AZ-900 - Practice Exam 2

Contoso hosts a legacy CRM application that runs on an Azure VM
scale set. The application runs at a steady state of around 30%
resource utilization. However, during month end closing activities,
the application spikes to 90% resource utilization for extended
periods during the last week of the month. Azure allows Contoso IT
to meet these spikes in resource demand at the push of a button,
paying for the additional capacity only when needed. This is an
example of:

The Contoso Corp Financial Services team needs to automate
several business processes. They need to create workflows in a low-
code environment with a visual interface. The service must have
built-in connectivity to their existing platforms, like SalesForce and
SAP. The members working on the project are only lightly technical
(citizen developers). Which Microsoft service will best fit their use
case?

Which Azure service would you use to correlate events from
multiple Azure resources in a central repository? (choose the best
answer)

Contoso has messages from a variety of sources (many Azure
services) that need to be relayed to an application. Which Azure
service would be best suited to the task?

You can monitor health and availability of your Azure Kubernetes
Service (AKS) cluster with:

To retire some aging on-premises servers, Contoso is planning to
move several SQL databases to Azure SQL Database. The CIO has
asked for a tool to estimate the cost of hosting these resources in
Azure. Sally suggests using the Azure Pricing Calculator to estimate
costs prior to migration. Does Sally's solution meet the solution
criteria?

Contoso IT wants to configure separate Azure subscriptions for
different environments (production, development, test) and
products. Can they associate multiple Azure subscriptions to the
same Entra ID tenant?

Contoso Financial Services regularly creates documents containing
sensitive customer data, including personally identifiable
information. You need to ensure access is restricted to finance
personnel, regardless of where the document travels. Which service
should you use to classify and protect these documents?

An Azure [] is a set of datacenters deployed within a latency-
defined perimeter and connected through a dedicated regional low-
latency network.

You need to automate responses to some alerts from Azure Monitor.
Which service supports automating responses and corrective
actions in this scenario?

Contoso IT has deployed multiple Azure VM across 15 virtual
networks. How can you most securely limit inbound traffic and
protect these VMS from unwanted inbound requests? (choose the
best answer)

Tailspin Toys relies heavily on Entra ID for cloud identity. They want
to more effectively protect their identities from external threats.
Which service should they choose?

In a Site-to-Site VPN, the
is the cross-premises gateway that
connects your Azure Virtual Network with your on-premises VPN
appliances

The Contoso Security team has implemented a new security policy.
When users connect from an outside corporate offices, they must be
prompted for MFA. Which feature will you implement?

The Contoso Legal Department has asked Contoso IT to verify
whether the Contoso's Azure environment meets regulatory
requirements. Which service should you use to answer this
question?

Contoso Electronics is a global retailer. The Contoso Cloud
Architecture team needs to simplify deployments of new
environments in Azure, including Azure Resource Manager (ARM)
templates , role-based access, and policies. Which Azure service
enables delivery of templates for repeatable deployment and
configuration of new subscriptions and environments? (choose the
best answer)

You need to configure access to Office 365 resources for users at
Contoso. To group users for assignment of permissions, which of the
following options would you use?

You need to ensure no one (including administrators) can create
additional resources in a Azure resource group. What will you do to
achieve this objective?

Contoso IT is planning to migrate all on-premises data to Azure. The
Legal Department has asked for verification that Azure complies
with Contoso's regulatory obligations, such as HIPAA and PCl DSS.
Which Azure service can be used to monitor for regulatory
compliance?

Azure Container Instances enable elastic bursting for Azure
Kubernetes Service

Azure VMS in different subnets in the same virtual network can
communicate by defaul

You can monitor health and performance of microservices applications running on Azure Kubernetes Service (AKS) with:

You need to identify and enforce Contoso's corporate standards across
new and existing Azure deployments. Which service would you choose
to achieve this requirement? (choose the best answer)