AZ-900 Test Timed mode Set 1

Note: This item is part of a series of questions with the exact same scenario but with a different proposed answer. Each one in the series has a unique solution that may, or may not, comply with the requirements specified in the scenario.

You have been tasked with reducing your organization's monthly Azure usage. You need to recommend which factors may contribute to reducing the cost of Azure resources. Solution: You recommend limiting the inbound data transfer to your Azure resources.

• Yes

• No

You have a storage account and a virtual network in your Azure subscription.

You must ensure that the data between the storage account and the virtual network must pass through the Azure backbone network.

What should you use?

• VNet peering

• Service endpoint

• VPN gateway

• ExpressRoute

A company wants to migrate to the cloud. The requirement is to have a VPN connection to connect your on-premises network to an Azure virtual network over an IPsec/IKE (IKEv1 or IKEv2) VPN tunnel.

What is the most suitable type of VPN connection that you should use?

• Point-to-Site VPN connection

• Site-to-Site VPN Connection

• VNet peering connection

• ExpressRoute Connection

What service enables you to correlate trace events from multiple Azure VMs and other resources into a centralized repository?

• Azure Event Hubs

• Azure Repos

• Azure Monitor

• Azure Resource Manager

What service provides security tokens that you can use for the authentication flow of your cloud-based applications?

• Azure Storage account

• Microsoft Defender for Cloud

• Azure Key Vault

• Azure Active Directory

A company needs to implement various security features to its Azure cloud environment. The appropriate Azure services must be used to meet the following security requirements:

Directly monitor the domain controller traffic and detect security threats using a sensor.

Enable Azure Multi-Factor Authentication with conditional access policies for more granular controls.

Which of the following Azure services should you use to satisfy each requirement?

• Microsoft Defender for Identity

• Azure Active Directory

• Microsoft Defender for Cloud

• Azure Key Vault

Your company plans to deploy several virtual machines that will host its business-critical application to Azure.

You need to recommend a solution to ensure that if a single data center fails, the application will not be affected.

Solution: Deploy virtual machines to multiple resource groups with the same availability zone.

Does this meet the goal?

• Yes

• No

Your company plans to deploy several virtual machines that will host its business-critical application to Azure.

You need to recommend a solution to ensure that if a single data center fails, the application will not be affected.

Solution: Deploy virtual machines to multiple subscriptions.

Does this meet the goal?

• Yes

• No

What Azure service should you use if you want your application to have a higher level of availability and to evenly distribute internal traffic across virtual machines within a VNET?

• Private Load Balancer

• Public Load Balancer

• Application Gateway

• Network Security Group

A news agency company plans to migrate its WordPress application to Azure. As a Support Engineer of the company, you have to suggest a service that can monitor your application, automatically detect performance anomalies, diagnose issues, and understand user behavior.

Which Azure service can do this?

• Azure Application Gateway

• Azure App Service

• Azure Application Insights

• Azure AD Connect