and Virtual Network provides network isolation and connectivity. Queue Storage is therefore a suitable choice when an application needs straightforward asynchronous messaging between loosely coupled components.

Question 247

Which Azure service provides private connectivity to supported Azure services through a private endpoint?

1. Azure Traffic Manager
2. Azure Private Link
3. Azure Advisor
4. Azure Service Health

Correct Answer: 2

Explanation

Azure Private Link enables private connectivity to supported Azure services and other supported services through private endpoints. A private endpoint uses a private IP address within an Azure virtual network, allowing applications to access services without using a public endpoint for that connection. This can improve network isolation and help reduce exposure to public networks. Traffic Manager provides DNS-based routing, Advisor provides recommendations, and Service Health reports platform events. Azure Private Link is therefore appropriate when an organization needs private network access to supported services.

Question 248

Which Azure service provides a scalable object storage solution for unstructured data?

1. Azure SQL Database
2. Azure Blob Storage
3. Azure Service Bus
4. Azure Files

Correct Answer: 2

Explanation

Azure Blob Storage is a scalable object storage service designed for unstructured data such as images, videos, documents, backups, and logs. It can store large amounts of data and supports different access tiers to help organizations manage storage costs according to data access patterns. Azure SQL Database provides relational database capabilities, Service Bus provides enterprise messaging, and Azure Files provides managed file shares. Blob Storage is therefore the appropriate choice when an application needs highly scalable storage for files and other unstructured objects.

Question 249

Which Azure service provides a fully managed relational database service based on SQL Server technologies?

1. Azure Cosmos DB
2. Azure SQL Database
3. Azure Table Storage
4. Azure Queue Storage

Correct Answer: 2

Explanation

Azure SQL Database is a fully managed relational database service based on Microsoft SQL technologies. It allows organizations to run relational database workloads without managing much of the underlying physical infrastructure and platform maintenance. Azure SQL Database supports SQL queries, structured data, and transactional application workloads. Cosmos DB is primarily designed for NoSQL scenarios, Table Storage provides NoSQL key-value storage, and Queue Storage provides messaging. Azure SQL Database is therefore the appropriate choice for applications that require a managed relational SQL database service.

Question 250

Which Azure service can provide global DNS-based traffic routing between multiple application endpoints?

1. Azure Traffic Manager
2. Azure Files
3. Azure Managed Disks
4. Azure Key Vault

Correct Answer: 1

Explanation

Azure Traffic Manager is a DNS-based traffic routing service that can direct users to different application endpoints according to configured routing methods. It can support scenarios involving multiple regions and endpoints and can help improve availability and responsiveness by directing users to appropriate locations. Azure Files provides shared file storage, Managed Disks provide virtual machine disk storage, and Key Vault manages secrets and keys. Traffic Manager is therefore the correct choice when DNS-based routing across multiple application endpoints is required.

Question 251

Which Azure service provides a managed platform for running containerized workloads without requiring management of the underlying servers?

1. Azure Container Instances
2. Azure DNS
3. Azure Policy
4. Azure Key Vault

Correct Answer: 1

Explanation

Azure Container Instances allows organizations to run containers directly in Azure without managing virtual machines or a full container orchestration platform. It is useful for workloads that require quick container deployment, short-lived processing, batch tasks, or simple containerized applications. Azure DNS provides name resolution, Policy provides governance, and Key Vault protects sensitive information. Container Instances is therefore an appropriate option when an organization wants to run containers while minimizing infrastructure administration and without requiring the capabilities of a full Kubernetes environment.

Question 252

Which Azure service helps organizations manage and govern servers and Kubernetes clusters running outside Azure?

1. Azure Arc
2. Azure Functions
3. Azure CDN
4. Azure Queue Storage

Correct Answer: 1

Explanation

Azure Arc extends Azure management capabilities to supported resources running outside Azure, including on-premises servers and Kubernetes clusters. It can help organizations apply Azure management, governance, and policy capabilities across hybrid and multicloud environments. This provides a more consistent management approach when workloads are distributed across multiple locations or cloud providers. Azure Functions provides serverless compute, CDN improves content delivery, and Queue Storage provides messaging. Azure Arc is therefore the appropriate service for managing supported external resources through Azure-based management capabilities.

Question 253

Which Azure service helps organizations estimate costs for Azure resources before deploying them?

1. Azure Monitor
2. Azure Pricing Calculator
3. Azure Service Health
4. Azure Bastion

Correct Answer: 2

Explanation

Azure Pricing Calculator helps organizations estimate the expected cost of Azure services before deploying a solution. Users can select services and configure factors such as region, quantity, usage, and other relevant options to create an estimated pricing scenario. This can help organizations compare architecture choices and identify potential cost drivers during planning. Azure Monitor focuses on telemetry, Service Health reports Azure platform events, and Bastion provides secure virtual machine access. Pricing Calculator is therefore the appropriate tool for estimating Azure costs before resources are deployed.

