Microsoft Azure Fundamentals (AZ-900) Exam Prep: Azure compute, networking and storage

1. Pytanie 1 z 20

   With Azure Virtual Machines, who installs updates and patches inside the VM's operating system?

   • AThe company's internet service provider
   • BNobody, because Azure VMs never need patches
   • CMicrosoft, because a VM is a SaaS product
   • DYou, the customer
   Pokaż odpowiedź

   Odpowiedź: D. You, the customer

   Azure VMs are IaaS. You control the operating system and still manage patching, updates and configuration inside the VM.

2. Pytanie 2 z 20

   Which Azure service creates and manages a group of identical, load-balanced VMs that can scale automatically?

   • AVirtual Machine Scale Sets
   • BAzure Container Instances
   • CAzure Virtual Desktop
   • DAvailability sets
   Pokaż odpowiedź

   Odpowiedź: A. Virtual Machine Scale Sets

   Virtual Machine Scale Sets manage groups of identical, load-balanced VMs and can scale out or in based on demand or a schedule.

3. Pytanie 3 z 20

   In a VM availability set, what is a fault domain?

   • AVMs that share a power or network failure point
   • BA region that is paired with another region in the same geography
   • CA subnet that blocks incoming traffic from the internet
   • DA group of VMs that can be rebooted together during planned maintenance
   Pokaż odpowiedź

   Odpowiedź: A. VMs that share a power or network failure point

   A fault domain groups VMs that share a potential power or network failure point. An update domain groups VMs that can be rebooted together during maintenance.

4. Pytanie 4 z 20

   A company wants staff to use Windows desktops and apps that run in Azure, so company data stays off their own devices. Which service fits?

   • AAzure Virtual Desktop
   • BAzure Data Box
   • CAzure DNS
   • DAzure Queue Storage
   Pokaż odpowiedź

   Odpowiedź: A. Azure Virtual Desktop

   Azure Virtual Desktop keeps desktops and apps in Azure, which helps reduce data exposure on local devices.

5. Pytanie 5 z 20

   Which Azure service orchestrates and manages the life cycle of a large fleet of containers?

   • AAzure Storage Explorer
   • BAzure Kubernetes Service (AKS)
   • CAzure Functions
   • DAzure Container Instances
   Pokaż odpowiedź

   Odpowiedź: B. Azure Kubernetes Service (AKS)

   AKS is a container orchestration service. Azure Container Instances is the simplest way to run a single container without managing VMs.

6. Pytanie 6 z 20

   Which service hosts web apps, REST APIs and mobile back ends without you managing the infrastructure?

   • AAzure ExpressRoute
   • BAzure App Service
   • CAzure File Sync
   • DAzure Virtual Machines
   Pokaż odpowiedź

   Odpowiedź: B. Azure App Service

   App Service lets you build and host web apps, background jobs, mobile back ends and REST APIs without managing infrastructure, with automatic scaling and high availability.

7. Pytanie 7 z 20

   In an Azure virtual network, what are subnets used for?

   • AEncrypting all of the data written to managed VM disks
   • BSplitting the IP address space into smaller parts
   • CRegistering new domain names for websites
   • DStoring large files such as video and backups
   Pokaż odpowiedź

   Odpowiedź: B. Splitting the IP address space into smaller parts

   You define a private IP address space for a virtual network and divide it into subnets.

8. Pytanie 8 z 20

   How does traffic travel between two peered Azure virtual networks?

   • AThrough each user's home internet router
   • BOn a physical Data Box device shipped by courier
   • CPrivately, on the Microsoft backbone network
   • DOver the public internet through a VPN gateway
   Pokaż odpowiedź

   Odpowiedź: C. Privately, on the Microsoft backbone network

   Traffic between peered virtual networks is private and travels on the Microsoft backbone network, never entering the public internet.

9. Pytanie 9 z 20

   One remote employee needs an encrypted connection from a laptop to an Azure virtual network. Which connection type fits?

   • AVirtual network peering
   • BPoint-to-site VPN
   • CSite-to-site VPN
   • DExpressRoute Global Reach
   Pokaż odpowiedź

   Odpowiedź: B. Point-to-site VPN

   A point-to-site connection links an individual device to a virtual network. Site-to-site links a whole on-premises datacentre.

10. Pytanie 10 z 20

    What makes Azure ExpressRoute different from a site-to-site VPN?

    • AIt connects only one laptop at a time to Azure
    • BIt encrypts traffic that travels across the public internet
    • CIt is a private connection that skips the public internet
    • DIt is the service used to register new domain names
    Pokaż odpowiedź

    Odpowiedź: C. It is a private connection that skips the public internet

    ExpressRoute uses a private connection through a connectivity provider and doesn't go over the public internet. A VPN sends encrypted traffic over the internet.

11. Pytanie 11 z 20

    A company wants to buy a brand-new domain name for its website. Can it do this with Azure DNS?

