View Full Microsoft AZ-900 Exam Dumps and Practice Test Dumps.

 

Question 281

Which Azure service provides a managed environment for deploying and scaling containerized applications using Kubernetes?

1. Azure Functions
2. Azure Container Instances
3. Azure Kubernetes Service
4. Azure App Service

Correct Answer: 3

Explanation

Azure Kubernetes Service, commonly called AKS, is a managed Kubernetes service that helps organizations deploy, manage, and scale containerized applications. Azure manages much of the Kubernetes control plane, reducing the operational effort required to run Kubernetes environments. AKS is useful when applications require container orchestration capabilities such as scheduling, scaling, networking, and service management. Azure Container Instances is better suited for simpler container workloads, Functions provides serverless code execution, and App Service hosts supported applications. AKS is therefore the appropriate choice for managed Kubernetes workloads.

Question 282

Which Azure service provides a cloud-based shared file system that can be accessed using standard file protocols?

1. Azure Files
2. Azure Blob Storage
3. Azure Queue Storage
4. Azure Table Storage

Correct Answer: 1

Explanation

Azure Files provides managed cloud file shares that can be accessed by applications and users through standard file-sharing protocols. It can be useful when multiple systems need access to shared files without requiring organizations to maintain traditional file servers. Blob Storage is designed for object storage, Queue Storage is intended for messaging, and Table Storage provides NoSQL key-value storage. Azure Files is therefore the appropriate choice when an organization needs a managed shared file system that can be accessed using familiar file-sharing methods.

Question 283

Which Azure service is designed to provide protection against distributed denial-of-service attacks on Azure resources?

1. Azure Firewall
2. Azure DDoS Protection
3. Azure Bastion
4. Azure Private Link

Correct Answer: 2

Explanation

Azure DDoS Protection is designed to help protect Azure resources against distributed denial-of-service attacks. It provides capabilities for detecting and mitigating certain volumetric and network-layer attacks that could overwhelm applications or network resources. Azure Firewall provides network traffic filtering, Bastion provides secure virtual machine access, and Private Link provides private connectivity to supported services. DDoS Protection is therefore the Azure service specifically focused on helping organizations defend supported resources against distributed denial-of-service attacks.

Question 284

Which Azure service provides a managed network security firewall for controlling traffic to and from Azure virtual networks?

1. Azure Firewall
2. Azure DNS
3. Azure Event Grid
4. Azure Data Box

Correct Answer: 1

Explanation

Azure Firewall is a managed, cloud-based network security service that can control and filter network traffic within and across Azure virtual networks. It supports centralized traffic filtering and can help organizations enforce network security rules without deploying and maintaining a traditional firewall appliance themselves. Azure DNS provides name resolution, Event Grid provides event routing, and Data Box is designed for physical data transfer. Azure Firewall is therefore the appropriate service when an organization needs managed network-level traffic protection and filtering in Azure.

Question 285

Which Azure networking feature divides a virtual network into smaller logical network segments?

1. Availability zones
2. Subnets
3. Resource groups
4. Management groups

Correct Answer: 2

Explanation

Subnets divide an Azure virtual network into smaller logical network segments. Organizations can use subnets to organize workloads, apply network security rules, and control traffic between different parts of a virtual network. For example, web servers, application servers, and database resources can be placed in separate subnets according to architectural and security requirements. Availability zones provide physical separation within a region, resource groups organize Azure resources, and management groups organize subscriptions. Subnets are therefore the feature used to logically segment an Azure virtual network.

Question 286

Which Azure networking capability allows two Azure virtual networks to communicate directly using the Microsoft backbone network?

1. VPN Gateway
2. Virtual network peering
3. ExpressRoute
4. Azure Front Door

Correct Answer: 2

Explanation

Virtual network peering allows two Azure virtual networks to communicate directly over Microsoft’s private backbone network. This provides low-latency connectivity between resources in the peered networks without requiring traffic to travel through the public internet. Peering can be configured between virtual networks according to supported Azure networking scenarios. VPN Gateway provides encrypted network connectivity, ExpressRoute provides private connectivity from external networks to Microsoft, and Front Door provides global application delivery. Virtual network peering is therefore the appropriate feature for direct communication between Azure virtual networks.

Question 287

Which Azure identity service can provide managed domain services such as domain join and LDAP without deploying traditional domain controllers?

