Microsoft Azure Fundamentals (AZ-900) Exam Prep: Azure compute, networking and storage

1. Frage 1 von 20

   With Azure Virtual Machines, who installs updates and patches inside the VM's operating system?

   • AThe company's internet service provider
   • BNobody, because Azure VMs never need patches
   • CMicrosoft, because a VM is a SaaS product
   • DYou, the customer
   Antwort anzeigen

   Antwort: D. You, the customer

   Azure VMs are IaaS. You control the operating system and still manage patching, updates and configuration inside the VM.

2. Frage 2 von 20

   Which Azure service creates and manages a group of identical, load-balanced VMs that can scale automatically?

   • AVirtual Machine Scale Sets
   • BAzure Container Instances
   • CAzure Virtual Desktop
   • DAvailability sets
   Antwort anzeigen

   Antwort: A. Virtual Machine Scale Sets

   Virtual Machine Scale Sets manage groups of identical, load-balanced VMs and can scale out or in based on demand or a schedule.

3. Frage 3 von 20

   In a VM availability set, what is a fault domain?

   • AVMs that share a power or network failure point
   • BA region that is paired with another region in the same geography
   • CA subnet that blocks incoming traffic from the internet
   • DA group of VMs that can be rebooted together during planned maintenance
   Antwort anzeigen

   Antwort: A. VMs that share a power or network failure point

   A fault domain groups VMs that share a potential power or network failure point. An update domain groups VMs that can be rebooted together during maintenance.

4. Frage 4 von 20

   A company wants staff to use Windows desktops and apps that run in Azure, so company data stays off their own devices. Which service fits?

   • AAzure Virtual Desktop
   • BAzure Data Box
   • CAzure DNS
   • DAzure Queue Storage
   Antwort anzeigen

   Antwort: A. Azure Virtual Desktop

   Azure Virtual Desktop keeps desktops and apps in Azure, which helps reduce data exposure on local devices.

5. Frage 5 von 20

   Which Azure service orchestrates and manages the life cycle of a large fleet of containers?

   • AAzure Storage Explorer
   • BAzure Kubernetes Service (AKS)
   • CAzure Functions
   • DAzure Container Instances
   Antwort anzeigen

   Antwort: B. Azure Kubernetes Service (AKS)

   AKS is a container orchestration service. Azure Container Instances is the simplest way to run a single container without managing VMs.

6. Frage 6 von 20

   Which service hosts web apps, REST APIs and mobile back ends without you managing the infrastructure?

   • AAzure ExpressRoute
   • BAzure App Service
   • CAzure File Sync
   • DAzure Virtual Machines
   Antwort anzeigen

   Antwort: B. Azure App Service

   App Service lets you build and host web apps, background jobs, mobile back ends and REST APIs without managing infrastructure, with automatic scaling and high availability.

7. Frage 7 von 20

   In an Azure virtual network, what are subnets used for?

   • AEncrypting all of the data written to managed VM disks
   • BSplitting the IP address space into smaller parts
   • CRegistering new domain names for websites
   • DStoring large files such as video and backups
   Antwort anzeigen

   Antwort: B. Splitting the IP address space into smaller parts

   You define a private IP address space for a virtual network and divide it into subnets.

8. Frage 8 von 20

   How does traffic travel between two peered Azure virtual networks?

   • AThrough each user's home internet router
   • BOn a physical Data Box device shipped by courier
   • CPrivately, on the Microsoft backbone network
   • DOver the public internet through a VPN gateway
   Antwort anzeigen

   Antwort: C. Privately, on the Microsoft backbone network

   Traffic between peered virtual networks is private and travels on the Microsoft backbone network, never entering the public internet.

9. Frage 9 von 20

   One remote employee needs an encrypted connection from a laptop to an Azure virtual network. Which connection type fits?

   • AVirtual network peering
   • BPoint-to-site VPN
   • CSite-to-site VPN
   • DExpressRoute Global Reach
   Antwort anzeigen

   Antwort: B. Point-to-site VPN

   A point-to-site connection links an individual device to a virtual network. Site-to-site links a whole on-premises datacentre.

10. Frage 10 von 20

    What makes Azure ExpressRoute different from a site-to-site VPN?

    • AIt connects only one laptop at a time to Azure
    • BIt encrypts traffic that travels across the public internet
    • CIt is a private connection that skips the public internet
    • DIt is the service used to register new domain names
    Antwort anzeigen

    Antwort: C. It is a private connection that skips the public internet

    ExpressRoute uses a private connection through a connectivity provider and doesn't go over the public internet. A VPN sends encrypted traffic over the internet.

11. Frage 11 von 20

    A company wants to buy a brand-new domain name for its website. Can it do this with Azure DNS?

