Microsoft Azure Fundamentals (AZ-900) Exam Prep: Azure compute, networking and storage

1. Vraag 1 van 20

   With Azure Virtual Machines, who installs updates and patches inside the VM's operating system?

   • AThe company's internet service provider
   • BNobody, because Azure VMs never need patches
   • CMicrosoft, because a VM is a SaaS product
   • DYou, the customer
   Toon antwoord

   Antwoord: D. You, the customer

   Azure VMs are IaaS. You control the operating system and still manage patching, updates and configuration inside the VM.

2. Vraag 2 van 20

   Which Azure service creates and manages a group of identical, load-balanced VMs that can scale automatically?

   • AVirtual Machine Scale Sets
   • BAzure Container Instances
   • CAzure Virtual Desktop
   • DAvailability sets
   Toon antwoord

   Antwoord: A. Virtual Machine Scale Sets

   Virtual Machine Scale Sets manage groups of identical, load-balanced VMs and can scale out or in based on demand or a schedule.

3. Vraag 3 van 20

   In a VM availability set, what is a fault domain?

   • AVMs that share a power or network failure point
   • BA region that is paired with another region in the same geography
   • CA subnet that blocks incoming traffic from the internet
   • DA group of VMs that can be rebooted together during planned maintenance
   Toon antwoord

   Antwoord: A. VMs that share a power or network failure point

   A fault domain groups VMs that share a potential power or network failure point. An update domain groups VMs that can be rebooted together during maintenance.

4. Vraag 4 van 20

   A company wants staff to use Windows desktops and apps that run in Azure, so company data stays off their own devices. Which service fits?

   • AAzure Virtual Desktop
   • BAzure Data Box
   • CAzure DNS
   • DAzure Queue Storage
   Toon antwoord

   Antwoord: A. Azure Virtual Desktop

   Azure Virtual Desktop keeps desktops and apps in Azure, which helps reduce data exposure on local devices.

5. Vraag 5 van 20

   Which Azure service orchestrates and manages the life cycle of a large fleet of containers?

   • AAzure Storage Explorer
   • BAzure Kubernetes Service (AKS)
   • CAzure Functions
   • DAzure Container Instances
   Toon antwoord

   Antwoord: B. Azure Kubernetes Service (AKS)

   AKS is a container orchestration service. Azure Container Instances is the simplest way to run a single container without managing VMs.

6. Vraag 6 van 20

   Which service hosts web apps, REST APIs and mobile back ends without you managing the infrastructure?

   • AAzure ExpressRoute
   • BAzure App Service
   • CAzure File Sync
   • DAzure Virtual Machines
   Toon antwoord

   Antwoord: B. Azure App Service

   App Service lets you build and host web apps, background jobs, mobile back ends and REST APIs without managing infrastructure, with automatic scaling and high availability.

7. Vraag 7 van 20

   In an Azure virtual network, what are subnets used for?

   • AEncrypting all of the data written to managed VM disks
   • BSplitting the IP address space into smaller parts
   • CRegistering new domain names for websites
   • DStoring large files such as video and backups
   Toon antwoord

   Antwoord: B. Splitting the IP address space into smaller parts

   You define a private IP address space for a virtual network and divide it into subnets.

8. Vraag 8 van 20

   How does traffic travel between two peered Azure virtual networks?

   • AThrough each user's home internet router
   • BOn a physical Data Box device shipped by courier
   • CPrivately, on the Microsoft backbone network
   • DOver the public internet through a VPN gateway
   Toon antwoord

   Antwoord: C. Privately, on the Microsoft backbone network

   Traffic between peered virtual networks is private and travels on the Microsoft backbone network, never entering the public internet.

9. Vraag 9 van 20

   One remote employee needs an encrypted connection from a laptop to an Azure virtual network. Which connection type fits?

   • AVirtual network peering
   • BPoint-to-site VPN
   • CSite-to-site VPN
   • DExpressRoute Global Reach
   Toon antwoord

   Antwoord: B. Point-to-site VPN

   A point-to-site connection links an individual device to a virtual network. Site-to-site links a whole on-premises datacentre.

10. Vraag 10 van 20

    What makes Azure ExpressRoute different from a site-to-site VPN?

    • AIt connects only one laptop at a time to Azure
    • BIt encrypts traffic that travels across the public internet
    • CIt is a private connection that skips the public internet
    • DIt is the service used to register new domain names
    Toon antwoord

    Antwoord: C. It is a private connection that skips the public internet

    ExpressRoute uses a private connection through a connectivity provider and doesn't go over the public internet. A VPN sends encrypted traffic over the internet.

