View Full Microsoft AZ-900 Exam Dumps and Practice Test Dumps.

 

Question 101

Which Azure service provides a managed environment for deploying and scaling containerized applications?

1. Azure Virtual Network
2. Azure Container Instances
3. Azure DNS
4. Azure Key Vault

Correct Answer: 2

Explanation

Azure Container Instances provides a managed way to run containers in Azure without requiring customers to manage virtual machines or a complete container orchestration platform. It is useful for short-lived workloads, simple applications, batch processing, and development scenarios where fast container deployment is important. Customers can specify the container image and required resources while Azure manages the underlying infrastructure. Azure Virtual Network provides networking, DNS provides name resolution, and Key Vault manages secrets. Container Instances therefore simplify running individual container workloads.

Question 102

Which Azure service provides centralized security recommendations and threat protection for cloud workloads?

1. Microsoft Defender for Cloud
2. Azure Files
3. Azure Load Balancer
4. Azure Queue Storage

Correct Answer: 1

Explanation

Microsoft Defender for Cloud provides cloud security posture management and workload protection capabilities. It can assess resources against security recommendations, identify potential vulnerabilities, and provide information about threats affecting supported environments. Organizations can use its recommendations to improve their security posture and identify areas requiring attention. Azure Files provides file shares, Load Balancer distributes traffic, and Queue Storage provides messaging. Defender for Cloud is therefore particularly relevant when organizations need centralized visibility into security posture and protection across their cloud resources.

Question 103

Which Azure storage option is best suited for storing messages that can be processed asynchronously by an application?

1. Azure Blob Storage
2. Azure Files
3. Azure Queue Storage
4. Azure Managed Disks

Correct Answer: 3

Explanation

Azure Queue Storage is designed to store messages that can be processed asynchronously by application components. A producer can place messages into a queue while a consumer retrieves and processes them later. This pattern helps separate application components and can improve resilience when processing rates vary. Blob Storage is intended primarily for object data, Azure Files provides shared file storage, and Managed Disks provide storage for virtual machines. Queue Storage is therefore appropriate when an application needs simple, scalable asynchronous message handling.

Question 104

Which Azure service can provide a private endpoint for accessing supported Azure services through a private IP address?

1. Azure Bastion
2. Azure Policy
3. Azure Private Link
4. Azure Advisor

Correct Answer: 3

Explanation

Azure Private Link enables private connectivity to supported Azure services through private endpoints. A private endpoint uses a private IP address from an Azure virtual network, allowing supported services to be accessed without exposing the service endpoint through the public internet in the same way as a public endpoint. This can improve network isolation and help meet security requirements. Azure Bastion is used for virtual machine management access, Policy provides governance, and Advisor provides recommendations. Private Link is primarily a private connectivity capability.

Question 105

Which Azure concept represents a logical container used to organize related resources?

1. Resource group
2. Availability zone
3. Azure region
4. Management group

Correct Answer: 1

Explanation

An Azure resource group is a logical container for resources that belong to an application, project, environment, or other organizational unit. Resources in a resource group can be managed together for deployment, access control, monitoring, and lifecycle purposes. A resource group is a management construct rather than a physical location. Availability zones and regions describe physical or geographic deployment locations, while management groups organize subscriptions. Effective resource-group organization can simplify administration and support consistent governance across Azure environments.

Question 106

Which Azure service can help organizations identify and respond to issues affecting the Azure platform or specific resources?

1. Azure Blob Storage
2. Azure Service Health
3. Azure Files
4. Azure Functions

Correct Answer: 2

Explanation

Azure Service Health provides information about Azure service incidents, planned maintenance, and health advisories that may affect an organization’s resources. It helps customers understand relevant Azure platform events and determine whether action is required. This differs from Azure Monitor, which primarily provides telemetry about resource and application performance. Blob Storage and Azure Files provide storage, while Functions provides serverless compute. Service Health is especially valuable during platform incidents because it provides information relevant to the customer’s Azure environment.

Question 107

Which cloud model typically provides the customer with the greatest control over the operating system and virtual machine configuration?

1. SaaS
2. PaaS
3. IaaS
4. Serverless

Correct Answer: 3

Explanation

Infrastructure as a Service, or IaaS, provides customers with virtualized computing resources while allowing substantial control over operating systems, virtual machines, networking, and installed software. The cloud provider manages the underlying physical infrastructure, but customers are responsible for many configuration and maintenance tasks inside the virtual machines. PaaS provides a more managed application platform, while SaaS provides complete applications. Serverless abstracts infrastructure even further. IaaS is therefore appropriate when organizations need significant control over the computing environment.

