AZ-900 시험 - Microsoft실제시험문제와 답 - 162문항

Question No : 1

This question requires that you evaluate the underlined text to determine if it is correct.
If a resource group named RG1 has a delete lock, only a member of the global administrators group can delete RG1.
Instructions: Review the underlined text If it makes the statement correct, select "No change is needed." If the statement is incorrect, select the answer choice that makes the statement correct.

A.No change is needed.
B.the delete lock must be removed before an administrator
C.an Azure policy must be modified before an administrator
D.an Azure tag must be added before an administrator

정답:

Question No : 2

What can Azure Information Protection encrypt?

A.an Azure Storage account
B.documents and email messages
C.an Azure SQL database
D.network traffic

정답:
Explanation:
Azure Information Protection can encrypt documents and emails.
Azure Information Protection is a cloud-based solution that helps an organization to classify and optionally, protect its documents and emails by applying labels. Labels can be applied automatically by administrators who define rules and conditions, manually by users, or a combination where users are given recommendations.
The protection technology uses Azure Rights Management (often abbreviated to Azure RMS). This technology is integrated with other Microsoft cloud services and applications, such as Office 365 and Azure Active Directory.
This protection technology uses encryption, identity, and authorization policies. Similarly to the labels that are applied, protection that is applied by using Rights Management stays with the documents and emails, independently of the location―inside or outside your organization, networks, file servers, and applications.
References:
https://docs.microsoft.com/en-us/azure/information-protection/what-is-information-protection
https://docs.microsoft.com/en-us/azure/information-protection/quickstart-label-dnf-protectedemail

Question No : 3

This question requires that you evaluate the underlined text to determine if it is correct.
You have an Azure virtual network named VNET1 in a resource group named RG1.
You assign an Azure policy specifying that virtual networks are not an allowed resource type in RG1. VNET1 is deleted automatically.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.

A.No change is needed.
B.is moved automatically to another resource group
C.continues to function normally
D.is now a read-only object

정답:
Explanation:
The VNet will be marked as ‘Non-compliant’ when the policy is assigned. However, it will not be deleted and will continue to function normally.
Azure Policy is a service in Azure that you use to create, assign, and manage policies. These policies enforce different rules and effects over your resources, so those resources stay compliant with your corporate standards and service level agreements.
If there are any existing resources that aren't compliant with a new policy assignment, they appear under Non-compliant resources.
References:
https://docs.microsoft.com/en-us/azure/governance/policy/overview
https://docs.microsoft.com/en-us/azure/governance/policy/assign-policy-portal

Question No : 4

HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

정답:

Question No : 5

Your company plans to automate the deployment of servers to Azure.
Your manager is concerned that you may expose administrative credentials during the deployment.
You need to recommend an Azure solution that encrypts the administrative credentials during the deployment.
What should you include in the recommendation?

A.Azure Key Vault
B.Azure Multi-Factor Authentication (MFA)
C.Azure Security Center
D.Azure Information Protection

정답:

Question No : 6

This question requires that you evaluate the underlined text to determine if it is correct. Authorization is the process of verifying a user's credentials.
Instructions: Review the underlined text If it makes the statement correct, select "No change is needed." If the statement is incorrect, select the answer choice that makes the statement correct.

A.No change is needed.
B.Authentication
C.Federation
D.Ticketing

정답:
Explanation:
Authentication, not authorization is the process of verifying a user’s credentials.
The difference between authentication and authorization is:
Authentication is proving your identity, proving that you are who you say you are. The most common example of this is logging in to a system by providing credentials such as a username and password.
Authorization is what you’re allowed to do once you’ve been authenticated. For example, what resources you’re allowed to access and what you can do with those resources.

Question No : 7

What should you use to evaluate whether your company's Azure environment meets regulatory requirements?

