Microsoft Azure Fundamentals practice questions

1. Question 1 of 25

   Select 2

   You have an Azure environment that contains multiple Azure virtual machines. You plan to implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines. You need to recommend which Azure resources must be created for the planned solution. Which two Azure resources should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • Aa virtual network gateway
   • Ba load balancer
   • Can application gateway
   • Da virtual network
   • Ea gateway subnet

   Show answer

   Correct answer: A, D

   How others answered

   • AD53%
   • AE44%

   Only 53% agreed on this answer — treat it as contested rather than settled.

   Explanation

   If you already have Azure VMs, this implies you have a VNet already. Thus the answer should be Gateway Subnet and VNet Gateway

   Adapted from community discussion by NoNotSpam · 2019-11-07 · 278 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 1 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

   1. N

      NoNotSpam

      2019-11-07

      278 upvotes

      If you already have Azure VMs, this implies you have a VNet already. Thus the answer should be Gateway Subnet and VNet Gateway

   2. A

      ananthbhaskar

      2020-06-17

      33 upvotes

      It has been mentioned that they are planning to connect On prem with Azure, so we need to consider there is no VM exist. keyword word is Planning. Answer would be Virtual Network & virtual network gateway.

   3. R

      richardsonbq

      2019-11-12

      30 upvotes

      I agree with your logic. I was also wondering wether Gateway Subnet is really a resource (for me, is just a configuration). So maybe the best answer would be Virtual Netowrk Gateway and Virtual Newtwork (if not already exists)

   4. A

      alen995454

      2019-12-11

      28 upvotes

      similair question from linux Academy: Which of the following components are required to establish communication between on-premises resources and resources in Azure? Correct Answer: A Why is this correct? A virtual network gateway defines the Azure network side of a site-to-site virtual private network. https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways Correct Answer: D Why is this correct? Azure Virtual Network enables many types of Azure resources, such as Azure Virtual Machines (VM), to securely communicate with each other, the internet, and on-premises networks. https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-overview

2. Question 2 of 25

   You attempt to create several managed Microsoft SQL Server instances in an Azure environment and receive a message that you must increase your Azure subscription limits. What should you do to increase the limits?

   • ACreate a service health alert
   • BUpgrade your support plan
   • CModify an Azure policy
   • DCreate a new support request

   Show answer

   Correct answer: D

   How others answered

   • D94%

   Explanation

   https://docs.microsoft.com/en-us/azure/azure-subscription-service-limits Note: If you want to raise the limit or quota above the default limit, open an online customer support request at no charge.

   Adapted from community discussion by Ragijo · 2019-11-17 · 103 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • azure.microsoft.com documentation
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 2 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

   1. H

      Hatu

      2021-01-13

      135 upvotes

      Are we supposed to know everything for basics exam, this is beyond crazy!

   2. R

      Ragijo

      2019-11-17

      103 upvotes

      https://docs.microsoft.com/en-us/azure/azure-subscription-service-limits Note: If you want to raise the limit or quota above the default limit, open an online customer support request at no charge.

   3. F

      Franco11

      2021-05-06

      48 upvotes

      How should we know this info? i am learning AZ-900 online on Microsoft site, and this was not mentioned on the website

   4. L

      lehuspohus

      2020-10-12

      19 upvotes

      Was on my test, answered "D. Create a new support request", got 100% in this exam section, so answer is definitely valid.

3. Question 3 of 25

   Which Azure service should you use to collect events from multiple resources into a centralized repository?

   • AAzure Event Hubs
   • BAzure Analysis Services
   • CAzure Monitor
   • DAzure Stream Analytics

   Show answer

   Correct answer: A

   How others answered

   • A52%
   • C48%

   Only 52% agreed on this answer — treat it as contested rather than settled.

   Explanation

   Answer is correct; keyword is "event" and not just any telemetry data. "Azure Event Hubs — A big data streaming platform and event ingestion service" >>> https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-about

   Adapted from community discussion by werbinich · 2021-03-17 · 142 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 3 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

   1. W

      werbinich

      2021-03-17

      142 upvotes

      Answer is correct; keyword is "event" and not just any telemetry data. "Azure Event Hubs — A big data streaming platform and event ingestion service" >>> https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-about

   2. L

      lighting

      2021-03-01

      64 upvotes

      C. Azure Monitor -- resources are azure resource -- https://medium.com/@kyleake/exam-az-900-microsoft-azure-fundamentals-most-complete-preparation-guide-ever-76614d31a59c To correlate events from multiple resources into a centralized repository. Log data collected by Azure Monitor is stored in a Log Analytics workspace, which is based on Azure Data Explorer. It collects telemetry from a variety of sources and uses the Kusto query language used by Data Explorer to retrieve and analyze data.

   3. H

      Harry28731

      2021-11-29

      30 upvotes

      Azure Monitor colltect Metrics and logs : https://docs.microsoft.com/en-us/azure/azure-monitor/overview Azure Events Hub collects Hubs : https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-about Azure Event Hubs is a big data streaming platform and EVENT ingestion service. It can RECEIVE and process MILLIONS of EVENTS per second. Data sent to an event hub can be transformed and stored by using any real-time analytics provider or batching/storage adapters. It's basically the definition of Azure Event Hubs. Additional reasoning is that Azure Monitor collect ONLY application or infrastructure related logs (that can be events) wheareas Event Hubs can collect Business events. The question mentions only EVENTS in general.

   4. T

      Testtest123

      2021-07-05

      17 upvotes

      Azure Event Hub didn't even came in the exam of today (5-7-21). The answer is Azure Monitor.

4. Question 4 of 25

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to deploy several Azure virtual machines. You need to ensure that the services running on the virtual machines are available if a single data center fails. Solution: You deploy the virtual machines to two or more scale sets. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Correct answer: B

   How others answered

   • B80%
   • A20%

   Explanation

   An availability set is a logical grouping of VMs within a datacenter. You will have to use availability zones. Hence B answer.

   Adapted from community discussion by PRT · 2019-09-01 · 123 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 4 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

   1. P

      PRT

      2019-09-01

      123 upvotes

      An availability set is a logical grouping of VMs within a datacenter. You will have to use availability zones. Hence B answer.

   2. M

      Moon

      2019-11-23

      26 upvotes

      answer is "No / B". Virtual Machine Scale Sets let you create and manage a group of identical, load balanced VMs. The number of VM instances can automatically increase or decrease in response to demand or a defined schedule. What provide Data Center fault tolerant, is "Availability Set".

