AZ-900

Number: AZ-900
Passing Score: 800
Time Limit: 120 min
File Version: 1

AZ-900

https://www.gratisexam.com/

Sections
1. Describe Cloud Concepts
2. Describe Core Azure Services
3. Describe core solutions and management tools on Azure
4. Describe general security and network security features
5. Describe identity, governance, privacy, and compliance features
6. Describe Azure cost management and Service Level Agreements

https://www.gratisexam.com/
Exam A

QUESTION 1
Your company hosts an accounting application named App1 that is used by all the customers of the company.

App1 has low usage during the first three weeks of each month and very high usage during the last week of each month. Which benefit of

Azure Cloud Services supports cost management for this type of usage pattern?

A. high availability
B. high latency
C. elasticity
D. load balancing

Correct Answer: C
Section: Describe Cloud
Concepts Explanation

Explanation/Reference:
Explanation:
Elasticity in this case is the ability to provide additional compute resource when needed and reduce the compute resource when not needed to reduce costs. Autoscaling is an example
of elasticity.

Elastic computing is the ability to quickly expand or decrease computer processing, memory and storage resources to meet changing demands without worrying about capacity
planning and engineering for peak usage. Typically controlled by system monitoring tools, elastic computing matches the amount of resources allocated to the amount of
resources actually needed without disrupting operations. With cloud elasticity, a company avoids paying for unused capacity or idle resources and doesn’t have to worry about
investing in the purchase or maintenance of additional resources and equipment.

References:
https://azure.microsoft.com/en-gb/overview/what-is-elastic-computing/

QUESTION 2
You plan to migrate a web application to Azure. The web application is accessed by external users.

You need to recommend a cloud deployment solution to minimize the amount of administrative effort used to manage the web application. What

should you include in the recommendation?

A. Software as a Service (SaaS)

B. Platform as a Service (PaaS)
C. Infrastructure as a Service (IaaS)
D. Database as a Service (DaaS)

Correct Answer: B
Section: Describe Cloud
Concepts Explanation

Explanation/Reference:
Explanation:
Azure App Service is a platform-as-a-service (PaaS) offering that lets you create web and mobile apps for any platform or device and connect to data anywhere, in the cloud or
on-premises. App Service includes the web and mobile capabilities that were previously delivered separately as Azure Websites and Azure Mobile Services.

References:
https://docs.microsoft.com/en-us/azure/security/fundamentals/paas-applications-using-app-services

QUESTION 3
You have an on-premises network that contains 100 servers.

You need to recommend a solution that provides additional resources to your users. The solution must minimize capital and operational expenditure costs. What should you

include in the recommendation?

A. a complete migration to the public cloud

B. an additional data center
C. a private cloud
D. a hybrid cloud

Correct Answer: D
Section: Describe Cloud
Concepts Explanation

Explanation/Reference:
Explanation:
A hybrid cloud is a combination of a private cloud and a public cloud.
Capital expenditure is the spending of money up-front for infrastructure such as new servers.

With a hybrid cloud, you can continue to use the on-premises servers while adding new servers in the public cloud (Azure for example). Adding new servers in Azure minimizes
the capital expenditure costs as you are not paying for new servers as you would if you deployed new server on-premises.

Incorrect Answers:
A: A complete migration of 100 servers to the public cloud would involve a lot of operational expenditure (the cost of migrating all the servers).
B: An additional data center would involve a lot of capital expenditure (the cost of the new infrastructure).
C: A private cloud is hosted on on-premises servers to this would involve a lot of capital expenditure (the cost of the new infrastructure to host the private cloud).

References:
https://docs.microsoft.com/en-gb/learn/modules/principles-cloud-computing/4-cloud-deployment-models

QUESTION 4
Your company has an on-premises network that contains multiple servers.

