View Full Microsoft AZ-900 Exam Dumps and Practice Test Dumps.

 

Question 161

Which Azure service can help an organization assess the readiness of its on-premises servers before migration to Azure?

1. Azure Migrate
2. Azure Monitor
3. Azure Advisor
4. Azure Policy

Correct Answer: 1

Explanation

Azure Migrate provides tools for discovering, assessing, and planning the migration of workloads to Azure. Organizations can use it to evaluate on-premises servers and applications before moving them to the cloud. Assessment information can help identify compatibility, sizing, dependencies, and other migration considerations. Azure Monitor is primarily used for monitoring, Advisor provides optimization recommendations, and Azure Policy manages governance requirements. Azure Migrate is therefore especially useful during the planning stage of cloud migration because it helps organizations understand existing workloads before deploying them in Azure.

Question 162

What is the primary purpose of Azure Service Level Agreements (SLAs)?

1. To define database schemas
2. To describe Microsoft’s commitment to service availability and performance
3. To manage user passwords
4. To create virtual networks

Correct Answer: 2

Explanation

Azure Service Level Agreements, commonly called SLAs, describe Microsoft’s commitments regarding the availability or performance of specific Azure services under defined conditions. Different services can have different SLA commitments, and some services may provide higher availability when deployed using appropriate configurations. SLAs help organizations understand expected service availability when planning cloud solutions. They do not define database structures, manage passwords, or create virtual networks. Understanding Azure SLAs is important when designing applications because architecture choices can affect the availability level that a workload can achieve.

Question 163

Which Azure service provides a way to manage and govern resources across on-premises, multicloud, and Azure environments?

1. Azure Arc
2. Azure Functions
3. Azure Files
4. Azure Load Balancer

Correct Answer: 1

Explanation

Azure Arc extends Azure management capabilities to supported resources running outside Azure, including on-premises and other cloud environments. It can help organizations apply Azure management, governance, and policy capabilities across distributed infrastructure. This is particularly useful for organizations operating hybrid or multicloud environments. Azure Functions provides serverless compute, Azure Files provides managed file shares, and Load Balancer distributes network traffic. Azure Arc is therefore the most appropriate choice when an organization wants a consistent Azure management experience across resources that are not hosted exclusively in Azure.

Question 164

Which Azure feature is used to apply organizational rules and compliance requirements to Azure resources?

1. Azure Advisor
2. Azure Policy
3. Azure Monitor
4. Azure Service Bus

Correct Answer: 2

Explanation

Azure Policy helps organizations create, assign, and enforce rules that control how Azure resources are configured and used. Policies can be used to support organizational standards, regulatory requirements, and governance objectives. For example, an organization can require resources to be deployed only in approved regions or ensure that certain configurations are present. Advisor provides recommendations rather than enforcement, Monitor collects telemetry, and Service Bus provides messaging. Azure Policy is therefore the appropriate governance service when organizations need to define and enforce requirements across their Azure environment.

Question 165

Which cloud characteristic allows users to provision computing resources whenever they need them without requiring manual provider intervention?

1. High availability
2. Fault tolerance
3. On-demand self-service
4. Geographic redundancy

Correct Answer: 3

Explanation

On-demand self-service is a fundamental cloud characteristic that allows customers to provision computing capabilities when needed without requiring direct human interaction with the service provider. In Azure, customers can use portals, APIs, command-line tools, and other management interfaces to create and configure resources. This provides flexibility and speeds up resource deployment compared with traditional infrastructure procurement processes. High availability focuses on maintaining service access, fault tolerance concerns continued operation during failures, and geographic redundancy involves maintaining resources across locations. On-demand self-service emphasizes customer-controlled provisioning.

Question 166

Which Azure service provides centralized storage for files that can be accessed using the Server Message Block (SMB) protocol?

1. Azure Blob Storage
2. Azure Files
3. Azure Queue Storage
4. Azure Table Storage

Correct Answer: 2

Explanation

Azure Files provides fully managed cloud file shares that can be accessed using standard file-sharing protocols, including SMB. This makes Azure Files useful for applications and users that require shared file storage accessible across multiple systems. Blob Storage is designed for object storage, Queue Storage provides asynchronous messaging, and Table Storage is designed for NoSQL key-value data. Azure Files can also support scenarios where applications need shared folders without maintaining traditional file servers. It is therefore the appropriate Azure service for managed cloud-based file shares.

Question 167

Which Azure service is primarily designed to automate business workflows using triggers, actions, and connectors?

