AZ-900 : Microsoft Azure Fundamentals : Part 07

AZ-900 : Microsoft Azure Fundamentals : Part 07

1. HOTSPOT

   For each of the following statements, select Yes if the statement is true. Otherwise, select No.

   NOTE: Each correct selection is worth one point.

   

   

   Explanation:

   Box 1: No
   Azure Advisor provides you with a consistent, consolidated view of recommendations for all your Azure resources. It integrates with Azure Security Center to bring you security recommendations. You can get security recommendations from the Security tab on the Advisor dashboard. Examples of recommendations include restricting access to virtual machines by configuring Network Security Groups, enabling storage encryption, installing vulnerability assessment solutions.
   However, Azure Advisor does not provide recommendations on how to improve the security of an Azure AD environment.

   Box 2: Yes
   Advisor helps you optimize and reduce your overall Azure spend by identifying idle and underutilized resources. You can get cost recommendations from the Cost tab on the Advisor dashboard.

   Box 3: No.
   Azure Advisor does not provide recommendations on how to configure network settings on Azure virtual machines.

2. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

   After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

   You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.

   From Azure documentation, you have the following command that creates a virtual machine named VM1.

   az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys

   You need to create VM1 in Subscription1 by using the command.

   Solution: From the Azure portal, launch Azure Cloud Shell and select PowerShell. Run the command in Cloud Shell.

   Does this meet the goal?

   • Yes
   • No
   Explanation:

   The command can be run in the Azure Cloud Shell. Although this question says you select PowerShell rather than Bash, the Az commands will work in PowerShell.

   The Azure Cloud Shell is a free interactive shell. It has common Azure tools preinstalled and configured to use with your account.

   To open the Cloud Shell, just select Try it from the upper right corner of a code block. You can also launch Cloud Shell in a separate browser tab by going to https://shell.azure.com/bash.

3. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

   After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

   You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.

   From Azure documentation, you have the following command that creates a virtual machine named VM1.

   az vm create --resource-group RG1 --name VM1 --image UbuntuLTS 
   --generate-ssh-keys

   You need to create VM1 in Subscription1 by using the command.

   Solution: From a computer that runs Windows 10, install Azure CLI. From PowerShell, sign in to Azure and then run the command.

   Does this meet the goal?

   • Yes
   • No
   Explanation:
   The command can be run from PowerShell or the command prompt if you have the Azure CLI installed.

4. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

   After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

   You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.

   From Azure documentation, you have the following command that creates a virtual machine named VM1.

   az vm create --resource-group RG1 --name VM1 --image UbuntuLTS 
   --generate-ssh-keys

   You need to create VM1 in Subscription1 by using the command.

   Solution: From a computer that runs Windows 10, install Azure CLI. From a command prompt, sign in to Azure and then run the command.

   Does this meet the goal?

   • Yes
   • No
   Explanation:
   The command can be run from PowerShell or the command prompt if you have the Azure CLI installed.

5. HOTSPOT

   Several support engineers plan to manage Azure by using the computers shown in the following table:

   

   You need to identify which Azure management tools can be used from each computer.

   What should you identify for each computer? To answer, select the appropriate options in the answer area.

   NOTE: Each correct selection is worth one point.

   

   

   Explanation:

   Previously, the Azure CLI (or x-plat CLI) was the only option for managing Azure subscriptions and resources from the command-line on Linux and macOS. Now with the open source and cross-platform release of PowerShell, you’ll be able to manage all your Azure resources from Windows, Linux and macOS using your tool of choice, either the Azure CLI or Azure PowerShell cmdlets.
   The Azure portal runs in a web browser so can be used in either operating system.

6. HOTSPOT

   To complete the sentence, select the appropriate option in the answer area.

   

   

7. HOTSPOT

   To complete the sentence, select the appropriate option in the answer area.

   

   

   Explanation:

   Azure Resource Manager templates provides a common platform for deploying objects to a cloud infrastructure and for implementing consistency across the Azure environment.

   Azure policies are used to define rules for what can be deployed and how it should be deployed. Whilst this can help in ensuring consistency, Azure policies do not provide the common platform for deploying objects to a cloud infrastructure.

8. DRAG DROP

   Match the Azure service to the correct description.

   Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.

   NOTE: Each correct selection is worth one point.

   

   

   Explanation:

   Box 1:
   Azure Bot Services provides a digital online assistant that provides speech support.
   Bots provide an experience that feels less like using a computer and more like dealing with a person – or at least an intelligent robot. They can be used to shift simple, repetitive tasks, such as taking a dinner reservation or gathering profile information, on to automated systems that may no longer require direct human intervention. Users converse with a bot using text, interactive cards, and speech. A bot interaction can be a quick question and answer, or it can be a sophisticated conversation that intelligently provides access to services.