The company plans to reduce the following administrative responsibilities of network administrators: Backing up

application data
Replacing failed server hardware
Managing physical server security
Updating server operating systems
Managing permissions to shared documents

The company plans to migrate several servers to Azure virtual machines.

You need to identify which administrative responsibilities will be eliminated after the planned migration. Which

two responsibilities should you identify? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A. Replacing failed server hardware

B. Backing up application data
C. Managing physical server security
D. Updating server operating systems
E. Managing permissions to shared documents

Correct Answer: AC
Section: Describe Cloud
Concepts Explanation

Explanation/Reference:
Explanation:
Azure virtual machines run on Hyper-V physical servers. The physical servers are owned and managed by Microsoft. As an Azure customer, you have no access to the physical
servers. Microsoft manage the replacement of failed server hardware and the security of the physical servers so you don’t need to.

Incorrect Answers:
B: Microsoft have no control over the applications you run on the virtual machines. Therefore, it is your responsibility to ensure that application data is backed up. D: Microsoft
do not manage the operating systems you run on the virtual machines. Therefore, it is your responsibility to ensure that the operating systems are updated.
E: Microsoft have no control over the shared folders you host on the virtual machines. Therefore, it is your responsibility to ensure that folder permissions are configured
appropriately.

QUESTION 5
You plan to provision Infrastructure as a Service (IaaS) resources in Azure. Which

resource is an example of IaaS?

A. an Azure web app

B. an Azure virtual machine
C. an Azure logic app
D. an Azure SQL database

Correct Answer: B
Section: Describe Cloud
Concepts Explanation

Explanation/Reference:
Explanation:
An Azure virtual machine is an example of Infrastructure as a Service (IaaS).

Azure web app, Azure logic app and Azure SQL database are all examples of Platform as a Service (Paas). References:
https://azure.microsoft.com/en-gb/overview/what-is-iaas/

https://azure.microsoft.com/en-gb/overview/what-is-paas/

QUESTION 6
This question requires that you evaluate the underlined text to determine if it is correct.

One of the benefits of Azure SQL Data Warehouse is that high availability is built into the platform.

Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the
statement correct.

A. No change is needed
B. automatic scaling
C. data compression
D. versioning

Correct Answer: A
Section: Describe Core Azure
Services Explanation

Explanation/Reference:
Explanation:
Azure Data Warehouse (now known as Azure Synapse Analytics) is a PaaS offering from Microsoft. As with all PaaS services from Microsoft, SQL Data Warehouse offers an
availability SLA of 99.9%. Microsoft can offer 99.9% availability because it has high availability features built into the platform.

References:
https://docs.microsoft.com/en-us/azure/sql-data-warehouse/sql-data-warehouse-overview-faq

QUESTION 7
You have an Azure environment that contains multiple Azure virtual machines.

You plan to implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines. You need to

recommend which Azure resources must be created for the planned solution.

Which two Azure resources should you include in the recommendation? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. a virtual network gateway

B. a load balancer
C. an application gateway
D. a virtual network
E. a gateway subnet

Correct Answer: AE
Section: Describe Core Azure
Services Explanation

Explanation/Reference:
Explanation:
To implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines, you need to configure a VPN
(Virtual Private Network) to connect the on-premises network to the Azure virtual network.

The Azure VPN device is known as a Virtual Network Gateway. The virtual network gateway needs to be located in a dedicated subnet in the Azure virtual network. This dedicated
subnet is known as a gateway subnet and must be named ‘GatewaySubnet’.

Note: a virtual network (answer D) is also required. However, as we already have virtual machines deployed in a Azure, we can assume that the virtual network is already in place.

References:
https://docs.microsoft.com/en-us/office365/enterprise/connect-an-on-premises-network-to-a-microsoft-azure-virtual-network

QUESTION 8
This question requires that you evaluate the underlined text to determine if it is correct.

An Availability Zone in Azure has physically separate locations across two continents.

Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed.” If the statement is incorrect, select the answer choice that makes the
statement correct.