1. Azure Logic Apps
2. Azure Virtual Machines
3. Azure Managed Disks
4. Azure DNS

Correct Answer: 1

Explanation

Azure Logic Apps is a workflow automation service that allows organizations to connect applications, services, and data sources using triggers and actions. It provides many connectors that can simplify integration between Microsoft services, third-party applications, and other systems. Logic Apps can automate processes such as sending notifications, processing approvals, synchronizing information, and responding to events. Virtual Machines provide compute resources, Managed Disks provide storage for virtual machines, and DNS provides name resolution. Logic Apps is therefore best suited for automating workflows without requiring extensive custom integration infrastructure.

Question 168

Which Azure service can provide a secure browser-based connection to virtual machines without exposing their RDP or SSH ports to the public internet?

1. Azure VPN Gateway
2. Azure Bastion
3. Azure Traffic Manager
4. Azure Event Hubs

Correct Answer: 2

Explanation

Azure Bastion provides secure and managed access to Azure virtual machines through the Azure portal using supported browser-based connections. It allows administrators to connect to virtual machines without requiring public IP addresses on those machines for RDP or SSH access. This can reduce exposure of management ports to the public internet. VPN Gateway provides network connectivity, Traffic Manager performs DNS-based traffic routing, and Event Hubs handles event ingestion. Bastion is therefore particularly useful when administrators need secure remote management access to Azure virtual machines.

Question 169

Which Azure service provides centralized management of encryption keys, secrets, and certificates?

1. Azure Monitor
2. Azure Key Vault
3. Azure Advisor
4. Azure Service Health

Correct Answer: 2

Explanation

Azure Key Vault provides secure management of sensitive information such as secrets, cryptographic keys, and certificates. Applications and administrators can use Key Vault to reduce the need to store sensitive credentials directly in application code or configuration files. Access can be controlled through Azure identity and authorization mechanisms. Azure Monitor focuses on telemetry, Advisor provides recommendations, and Service Health provides information about Azure platform events. Key Vault is therefore the appropriate service for securely storing and controlling access to cryptographic material and other sensitive application secrets.

Question 170

Which Azure pricing option can provide discounted pricing when an organization commits to using eligible resources for a defined period?

1. Pay-as-you-go
2. Azure Reservations
3. Free tier
4. Consumption-only billing

Correct Answer: 2

Explanation

Azure Reservations can provide discounted pricing for eligible services when an organization makes a commitment for a defined term. This option can be beneficial for workloads with predictable and consistent resource requirements. Instead of paying only standard consumption rates, an organization commits to qualifying usage for the reservation period in exchange for potential savings. Pay-as-you-go provides flexible usage-based pricing, while a free tier applies only to eligible services and limits. Reservations are therefore useful when workloads have predictable usage and the organization can make a longer-term commitment.

Question 171

Which Azure concept refers to the ability of a service to continue operating when one component fails?

1. Fault tolerance
2. Scalability
3. Elasticity
4. Consumption-based pricing

Correct Answer: 1

Explanation

Fault tolerance is the ability of a system to continue operating even when one or more components experience a failure. Cloud architectures can improve fault tolerance by using redundant resources, multiple instances, availability zones, or other resilience techniques. Scalability refers to increasing capacity to support larger workloads, while elasticity focuses on dynamically adjusting resources based on demand. Consumption-based pricing concerns how customers are charged. Fault tolerance is therefore specifically concerned with maintaining service operation despite component failures and reducing the impact of individual failures.

Question 172

Which Azure service is designed to provide a globally distributed NoSQL database with support for multiple data models?

1. Azure SQL Database
2. Azure Database for PostgreSQL
3. Azure Cosmos DB
4. Azure Files

Correct Answer: 3

Explanation

Azure Cosmos DB is a globally distributed database service designed primarily for NoSQL workloads. It supports multiple APIs and data models and can provide low-latency access for applications operating across geographic locations. Cosmos DB is designed for applications that require flexible schemas, global distribution, and scalable performance. Azure SQL Database provides relational SQL capabilities, PostgreSQL provides managed PostgreSQL databases, and Azure Files provides file shares. Cosmos DB is therefore an appropriate choice for globally distributed applications requiring a scalable NoSQL database service.

Question 173

Which Azure service can help organizations create and manage serverless functions that execute in response to events?

1. Azure Functions
2. Azure Files
3. Azure VPN Gateway
4. Azure Managed Disks

Correct Answer: 1

Explanation

Azure Functions is a serverless compute service that allows developers to run small pieces of code in response to events or triggers. Organizations can use Functions for tasks such as processing messages, responding to HTTP requests, handling timers, and reacting to changes in supported Azure services. The service reduces the need to manage traditional server infrastructure and can automatically scale according to workload requirements. Azure Files provides storage, VPN Gateway provides networking, and Managed Disks provide persistent disk storage. Functions is therefore the correct choice for event-driven serverless compute.

Question 174

Which Azure service provides a centralized dashboard for reviewing current service incidents, planned maintenance, and health advisories relevant to an organization?