   3. F

      foreverlearner

      2020-04-25

      24 upvotes

      It is a thing: "An availability set is a logical grouping of two or more VMs (on different racks inside the same Datacenter) that help keep your application available during planned or unplanned maintenance. ". However, they wouldn't be helpful neither in this scenario, you would need to deploy the VMs in 2 different AZs

   4. R

      Rooks

      2020-04-19

      17 upvotes

      Sorry again— there’s indeed such thing called Availability Sets. Too many things with Sets : - ) apologies for confusion..

5. Question 5 of 25

   This question requires that you evaluate the underlined text to determine if it is correct. One of the benefits of Azure SQL Data Warehouse is that high availability is built into the platform. Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed`. If the statement is incorrect, select the answer choice that makes the statement correct.

   • ANo change is needed
   • Bautomatic scaling
   • Cdata compression
   • Dversioning

   Show answer

   Correct answer: A

   How others answered

   • A96%

   Explanation

   Yes. This is the key: " The high availability solution is designed to ensure that committed data is never lost due to failures " The whole idea of 'high availability'

   Adapted from community discussion by ultraOriginalVillain · 2020-04-11 · 29 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • azure.microsoft.com documentation
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 5 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

   1. M

      MickeyG

      2020-08-19

      60 upvotes

      wow this comment really helped further my understanding, thanks

   2. U

      ultraOriginalVillain

      2020-04-11

      42 upvotes

      It's DataWAREHOUSE. It's a data dump!! what are you scaling? You want to make the massive sea of data highly available.

   3. R

      RSMCT2011

      2020-01-08

      31 upvotes

      A https://docs.microsoft.com/en-us/azure/sql-database/sql-database-high-availability

   4. U

      ultraOriginalVillain

      2020-04-11

      29 upvotes

      Yes. This is the key: " The high availability solution is designed to ensure that committed data is never lost due to failures " The whole idea of 'high availability'

6. Question 6 of 25

   At which OSI layer does ExpressRoute operate?

   • ALayer 2
   • BLayer 3
   • CLayer 5
   • DLayer 7

   Show answer

   Correct answer: B

   How others answered

   • B99%

   Explanation

   Layer 3 https://learn.microsoft.com/en-us/azure/expressroute/expressroute-introduction#key-benefits Layer 3 connectivity between your on-premises network and the Microsoft Cloud through a connectivity provider. Connectivity can be from an any-to-any (IPVPN) network, a point-to-point Ethernet connection, or through a virtual cross-connection via an Ethernet exchange.

   Adapted from community discussion by Vijayshankar001 · 2022-10-12 · 38 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • RFC Editor

   View community discussion4

   Candidate context

   Question 6 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

   1. V

      Vijayshankar001

      2022-10-12

      Selected B38 upvotes

      Layer 3 https://learn.microsoft.com/en-us/azure/expressroute/expressroute-introduction#key-benefits Layer 3 connectivity between your on-premises network and the Microsoft Cloud through a connectivity provider. Connectivity can be from an any-to-any (IPVPN) network, a point-to-point Ethernet connection, or through a virtual cross-connection via an Ethernet exchange.

   2. B

      BrkyUlukn

      2023-01-20

      37 upvotes

      Layer 3 is wrong.. I had today my exam for AZ900 and I had this question. I had selected layer3 and that was wrong. It had to be Layer2

   3. O

      ogmandalorian

      2023-04-23

      33 upvotes

      You don't see what you get wrong when you finish a Microsoft exam so how do you know? Stop CAPPING.

   4. D

      DJP_007

      2023-09-05

      9 upvotes

      how can this WRONG answer be upvoted ??-- you must have failed more than this question if you couldn't get it correct. this is from MS site :> ExpressRoute operates in layer 3. Threats in the application layer can be prevented by using a network security appliance that restricts traffic to legitimate resources.

7. Question 7 of 25

   Select 2

   You plan to store 20 TB of data in Azure. The data will be accessed infrequently and visualized by using Microsoft Power BI. You need to recommend a storage solution for the data. Which two solutions should you recommend? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • AAzure Data Lake
   • BAzure Cosmos DB
   • CAzure SQL Data Warehouse
   • DAzure SQL Database
   • EAzure Database for PostgreSQL

   Show answer

   Correct answer: A, C

   How others answered

   • AC100%

   Explanation

   In my point of view, the storage size is very important to respond this question. Postgress up to 16 TB: https://azure.microsoft.com/en-us/pricing/details/postgresql/server/ SQL DB up to 4 TB: https://docs.microsoft.com/pt-br/azure/azure-sql/managed-instance/resource-limits

   Adapted from community discussion by lawcarvalho · 2020-08-22 · 23 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • azure.microsoft.com documentation
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 7 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

   1. [

      [Removed]

      2020-05-04

      172 upvotes

      Azure SQL Data Warehouse is now Azure Synapse Analytics can you please change it in the options.

   2. [

      [Removed]

      2019-12-22

      56 upvotes

      Azure Data Lake integration features https://powerbi.microsoft.com/en-us/blog/power-bi-dataflows-and-azure-data-lake-storage-gen2-integration-preview/ Azure SQL Data Warehouse integration features https://powerbi.microsoft.com/en-us/integrations/azure-sql-data-warehouse/

   3. A

      adino13

      2020-06-10

      43 upvotes

      Heads up: Azure SQL DW is no longer the appropriate name. It has been changed to Azure Synapse Analytics

   4. Z

      Zurvan

      2020-01-28

      31 upvotes

      Also infrequently is here the key. Otherwise Cosmos DB would have been the right answer.

8. Question 8 of 25

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Solution: Run the script from a computer that runs Linux and has the Azure CLI tools installed. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Correct answer: B

   How others answered

   • B95%

   Explanation

   After Microsoft Learn : "Azure PowerShell is a module that you can install for Windows PowerShell, or PowerShell Core, which is a cross-platform version of PowerShell that runs on Windows, Linux or macOS. Azure PowerShell enables you to connect to your Azure subscription and manage resources." So the solution is definitivly valid

   Adapted from community discussion by STH · 2019-08-05 · 90 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 8 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

   1. S

      Stan007

      2019-08-16

      140 upvotes

      Answer is correct, Azure PowerShell requires Windows PowerShell to function. Azure CLI can't execute any powershell scripts.

