View Full Microsoft AZ-900 Exam Dumps and Practice Test Dumps.

 

Question 321

Which cloud service model provides virtual machines, storage, and networking while allowing customers to manage the operating system?

1. Software as a Service
2. Platform as a Service
3. Serverless Computing
4. Infrastructure as a Service

Correct Answer: 4

Explanation

Infrastructure as a Service, or IaaS, provides fundamental computing resources such as virtual machines, storage, and networking. Customers have significant control over the operating systems and applications running on the infrastructure, while the cloud provider manages the underlying physical hardware. Platform as a Service provides a more managed application platform, while Software as a Service delivers complete applications. Serverless computing abstracts server management even further. IaaS is therefore the appropriate service model when customers need substantial control over virtualized infrastructure.

Question 322

Which Azure feature helps organizations automatically apply consistent resource configurations during deployment?

1. Azure Policy
2. Azure Resource Manager templates
3. Azure Advisor
4. Azure Service Health

Correct Answer: 2

Explanation

Azure Resource Manager templates can define Azure infrastructure declaratively so that resources and their configurations can be deployed consistently. Templates are useful for repeatable deployments because the same infrastructure definition can be used across environments. This approach reduces manual configuration and helps minimize differences between deployments. Azure Policy can enforce compliance after or during resource management, Advisor provides recommendations, and Service Health reports platform conditions. Resource Manager templates are therefore particularly useful when organizations want repeatable and consistent infrastructure deployment.

Question 323

Which Azure storage service is best suited for storing key-value data without requiring a relational database schema?

1. Azure Table Storage
2. Azure Files
3. Azure Blob Storage
4. Azure Managed Disks

Correct Answer: 1

Explanation

Azure Table Storage is a NoSQL key-value store designed for structured, non-relational data. It can store large amounts of data using entities identified by partition and row keys without requiring a traditional relational database schema. Azure Files provides managed file shares, Blob Storage stores unstructured objects, and Managed Disks provide persistent disks for virtual machines. Table Storage is therefore appropriate when an application needs scalable key-value storage without the complexity of a relational database structure.

Question 324

Which Azure feature helps ensure that only authorized users can perform specific actions on Azure resources?

1. Azure DDoS Protection
2. Azure Content Delivery Network
3. Azure Role-Based Access Control
4. Azure Storage Explorer

Correct Answer: 3

Explanation

Azure Role-Based Access Control, or RBAC, allows organizations to control who can access Azure resources and which actions they can perform. Administrators assign built-in or custom roles to users, groups, applications, or managed identities at appropriate scopes. This supports the principle of least privilege by limiting permissions to what is necessary. DDoS Protection defends against network attacks, CDN improves content delivery, and Storage Explorer manages storage resources. Azure RBAC is therefore the appropriate feature for controlling authorized actions on Azure resources.

Question 325

Which Azure service can provide a global content delivery network for distributing static content closer to users?

1. Azure VPN Gateway
2. Azure Service Bus
3. Azure Key Vault
4. Azure Content Delivery Network

Correct Answer: 4

Explanation

Azure Content Delivery Network, or CDN, caches supported content at distributed edge locations so that users can retrieve content from a location closer to them. This can reduce latency and improve the performance of websites and applications that deliver frequently accessed static content such as images, videos, scripts, and files. VPN Gateway provides secure network connectivity, Service Bus provides messaging, and Key Vault manages sensitive information. Azure CDN is therefore the appropriate service when an organization wants to distribute content efficiently to geographically dispersed users.

Question 326

Which Azure service provides a managed environment for building, training, and deploying machine learning models?

1. Azure Machine Learning
2. Azure Monitor
3. Azure Policy
4. Azure Data Box

Correct Answer: 1

Explanation

Azure Machine Learning is a managed cloud service designed to support machine learning workflows. It can help data scientists and developers prepare data, train models, manage machine learning assets, and deploy models for applications. The service supports organizations that need a structured environment for developing and operating machine learning solutions. Azure Monitor focuses on monitoring, Policy provides governance, and Data Box supports physical data transfer. Azure Machine Learning is therefore the appropriate service for building, training, and deploying machine learning models.

Question 327

Which Azure AI capability provides prebuilt APIs for tasks such as language processing, vision, and speech?

1. Azure Synapse Analytics
2. Azure AI Services
3. Azure Virtual Network
4. Azure Queue Storage

Correct Answer: 2

Explanation

Azure AI Services provides prebuilt artificial intelligence capabilities that applications can use through APIs and other supported interfaces. These capabilities can support scenarios involving vision, speech, language, decision-making, and other AI-related tasks. Using prebuilt services can reduce the need for organizations to develop machine learning models entirely from scratch. Synapse Analytics focuses on data analytics, Virtual Network provides networking, and Queue Storage provides messaging. Azure AI Services is therefore the appropriate choice for applications that need ready-to-use AI capabilities.