11. Vraag 11 van 20

    A company wants to buy a brand-new domain name for its website. Can it do this with Azure DNS?

    • ANo, because Azure DNS works only in private networks
    • BNo; buy it from a registrar, then host it in Azure DNS
    • CYes, but only names that end in .azure
    • DYes, Azure DNS sells every type of domain name
    Toon antwoord

    Antwoord: B. No; buy it from a registrar, then host it in Azure DNS

    You can't use Azure DNS to buy a domain name. You buy it through App Service domains or a third-party registrar, then host its records in Azure DNS.

12. Vraag 12 van 20

    What is a private endpoint?

    • AA password that only one administrator knows
    • BA storage tier for data that is rarely read
    • CAn endpoint with a private IP address in a virtual network
    • DAn endpoint with a public IP address that anyone can reach
    Toon antwoord

    Antwoord: C. An endpoint with a private IP address in a virtual network

    Private endpoints exist within a virtual network and use a private IP address from that network's address space. Public endpoints have a public IP address.

13. Vraag 13 van 20

    Which Azure Storage service is best for large amounts of unstructured data, such as images and video files?

    • ADisk Storage
    • BTable Storage
    • CBlob Storage
    • DQueue Storage
    Toon antwoord

    Antwoord: C. Blob Storage

    Blob Storage is object storage for large volumes of unstructured text or binary data, such as images, video and backups.

14. Vraag 14 van 20

    Which storage account type does Microsoft recommend for most scenarios?

    • APremium file shares
    • BPremium block blobs
    • CStandard general-purpose v2
    • DPremium page blobs
    Toon antwoord

    Antwoord: C. Standard general-purpose v2

    Standard general-purpose v2 supports blobs, files, queues and tables and is recommended for most Azure Storage scenarios.

15. Vraag 15 van 20

    Which blob access tier fits data that is rarely read, kept at least 180 days, and can wait a long time to be read?

    • ACold
    • BCool
    • CHot
    • DArchive
    Toon antwoord

    Antwoord: D. Archive

    Archive is for rarely accessed data kept at least 180 days with flexible latency. It has the lowest storage cost but the highest cost and delay to read.

16. Vraag 16 van 20

    Which redundancy option keeps three copies of your data across three availability zones in the primary region only?

    • AGeo-redundant storage (GRS)
    • BLocally redundant storage (LRS)
    • CGeo-zone-redundant storage (GZRS)
    • DZone-redundant storage (ZRS)
    Toon antwoord

    Antwoord: D. Zone-redundant storage (ZRS)

    ZRS copies data across three availability zones in the primary region. LRS keeps three copies in one datacentre, and GRS and GZRS also copy to a secondary region.

17. Vraag 17 van 20

    Your app must read data from the secondary region even before a failover happens. Which option should you choose?

    • AZone-redundant storage (ZRS)
    • BGeo-redundant storage (GRS) without read access
    • CLocally redundant storage (LRS)
    • DRead-access geo-redundant storage (RA-GRS)
    Toon antwoord

    Antwoord: D. Read-access geo-redundant storage (RA-GRS)

    By default, secondary-region data can't be read until a failover. RA-GRS and RA-GZRS let you read it before failover.

18. Vraag 18 van 20

    A branch office wants its Windows file server kept in sync with Azure Files in both directions, with only frequently used files stored locally. Which tool fits?

    • AAzure File Sync
    • BAzure Data Box
    • CAzCopy
    • DAzure Storage Explorer
    Toon antwoord

    Antwoord: A. Azure File Sync

    Azure File Sync keeps a Windows server and Azure Files in sync in both directions, and cloud tiering keeps frequently used files local. AzCopy syncs in one direction only.

19. Vraag 19 van 20

    A company must move 70 TB of data to Azure, but its internet connection is slow. Which option fits best?

    • AAzure Storage Explorer
    • BAzure Virtual Desktop
    • CAzure Data Box
    • DAzCopy over the slow connection
    Toon antwoord

    Antwoord: C. Azure Data Box

    Azure Data Box is a rugged physical device with up to 80 TB of usable storage, made for moving very large data sets when network bandwidth is limited.

20. Vraag 20 van 20

    Which Azure service is a hub for discovering, assessing and migrating on-premises servers, databases and web apps to Azure?

    • AAzure Advisor
    • BAzure Migrate
    • CAzure Arc
    • DAzure Data Box
    Toon antwoord

    Antwoord: B. Azure Migrate

    Azure Migrate is a single place to start, run and track a migration, with tools for discovery and assessment, server migration, database migration and web app migration.

Toetsenbord: 1–4 om te antwoorden, Enter voor de volgende vraag.

Het echte examen: 700 or greater (scale of 1 to 1,000)