   2. S

      STH

      2019-08-05

      90 upvotes

      After Microsoft Learn : "Azure PowerShell is a module that you can install for Windows PowerShell, or PowerShell Core, which is a cross-platform version of PowerShell that runs on Windows, Linux or macOS. Azure PowerShell enables you to connect to your Azure subscription and manage resources." So the solution is definitivly valid

   3. H

      hapeshig

      2019-11-29

      61 upvotes

      Needs PowerShell Core to run Powershell scripts,PowerShell Core can be installed on Windows,Linux and MacOS. In this case it's PS Core is not installed thus answer is B

   4. D

      Duke_Lew

      2021-12-22

      22 upvotes

      Answer is No. To run PS on Linux machine, PS core 6.x and higher version has to be installed in it. So, Run the script from a computer that runs Linux and has the Azure CLI tools installed --> Wrong answer Run the script from a computer that runs Linux and has the PowerShell core 6.x and higher version installed --> Correct answer Please check on the link that is what Microsoft replied: https://social.msdn.microsoft.com/Forums/en-US/bdffa306-5d1e-4db6-b00e-dc1143e4d471/can-i-run-powershell-from-cli-in-linux?forum=windowsazuremanagement

9. Question 9 of 25

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Solution: Run the script from a computer that runs Chrome OS and uses Azure Cloud Shell. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Correct answer: A

   How others answered

   • A100%

   Explanation

   This is totally valid. Run the script from a computer that runs Chrome OS and uses Azure Cloud Shell to run Powershell scripts fo razure. Why doesn't meet the needs?

   Adapted from community discussion by vanr2000 · 2019-07-29 · 95 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 9 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

   1. V

      vanr2000

      2019-07-29

      95 upvotes

      This is totally valid. Run the script from a computer that runs Chrome OS and uses Azure Cloud Shell to run Powershell scripts fo razure. Why doesn't meet the needs?

   2. J

      joondez

      2020-08-31

      47 upvotes

      Many people think this is a trick question because you cannot install CLI onto Chrome OS. However, I think this question is way more straightforward. You can use Cloud Shell in the Chrome browser. This works on all OS. This question is being used to demonstrate that the Cloud Shell can run on all OS.

   3. S

      STH

      2019-08-05

      35 upvotes

      After Microsoft Learn : "Azure Cloud Shell is a browser-based scripting environment for command-line administration of Azure resources." So you definitivly can use it with Chrome to match the goal

   4. M

      MartinMystere

      2019-12-25

      29 upvotes

      I have read all the comments and I believe everybody missed the point. The question states Chrome OS and not Chrome Web Browser. https://www.google.com/chromebook/chrome-os/

10. Question 10 of 25

    Select 2

    Your company plans to deploy several million sensors that will upload data to Azure. You need to identify which Azure resources must be created to support the planned solution. Which two Azure resources should you identify? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

    • AAzure Data Lake
    • BAzure Queue storage
    • CAzure File Storage
    • DAzure IoT Hub
    • EAzure Notification Hubs

    Show answer

    Correct answer: A, D

    How others answered

    • AD100%

    Explanation

    I would go with "A & D". Data Lake: is typical storage for IoT Hub as in the below link https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-messages-d2c

    Adapted from community discussion by Moon · 2020-11-24 · 171 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • azure.microsoft.com documentation

    View community discussion4

    Candidate context

    Question 10 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

    1. M

       Moon

       2020-11-24

       171 upvotes

       I would go with "A & D". Data Lake: is typical storage for IoT Hub as in the below link https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-messages-d2c

    2. A

       Ayoubbts

       2020-12-24

       69 upvotes

       B and D are correct. In the statement we can read : « deploy several million sensors that will upload data to Azure ». Here the keyword is deploy. To deploy IoT solutions you have to use Azure IoT Hub. The Data Lake is for analytics not deployment. You will obviously use the Queue Storage to handle the amount of exchanges.

    3. S

       sbettani

       2020-11-26

       36 upvotes

       In my opinion Queue is correct, "Azure Queue Storage is a service for storing large numbers of messages. You access messages from anywhere in the world via authenticated calls using HTTP or HTTPS. A queue message can be up to 64 KB in size. A queue may contain millions of messages, up to the total capacity limit of a storage account. Queues are commonly used to create a backlog of work to process asynchronously." source "https://docs.microsoft.com/en-us/azure/storage/queues/storage-queues-introduction"

    4. E

       ExaminatorAZ

       2021-05-04

       16 upvotes

       "The sensors will upload DATA" it doesn't says messages or logs.

11. Question 11 of 25

    Select 2

    You have an Azure web app. You need to manage the settings of the web app from an iPhone. What are two Azure management tools that you can use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

    • AAzure CLI
    • Bthe Azure portal
    • CAzure Cloud Shell
    • DWindows PowerShell
    • EAzure Storage Explorer

    Show answer

    Correct answer: B, C

    How others answered

    • BC100%

    Explanation

    The correct answer is B and C. Anyone with and iPhone (IOS) can acess B) the Azure portal and C) Azure Cloud Shell to manage an Azure web app settings.

    Adapted from community discussion by RTT1976 · 2020-04-29 · 164 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • azure.microsoft.com documentation
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 11 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

    1. R

       RTT1976

       2020-04-29

       164 upvotes

       The correct answer is B and C. Anyone with and iPhone (IOS) can acess B) the Azure portal and C) Azure Cloud Shell to manage an Azure web app settings.

    2. L

       lilacwine

       2020-03-24

       82 upvotes

       I must have missed something in this question... You can manage web app settings from the Azure portal itself and with Azure Cloud Shell (integrated in the portal). Azure CLI depends on Cloud Shell, that depends on the Azure Portal. Azure portal must be one of the correct answers

    3. Q

       qqqqqq123456

       2020-11-04

       34 upvotes

       If so then in the options it should be "Azure mobile app" not "Azure CLI". Because you can't just run CLI without installing any extra app on iphone. But you can browse internet with default browser safari and visit Azure Portal. So in given wording, the correct answers are Azure Portal and Azure Cloud Shell.

    4. B

       BomberBerru

       2020-05-26

       23 upvotes

       Guys, the question is what two MANAGEMENT TOOLS can be used! Azure portal is not a TOOLS! is a portal!! so the B is finally wrong.