   Box 2:
   Azure Machine Learning uses past trainings to provide predictions that have high probability.
   Machine learning is a data science technique that allows computers to use existing data to forecast future behaviors, outcomes, and trends. By using machine learning, computers learn without being explicitly programmed.
   Forecasts or predictions from machine learning can make apps and devices smarter. For example, when you shop online, machine learning helps recommend other products you might want based on what you’ve bought.

   Box 3:
   Azure Functions provides serverless computing functionalities.
   Azure Functions is a serverless compute service that lets you run event-triggered code without having to explicitly provision or manage infrastructure.

   Box 4:
   IoT Hub (Internet of things Hub) provides data from millions of sensors.
   IoT Hub is a managed service, hosted in the cloud, that acts as a central message hub for bi-directional communication between your IoT application and the devices it manages. You can use Azure IoT Hub to build IoT solutions with reliable and secure communications between millions of IoT devices and a cloud-hosted solution backend. You can connect virtually any device to IoT Hub.

9. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

   After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

   An Azure administrator plans to run a PowerShell script that creates Azure resources.

   You need to recommend which computer configuration to use to run the script.

   Solution: Run the script from a computer that runs Windows 10 and has the Azure PowerShell module installed.

   Does this meet the goal?

   • Yes
   • No
   Explanation:

   A PowerShell script is a file that contains PowerShell cmdlets and code. A PowerShell script needs to be run in PowerShell.

   In this question, the computer has the Azure PowerShell module installed. Therefore, this solution does meet the goal.

10. DRAG DROP

    Match the Azure services to the correct description.

    Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.

    NOTE: Each correct selection is worth one point.

    

    

    Explanation:

    Box 1:
    Azure virtual machines provide operation system virtualization.
    Azure Virtual Machines (VM) is one of several types of on-demand, scalable computing resources that Azure offers. Typically, you choose a VM when you need more control over the computing environment than the other choices offer.

    Box 2:
    Azure Container Instances provide portable environments for virtualized applications.
    Containers are becoming the preferred way to package, deploy, and manage cloud applications. Azure Container Instances offers the fastest and simplest way to run a container in Azure, without having to manage any virtual machines and without having to adopt a higher-level service.
    Containers offer significant startup benefits over virtual machines (VMs). Azure Container Instances can start containers in Azure in seconds, without the need to provision and manage VMs.

    Box 3:
    Azure App Service is used to build, deploy and scale web apps.
    Azure App Service is a platform-as-a-service (PaaS) offering that lets you create web and mobile apps for any platform or device and connect to data anywhere, in the cloud or on-premises. App Service includes the web and mobile capabilities that were previously delivered separately as Azure Websites and Azure Mobile Services.

    Box 4:
    Azure Functions provide a platform for serverless code.
    Azure Functions is a serverless compute service that lets you run event-triggered code without having to explicitly provision or manage infrastructure.

11. Which service provides serverless computing in Azure?

    • Azure Virtual Machines
    • Azure Functions
    • Azure storage account
    • Azure dedicated hosts
    Explanation:
    Azure Functions provide a platform for serverless code.
    Azure Functions is a serverless compute service that lets you run event-triggered code without having to explicitly provision or manage infrastructure.

12. An Azure administrator plans to run a PowerShell script that creates Azure resources.

    You need to recommend which computer configuration to use to run the script.

    Which three computers can run the script? Each correct answer presents a complete solution.

    NOTE: Each correct selection is worth one point.

    • a computer that runs macOS and has PowerShell Core 6.0 installed.
    • a computer that runs Windows 10 and has the Azure PowerShell module installed.
    • a computer that runs Linux and has the Azure PowerShell module installed.
    • a computer that runs Linux and has the Azure CLI tools installed.
    • a computer that runs Chrome OS and uses Azure Cloud Shell.
    Explanation:
    A PowerShell script is a file that contains PowerShell cmdlets and code. A PowerShell script needs to be run in PowerShell.

13. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    You have an Azure subscription named Subscription1. You sign in to the Azure portal and create a resource group named RG1.

    From Azure documentation, you have the following command that creates a virtual machine named VM1.

    az vm create --resource-group RG1 --name VM1 --image UbuntuLTS --generate-ssh-keys

    You need to create VM1 in Subscription1 by using the command.

    Solution: From the Azure portal, launch Azure Cloud Shell and select Bash. Run the command in Cloud Shell.