Question 108

Which Azure service helps organizations create and manage budgets for cloud spending?

1. Azure Cost Management
2. Azure DNS
3. Azure Bastion
4. Azure Virtual Network

Correct Answer: 1

Explanation

Azure Cost Management provides tools for analyzing and controlling cloud spending, including the ability to create budgets and monitor costs against defined thresholds. Organizations can use budgets to improve financial visibility and identify unexpected spending. Cost Management can also help analyze costs across subscriptions, resource groups, and other relevant scopes. Azure DNS manages name resolution, Bastion provides secure administrative access, and Virtual Network provides networking. Cost Management is therefore an important service for maintaining financial control over Azure consumption.

Question 109

Which Azure service is designed to host domain name system records for domains?

1. Azure Advisor
2. Azure DNS
3. Azure Monitor
4. Azure Policy

Correct Answer: 2

Explanation

Azure DNS is a hosting service for DNS domains and records. DNS allows applications and users to resolve human-readable domain names to IP addresses or other configured destinations. Organizations can use Azure DNS to host DNS zones and manage supported record types. Azure Advisor provides recommendations, Azure Monitor collects telemetry, and Azure Policy provides governance capabilities. DNS is an important part of application connectivity because users typically access services using domain names rather than directly entering network addresses.

Question 110

Which Azure service provides managed storage for virtual machine operating system and data disks?

1. Azure Managed Disks
2. Azure Queue Storage
3. Azure DNS
4. Azure Logic Apps

Correct Answer: 1

Explanation

Azure Managed Disks provides managed disk storage for Azure virtual machines. Microsoft manages the underlying storage infrastructure, while customers select appropriate disk types and configurations according to performance and capacity requirements. Managed Disks simplify disk management and integrate with Azure virtual machine capabilities. Queue Storage is intended for asynchronous messages, DNS provides domain name resolution, and Logic Apps provides workflow automation. Managed Disks are therefore the appropriate Azure storage option when persistent block storage is required for virtual machine operating systems or applications.

Question 111

Which Azure service can automatically scale supported applications according to configured rules or workload demand?

1. Azure Policy
2. Azure Autoscale
3. Azure Key Vault
4. Azure DNS

Correct Answer: 2

Explanation

Azure autoscaling capabilities allow supported services and applications to increase or decrease capacity according to workload demand or configured conditions. Scaling can help maintain performance during periods of increased activity and reduce resource consumption when demand decreases. The exact autoscaling capabilities depend on the Azure service and hosting model. Azure Policy manages governance, Key Vault protects sensitive information, and DNS provides name resolution. Autoscaling is an important cloud capability because workload requirements can change significantly over time.

Question 112

Which Azure service provides a managed environment for developing, deploying, and scaling applications without managing the underlying operating system?

1. Azure Virtual Machines
2. Azure App Service
3. Azure Managed Disks
4. Azure VPN Gateway

Correct Answer: 2

Explanation

Azure App Service is a platform-as-a-service offering that provides a managed environment for hosting web applications, APIs, and related workloads. Microsoft manages much of the underlying infrastructure and operating system, allowing developers to focus on application code and configuration. App Service supports deployment, scaling, authentication, and integration features. Virtual Machines provide more infrastructure control, Managed Disks provide persistent storage, and VPN Gateway provides network connectivity. App Service is appropriate when organizations want application hosting with reduced infrastructure administration.

Question 113

What is a primary advantage of using a public cloud such as Microsoft Azure?

1. Organizations must own all physical infrastructure
2. Resources can be provisioned without purchasing equivalent physical hardware
3. Every service has unlimited capacity at no cost
4. Customers have no responsibility for security

Correct Answer: 2

Explanation

A major advantage of public cloud computing is that organizations can provision computing, storage, networking, and other services without purchasing and maintaining equivalent physical infrastructure. Azure provides access to large-scale infrastructure through a consumption-based model and various pricing options. This can improve flexibility and reduce the need for large upfront hardware investments. However, cloud services are not unlimited or free, and customers still have security responsibilities depending on the service model. Effective planning remains necessary to control costs and manage risks.

Question 114

Which Azure service provides recommendations that can help improve reliability and security in addition to cost and performance?