12. Question 12 of 25

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1. From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys You need to create VM1 in Subscription1 by using the command. Solution: From the Azure portal, launch Azure Cloud Shell and select PowerShell. Run the command in Cloud Shell. Does this meet the goal?

    • AYes
    • BNo

    Show answer

    Correct answer: A

    How others answered

    • A53%
    • B47%

    Only 53% agreed on this answer — treat it as contested rather than settled.

    Explanation

    I didn't think you could run the az bash commands in PowerShell but you CAN. I have just run exact command from the question in Powershell and it worked...………….. PS Azure:\> az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys SSH key files '/home/****/.ssh/id_rsa' and '/home/****/.ssh/id_rsa.pub' have been generated under ~/.ssh to allow SSH access to the VM. If using machines without permanent storage, back upyour keys to a safe location. { "fqdns": "", "id": "/subscriptions/****************/resourceGroups/RG1/providers/Microsoft.Compute/virtualMachines/VM1", "location": "uksouth", "macAddress": "************", "powerState": "VM running", "privateIpAddress": "10.0.0.4", "publicIpAddress": "51.x.x.x", "resourceGroup": "RG1", "zones": "" } Azure:/ PS Azure:\>

    Adapted from community discussion by PhilB1000 · 2020-01-30 · 78 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 12 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

    1. B

       Bobby_Popa

       2019-12-04

       85 upvotes

       you can run your Bash, and Azure CLI commands in the PowerShell console. It supports both!

    2. P

       PhilB1000

       2020-01-30

       78 upvotes

       I didn't think you could run the az bash commands in PowerShell but you CAN. I have just run exact command from the question in Powershell and it worked...………….. PS Azure:\> az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys SSH key files '/home/****/.ssh/id_rsa' and '/home/****/.ssh/id_rsa.pub' have been generated under ~/.ssh to allow SSH access to the VM. If using machines without permanent storage, back upyour keys to a safe location. { "fqdns": "", "id": "/subscriptions/****************/resourceGroups/RG1/providers/Microsoft.Compute/virtualMachines/VM1", "location": "uksouth", "macAddress": "************", "powerState": "VM running", "privateIpAddress": "10.0.0.4", "publicIpAddress": "51.x.x.x", "resourceGroup": "RG1", "zones": "" } Azure:/ PS Azure:\>

    3. A

       Ansible

       2021-06-22

       28 upvotes

       Its not PowerShell but CloudShell Support both Azure CLI and PowerShell Commands

    4. T

       tntbb

       2021-11-26

       Selected A11 upvotes

       The answer is Yes I tried to run the command in cloud shell and with "Powershell" selected. If you have correct Resource Group created, the VM can be created. The best way is feel it is to execute the script rather than reading those document (in theory!)

13. Question 13 of 25

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1. From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys You need to create VM1 in Subscription1 by using the command. Solution: From a computer that runs Windows 10, install Azure CLI. From PowerShell, sign in to Azure and then run the command. Does this meet the goal?

    • AYes
    • BNo

    Show answer

    Correct answer: A

    How others answered

    • A65%
    • B35%

    Only 65% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Guys, I just literally tried this and it worked. I downloaded installed Azure CLI on my Windows 10 machine. Ran PowerShell, logged into Azure with the “az login” command, and created a VM with the “az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys”. Try it yourself. You can delete the resource group after you are done. It works… The answer should be A. YES.

    Adapted from community discussion by marcusaurelius124 · 2021-03-03 · 130 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 13 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

    1. M

       marcusaurelius124

       2021-03-03

       130 upvotes

       Guys, I just literally tried this and it worked. I downloaded installed Azure CLI on my Windows 10 machine. Ran PowerShell, logged into Azure with the “az login” command, and created a VM with the “az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys”. Try it yourself. You can delete the resource group after you are done. It works… The answer should be A. YES.

    2. A

       alpha

       2021-02-06

       104 upvotes

       Answer is 'Yes' Install Azure CLI in Windows 10, Run command from Powershell. During command execution we need to login Azure.

    3. [

       [Removed]

       2021-04-09

       20 upvotes

       Not sure this is correct because of the wording in the solution. Solution: From a computer that runs Windows 10, install Azure CLI. From PowerShell, sign in to Azure and then run the command. "From PowerShell, sign in to Azure" - worded like that it might imply that you are logging in with 'Connect-AzAccount', and to create resources with az cli you need to login with 'az login' Kind of ambiguous question imho.

    4. O

       omenstrike2

       2021-02-08

       11 upvotes

       but you will need to login to Azure using Powershell that is installed on the Windows 10, right? It does not say Powershell from Azure

14. Question 14 of 25

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1. From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys You need to create VM1 in Subscription1 by using the command. Solution: From a computer that runs Windows 10, install Azure CLI. From a command prompt, sign in to Azure and then run the command. Does this meet the goal?

    • AYes
    • BNo

    Show answer

    Correct answer: A

    How others answered

    • A53%
    • B47%

    Only 53% agreed on this answer — treat it as contested rather than settled.

    Explanation

    The answer should ne YES. Because Azure CLI need to log in with the command az login. The solution answer "No" is the wrong answer. https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-windows?view=azure-cli-latest&tabs=azure-cli

    Adapted from community discussion by Maivicloud · 2021-02-07 · 105 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 14 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

    1. M

       Maivicloud

       2021-02-07

       105 upvotes

       The answer should ne YES. Because Azure CLI need to log in with the command az login. The solution answer "No" is the wrong answer. https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-windows?view=azure-cli-latest&tabs=azure-cli

    2. W

       woodmanhu

       2021-02-07

       29 upvotes

       The answer should be "Yes" as the question states to log in Azure FROM command prompt instead of Run Azure CLI command FROM Azure after you log into Azure portal on the website.

    3. 1

       126e81f

       2024-08-15

       4 upvotes

       Yes, you can use Azure CLI with the Windows Command Prompt (cmd). Here’s a brief guide to get you started: Install Azure CLI: Download the Azure CLI installer for Windows from the official Azure website. Run the installer and follow the prompts. Verify Installation: Open Command Prompt (cmd). Type az --version and press Enter. This command should display the installed version of Azure CLI and verify that it's correctly installed. Log In: To log in to your Azure account, type az login in the Command Prompt and press Enter. This will open a browser window for you to authenticate. Use Azure CLI Commands: Once logged in, you can use various Azure CLI commands. For example, az group list will list your resource groups. If you run into any issues or need specific commands, feel free to ask!