1. Microsoft Entra Domain Services
2. Azure Key Vault
3. Azure Advisor
4. Azure Monitor

Correct Answer: 1

Explanation

Microsoft Entra Domain Services provides managed domain services such as domain join, Group Policy support, LDAP, and Kerberos or NTLM authentication for compatible workloads. It allows organizations to use certain traditional domain-based applications without deploying and maintaining their own domain controllers in Azure. Key Vault manages secrets and cryptographic keys, Advisor provides recommendations, and Monitor provides telemetry. Microsoft Entra Domain Services is therefore appropriate when applications require managed domain capabilities while reducing the administrative effort associated with traditional domain controllers.

Question 288

Which authentication method requires users to provide two or more forms of verification?

1. Single sign-on
2. Multi-factor authentication
3. Role-based access control
4. Resource locking

Correct Answer: 2

Explanation

Multi-factor authentication, or MFA, requires users to provide multiple forms of verification when signing in. These factors can include something the user knows, something the user has, or something the user is. Using multiple factors provides stronger protection than relying only on a password because an attacker who obtains one authentication factor may still be unable to complete the sign-in process. Single sign-on simplifies access to multiple applications, RBAC controls permissions, and resource locks protect resources from changes. MFA is therefore the correct authentication method.

Question 289

Which Azure service helps identify recommendations for reducing unnecessary cloud spending?

1. Azure Advisor
2. Azure Bastion
3. Azure DNS
4. Azure Service Bus

Correct Answer: 1

Explanation

Azure Advisor can provide cost optimization recommendations based on Azure resource usage and configuration. These recommendations can help organizations identify opportunities to reduce unnecessary spending, such as resources that may be underutilized or configurations that could be optimized. Advisor can also provide recommendations in areas such as reliability, security, and performance. Bastion provides secure virtual machine access, DNS provides name resolution, and Service Bus provides messaging. Azure Advisor is therefore the appropriate service for receiving recommendations that may help reduce Azure costs.

Question 290

Which Azure purchasing option can provide discounted pricing in exchange for committing to use a service for a specified period?

1. Azure Reservations
2. Azure Marketplace
3. Pay-as-you-go
4. Azure Free Tier

Correct Answer: 1

Explanation

Azure Reservations allow customers to commit to specific Azure resources or services for a defined term in exchange for potentially reduced pricing compared with standard pay-as-you-go rates. Reservations are useful when an organization has predictable and consistent workloads that are expected to continue over the commitment period. Pay-as-you-go provides flexible consumption-based billing without the same commitment. Azure Marketplace provides software and solutions, while the free tier provides limited free usage for eligible services. Reservations are therefore suitable for predictable workloads seeking potential cost savings.

Question 291

Which Azure pricing option allows customers to pay only for the resources they consume without making a long-term commitment?

1. Reservations
2. Pay-as-you-go
3. Dedicated Hosts
4. Savings Plan

Correct Answer: 2

Explanation

The pay-as-you-go pricing model allows customers to pay for Azure resources based on actual consumption without requiring a long-term reservation commitment. This model provides flexibility for workloads whose resource requirements may change over time. It is particularly useful for experimentation, variable workloads, or organizations that do not yet know their long-term resource requirements. Reservations and other commitment-based options can provide savings for predictable workloads, while Dedicated Hosts concern physical infrastructure placement. Pay-as-you-go is therefore the most flexible consumption-based purchasing model.

Question 292

Which Azure feature can automatically scale an application when demand changes?

1. Azure Autoscale
2. Azure Resource Lock
3. Azure Policy
4. Azure Tags

Correct Answer: 1

Explanation

Azure autoscaling capabilities allow supported resources and applications to automatically adjust capacity according to workload conditions. When demand increases, additional resources can be added to help maintain performance, while capacity can be reduced when demand falls. This helps organizations balance performance requirements and resource costs. Resource locks protect resources from accidental changes, Policy enforces governance rules, and Tags provide organizational metadata. Azure Autoscale is therefore the appropriate feature when an application needs capacity to adjust automatically as workload demand changes.

Question 293

Which Azure concept refers to keeping an application accessible and operational when failures occur?

1. Scalability
2. Availability
3. Elasticity
4. Governance

Correct Answer: 2

Explanation

Availability refers to the ability of a system or application to remain accessible and operational when users need it. Azure provides multiple capabilities that can support availability, including availability zones, redundancy, load balancing, and service-level commitments. Scalability concerns the ability to increase or decrease capacity, while elasticity focuses on dynamically adjusting resources according to demand. Governance concerns organizational rules and controls. Availability is therefore the Azure cloud concept most directly associated with keeping applications accessible despite certain failures or disruptions.

Question 294

Which Azure deployment model combines on-premises infrastructure with public cloud resources?

