AZ-900 Online Practice Questions and Answers

Correct Answer:

Box 1: Azure Sentinel Box 2: Azure Security Center Box 3: Azure Key Vault

Incorrect Answer: Azure Active Directory (Azure AD) Azure AD is an identity and access management service, which helps your employees sign in and access resources

Azure Lighthouse Azure Lighthouse is used for cross- and multi-tenant management.

Reference: https://docs.microsoft.com/en-us/azure/sentinel/overview https://docs.microsoft.com/en-us/azure/security-center/secure-score-security-controls https://practical365.com/securing-sensitive-information-in-azure-functions-with-the-azure-key-vault/ https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-whatis https://docs.microsoft.com/en-us/azure/lighthouse/overview

Correct Answer:

One of the major changes that you will face when you move from on-premises cloud to the public cloud is the switch from capital expenditure (buying hardware) to operating expenditure (paying for service as you use it).

Box 1: No

With the pay-as-go model, you pay for services as you use them. This is Opex (Operational Expenditure), not CapEx (Captial Expenditure). CapEx is where you pay for something upfront. For example, buying a new physical server.

Box 2: No

A reserved instance is where you pay upfront for the use of a virtual machine for a period of time (1 or 3 years). This can save you money as you receive a discount on the cost of a VM if you pay upfront for a reserved instance. However, as

this is an upfront payment, it will be classed as CapEx, not OpEx.

Box 3: Yes

Deploying your own datacenter is an example of CapEx. This is because you need to purchase all the infrastructure upfront before you can use it.

References:

https://docs.microsoft.com/en-us/azure/architecture/cloud-adoption/appendix/azure-scaffold

Correct Answer:

The Microsoft Privacy Statement explains what personal data Microsoft processes, how Microsoft processes the data, and the purpose of processing the data

Reference: https://privacy.microsoft.com/en-us/privacystatement

Correct Answer:

Explanation:

Box: Azure Active Directory (Azure AD)

You can enable single sign-on for an enterprise application through Azure Active Directory (Azure AD.

Incorrect:

Application security groups enable you to configure network security as a natural extension of an application's structure, allowing you to group virtual machines and define network security policies based on those groups.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/add-application-portal-setup-sso

Correct Answer:

Explanation:

Microsoft Service Trust Portal.

The Microsoft Service Trust Portal provides a variety of content, tools, and other resources about Microsoft security, privacy, and compliance practices.

Trust Documents

Provides a wealth of security implementation and design information with the goal of making it easier for you to meet regulatory compliance objectives by understanding how Microsoft Cloud services keep your data secure. To review content,

select one of the following options on the Trust Documents pull-down menu.

*

Audit Reports: A list of independent audit and assessment reports on Microsoft's Cloud services is displayed. These reports provide information about Microsoft Cloud services compliance with data protection standards and regulatory requirements.

*

Data Protection: Contains a wealth of resources such as audited controls, white papers, FAQs, penetration tests, risk assessment tools, and compliance guides.

*

Azure Security and Compliance Blueprints: Resources that help you build secure and compliant cloud-based applications. This area contains blueprint-guidance for government, finance, healthcare, and retail verticals.

Incorrect:

Not: Microsoft Defender for Cloud.

Defender for Cloud is a tool for security posture management and threat protection. It strengthens the security posture of your cloud resources, and with its integrated Microsoft Defender plans, Defender for Cloud protects workloads running

in Azure, hybrid, and other cloud platforms.

Defender for Cloud provides the tools needed to harden your resources, track your security posture, protect against cyber attacks, and streamline security management.

Not: the Microsoft 365 Compliance center

The Security and Compliance Center lets you grant permissions to people who perform compliance tasks like device management, data loss prevention, eDiscovery, retention, and so on. These people can perform only the tasks that you

explicitly grant them access to.

Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-service-trust-portal

Correct Answer: C

Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/insights/vminsights-alerts

Correct Answer: B

Correct Answer: C

Correct Answer: A

References: https://docs.microsoft.com/en-us/office365/admin/manage/release-options-in-office-365?view=o365-worldwide

Correct Answer: D

Agility is the ability to react quickly.

In the cloud, it takes a minute or two to create a Virtual Machine that is up and running. On the other hand, it takes days or weeks when we submit a request to purchase a physical server and by when it gets delivered.

Agility enables users to be able to allocate and deallocate resources very quickly, and that is a huge benefit of the cloud.

Reference:

https://coderjony.com/blogs/cloud-computing-concepts-high-availability-scalability-elasticity-agility-fault-tolerance-and-disaster-recovery