    4. A

       alphilla

       2023-10-16

       3 upvotes

       Guys these questions are tricky but answer is simple, once you have Azure Cli Installed you can run the commands from powershell or cdm, it will work the same script. "The Azure Command-Line Interface (CLI) is a cross-platform command-line tool that can be installed locally on Windows computers. You can use the Azure CLI for Windows to connect to Azure and execute administrative commands on Azure resources. The Azure CLI for Windows can also be used from a browser through the Azure Cloud Shell or run from inside a Docker container. For Windows, the Azure CLI is installed via a MSI, which gives you access to the CLI through the Windows Command Prompt (CMD) or PowerShell. When installing for Windows Subsystem for Linux (WSL), packages are available for your Linux distribution. "

15. Question 15 of 25

    Select 3

    An Azure administrator plans to run a PowerShell script that creates Azure resources. You need to recommend which computer configuration to use to run the script. Which three computers can run the script? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

    • Aa computer that runs macOS and has PowerShell Core 6.0 installed.
    • Ba computer that runs Windows 10 and has the Azure PowerShell module installed.
    • Ca computer that runs Linux and has the Azure PowerShell module installed.
    • Da computer that runs Linux and has the Azure CLI tools installed.
    • Ea computer that runs Chrome OS and uses Azure Cloud Shell.

    Show answer

    Correct answer: B, C, E

    How others answered

    • BCE93%

    Explanation

    A: wrong, you need Azure Powershell Module, Powershell only isn't enoght B: correct, you have Powershell and the module to create Azure resources C: correct, you have Powershell and the module to create Azure resources D: wrong, with Azure CLI you don't execute Powershell script E: correct, from a browser you can connect to Azure Portal and execute Azure Powershell comdlet

    Adapted from community discussion by stefano1856 · 2021-06-09 · 214 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 15 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

    1. S

       stefano1856

       2021-06-09

       214 upvotes

       A: wrong, you need Azure Powershell Module, Powershell only isn't enoght B: correct, you have Powershell and the module to create Azure resources C: correct, you have Powershell and the module to create Azure resources D: wrong, with Azure CLI you don't execute Powershell script E: correct, from a browser you can connect to Azure Portal and execute Azure Powershell comdlet

    2. S

       Saravana12g

       2021-06-11

       38 upvotes

       Microsoft released the new AZ PowerShell module, and since then, that is the recommended way to connect to Microsoft Azure using PowerShell. When using MacOS and Linux, the PowerShell Core 6.x is the minimum requirement for that new module. A- Just having Powershell Core 6.0 is not enough- Need Powershell Module to be installed-NO B- Powershell Module Installed on Windows-YES C- Powershell Module Installed-YES D- NO E- Browser Cloudshell has Powershell Module installed by default-YES

    3. K

       kwldgseeker

       2022-04-16

       27 upvotes

       A, B, E are the correct options. The clue as to the context of the question lies in the mention of "PowerShell Core 6.0". It is important to understand that PowerShell Core was developed as a cross-platform solution while PowerShell (at the time the question was written) was compatible with Windows only. With that in mind: A. Correct. PowerShell Core 6.0 is cross-platform and runs on MacOS B. Correct. PowerShell was originally developed for Windows so is correct. C. Incorrect. PowerShell was not compatible with Linux at the time this question was written. PowerShell Core 6.0 is required here. D. Incorrect. CLI tools cannot run PowerShell scripts. E. Correct. Cloud Shell is available to all modern browser environments regardless of underlying OS. https://devblogs.microsoft.com/powershell/powershell-core-6-0-generally-available-ga-and-supported/ Since the time this question was written, Microsoft has updated PowerShell (PowerShell 7.0) to be cross-platform. Hence there are now 4 correct answers, A,B,C, and E which makes for some mighty fine confusion. This question should be updated.

    4. R

       Richard_M

       2021-06-10

       19 upvotes

       After long back and forth reading other responses, I have to agree with B,C,E. The prompt states "Which three computers can run the script?". The 3 mentioned, are the 3 best options AS IS that CAN run it. While A and D COULD run it with additional steps, that doesn't satisfy, in my opinion, the prompt

16. Question 16 of 25

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1. From Azure documentation, you have the following command that creates a virtual machine named VM1. az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys You need to create VM1 in Subscription1 by using the command. Solution: From the Azure portal, launch Azure Cloud Shell and select Bash. Run the command in Cloud Shell. Does this meet the goal?

    • AYes
    • BNo

    Show answer

    Correct answer: A

    How others answered

    • A64%
    • B36%

    Only 64% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Answer is correct but need to understand why subscription and resource group are mentioned in question. While using the command subscription is not mentioned and some of us would look why subscription command was not used however all details mentioned in question was mentioned. For creating a virtual machine though power shall or bas, there is no requirement to put the subscription details. Name of VM and resource group are sufficient to create a vm.

    Adapted from community discussion by sham21 · 2021-05-18 · 31 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 16 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

    1. S

       sham21

       2021-05-18

       31 upvotes

       Answer is correct but need to understand why subscription and resource group are mentioned in question. While using the command subscription is not mentioned and some of us would look why subscription command was not used however all details mentioned in question was mentioned. For creating a virtual machine though power shall or bas, there is no requirement to put the subscription details. Name of VM and resource group are sufficient to create a vm.

    2. M

       mauchi

       2021-05-30

       14 upvotes

       I think the fact that you launch the Cloud shell from the Azure portal already implies that you have a subscription.

    3. P

       patrickrw99

       2023-04-04

       13 upvotes

       The command AZ VM create is not a PowerShell Command, it is a Bash command.

    4. S

       SAFM

       2023-10-02

       9 upvotes

       It's a bash command, not PowerShell, please be careful not to confuse other users!

17. Question 17 of 25

    You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region. Which Azure service should you use from the Azure portal to view service failure notifications that can affect the availability of VM1?

    • AAzure Service Fabric
    • BAzure Monitor
    • CAzure virtual machines
    • DAzure Advisor

    Show answer

    Correct answer: B

    How others answered

    • B67%
    • C33%

    Only 67% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Azure Monitor maximizes the availability and performance of your applications by delivering a comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments. It helps you understand how your applications are performing and proactively identifies issues affecting them and the resources they depend on.