    • ANo, because Azure DNS works only in private networks
    • BNo; buy it from a registrar, then host it in Azure DNS
    • CYes, but only names that end in .azure
    • DYes, Azure DNS sells every type of domain name
    Pokaż odpowiedź

    Odpowiedź: B. No; buy it from a registrar, then host it in Azure DNS

    You can't use Azure DNS to buy a domain name. You buy it through App Service domains or a third-party registrar, then host its records in Azure DNS.

12. Pytanie 12 z 20

    What is a private endpoint?

    • AA password that only one administrator knows
    • BA storage tier for data that is rarely read
    • CAn endpoint with a private IP address in a virtual network
    • DAn endpoint with a public IP address that anyone can reach
    Pokaż odpowiedź

    Odpowiedź: C. An endpoint with a private IP address in a virtual network

    Private endpoints exist within a virtual network and use a private IP address from that network's address space. Public endpoints have a public IP address.

13. Pytanie 13 z 20

    Which Azure Storage service is best for large amounts of unstructured data, such as images and video files?

    • ADisk Storage
    • BTable Storage
    • CBlob Storage
    • DQueue Storage
    Pokaż odpowiedź

    Odpowiedź: C. Blob Storage

    Blob Storage is object storage for large volumes of unstructured text or binary data, such as images, video and backups.

14. Pytanie 14 z 20

    Which storage account type does Microsoft recommend for most scenarios?

    • APremium file shares
    • BPremium block blobs
    • CStandard general-purpose v2
    • DPremium page blobs
    Pokaż odpowiedź

    Odpowiedź: C. Standard general-purpose v2

    Standard general-purpose v2 supports blobs, files, queues and tables and is recommended for most Azure Storage scenarios.

15. Pytanie 15 z 20

    Which blob access tier fits data that is rarely read, kept at least 180 days, and can wait a long time to be read?

    • ACold
    • BCool
    • CHot
    • DArchive
    Pokaż odpowiedź

    Odpowiedź: D. Archive

    Archive is for rarely accessed data kept at least 180 days with flexible latency. It has the lowest storage cost but the highest cost and delay to read.

16. Pytanie 16 z 20

    Which redundancy option keeps three copies of your data across three availability zones in the primary region only?

    • AGeo-redundant storage (GRS)
    • BLocally redundant storage (LRS)
    • CGeo-zone-redundant storage (GZRS)
    • DZone-redundant storage (ZRS)
    Pokaż odpowiedź

    Odpowiedź: D. Zone-redundant storage (ZRS)

    ZRS copies data across three availability zones in the primary region. LRS keeps three copies in one datacentre, and GRS and GZRS also copy to a secondary region.

17. Pytanie 17 z 20

    Your app must read data from the secondary region even before a failover happens. Which option should you choose?

    • AZone-redundant storage (ZRS)
    • BGeo-redundant storage (GRS) without read access
    • CLocally redundant storage (LRS)
    • DRead-access geo-redundant storage (RA-GRS)
    Pokaż odpowiedź

    Odpowiedź: D. Read-access geo-redundant storage (RA-GRS)

    By default, secondary-region data can't be read until a failover. RA-GRS and RA-GZRS let you read it before failover.

18. Pytanie 18 z 20

    A branch office wants its Windows file server kept in sync with Azure Files in both directions, with only frequently used files stored locally. Which tool fits?

    • AAzure File Sync
    • BAzure Data Box
    • CAzCopy
    • DAzure Storage Explorer
    Pokaż odpowiedź

    Odpowiedź: A. Azure File Sync

    Azure File Sync keeps a Windows server and Azure Files in sync in both directions, and cloud tiering keeps frequently used files local. AzCopy syncs in one direction only.

19. Pytanie 19 z 20

    A company must move 70 TB of data to Azure, but its internet connection is slow. Which option fits best?

    • AAzure Storage Explorer
    • BAzure Virtual Desktop
    • CAzure Data Box
    • DAzCopy over the slow connection
    Pokaż odpowiedź

    Odpowiedź: C. Azure Data Box

    Azure Data Box is a rugged physical device with up to 80 TB of usable storage, made for moving very large data sets when network bandwidth is limited.

20. Pytanie 20 z 20

    Which Azure service is a hub for discovering, assessing and migrating on-premises servers, databases and web apps to Azure?

    • AAzure Advisor
    • BAzure Migrate
    • CAzure Arc
    • DAzure Data Box
    Pokaż odpowiedź

    Odpowiedź: B. Azure Migrate

    Azure Migrate is a single place to start, run and track a migration, with tools for discovery and assessment, server migration, database migration and web app migration.

Klawiatura: 1–4, aby odpowiedzieć, Enter – następne pytanie.

Prawdziwy egzamin: 700 or greater (scale of 1 to 1,000)