Question 254

Which Azure service provides centralized analysis and management of actual Azure spending?

1. Azure Cost Management
2. Azure Policy
3. Azure Event Grid
4. Azure DNS

Correct Answer: 1

Explanation

Azure Cost Management provides tools for monitoring and analyzing actual cloud spending. Organizations can review costs across subscriptions and resources, identify spending trends, create budgets, and monitor whether spending is approaching defined limits. This helps teams maintain financial visibility and improve cost management practices. Pricing Calculator is generally used to estimate costs before deployment, while Policy manages governance, Event Grid routes events, and DNS handles name resolution. Azure Cost Management is therefore the appropriate service for analyzing and controlling actual Azure expenditures.

Question 255

Which Azure service provides a managed platform for hosting code that runs in response to events?

1. Azure Virtual Machines
2. Azure Functions
3. Azure Managed Disks
4. Azure ExpressRoute

Correct Answer: 2

Explanation

Azure Functions provides serverless compute that allows developers to execute code in response to events or triggers. Supported triggers can include HTTP requests, timers, messages, and events generated by other services. The platform manages much of the underlying infrastructure and can scale compute resources according to workload requirements. Virtual Machines provide infrastructure-level control, Managed Disks provide persistent disk storage, and ExpressRoute provides private connectivity. Azure Functions is therefore the appropriate service for lightweight, event-driven code that does not require direct server management.

Question 256

Which Azure storage tier is generally intended for data that is accessed less frequently than data in the Hot tier?

1. Archive
2. Cool
3. Premium
4. Hot

Correct Answer: 2

Explanation

The Cool access tier is intended for blob data that is accessed less frequently than data stored in the Hot tier. It can help reduce storage costs when data does not need to be accessed regularly, although access and transaction costs can differ from those of the Hot tier. Archive is designed for data that is rarely accessed and can tolerate higher retrieval latency. Premium storage is intended for high-performance scenarios. The Cool tier is therefore appropriate for data that remains available but is accessed less frequently than active Hot-tier data.

Question 257

Which Azure service provides a managed service for storing and retrieving large numbers of messages using queues?

1. Azure Queue Storage
2. Azure Cosmos DB
3. Azure Key Vault
4. Azure Application Gateway

Correct Answer: 1

Explanation

Azure Queue Storage is a scalable cloud messaging service that stores messages until an application is ready to process them. It can help decouple application components and support asynchronous processing. Queue-based architectures can improve responsiveness by allowing producers and consumers to operate independently. Cosmos DB provides NoSQL database capabilities, Key Vault manages secrets and keys, and Application Gateway provides application-layer traffic management. Queue Storage is therefore the appropriate service when an application needs a simple and scalable mechanism for storing messages for later processing.

Question 258

Which Azure networking service provides application-layer routing and can integrate with a Web Application Firewall?

1. Azure Load Balancer
2. Azure Application Gateway
3. Azure VPN Gateway
4. Azure Traffic Manager

Correct Answer: 2

Explanation

Azure Application Gateway is a regional web traffic load balancer that operates at the application layer. It can provide features such as HTTP and HTTPS traffic routing, URL-based routing, and integration with Web Application Firewall capabilities. This makes it useful for web applications that need intelligent application-level traffic management and protection. Load Balancer operates primarily at the network and transport layers, VPN Gateway provides secure network connectivity, and Traffic Manager performs DNS-based routing. Application Gateway is therefore the best choice for application-layer web traffic management.

Question 259

Which Azure service provides a global application entry point and can accelerate web traffic for users in different geographic locations?

1. Azure Front Door
2. Azure Queue Storage
3. Azure Managed Disks
4. Azure Table Storage

Correct Answer: 1

Explanation

Azure Front Door provides a global application delivery service that can act as an entry point for web applications. It uses Microsoft’s global network to route traffic and can help improve application performance for users in different geographic locations. Front Door supports capabilities such as global routing and integration with web application security features in supported configurations. Queue Storage provides messaging, Managed Disks provide virtual machine storage, and Table Storage provides NoSQL data storage. Front Door is therefore appropriate for globally distributed web applications requiring intelligent traffic delivery.

Question 260

Which security principle recommends using multiple independent security controls to protect Azure resources?

1. Least privilege
2. Defense in depth
3. Elasticity
4. Scalability

Correct Answer: 2

Explanation

Defense in depth is a security strategy that uses multiple layers of protection rather than depending on a single security control. Different layers can include identity protection, network controls, application security, data protection, monitoring, and physical security. If one control fails or is bypassed, additional layers can still reduce the potential impact. Least privilege focuses on limiting permissions, while elasticity and scalability concern resource capacity and workload growth. Defense in depth is therefore the security principle that emphasizes using multiple independent controls to protect systems and data.