1. Public cloud
2. Private cloud
3. Hybrid cloud
4. Community cloud

Correct Answer: 3

Explanation

A hybrid cloud combines resources from an organization’s on-premises environment with resources hosted in a public cloud such as Azure. This model allows organizations to keep certain workloads or data in their existing infrastructure while using cloud services for scalability, modernization, or additional capabilities. A public cloud is operated by a cloud provider, while a private cloud is dedicated to a particular organization. Hybrid cloud is therefore the correct deployment model when on-premises infrastructure and public cloud resources operate together.

Question 295

Which Azure service provides a platform for discovering and purchasing third-party software solutions that can run in Azure?

1. Azure Marketplace
2. Azure Monitor
3. Azure Policy
4. Azure Storage

Correct Answer: 1

Explanation

Azure Marketplace provides a catalog of Microsoft and third-party products and services that can be deployed or integrated with Azure. Organizations can use Marketplace to discover solutions such as application software, security products, development tools, and other offerings. This can simplify procurement and deployment by providing access to solutions designed for cloud environments. Azure Monitor focuses on telemetry, Policy manages governance, and Storage provides data storage. Azure Marketplace is therefore the appropriate service for discovering and obtaining third-party software solutions for Azure.

Question 296

Which Azure concept refers to a geographic area containing one or more Azure regions?

1. Availability zone
2. Azure geography
3. Resource group
4. Subscription

Correct Answer: 2

Explanation

An Azure geography is a defined geographic area that contains one or more Azure regions. Geographies are designed with data residency, compliance, and resiliency considerations in mind. An Azure region is a specific physical location containing one or more datacenters, while an availability zone is a physically separate location within an Azure region. Resource groups organize resources, and subscriptions provide management and billing boundaries. Azure geography is therefore the correct concept for describing a broader geographic area containing one or more Azure regions.

Question 297

Which Azure feature allows organizations to use their eligible existing Windows Server licenses with Azure?

1. Azure Hybrid Benefit
2. Azure Advisor
3. Azure Free Account
4. Azure Marketplace

Correct Answer: 1

Explanation

Azure Hybrid Benefit can help eligible organizations use existing Windows Server licenses with Software Assurance or qualifying subscription benefits when running supported workloads in Azure. This can reduce licensing costs compared with paying for certain licenses as part of the Azure service. Eligibility and specific benefits depend on licensing terms and the workload involved. Azure Advisor provides recommendations, the free account offers limited introductory benefits, and Marketplace provides software solutions. Azure Hybrid Benefit is therefore the feature associated with using eligible existing licenses in Azure.

Question 298

Which Azure feature allows organizations to organize and identify resources by adding custom metadata such as department or environment?

1. Azure Policy
2. Resource Locks
3. Tags
4. Availability Zones

Correct Answer: 3

Explanation

Azure tags are custom name-value pairs that organizations can assign to resources. They can contain information such as department, project, application, environment, or cost center. Tags help organizations categorize resources and can support reporting, management, and cost analysis. Azure Policy can enforce organizational requirements, resource locks protect against accidental actions, and availability zones provide physical resiliency within a region. Tags are therefore the correct feature when the goal is to add descriptive metadata to Azure resources.

Question 299

Which Azure service provides notifications and information about planned maintenance, service issues, and health advisories affecting Azure resources?

1. Azure Advisor
2. Azure Service Health
3. Azure Cost Management
4. Azure Application Insights

Correct Answer: 2

Explanation

Azure Service Health provides personalized information about Azure service incidents, planned maintenance, and health advisories that may affect an organization’s resources. It helps customers understand whether an Azure platform issue could impact their services and provides relevant status information. Advisor provides optimization recommendations, Cost Management focuses on spending, and Application Insights monitors application telemetry. Service Health is therefore the appropriate Azure service when an organization needs information about service incidents, maintenance, and other platform health events relevant to its environment.

Question 300

Which cloud computing service model provides users with complete software applications managed by the service provider?

1. Infrastructure as a Service
2. Platform as a Service
3. Software as a Service
4. Serverless Computing

Correct Answer: 3

Explanation

Software as a Service, or SaaS, provides complete software applications that are hosted and managed by the service provider. Users generally access the application through a web browser or client without needing to manage the underlying servers, operating systems, or application infrastructure. Infrastructure as a Service provides virtualized infrastructure, while Platform as a Service provides a managed application platform for developers. Serverless computing focuses on executing code without direct server management. SaaS is therefore the model that provides complete provider-managed software applications.