Microsoft Azure Fundamentals462 questions across 47 pages are complete and free, with no account or card.
462 questions in this bank
Free access · progress saved on this device
Which resources can be used as a source for a Network security group inbound security rule?
Answer: B
Source or destination: Any, or an individual IP address, classless inter-domain routing (CIDR) block (10.0.0.0/24, for example), service tag, or application security group. Reference: https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview
Source: Adapted from community discussion — TTAKU
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. Sixty percent of the virtual machines have Windows Server 2016 installed, while the other forty percent has Ubuntu Linux installed. You are required to make sure that the administrative effort, needed for this process, is reduced by employing a suitable Azure service. Solution: You recommend the use of Azure Reserved Virtual Machines (VM) Instances. Does the solution meet the goal?
Answer: B
An Azure Reserved Virtual Machine Instance (RI) is a virtual machine (VM) on the Microsoft Azure public cloud that has been reserved for dedicated use on a one- or three-year basis. ... Azure RIs are available for all Azure VM types, except for the A-series, A_v2 series and the G-series
Source: Adapted from community discussion — SyedAadRazaDevops
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Reference: https://docs.microsoft.com/en-us/azure/sentinel/tutorial-respond-threats-playbook
Source: Adapted from community discussion — mintyo
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Reference: https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-dnat-policy
Source: Adapted from community discussion — Georgess
HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Reference: https://docs.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview
Source: Adapted from community discussion — MasoudK
You have an Azure Sentinel workspace. You need to automate responses to threats detected by Azure Sentinel. What should you use?
Answer: C
Either the answer is playbooks (which is not a provided choice) or the question itself is wrong. Workbooks does not provide for automation. It is a visualization / reporting tool. If you still doubt, look up "automate responses to threats detected by Azure Sentinel." in Google and you will find "Playbooks" in the results and nowhere will you find "Workbooks". I really love the spirit and intent of the site and have respect fort the small team behind it. At the same time I have to question where these questions came from. There are far too many discrepancies, errors and omissions to justify the asking price (which I regrettably paid as I thought my membership was for all tests, not just the AZ-900!). Clean up the discrepancies, errors and omissions (and include more than just one test) and it will be worth the asking price.
Source: Adapted from community discussion — kwldgseeker
DRAG DROP - Match the Azure services benefits to the correct descriptions. Instructions: To answer, drag the appropriate benefit from the column on the left to its description on the right. Each benefit may be used once, more than once, or not at all. NOTE: Each correct match is worth one point. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Box 1: Microsoft Sentinel - Microsoft Sentinel is a scalable, cloud-native, security information and event management (SIEM) and security orchestration, automation, and response (SOAR) solution. Microsoft Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for attack detection, threat visibility, proactive hunting, and threat response. Box 2: Microsoft Defender for Cloud You can find your overall secure score, as well as your score per subscription, through the Azure portal. Defender for Cloud displays your secure score prominently in the portal. Box 3: Azure Key Vault - A favored approach to store the credentials or keys in the Azure Key Vault as secrets and reference the secrets as environment variables in our Azure functions apps. Reference: https://docs.microsoft.com/en-us/azure/sentinel/overview https://docs.microsoft.com/en-us/azure/defender-for-cloud/secure-score-access-and-track https://levelup.gitconnected.com/a-secure-way-to-use-credentials-and-secrets-in-azure-functions-7ec91813c807
Source: Adapted from community discussion — kamal_004
HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Box: collection of policy definitions An Azure Policy initiative is a collection of Azure Policy definitions, or rules, that are grouped together towards a specific goal or purpose. Azure initiatives simplify management of your policies by grouping a set of policies together, logically, as a single item. Reference: https://docs.microsoft.com/en-us/azure/defender-for-cloud/security-policy-concept
Source: Adapted from community discussion — kamal_004
You have an Azure subscription. You need to review your secure score. What should you use?
Answer: D
HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Box: Microsoft Defender for Cloud Lock down inbound traffic to your Azure Virtual Machines with Microsoft Defender for Cloud's just-in-time (JIT) virtual machine (VM) access feature. This reduces exposure to attacks while providing easy access when you need to connect to a VM. Reference: https://docs.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-usage
Source: Adapted from community discussion — zellck
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
AZ-900 practice, question 141. 462 questions available.
Version 1.0.0. How we source questions