Question 328

Which Azure service is designed to provide private access to Azure resources from within a virtual network using private IP addresses?

1. Azure Traffic Manager
2. Azure CDN
3. Azure Private Link
4. Azure Event Hubs

Correct Answer: 3

Explanation

Azure Private Link enables private connectivity to supported Azure services and other supported services through private endpoints. A private endpoint provides a private IP address within an Azure virtual network, allowing applications to communicate with the service without relying on a public endpoint for that connection. Traffic Manager provides DNS-based traffic routing, CDN distributes cached content, and Event Hubs ingests event data. Azure Private Link is therefore the appropriate service when applications require private network access to supported services.

Question 329

Which Azure service can distribute incoming network traffic across multiple backend virtual machines?

1. Azure Load Balancer
2. Azure Key Vault
3. Azure Data Box
4. Azure Policy

Correct Answer: 1

Explanation

Azure Load Balancer distributes incoming network traffic across multiple backend resources, such as virtual machines. By distributing requests, it can help applications handle workloads more effectively and improve availability by avoiding dependence on a single backend instance. Load Balancer operates at the network and transport layers for supported scenarios. Key Vault protects secrets and keys, Data Box provides physical data transfer, and Policy manages governance. Azure Load Balancer is therefore the appropriate service when traffic needs to be distributed across multiple backend instances.

Question 330

Which Azure benefit allows organizations to avoid purchasing physical servers and other infrastructure before deployment?

1. High availability
2. Capital expenditure reduction
3. Fault tolerance
4. Data sovereignty

Correct Answer: 2

Explanation

Cloud computing can reduce the need for large upfront capital expenditures because organizations can provision Azure resources without purchasing and maintaining physical infrastructure themselves. Instead of investing heavily in servers, storage, networking equipment, and datacenters before workloads are deployed, organizations can use cloud services and pay according to applicable pricing models. High availability concerns service continuity, fault tolerance concerns resilience, and data sovereignty concerns where data is stored and governed. Capital expenditure reduction is therefore the benefit described by avoiding major upfront infrastructure purchases.

Question 331

Which Azure service provides a managed environment for running web applications without managing the underlying web servers?

1. Azure App Service
2. Azure Data Box
3. Azure Event Hubs
4. Azure Firewall

Correct Answer: 1

Explanation

Azure App Service is a platform-as-a-service offering that provides a managed environment for hosting web applications and supported APIs. The Azure platform manages much of the underlying infrastructure, allowing developers to focus on application code instead of maintaining web servers and operating systems. App Service can support deployment, scaling, authentication, and other application hosting capabilities. Data Box is for data transfer, Event Hubs handles event ingestion, and Firewall provides network security. App Service is therefore appropriate for managed web application hosting.

Question 332

Which Azure service can be used to create alerts when monitored resource metrics meet defined conditions?

1. Azure Policy
2. Azure Advisor
3. Azure Monitor
4. Azure Marketplace

Correct Answer: 3

Explanation

Azure Monitor provides monitoring capabilities that can collect metrics and logs from Azure resources and applications. It can also support alerts that notify administrators when defined conditions are met. For example, an organization can create an alert when CPU utilization remains above a selected threshold. Azure Policy is used for governance, Advisor provides recommendations, and Marketplace provides software solutions. Azure Monitor is therefore the appropriate service when administrators need to monitor resource conditions and receive notifications based on defined thresholds.

Question 333

Which Azure storage feature automatically moves blob data between access tiers based on defined rules?

1. Azure Storage lifecycle management
2. Azure Resource Manager
3. Azure Service Health
4. Azure Bastion

Correct Answer: 1

Explanation

Azure Storage lifecycle management allows organizations to create rules that automatically move blob data between access tiers or delete data when it reaches defined conditions. This can help optimize storage costs by moving less frequently accessed data to more economical tiers and removing data that is no longer needed. Resource Manager manages resources, Service Health provides platform health information, and Bastion provides secure virtual machine access. Storage lifecycle management is therefore the appropriate feature for automating storage data retention and tiering decisions.

Question 334

Which Azure storage tier is intended for data that is rarely accessed and can tolerate significantly longer retrieval times?

