Microsoft Azure Fundamentals (AZ-900) Exam Prep: Azure compute, networking and storage

1. السؤال 1 من 20

   With Azure Virtual Machines, who installs updates and patches inside the VM's operating system?

   • AThe company's internet service provider
   • BNobody, because Azure VMs never need patches
   • CMicrosoft, because a VM is a SaaS product
   • DYou, the customer
   أظهر الإجابة

   الإجابة: D. You, the customer

   Azure VMs are IaaS. You control the operating system and still manage patching, updates and configuration inside the VM.

2. السؤال 2 من 20

   Which Azure service creates and manages a group of identical, load-balanced VMs that can scale automatically?

   • AVirtual Machine Scale Sets
   • BAzure Container Instances
   • CAzure Virtual Desktop
   • DAvailability sets
   أظهر الإجابة

   الإجابة: A. Virtual Machine Scale Sets

   Virtual Machine Scale Sets manage groups of identical, load-balanced VMs and can scale out or in based on demand or a schedule.

3. السؤال 3 من 20

   In a VM availability set, what is a fault domain?

   • AVMs that share a power or network failure point
   • BA region that is paired with another region in the same geography
   • CA subnet that blocks incoming traffic from the internet
   • DA group of VMs that can be rebooted together during planned maintenance
   أظهر الإجابة

   الإجابة: A. VMs that share a power or network failure point

   A fault domain groups VMs that share a potential power or network failure point. An update domain groups VMs that can be rebooted together during maintenance.

4. السؤال 4 من 20

   A company wants staff to use Windows desktops and apps that run in Azure, so company data stays off their own devices. Which service fits?

   • AAzure Virtual Desktop
   • BAzure Data Box
   • CAzure DNS
   • DAzure Queue Storage
   أظهر الإجابة

   الإجابة: A. Azure Virtual Desktop

   Azure Virtual Desktop keeps desktops and apps in Azure, which helps reduce data exposure on local devices.

5. السؤال 5 من 20

   Which Azure service orchestrates and manages the life cycle of a large fleet of containers?

   • AAzure Storage Explorer
   • BAzure Kubernetes Service (AKS)
   • CAzure Functions
   • DAzure Container Instances
   أظهر الإجابة

   الإجابة: B. Azure Kubernetes Service (AKS)

   AKS is a container orchestration service. Azure Container Instances is the simplest way to run a single container without managing VMs.

6. السؤال 6 من 20

   Which service hosts web apps, REST APIs and mobile back ends without you managing the infrastructure?

   • AAzure ExpressRoute
   • BAzure App Service
   • CAzure File Sync
   • DAzure Virtual Machines
   أظهر الإجابة

   الإجابة: B. Azure App Service

   App Service lets you build and host web apps, background jobs, mobile back ends and REST APIs without managing infrastructure, with automatic scaling and high availability.

7. السؤال 7 من 20

   In an Azure virtual network, what are subnets used for?

   • AEncrypting all of the data written to managed VM disks
   • BSplitting the IP address space into smaller parts
   • CRegistering new domain names for websites
   • DStoring large files such as video and backups
   أظهر الإجابة

   الإجابة: B. Splitting the IP address space into smaller parts

   You define a private IP address space for a virtual network and divide it into subnets.

8. السؤال 8 من 20

   How does traffic travel between two peered Azure virtual networks?

   • AThrough each user's home internet router
   • BOn a physical Data Box device shipped by courier
   • CPrivately, on the Microsoft backbone network
   • DOver the public internet through a VPN gateway
   أظهر الإجابة

   الإجابة: C. Privately, on the Microsoft backbone network

   Traffic between peered virtual networks is private and travels on the Microsoft backbone network, never entering the public internet.

9. السؤال 9 من 20

   One remote employee needs an encrypted connection from a laptop to an Azure virtual network. Which connection type fits?

   • AVirtual network peering
   • BPoint-to-site VPN
   • CSite-to-site VPN
   • DExpressRoute Global Reach
   أظهر الإجابة

   الإجابة: B. Point-to-site VPN

   A point-to-site connection links an individual device to a virtual network. Site-to-site links a whole on-premises datacentre.

10. السؤال 10 من 20

    What makes Azure ExpressRoute different from a site-to-site VPN?

    • AIt connects only one laptop at a time to Azure
    • BIt encrypts traffic that travels across the public internet
    • CIt is a private connection that skips the public internet
    • DIt is the service used to register new domain names
    أظهر الإجابة

    الإجابة: C. It is a private connection that skips the public internet

    ExpressRoute uses a private connection through a connectivity provider and doesn't go over the public internet. A VPN sends encrypted traffic over the internet.

11. السؤال 11 من 20

    A company wants to buy a brand-new domain name for its website. Can it do this with Azure DNS?