1. Azure Advisor
2. Azure Files
3. Azure Queue Storage
4. Azure DNS

Correct Answer: 1

Explanation

Azure Advisor provides personalized recommendations across several areas, including cost optimization, performance, reliability, and security. It analyzes aspects of the Azure environment and identifies opportunities for improvement. For example, Advisor may recommend configuration changes or resource optimization actions based on observed usage. Azure Files provides file shares, Queue Storage provides messaging, and DNS manages domain resolution. Advisor is useful because it provides actionable recommendations that can help organizations improve the overall efficiency and reliability of their Azure deployments.

Question 115

Which Azure service provides a way to run SQL Server workloads in a virtual machine when full operating system control is required?

1. Azure SQL Database
2. Azure Virtual Machines
3. Azure Cosmos DB
4. Azure Blob Storage

Correct Answer: 2

Explanation

Azure Virtual Machines can host SQL Server and provide customers with significant control over the operating system, database software, configuration, and virtual machine environment. This approach is useful when workloads require capabilities or configurations that are not available through fully managed database services. Azure SQL Database provides a more managed relational database platform, while Cosmos DB is a NoSQL database and Blob Storage provides object storage. Running SQL Server on a virtual machine generally requires more administration because the customer manages more of the environment.

Question 116

Which Azure service helps organizations apply governance rules consistently across resources and subscriptions?

1. Azure Policy
2. Azure Functions
3. Azure Blob Storage
4. Azure Load Balancer

Correct Answer: 1

Explanation

Azure Policy enables organizations to define, evaluate, and enforce governance requirements across Azure resources. Policies can be used to audit configurations, deny noncompliant deployments, and support remediation for certain scenarios. This helps organizations maintain consistent standards across subscriptions and resource groups. Azure Functions provides serverless compute, Blob Storage provides object storage, and Load Balancer distributes network traffic. Azure Policy is therefore an important governance capability for organizations that need to control resource configurations and maintain compliance with internal standards.

Question 117

Which Azure service is designed to provide globally distributed, low-latency access to NoSQL data?

1. Azure SQL Database
2. Azure Cosmos DB
3. Azure Files
4. Azure Queue Storage

Correct Answer: 2

Explanation

Azure Cosmos DB is a globally distributed database service designed for applications that require low-latency access and elastic scalability. It supports NoSQL data models and can distribute data across multiple Azure regions. This makes it suitable for applications serving users in different geographic locations. Azure SQL Database provides relational database functionality, Azure Files provides file shares, and Queue Storage supports asynchronous messaging. Cosmos DB is particularly useful when applications require globally distributed data with rapid response times and flexible scalability.

Question 118

Which Azure service allows administrators to access virtual machines through the Azure portal without assigning public IP addresses directly to the virtual machines?

1. Azure Bastion
2. Azure Advisor
3. Azure Service Health
4. Azure Cost Management

Correct Answer: 1

Explanation

Azure Bastion provides secure browser-based access to supported virtual machines through the Azure portal. It can allow administrators to establish RDP or SSH sessions without exposing public IP addresses directly on the virtual machines. This can reduce the attack surface associated with publicly exposed management ports. Advisor provides recommendations, Service Health reports Azure platform events, and Cost Management handles spending analysis. Bastion is therefore particularly useful when organizations want secure administrative access while minimizing direct internet exposure of virtual machines.

Question 119

Which cloud characteristic allows customers to provision resources quickly when they are needed?

1. High availability
2. Rapid elasticity
3. On-demand self-service
4. Fault tolerance

Correct Answer: 3

Explanation

On-demand self-service allows cloud customers to provision computing resources when needed without requiring direct manual intervention from the cloud provider for every request. Through portals, APIs, command-line tools, and other management interfaces, users can create and configure supported resources quickly. Rapid elasticity focuses on automatically adjusting capacity as demand changes, while high availability focuses on maintaining service availability and fault tolerance focuses on resilience against failures. On-demand self-service is a fundamental characteristic of cloud computing.

Question 120

Which Azure service provides a managed workflow platform for connecting applications and automating business processes?

1. Azure Virtual Network
2. Azure Logic Apps
3. Azure Managed Disks
4. Azure Load Balancer

Correct Answer: 2

Explanation

Azure Logic Apps provides a managed workflow platform for connecting applications, services, and data sources. Workflows can be triggered by events and can perform multiple actions using supported connectors. This makes Logic Apps useful for automating notifications, approvals, data movement, system integrations, and business processes. Virtual Network provides networking, Managed Disks provides block storage for virtual machines, and Load Balancer distributes network traffic. Logic Apps allows organizations to automate integration scenarios while reducing the need to build all workflow infrastructure manually.