    Adapted from community discussion by Himanshumittal500 · 2020-02-15 · 127 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 17 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

    1. H

       Himanshumittal500

       2020-02-15

       127 upvotes

       Azure Monitor maximizes the availability and performance of your applications by delivering a comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments. It helps you understand how your applications are performing and proactively identifies issues affecting them and the resources they depend on.

    2. T

       troublestarterx

       2020-05-17

       74 upvotes

       This is in Azure Virtuel Machine : https://docs.microsoft.com/en-us/azure/virtual-machines/maintenance-notifications-portal

    3. B

       Bernal8

       2021-04-22

       24 upvotes

       The answer is Azure Monitor, weeks ago i attended to a Msoft AZ900 course and i asked the instructor this question.

    4. N

       Nilzuka

       2020-08-31

       18 upvotes

       I've had this question at the exam, it's C. Azure Monitor wasn't even part of the answers.

18. Question 18 of 25

    You have an Azure Sentinel workspace. You need to automate responses to threats detected by Azure Sentinel. What should you use?

    • Aadaptive network hardening in Azure Security Center
    • BAzure Service Health
    • CAzure Monitor workbooks
    • Dadaptive application controls in Azure Security Center

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    Either the answer is playbooks (which is not a provided choice) or the question itself is wrong. Workbooks does not provide for automation. It is a visualization / reporting tool. If you still doubt, look up "automate responses to threats detected by Azure Sentinel." in Google and you will find "Playbooks" in the results and nowhere will you find "Workbooks". I really love the spirit and intent of the site and have respect fort the small team behind it. At the same time I have to question where these questions came from. There are far too many discrepancies, errors and omissions to justify the asking price (which I regrettably paid as I thought my membership was for all tests, not just the AZ-900!). Clean up the discrepancies, errors and omissions (and include more than just one test) and it will be worth the asking price.

    Adapted from community discussion by kwldgseeker · 2022-04-17 · 41 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 18 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

    1. K

       kwldgseeker

       2022-04-17

       41 upvotes

       Either the answer is playbooks (which is not a provided choice) or the question itself is wrong. Workbooks does not provide for automation. It is a visualization / reporting tool. If you still doubt, look up "automate responses to threats detected by Azure Sentinel." in Google and you will find "Playbooks" in the results and nowhere will you find "Workbooks". I really love the spirit and intent of the site and have respect fort the small team behind it. At the same time I have to question where these questions came from. There are far too many discrepancies, errors and omissions to justify the asking price (which I regrettably paid as I thought my membership was for all tests, not just the AZ-900!). Clean up the discrepancies, errors and omissions (and include more than just one test) and it will be worth the asking price.

    2. T

       TamHas

       2022-01-22

       22 upvotes

       This answer is correct, see statement from Microsoft site: Once you have connected your data sources to Microsoft Sentinel, you can visualize and monitor the data using the Microsoft Sentinel adoption of Azure Monitor Workbooks, which provides versatility in creating custom dashboards. While the Workbooks are displayed differently in Microsoft Sentinel, it may be useful for you to see how to create interactive reports with Azure Monitor Workbooks. Microsoft Sentinel allows you to create custom workbooks across your data, and also comes with built-in workbook templates to allow you to quickly gain insights across your data as soon as you connect a data source. https://docs.microsoft.com/en-us/azure/sentinel/monitor-your-data

    3. T

       TheKraemer

       2022-01-13

       13 upvotes

       The explanation is missing here! I don't spend money for this!!

    4. T

       Tin_Nguyen

       2022-04-05

       7 upvotes

       C for me "The company will also use Azure Monitor Workbooks to automate responses to threats." https://docs.microsoft.com/en-us/learn/modules/protect-against-security-threats-azure/3-detect-respond-threats-sentinel?ns-enrollment-type=learningpath&ns-enrollment-id=learn.az-900-describe-general-security-network-security-features

19. Question 19 of 25

    Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. Sixty percent of the virtual machines have Windows Server 2016 installed, while the other forty percent has Ubuntu Linux installed. You are required to make sure that the administrative effort, needed for this process, is reduced by employing a suitable Azure service. Solution: You recommend the use of Azure DevTest Labs. Does the solution meet the goal?

    • AYes
    • BNo

    Show answer

    Correct answer: A

    How others answered

    • A88%

    Explanation

    Use DevTest Labs for free* Answer is correct Quickly provision development and test environments Minimize waste with quotas and policies Set automated shutdowns to minimize costs Build Windows and Linux environments

    Adapted from community discussion by Tommipeng · 2021-07-07 · 58 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • azure.microsoft.com documentation
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • azure.microsoft.com documentation

    View community discussion4

    Candidate context

    Question 19 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

    1. T

       Tommipeng

       2021-07-07

       58 upvotes

       Use DevTest Labs for free* Answer is correct Quickly provision development and test environments Minimize waste with quotas and policies Set automated shutdowns to minimize costs Build Windows and Linux environments

    2. Z

       Zedan12

       2023-01-30

       Selected A9 upvotes

       If we are using Test environment then the answer is Azure DevTest Labs and if the environment is production then the answer is Virtual Machine Scale Sets. Correct me if i am wrong.

    3. J

       Joipanom

       2023-10-20

       5 upvotes

       Yes, recommending the use of Azure DevTest Labs is a suitable solution for this scenario. Azure DevTest Labs is designed to manage the lifecycle of development and testing environments, providing automation for the creation and deletion of resources, including virtual machines. It allows for rapid provisioning and de-provisioning of VMs, which aligns well with the requirement of deploying a large number of custom virtual machines on a weekly basis and removing them within the same week. It also supports both Windows and Linux operating systems, covering the mix of OSes mentioned in the scenario. By utilizing Azure DevTest Labs, the developers can automate the deployment and removal process, which will significantly reduce the administrative effort required for these operations. Furthermore, it provides cost-management features, reusable templates, and integrations with various tools, enhancing the efficiency of the deployment process. Therefore, the answer is: A. Yes

    4. A

       AntonioTech

       2023-08-29

       4 upvotes

       The answer is A. Yes The solution meets the goal. Azure DevTest Labs is a suitable Azure service for managing the deployment and lifecycle of custom virtual machines, especially when they need to be created and removed frequently, as in your scenario. With Azure DevTest Labs, you can create a lab environment where developers can quickly create and manage virtual machines for development and testing purposes. The lab management capabilities allow you to set up policies, quotas, and schedules, which can help reduce administrative effort and manage costs. By using Azure DevTest Labs, developers can easily deploy custom virtual machines with Windows Server 2016 and Ubuntu Linux as needed, and these VMs can be automatically cleaned up or removed at the end of the week. This approach streamlines the deployment and management process, ensuring that administrative effort is reduced while meeting the dynamic requirements of your developers. Therefore, recommending the use of Azure DevTest Labs is a suitable solution for achieving the goal of reducing administrative effort for deploying and managing a large number of custom virtual machines on a weekly basis.