1. Hot
2. Cool
3. Premium
4. Archive

Correct Answer: 4

Explanation

The Archive access tier is designed for blob data that is rarely accessed and can tolerate longer retrieval times. It can provide lower storage costs for long-term data retention compared with frequently accessed tiers. Because archived data must be rehydrated before normal access in applicable scenarios, it is not intended for frequently accessed information. Hot is intended for frequently accessed data, while Cool is designed for less frequently accessed data that remains readily available. Archive is therefore appropriate for long-term, rarely accessed data.

Question 335

Which Azure feature can help protect an application from accidental deletion while still allowing administrators to modify its configuration?

1. Read-only resource lock
2. Delete resource lock
3. Azure Policy
4. Azure Tag

Correct Answer: 2

Explanation

A delete resource lock prevents a resource from being deleted while still allowing authorized users to modify its configuration. This is useful when an organization wants to protect an important resource from accidental removal without completely preventing changes. A read-only lock is more restrictive because it prevents modifications as well as deletion. Azure Policy enforces governance rules, while tags provide organizational metadata. A delete lock is therefore the appropriate choice when administrators should be able to modify a resource but not accidentally delete it.

Question 336

Which Azure service provides a managed DNS hosting service for resolving domain names?

1. Azure Traffic Manager
2. Azure DNS
3. Azure Front Door
4. Azure Application Insights

Correct Answer: 2

Explanation

Azure DNS is a hosting service for DNS domains that provides name resolution using Microsoft’s Azure infrastructure. It allows organizations to manage DNS records for domains and integrate DNS management with Azure resources. Traffic Manager also uses DNS-based routing, but its primary purpose is directing traffic between endpoints according to configured routing methods. Front Door provides global application delivery, while Application Insights monitors applications. Azure DNS is therefore the appropriate service when an organization needs managed hosting and management of DNS zones and records.

Question 337

Which Azure service can provide centralized management of secrets for applications without embedding passwords directly in source code?

1. Azure Key Vault
2. Azure CDN
3. Azure Load Balancer
4. Azure Event Hubs

Correct Answer: 1

Explanation

Azure Key Vault provides secure storage and management for secrets, keys, and certificates. Applications can retrieve sensitive values from Key Vault instead of storing passwords, connection strings, or cryptographic information directly in source code. This can reduce the risk of exposing credentials through application repositories or configuration files. CDN distributes content, Load Balancer distributes network traffic, and Event Hubs handles event ingestion. Azure Key Vault is therefore the appropriate service for securely managing application secrets and other sensitive security information.

Question 338

Which Azure service can provide a dedicated private connection from an on-premises environment to Microsoft cloud services?

1. Azure VPN Gateway
2. Azure Traffic Manager
3. Azure ExpressRoute
4. Azure Event Grid

Correct Answer: 3

Explanation

Azure ExpressRoute provides private connectivity between an organization’s on-premises network and Microsoft cloud services through a supported connectivity provider. It does not rely on the public internet in the same way as a typical site-to-site VPN connection. ExpressRoute can be useful for organizations requiring predictable connectivity, higher performance, or enterprise hybrid networking. VPN Gateway provides encrypted connections over supported network paths, Traffic Manager provides DNS-based routing, and Event Grid provides event routing. ExpressRoute is therefore the appropriate option for dedicated private connectivity.

Question 339

Which cloud deployment model provides resources exclusively for one organization rather than sharing infrastructure with unrelated customers?

1. Private cloud
2. Public cloud
3. Hybrid cloud
4. Multicloud

Correct Answer: 1

Explanation

A private cloud is a cloud environment dedicated to a single organization. It can provide cloud characteristics such as resource pooling, automation, and self-service while offering greater organizational control over the environment. A public cloud provides services through a cloud provider’s shared infrastructure model, while a hybrid cloud combines private or on-premises environments with public cloud resources. Multicloud refers to using services from multiple cloud providers. Private cloud is therefore the correct deployment model when cloud resources are dedicated to one organization.

Question 340

Which Azure pricing tool is primarily used to compare estimated costs for different Azure solution configurations before deployment?

1. Azure Cost Management
2. Azure Advisor
3. Azure Service Health
4. Azure Pricing Calculator

Correct Answer: 4

Explanation

Azure Pricing Calculator helps organizations estimate and compare the expected costs of different Azure configurations before deploying resources. Users can select services, adjust quantities and usage assumptions, and review estimated pricing for planned architectures. This makes the calculator useful during solution planning and budgeting. Azure Cost Management focuses on analyzing actual spending after resources are in use, Advisor provides recommendations, and Service Health provides information about Azure service events. Azure Pricing Calculator is therefore the appropriate tool for comparing estimated costs before deployment.