1. Azure Advisor
2. Azure Service Health
3. Azure Cost Management
4. Azure Policy

Correct Answer: 2

Explanation

Azure Service Health provides personalized information about Azure service incidents, planned maintenance, and health advisories that may affect an organization’s resources. It helps administrators understand whether an Azure platform event could impact their workloads. This differs from Azure Monitor, which focuses on resource and application telemetry, and Advisor, which provides recommendations for optimization. Cost Management focuses on spending analysis, while Policy provides governance controls. Service Health is therefore the most appropriate service for understanding Azure platform events that may affect the organization’s environment.

Question 175

Which Azure service can help estimate and analyze an organization’s cloud spending across subscriptions and resources?

1. Azure Pricing Calculator
2. Azure Cost Management
3. Azure Site Recovery
4. Azure Event Grid

Correct Answer: 2

Explanation

Azure Cost Management provides tools for analyzing, monitoring, and managing cloud spending. Organizations can review costs across subscriptions and resources, create budgets, analyze spending trends, and identify areas where costs may need attention. Pricing Calculator is mainly used to estimate expected costs before deployment, while Site Recovery focuses on disaster recovery and Event Grid provides event routing. Cost Management is therefore the better choice when an organization needs to monitor actual Azure spending and establish controls for managing cloud costs.

Question 176

Which Azure storage option is best suited for data that is rarely accessed but needs to be retained for long-term storage?

1. Hot tier
2. Cool tier
3. Archive tier
4. Premium tier

Correct Answer: 3

Explanation

The Archive access tier is designed for blob data that is rarely accessed and can tolerate higher retrieval latency. It can help reduce storage costs for long-term data retention compared with tiers intended for frequently accessed information. The Hot tier is intended for frequently accessed data, while Cool is designed for data accessed less frequently but more often than typical archive data. Premium storage is associated with high-performance storage scenarios rather than long-term archival access. The Archive tier is therefore appropriate when minimizing storage costs for rarely accessed data is a priority.

Question 177

Which Azure service provides a managed platform for hosting applications while reducing the need to maintain operating systems and servers?

1. Azure App Service
2. Azure Virtual Machines
3. Azure Managed Disks
4. Azure ExpressRoute

Correct Answer: 1

Explanation

Azure App Service is a platform-as-a-service offering that provides managed hosting for web applications, APIs, and related workloads. Microsoft manages much of the underlying infrastructure and operating system, allowing customers to focus more on application development and configuration. Virtual Machines provide infrastructure-level control and require more management, Managed Disks provide persistent storage, and ExpressRoute provides private network connectivity. App Service is therefore useful when an organization wants to deploy applications using a managed platform without taking responsibility for maintaining the underlying server operating system.

Question 178

Which Azure service allows organizations to create a private connection from an on-premises network to Azure over the public internet using an encrypted tunnel?

1. Azure ExpressRoute
2. Azure VPN Gateway
3. Azure Traffic Manager
4. Azure Front Door

Correct Answer: 2

Explanation

Azure VPN Gateway provides encrypted connectivity between Azure virtual networks and other networks, including on-premises environments. A common hybrid networking scenario uses a site-to-site VPN to establish an encrypted tunnel over the public internet. ExpressRoute provides private connectivity through a connectivity provider rather than using the public internet as the normal transport path. Traffic Manager provides DNS-based routing, while Front Door provides global application delivery. VPN Gateway is therefore appropriate when an organization needs encrypted hybrid connectivity without requiring a dedicated private circuit.

Question 179

Which Azure service helps organizations identify recommendations for reducing unnecessary cloud spending?

1. Azure Advisor
2. Azure DNS
3. Azure Event Hubs
4. Azure Bastion

Correct Answer: 1

Explanation

Azure Advisor provides recommendations that can help organizations optimize their Azure environment, including identifying opportunities for cost reduction. For example, Advisor may identify underutilized resources or configurations that could be adjusted to reduce unnecessary spending. It also provides recommendations in areas such as reliability, security, and performance. Azure DNS handles name resolution, Event Hubs ingests event data, and Bastion provides secure virtual machine access. Advisor is therefore useful when administrators want actionable recommendations for improving resource efficiency and controlling Azure costs.

Question 180

Which Azure identity capability allows users to sign in once and access multiple supported applications without repeatedly entering credentials?

1. Multifactor authentication
2. Role-based access control
3. Single sign-on
4. Resource locking

Correct Answer: 3

Explanation

Single sign-on, or SSO, allows users to authenticate once and then access multiple supported applications without repeatedly entering their credentials. Microsoft Entra ID can provide SSO capabilities for supported applications and services. Multifactor authentication adds additional verification factors to strengthen authentication, while role-based access control determines what authenticated users are authorized to do. Resource locks protect Azure resources from accidental changes or deletion. SSO therefore improves the user experience by reducing repeated sign-ins while maintaining centralized identity management and access control.