    • ANo, because Azure DNS works only in private networks
    • BNo; buy it from a registrar, then host it in Azure DNS
    • CYes, but only names that end in .azure
    • DYes, Azure DNS sells every type of domain name
    أظهر الإجابة

    الإجابة: B. No; buy it from a registrar, then host it in Azure DNS

    You can't use Azure DNS to buy a domain name. You buy it through App Service domains or a third-party registrar, then host its records in Azure DNS.

12. السؤال 12 من 20

    What is a private endpoint?

    • AA password that only one administrator knows
    • BA storage tier for data that is rarely read
    • CAn endpoint with a private IP address in a virtual network
    • DAn endpoint with a public IP address that anyone can reach
    أظهر الإجابة

    الإجابة: C. An endpoint with a private IP address in a virtual network

    Private endpoints exist within a virtual network and use a private IP address from that network's address space. Public endpoints have a public IP address.

13. السؤال 13 من 20

    Which Azure Storage service is best for large amounts of unstructured data, such as images and video files?

    • ADisk Storage
    • BTable Storage
    • CBlob Storage
    • DQueue Storage
    أظهر الإجابة

    الإجابة: C. Blob Storage

    Blob Storage is object storage for large volumes of unstructured text or binary data, such as images, video and backups.

14. السؤال 14 من 20

    Which storage account type does Microsoft recommend for most scenarios?

    • APremium file shares
    • BPremium block blobs
    • CStandard general-purpose v2
    • DPremium page blobs
    أظهر الإجابة

    الإجابة: C. Standard general-purpose v2

    Standard general-purpose v2 supports blobs, files, queues and tables and is recommended for most Azure Storage scenarios.

15. السؤال 15 من 20

    Which blob access tier fits data that is rarely read, kept at least 180 days, and can wait a long time to be read?

    • ACold
    • BCool
    • CHot
    • DArchive
    أظهر الإجابة

    الإجابة: D. Archive

    Archive is for rarely accessed data kept at least 180 days with flexible latency. It has the lowest storage cost but the highest cost and delay to read.

16. السؤال 16 من 20

    Which redundancy option keeps three copies of your data across three availability zones in the primary region only?

    • AGeo-redundant storage (GRS)
    • BLocally redundant storage (LRS)
    • CGeo-zone-redundant storage (GZRS)
    • DZone-redundant storage (ZRS)
    أظهر الإجابة

    الإجابة: D. Zone-redundant storage (ZRS)

    ZRS copies data across three availability zones in the primary region. LRS keeps three copies in one datacentre, and GRS and GZRS also copy to a secondary region.

17. السؤال 17 من 20

    Your app must read data from the secondary region even before a failover happens. Which option should you choose?

    • AZone-redundant storage (ZRS)
    • BGeo-redundant storage (GRS) without read access
    • CLocally redundant storage (LRS)
    • DRead-access geo-redundant storage (RA-GRS)
    أظهر الإجابة

    الإجابة: D. Read-access geo-redundant storage (RA-GRS)

    By default, secondary-region data can't be read until a failover. RA-GRS and RA-GZRS let you read it before failover.

18. السؤال 18 من 20

    A branch office wants its Windows file server kept in sync with Azure Files in both directions, with only frequently used files stored locally. Which tool fits?

    • AAzure File Sync
    • BAzure Data Box
    • CAzCopy
    • DAzure Storage Explorer
    أظهر الإجابة

    الإجابة: A. Azure File Sync

    Azure File Sync keeps a Windows server and Azure Files in sync in both directions, and cloud tiering keeps frequently used files local. AzCopy syncs in one direction only.

19. السؤال 19 من 20

    A company must move 70 TB of data to Azure, but its internet connection is slow. Which option fits best?

    • AAzure Storage Explorer
    • BAzure Virtual Desktop
    • CAzure Data Box
    • DAzCopy over the slow connection
    أظهر الإجابة

    الإجابة: C. Azure Data Box

    Azure Data Box is a rugged physical device with up to 80 TB of usable storage, made for moving very large data sets when network bandwidth is limited.

20. السؤال 20 من 20

    Which Azure service is a hub for discovering, assessing and migrating on-premises servers, databases and web apps to Azure?

    • AAzure Advisor
    • BAzure Migrate
    • CAzure Arc
    • DAzure Data Box
    أظهر الإجابة

    الإجابة: B. Azure Migrate

    Azure Migrate is a single place to start, run and track a migration, with tools for discovery and assessment, server migration, database migration and web app migration.

لوحة المفاتيح: 1–4 للإجابة، وEnter للسؤال التالي.

الاختبار الحقيقي: 700 or greater (scale of 1 to 1,000)