A.Compliance Manager from the Security Trust Portal
B.the Advisor blade from the Azure policy
C.the Knowledge Center website
D.the Security Center blade from the Azure portal

정답:
Explanation:
The Security Center blade from the Azure portal includes the ‘regulatory compliance dashboard’.
The regulatory compliance dashboard provides insight into your compliance posture for a set of supported standards and regulations, based on continuous assessments of your Azure environment.
In the Azure Security Center regulatory compliance blade, you can get an overview of key portions of your compliance posture with respect to a set of supported standards. Currently supported standards are Azure CIS, PCI DSS 3.2, ISO 27001, and SOC TSP.
In the dashboard, you will find your overall compliance score, and the number of passing versus failing assessments with each standard. You can now focus your attention on the gaps in compliance for a standard or regulation that is important to you.
References: https://azure.microsoft.com/en-us/blog/regulatory-compliance-dashboard-in-azure-security-center-now-available/

Question No : 8

You plan to migrate several servers from an on-premises network to Azure.
You need to identify the primary benefit of using a public cloud service for the servers.
What should you identify?

A.The public cloud is owned by the public, NOT a private corporation.
B.All public cloud resources can be freely accessed by every member of the public.
C.The public cloud is a crowd-sourcing solution that provides corporations with the ability to enhance the cloud.
D.The public cloud is a shared entity whereby multiple corporations each use a portion of the resources in the cloud.

정답:
Explanation:
The public cloud is a shared entity whereby multiple corporations each use a portion of the resources in the cloud. The hardware resources (servers, infrastructure etc.) are managed by the cloud provider. Multiple companies create resources such as virtual machines and virtual networks on the hardware resources.

Question No : 9

HOTSPOT
Which cloud deployment is used for Azure virtual machines and Azure SQL database? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

정답:

Question No : 10

This question requires that you evaluate the underlined text to determine if it is correct.
When you need to delegate permissions to several Azure virtual machines simultaneously, you must deploy the Azure virtual machines to the same Azure region
Instructions: Review the underlined text If it makes the statement correct, select "No change is needed." If the statement is incorrect, select the answer choice that makes the statement correct.

A.No change is needed.
B.by using the same Azure Resource Manager template
C.to the same resource group
D.to the same availability zone

정답:

Question No : 11

You plan to store 20 TB of data in Azure. The data will be accessed infrequently and visualized by using Microsoft Power BI.
You need to recommend a storage solution for the data.
Which two solutions should you recommend? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A.Azure SQL Database
B.Azure Cosmos DB
C.Azure SQL Data Warehouse
D.Azure Database for PostgreSQL
E.Azure Data Lake

정답:

Question No : 12

HOTSPOT
You plan to create an Azure virtual machine.
You need to identify which storage service must be used to store the data disks of the virtual machine.
What should you identify? To answer, select the appropriate service in the answer area.

정답:

Explanation:
References: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/managed-disks-overview

Question No : 13

HOTSPOT
You have an Azure environment that contains 10 web apps.
To which URL should you connect to manage all the Azure resources? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

정답:

Question No : 14

A team of developers at your company plans to deploy, and then remove, 50 customized virtual machines each week. Thirty of the virtual machines run Windows Server 2016 and 20 of the virtual machines run Ubuntu Linux.
You need to recommend which Azure service will minimize the administrative effort required to deploy and remove the virtual machines.
What should you recommend?

A.Azure virtual machine scale sets
B.Microsoft Managed Desktop
C.Azure DevTest Labs
D.Azure Reserved Virtual Machine (VM) Instances

정답:
Explanation:
DevTest Labs creates labs consisting of pre-configured bases or Azure Resource Manager templates. By using DevTest Labs, you can test the latest versions of your applications by doing the following tasks: Quickly provision Windows and Linux environments by using reusable templates and artifacts.
Easily integrate your deployment pipeline with DevTest Labs to provision on-demand environments.
Scale up your load testing by provisioning multiple test agents and create pre-provisioned environments for training and demos
https://docs.microsoft.com/en-us/azure/lab-services/devtest-lab-overview

Question No : 15

HOTSPOT
You need to manage Azure by using Azure Cloud Shell.
Which Azure portal icon should you select? To answer, select the appropriate icon in the answer area.

정답:

Microsoft AZ-900 시험