    • ANo, because Azure DNS works only in private networks
    • BNo; buy it from a registrar, then host it in Azure DNS
    • CYes, but only names that end in .azure
    • DYes, Azure DNS sells every type of domain name
    Antwort anzeigen

    Antwort: B. No; buy it from a registrar, then host it in Azure DNS

    You can't use Azure DNS to buy a domain name. You buy it through App Service domains or a third-party registrar, then host its records in Azure DNS.

12. Frage 12 von 20

    What is a private endpoint?

    • AA password that only one administrator knows
    • BA storage tier for data that is rarely read
    • CAn endpoint with a private IP address in a virtual network
    • DAn endpoint with a public IP address that anyone can reach
    Antwort anzeigen

    Antwort: C. An endpoint with a private IP address in a virtual network

    Private endpoints exist within a virtual network and use a private IP address from that network's address space. Public endpoints have a public IP address.

13. Frage 13 von 20

    Which Azure Storage service is best for large amounts of unstructured data, such as images and video files?

    • ADisk Storage
    • BTable Storage
    • CBlob Storage
    • DQueue Storage
    Antwort anzeigen

    Antwort: C. Blob Storage

    Blob Storage is object storage for large volumes of unstructured text or binary data, such as images, video and backups.

14. Frage 14 von 20

    Which storage account type does Microsoft recommend for most scenarios?

    • APremium file shares
    • BPremium block blobs
    • CStandard general-purpose v2
    • DPremium page blobs
    Antwort anzeigen

    Antwort: C. Standard general-purpose v2

    Standard general-purpose v2 supports blobs, files, queues and tables and is recommended for most Azure Storage scenarios.

15. Frage 15 von 20

    Which blob access tier fits data that is rarely read, kept at least 180 days, and can wait a long time to be read?

    • ACold
    • BCool
    • CHot
    • DArchive
    Antwort anzeigen

    Antwort: D. Archive

    Archive is for rarely accessed data kept at least 180 days with flexible latency. It has the lowest storage cost but the highest cost and delay to read.

16. Frage 16 von 20

    Which redundancy option keeps three copies of your data across three availability zones in the primary region only?

    • AGeo-redundant storage (GRS)
    • BLocally redundant storage (LRS)
    • CGeo-zone-redundant storage (GZRS)
    • DZone-redundant storage (ZRS)
    Antwort anzeigen

    Antwort: D. Zone-redundant storage (ZRS)

    ZRS copies data across three availability zones in the primary region. LRS keeps three copies in one datacentre, and GRS and GZRS also copy to a secondary region.

17. Frage 17 von 20

    Your app must read data from the secondary region even before a failover happens. Which option should you choose?

    • AZone-redundant storage (ZRS)
    • BGeo-redundant storage (GRS) without read access
    • CLocally redundant storage (LRS)
    • DRead-access geo-redundant storage (RA-GRS)
    Antwort anzeigen

    Antwort: D. Read-access geo-redundant storage (RA-GRS)

    By default, secondary-region data can't be read until a failover. RA-GRS and RA-GZRS let you read it before failover.

18. Frage 18 von 20

    A branch office wants its Windows file server kept in sync with Azure Files in both directions, with only frequently used files stored locally. Which tool fits?

    • AAzure File Sync
    • BAzure Data Box
    • CAzCopy
    • DAzure Storage Explorer
    Antwort anzeigen

    Antwort: A. Azure File Sync

    Azure File Sync keeps a Windows server and Azure Files in sync in both directions, and cloud tiering keeps frequently used files local. AzCopy syncs in one direction only.

19. Frage 19 von 20

    A company must move 70 TB of data to Azure, but its internet connection is slow. Which option fits best?

    • AAzure Storage Explorer
    • BAzure Virtual Desktop
    • CAzure Data Box
    • DAzCopy over the slow connection
    Antwort anzeigen

    Antwort: C. Azure Data Box

    Azure Data Box is a rugged physical device with up to 80 TB of usable storage, made for moving very large data sets when network bandwidth is limited.

20. Frage 20 von 20

    Which Azure service is a hub for discovering, assessing and migrating on-premises servers, databases and web apps to Azure?

    • AAzure Advisor
    • BAzure Migrate
    • CAzure Arc
    • DAzure Data Box
    Antwort anzeigen

    Antwort: B. Azure Migrate

    Azure Migrate is a single place to start, run and track a migration, with tools for discovery and assessment, server migration, database migration and web app migration.

Tastatur: 1–4 zum Antworten, Eingabetaste für die nächste Frage.

Die echte Prüfung: 700 or greater (scale of 1 to 1,000)