AZ-900 practice questions 221–230

1. Question 221 · 462 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: No - Authorization to access Azure resources can be provided by other identity providers by using federation. A commonly used example of this is to federate your on- premises Active Directory environment with Azure AD and use this federation for authentication and authorization. Box 2: Yes - As described above, third-party cloud services and on-premises Active Directory can be used to access Azure resources. This is known as 'federation'. Federation is a collection of domains that have established trust. The level of trust may vary, but typically includes authentication and almost always includes authorization. A typical federation might include a number of organizations that have established trust for shared access to a set of resources. Box 3: Yes - Azure Active Directory (Azure AD) is a centralized identity provider in the cloud. This is the primary built-in authentication and authorization service to provide secure access to Azure resources. References: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed https://docs.microsoft.com/en-us/azure/active-directory/develop/authentication-scenarios

   Source: Adapted from community discussion — babuvt

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 222 · 462 in bank

   HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   You can configure a lock on a resource group to prevent the accidental deletion of the resource group. The lock applies to everyone, including global administrators. If you want to delete the resource group, the lock must be removed first. As an administrator, you may need to lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. You can set the lock level to CanNotDelete or ReadOnly. In the portal, the locks are called Delete and Read-only respectively. ✑ CanNotDelete means authorized users can still read and modify a resource, but they can't delete the resource. ReadOnly means authorized users can read a resource, but they can't delete or update the resource. Applying this lock is similar to restricting all authorized users to the permissions granted by the Reader role. Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

   Source: Adapted from community discussion — AzureCloud07

   

   Next question

3. Question 223 · 462 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Correct. Authentication means are you who you say you are. Authorization means do you have the required authority/permission to do what you want to do

   Source: Adapted from community discussion — kc_rian

   

   Next question

4. Question 224 · 462 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Single sign-on is an authentication method that allows users to sign in using one set of credentials to login across applications. Single sign-on makes it easier to manage passwords and increases security capabilities. Authorization is the process of establishing what level of access a legitimate user or service should have. During sign-in, Conditional Access collects signals from the user, makes decisions based on those signals, and then enforces that decision by allowing or denying the access request or challenging for a multifactor authentication response. Reference: https://docs.microsoft.com/learn/modules/secure-access-azure-identity-services/3-what-is-azure-active-directory https://docs.microsoft.com/learn/modules/secure-access-azure-identity-services/2-compare-authentication-authorization https://docs.microsoft.com/learn/modules/secure-access-azure-identity-services/4-what-are-mfa-conditional-access

   Source: Adapted from community discussion — Pieter1337

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

5. Question 225 · 462 in bank

   What is guaranteed in an Azure Service Level Agreement (SLA) for virtual machines?

   • Auptime
   • Bfeature availability
   • Cbandwidth
   • Dperformance

   Show answer

   Answer: A

   Explanation

   "Feature availability Some services or VM features are only available in certain regions, such as specific VM sizes or storage types. There are also some global Azure services that do not require you to select a particular region, such as Azure Active Directory, Traffic Manager, or Azure DNS. To assist you in designing your application environment, you can check the availability of Azure services across each region. You can also programmatically query the supported VM sizes and restrictions in each region." Link: https://docs.microsoft.com/en-us/azure/virtual-machines/regions Comment - For sure nothing related to SLA, but regions.

   Source: Adapted from community discussion — hercu

   References

   • azure.microsoft.com documentation
   • azure.microsoft.com documentation
   • Microsoft Learn
   • azure.microsoft.com documentation

   Next question

6. Question 226 · 462 in bank

   Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are planning a strategy to deploy numerous web servers and database servers to Azure. This strategy should allow for connection types between the web servers and database servers to be controlled. Solution: You include network security groups (NSGs) in your strategy. Does the solution meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: A

   Explanation

   You can use an Azure network security group to filter network traffic to and from Azure resources in an Azure virtual network. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources. For each rule, you can specify source and destination, port, and protocol.

   Source: Adapted from community discussion — BinuRaj

   References

   • Microsoft Learn

   Next question

7. Question 227 · 462 in bank

   HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Public Preview means that the service is in public beta and can be tried out by anyone with an Azure subscription. Services in public preview are often offered at a discount price. Public previews are excluded from SLAs and in some cases, no support is offered. Incorrect Answers: Services in private preview are available only to selected people who has signed up to the private preview program. ✑ Services in development are not available to the public. ✑ Services provided under an Enterprise Agreement (EA) subscription are available only to the subscription owner. Reference: https://www.neowin.net/news/several-more-azure-services-now-available-in-private-public-preview/

   References

   • azure.microsoft.com documentation

   

   Next question

8. Question 228 · 462 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company plans to purchase an Azure subscription. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Basic support plan. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   The Basic support plan does not have any technical support for engineers. Access to Support Engineers via email or phone is available in the following support plans: Premier, Professional Direct and standard. Reference: https://azure.microsoft.com/en-gb/support/plans/

   Source: Adapted from community discussion — DanStoppleman

   References

   • azure.microsoft.com documentation
   • azure.microsoft.com documentation
   • azure.microsoft.com documentation

   Next question

9. Question 229 · 462 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company plans to purchase an Azure subscription. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Standard support plan. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   The Standard, Professional Direct, and Premier support plans have technical support for engineers via email and phone. Reference: https://azure.microsoft.com/en-gb/support/plans/

   Source: Adapted from community discussion — Dermondo

   References

   • azure.microsoft.com documentation

   Next question

10. Question 230 · 462 in bank

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company plans to purchase an Azure subscription. The company's support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to recommend which support plan meets the support policy requirement. Solution: Recommend a Premier support plan. Does this meet the goal?

    • AYes
    • BNo

    Show answer

    Answer: A

    Explanation

    The Standard, Professional Direct, and Premier support plans have technical support for engineers via email and phone. Reference: https://azure.microsoft.com/en-gb/support/plans/

    Source: Adapted from community discussion — skylabb

    References

    • azure.microsoft.com documentation
    • azure.microsoft.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-900 practice, question 221. 462 questions available.