20. Question 20 of 25

    You need to configure an Azure solution that meets the following requirements: ✑ Secures websites from attacks ✑ Generates reports that contain details of attempted attacks What should you include in the solution?

    • AAzure Firewall
    • Ba network security group (NSG)
    • CAzure Information Protection
    • DDDoS protection

    Show answer

    Correct answer: D

    How others answered

    • D100%

    Explanation

    Firewall and NSG BOTH Allow/Deny. The difference between them is (mainly among other things) : FIREWALL = acts as a defence in depth PERIMETER (OUTSIDE the virtual network) filter = between a virtual network and the outside world NSG : acts as a defence in depth NETWORK/SUBNET (INSIDE/WITHIN the virtual network filter) = at the resources level Please correct me if I am wrong. https://docs.microsoft.com/en-us/learn/modules/secure-network-connectivity-azure/

    Adapted from community discussion by Mozbius_ · 2022-05-22 · 32 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 20 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

    1. J

       Jay_azure

       2021-04-11

       188 upvotes

       Attack is the Key word for DDOS. Rules is keyword for Firewall. Allow/Deny is the Keyword for NSG

    2. R

       Ragijo

       2020-05-17

       96 upvotes

       Azure Firewall doesn't protect from attacks, only filter traffic at layer 3 and layer 7, so DDoS is the correct answer.

    3. M

       Mozbius_

       2022-05-22

       32 upvotes

       Firewall and NSG BOTH Allow/Deny. The difference between them is (mainly among other things) : FIREWALL = acts as a defence in depth PERIMETER (OUTSIDE the virtual network) filter = between a virtual network and the outside world NSG : acts as a defence in depth NETWORK/SUBNET (INSIDE/WITHIN the virtual network filter) = at the resources level Please correct me if I am wrong. https://docs.microsoft.com/en-us/learn/modules/secure-network-connectivity-azure/

    4. B

       barchetta

       2020-08-09

       13 upvotes

       Does ddos protect from a sql injection attack? Would you not call that an attack? Me thinks not. Another ambiguous MS question.

21. Question 21 of 25

    Your company has virtual machines (VMs) hosted in Microsoft Azure. The VMs are located in a single Azure virtual network named VNet1. The company has users that work remotely. The remote workers require access to the VMs on VNet1. You need to provide access for the remote workers. What should you do?

    • AConfigure a Site-to-Site (S2S) VPN.
    • BConfigure a VNet-toVNet VPN.
    • CConfigure a Point-to-Site (P2S) VPN.
    • DConfigure DirectAccess on a Windows Server 2012 server VM.
    • EConfigure a Multi-Site VPN

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    Correct Answer. A Point-to-Site (P2S) VPN gateway connection lets you create a secure connection to your virtual network from an individual client computer. ... P2S VPN is also a useful solution to use instead of S2S VPN when you have only a few clients that need to connect to a VNet.

    Adapted from community discussion by BinuRaj · 2021-07-02 · 106 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 21 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

    1. B

       BinuRaj

       2021-07-02

       106 upvotes

       Correct Answer. A Point-to-Site (P2S) VPN gateway connection lets you create a secure connection to your virtual network from an individual client computer. ... P2S VPN is also a useful solution to use instead of S2S VPN when you have only a few clients that need to connect to a VNet.

    2. I

       IndyB

       2021-12-12

       48 upvotes

       Answer = C. For people who want to read more about the VPN Gateway designs (point-to-site, site-to-site, VNet to VNet etc.), use this link to learn more: https://docs.microsoft.com/en-us/azure/vpn-gateway/design

    3. E

       emptyH

       2023-01-30

       Selected C7 upvotes

       Point = the remote user. Site = the Vnet. If the users have P2S they can hit the vnet on a per user basis.

    4. P

       Petergrayston

       2021-07-01

       5 upvotes

       Correct. Point-to-Site VPN connection (VPN over OpenVPN, IKEv2, or SSTP), which lets you connect to your virtual network from a remote location, such as from a conference or from home. Source: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways

22. Question 22 of 25

    This question requires that you evaluate the underlined text to determine if it is correct. Azure Key Vault is used to store secrets for Azure Active Directory (Azure AD) user accounts. Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed`. If the statement is incorrect, select the answer choice that makes the statement correct.

    • ANo change is needed
    • BAzure Active Directory (Azure AD) administrative accounts
    • CPersonally Identifiable Information (PII)
    • Dserver applications

    Show answer

    Correct answer: D

    How others answered

    • D63%
    • A35%

    Only 63% agreed on this answer — treat it as contested rather than settled.

    Explanation

    I think that underlined text in the phrase is: "...Azure Active Directory (Azure AD) user accounts." so if you read the "Important" section in the link https://docs.microsoft.com/en-us/learn/modules/manage-secrets-with-azure-key-vault/2-what-is-key-vault You can read: "Key Vault is designed to store configuration secrets for server apps."

    Adapted from community discussion by MCLC2021 · 2021-06-06 · 30 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 22 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

    1. M

       MCLC2021

       2021-06-06

       30 upvotes

       I think that underlined text in the phrase is: "...Azure Active Directory (Azure AD) user accounts." so if you read the "Important" section in the link https://docs.microsoft.com/en-us/learn/modules/manage-secrets-with-azure-key-vault/2-what-is-key-vault You can read: "Key Vault is designed to store configuration secrets for server apps."

    2. T

       Tolulee

       2020-04-29

       18 upvotes

       Azure Key Vault enables Microsoft Azure applications and users to store and use several types of secret/key data: Both application and users. A is correct

    3. C

       cetag37681

       2020-01-31

       17 upvotes

       D - Should be the answer. Why would Vault be used to store (Azure AD) user accounts but not (Azure AD) admin accounts? makes no sense.