    Does this meet the goal?

    • Yes
    • No
    Explanation:

    The command can be run in the Azure Cloud Shell.

    The Azure Cloud Shell is a free interactive shell. It has common Azure tools preinstalled and configured to use with your account.

    To open the Cloud Shell, just select Try it from the upper right corner of a code block. You can also launch Cloud Shell in a separate browser tab by going to https://shell.azure.com/bash.

14. Your company has several business units.

    Each business unit requires 20 different Azure resources for daily operation. All the business units require the same type of Azure resources.

    You need to recommend a solution to automate the creation of the Azure resources.

    What should you include in the recommendations?

    • Azure Resource Manager templates 
    • virtual machine scale sets
    • the Azure API Management service
    • management groups
    Explanation:

    You can use Azure Resource Manager templates to automate the creation of the Azure resources. Deploying resource through templates is known as ‘Infrastructure as code’.

    To implement infrastructure as code for your Azure solutions, use Azure Resource Manager templates. The template is a JavaScript Object Notation (JSON) file that defines the infrastructure and configuration for your project. The template uses declarative syntax, which lets you state what you intend to deploy without having to write the sequence of programming commands to create it. In the template, you specify the resources to deploy and the properties for those resources.

15. HOTSPOT

    For each of the following statements, select Yes if the statement is true. Otherwise, select No.

    NOTE: Each correct selection is worth one point.

    

    

16. You need to configure an Azure solution that meets the following requirements:

    -​ Secures websites from attacks
    – Generates reports that contain details of attempted attacks

    What should you include in the solution?

    • Azure Firewall
    • a network security group (NSG)
    • Azure Information Protection
    • DDoS protection
    Explanation:

    DDoS is a type of attack that tries to exhaust application resources. The goal is to affect the application’s availability and its ability to handle legitimate requests. DDoS attacks can be targeted at any endpoint that is publicly reachable through the internet.

    Azure has two DDoS service offerings that provide protection from network attacks: DDoS Protection Basic and DDoS Protection Standard.
    DDoS Basic protection is integrated into the Azure platform by default and at no extra cost.

    You have the option of paying for DDoS Standard. It has several advantages over the basic service, including logging, alerting, and telemetry. DDoS Standard can generate reports that contain details of attempted attacks as required in this question.

17. HOTSPOT

    You plan to implement several security services for an Azure environment. You need to identify which Azure services must be used to meet the following security requirements:

    Monitor threats by using sensors
    Enforce Azure Multi-Factor Authentication (MFA) based on a condition

    Which Azure service should you identify for each requirement? To answer, select the appropriate options in the answer area.

    NOTE: Each correct selection is worth one point.

    

    

    Explanation:

    Box 1:
    To monitor threats by using sensors, you would use Azure Advanced Threat Protection (ATP).
    Azure Advanced Threat Protection (ATP) is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.
    Sensors are software packages you install on your servers to upload information to Azure ATP.

    Box 2:
    To enforce MFA based on a condition, you would use Azure Active Directory Identity Protection.
    Azure AD Identity Protection helps you manage the roll-out of Azure Multi-Factor Authentication (MFA) registration by configuring a Conditional Access policy to require MFA registration no matter what modern authentication app you are signing in to.

18. Your Azure environment contains multiple Azure virtual machines.

    You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.

    What are two possible solutions? Each correct answer presents a complete solution.

    NOTE: Each correct selection is worth one point.

    • Modify an Azure Traffic Manager profile
    • Modify a network security group (NSG)
    • Modify a DDoS protection plan
    • Modify an Azure firewall
    Explanation:

    A network security group works like a firewall. You can attach a network security group to a virtual network and/or individual subnets within the virtual network. You can also attach a network security group to a network interface assigned to a virtual machine. You can use multiple network security groups within a virtual network to restrict traffic between resources such as virtual machines and subnets.

    You can filter network traffic to and from Azure resources in an Azure virtual network with a network security group. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources.

    In this question, we need to add a rule to the network security group to allow the connection to the virtual machine on port 80 (HTTP).

19. HOTSPOT

    To complete the sentence, select the appropriate option in the answer area.

    

    

    Explanation:

    The just-in-time (JIT) virtual machine (VM) access feature in Azure Security Center allows you to lock down inbound traffic to your Azure Virtual Machines. This reduces exposure to attacks while providing easy access when you need to connect to a VM.

20. HOTSPOT

    For each of the following statements, select Yes if the statement is true. Otherwise, select No.

    NOTE: Each correct selection is worth one point.