    4. S

       shashu07

       2020-11-17

       12 upvotes

       Answer A, as per attached Microsoft Article function that connects to an Azure Key Vault using Azure Active Directory authentication, and then uses a secret stored in the vault to query a remote service. // Create a Key Vault client with an Active Directory authentication callback var keyVault = new KeyVaultClient(async (string authority, string resource, string scope) => { var authContext = new AuthenticationContext(authority); var credential = new ClientCredential(adClientId, adKey); var token = await authContext.AcquireTokenAsync(resource, credential); return token.AccessToken; https://devblogs.microsoft.com/dotnet/storing-and-using-secrets-in-azure/

23. Question 23 of 25

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify an Azure firewall. Does this meet the goal?

    • AYes
    • BNo

    Show answer

    Correct answer: B

    How others answered

    • B73%
    • A27%

    Only 73% agreed on this answer — treat it as contested rather than settled.

    Explanation

    You can either modify a firewall or modify a NSG. For basic allow/deny traffic, NSG is enough. But the same can be achieved with Firewall as well. "The Azure Firewall service complements network security group functionality. Together, they provide better "defense-in-depth" network security. Network security groups provide distributed network layer traffic filtering to limit traffic to resources within virtual networks in each subscription. Azure Firewall is a fully stateful, centralized network firewall as-a-service, which provides network- and application-level protection across different subscriptions and virtual networks." https://docs.microsoft.com/en-us/azure/firewall/firewall-faq

    Adapted from community discussion by foreverlearner · 2020-04-26 · 53 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 23 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

    1. F

       foreverlearner

       2020-04-26

       53 upvotes

       You can either modify a firewall or modify a NSG. For basic allow/deny traffic, NSG is enough. But the same can be achieved with Firewall as well. "The Azure Firewall service complements network security group functionality. Together, they provide better "defense-in-depth" network security. Network security groups provide distributed network layer traffic filtering to limit traffic to resources within virtual networks in each subscription. Azure Firewall is a fully stateful, centralized network firewall as-a-service, which provides network- and application-level protection across different subscriptions and virtual networks." https://docs.microsoft.com/en-us/azure/firewall/firewall-faq

    2. P

       PhilB1000

       2020-01-30

       14 upvotes

       https://docs.microsoft.com/en-us/azure/firewall/firewall-faq#what-is-the-difference-between-network-security-groups-nsgs-and-azure-firewall What is the difference between Application Gateway WAF and Azure Firewall? The Web Application Firewall (WAF) is a feature of Application Gateway that provides centralized inbound protection of your web applications from common exploits and vulnerabilities. Azure Firewall provides inbound protection for non-HTTP/S protocols (for example, RDP, SSH, FTP), outbound network-level protection for all ports and protocols, and application-level protection for outbound HTTP/S.

    3. L

       lehoang15tuoi

       2020-12-03

       15 upvotes

       Your logic is not clear. To put it simply, both Firewall and NSG can be used to block traffic. Think of them like 2 gates on the same walkway. You open one and close one, can you pass through both? The NSG default rule is blocking all inbound traffic, so if you don’t do anything with it, it doesn’t matter what you do with the firewall.

    4. N

       NoNotSpam

       2019-11-07

       11 upvotes

       I disagree. The question setup does not mention that azure firewall has been deployed (since it is not deployed by default). If it was not deployed, there is no need to modify it

24. Question 24 of 25

    To what should an application connect to retrieve security tokens?

    • Aan Azure Storage account
    • BAzure Active Directory (Azure AD)
    • Ca certificate store
    • Dan Azure key vault

    Show answer

    Correct answer: B

    How others answered

    • B52%
    • D47%

    Only 52% agreed on this answer — treat it as contested rather than settled.

    Explanation

    The answer B is correct, because it asks what "an application should connect to". An Application cannot connect to a Key Vault.

    Adapted from community discussion by RTT1976 · 2019-10-26 · 67 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 24 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

    1. V

       vanr2000

       2019-07-29

       186 upvotes

       It should be D, instead of B. Azure key vault keep Security Tokens https://docs.microsoft.com/en-us/azure/key-vault/key-vault-whatis

    2. J

       JasonB

       2019-09-02

       148 upvotes

       Not Agree The Azure Key Vault store Keys. Azure AD give acces tokens.

    3. R

       RTT1976

       2019-10-26

       67 upvotes

       The answer B is correct, because it asks what "an application should connect to". An Application cannot connect to a Key Vault.

    4. S

       shashu07

       2020-11-16

       22 upvotes

       Question is about accessing / retrieving security tokens token from Application & not storing the same. Microsoft identity platform authenticates users and provides security tokens, such as access token, refresh token, and ID token, that allow a client application to access protected resources on a resource server. https://docs.microsoft.com/en-us/azure/active-directory/develop/security-tokens

25. Question 25 of 25

    Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to Azure AD via the Internet. You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords. Solution: You configure the use of Azure AD Identity Protection. Does the solution meet the goal?

    • AYes
    • BNo

    Show answer

    Correct answer: A

    How others answered

    • A82%
    • B18%

    Explanation

    If you were going thru the MS online learning like me - it talks about Conditional Access but not Identity Protection. Good to know that Conditional Access is a subset of, or a sister tool to Identity Protection.

    Adapted from community discussion by mrgilbe1 · 2022-01-11 · 157 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 25 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-900 or CertExamHQ.

    1. M

       mrgilbe1

       2022-01-11

       157 upvotes

       If you were going thru the MS online learning like me - it talks about Conditional Access but not Identity Protection. Good to know that Conditional Access is a subset of, or a sister tool to Identity Protection.

    2. D

       Dinesh_W

       2021-07-22

       85 upvotes

       Risk detection and remediation Identity Protection identifies risks of many types, including: Anonymous IP address use Atypical travel Malware linked IP address Unfamiliar sign-in properties Leaked credentials Password spray

    3. B

       blobstorage

       2022-01-26

       31 upvotes

       Same happened to me, just realized Identity Protection existed.

    4. A

       AntonioTech

       2023-08-30

       14 upvotes

       A. Yes Azure AD Identity Protection is a comprehensive solution that helps you protect your organization's identities and detect and respond to potential identity-related risks. One of its features is the ability to configure risk-based policies. In this case, you can set up a risk-based policy that triggers a password change prompt for users when they connect to Azure AD via the internet from an unidentified IP address. This helps enhance security by encouraging users to change their passwords in case of suspicious activity. So, the solution of configuring Azure AD Identity Protection meets the goal of encouraging users to change passwords under specific risk conditions.

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-900 practice, question 1 of 25