A. No change is needed.
B. within a single Azure region
C. within multiple Azure regions
D. within a single Azure datacenter

Correct Answer: B
Section: Describe Core Azure
Services Explanation

Explanation/Reference:
Explanation:
Availability Zones is a high-availability offering that protects your applications and data from datacenter failures. Availability Zones are unique physical locations within an
Azure region.

References:
https://docs.microsoft.com/en-us/azure/availability-zones/az-overview

QUESTION 9
A support engineer plans to perform several Azure management tasks by using the Azure CLI. You

install the CLI on a computer.

You need to tell the support engineer which tools to use to run the CLI.

Which two tools should you instruct the support engineer to use? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A. Command Prompt
B. Azure Resource Explorer
C. Windows PowerShell
D. Windows Defender Firewall
E. Network and Sharing Center

Correct Answer: AC
Section: Describe core solutions and management tools on Azure
Explanation

Explanation/Reference:
Explanation:
For Windows the Azure CLI is installed via an MSI, which gives you access to the CLI through the Windows Command Prompt (CMD) or PowerShell.

References:
https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-windows?view=azure-cli-latest

QUESTION 10
You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region.

Which Azure service should you use from the Azure portal to view service failure notifications that can affect the availability of VM1?

A. Azure Service Fabric

B. Azure Monitor
C. Azure virtual machines
D. Azure Advisor

Correct Answer: C
Section: Describe core solutions and management tools on Azure
Explanation

Explanation/Reference:
Explanation:
In the Azure virtual machines page in the Azure portal, there is a named Maintenance Status. This column will display service issues that could affect your virtual
machine. A service failure is rare but host server maintenance that could affect your virtual machines is more common.

Azure periodically updates its platform to improve the reliability, performance, and security of the host infrastructure for virtual machines. The purpose of these updates ranges
from patching software components in the hosting environment to upgrading networking components or decommissioning hardware.

References:
https://docs.microsoft.com/en-us/azure/virtual-machines/maintenance-and-updates

QUESTION 11
Your company plans to deploy several million sensors that will upload data to Azure.

You need to identify which Azure resources must be created to support the planned solution. Which two

Azure resources should you identify? Each correct answer presents part of the solution. NOTE: Each correct

selection is worth one point.

A. Azure Data Lake

B. Azure Queue storage
C. Azure File Storage
D. Azure IoT Hub
E. Azure Notification Hubs

Correct Answer: AD
Section: Describe core solutions and management tools on Azure
Explanation

Explanation/Reference:
Explanation:
IoT Hub (Internet of things Hub) provides data from millions of sensors.
IoT Hub is a managed service, hosted in the cloud, that acts as a central message hub for bi-directional communication between your IoT application and the devices it manages.
You can use Azure IoT Hub to build IoT solutions with reliable and secure communications between millions of IoT devices and a cloud-hosted solution backend. You can connect
virtually any device to IoT Hub.

There are two storage services IoT Hub can route messages to -- Azure Blob Storage and Azure Data Lake Storage Gen2 (ADLS Gen2) accounts. Azure Data Lake Storage accounts
are hierarchical namespace-enabled storage accounts built on top of blob storage. Both of these use blobs for their storage.

References:
https://docs.microsoft.com/en-us/azure/iot-hub/about-iot-hub

https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-messages-d2c
QUESTION 12
You have an Azure environment that contains 10 virtual networks and 100 virtual machines. You need

to limit the amount of inbound traffic to all the Azure virtual networks.

What should you create?

A. one application security group (ASG)

B. 10 virtual network gateways
C. 10 Azure ExpressRoute circuits
D. one Azure firewall

Correct Answer: D
Section: Describe general security and network security features
Explanation

Explanation/Reference:
Explanation:
You can restrict traffic to multiple virtual networks with a single Azure firewall.

Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources. It's a fully stateful firewall as a service with built-in high
availability and unrestricted cloud scalability.
You can centrally create, enforce, and log application and network connectivity policies across subscriptions and virtual networks. Azure Firewall uses a static public IP address for
your virtual network resources allowing outside firewalls to identify traffic originating from your virtual network.

References:
https://docs.microsoft.com/en-us/azure/firewall/overview

QUESTION 13
Your company plans to automate the deployment of servers to Azure.

Your manager is concerned that you may expose administrative credentials during the deployment.

You need to recommend an Azure solution that encrypts the administrative credentials during the deployment. What should

you include in the recommendation?

A. Azure Key Vault

B. Azure Information Protection
C. Azure Security Center
D. Azure Multi-Factor Authentication (MFA)

Correct Answer: A
Section: Describe general security and network security features
Explanation

Explanation/Reference:
Explanation:
Azure Key Vault is a secure store for storage various types of sensitive information. In this question, we would store the administrative credentials in the Key Vault. With this
solution, there is no need to store the administrative credentials as plain text in the deployment scripts.

All information stored in the Key Vault is encrypted.

Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets.
Secrets and keys are safeguarded by Azure, using industry-standard algorithms, key lengths, and hardware security modules (HSMs). The HSMs used are Federal Information
Processing Standards (FIPS) 140-2 Level 2 validated.

Access to a key vault requires proper authentication and authorization before a caller (user or application) can get access. Authentication establishes the identity of the caller,
while authorization determines the operations that they are allowed to perform.

References:
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview

QUESTION 14
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your Azure environment contains multiple Azure virtual machines.

You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You

modify a network security group (NSG).

Does this meet the goal?

A. Yes
B. No

Correct Answer: A
Section: Describe general security and network security features
Explanation

Explanation/Reference:
Explanation:
A network security group works like a firewall. You can attach a network security group to a virtual network and/or individual subnets within the virtual network. You can also
attach a network security group to a network interface assigned to a virtual machine. You can use multiple network security groups within a virtual network to restrict traffic
between resources such as virtual machines and subnets.

You can filter network traffic to and from Azure resources in an Azure virtual network with a network security group. A network security group contains security rules that allow or
deny inbound network traffic to, or outbound network traffic from, several types of Azure resources.

In this question, we need to add a rule to the network security group to allow the connection to the virtual machine on port 80 (HTTP). References:
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

QUESTION 15
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your Azure environment contains multiple Azure virtual machines.

You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You

modify a DDoS protection plan.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: Describe general security and network security features
Explanation

Explanation/Reference:
Explanation:
DDoS is a form of attack on a network resource. A DDoS protection plan is used to protect against DDoS attacks; it does not provide connectivity to a virtual machine.
To ensure that a virtual machine named VM1 is accessible from the Internet over HTTP, you need to modify a network security group or Azure Firewall.

References:
https://docs.microsoft.com/en-us/azure/virtual-network/ddos-protection-overview

QUESTION 16
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your Azure environment contains multiple Azure virtual machines.

You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You

modify an Azure firewall.

Does this meet the goal?

A. Yes
B. No

Correct Answer: A
Section: Describe general security and network security features
Explanation

Explanation/Reference:
Explanation:
Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources. It's a fully stateful firewall as a service with built-in high
availability and unrestricted cloud scalability.

In this question, we need to add a rule to Azure Firewall to allow the connection to the virtual machine on port 80 (HTTP). References:
https://docs.microsoft.com/en-us/azure/firewall/overview

QUESTION 17
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your Azure environment contains multiple Azure virtual machines.

You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You

modify an Azure Traffic Manager profile.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: Describe general security and network security features
Explanation

Explanation/Reference:
Explanation:
Azure Traffic Manager is a DNS-based load balancing solution. It is not used to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.

To ensure that a virtual machine named VM1 is accessible from the Internet over HTTP, you need to modify a network security group or Azure Firewall. In this

question, we need to add a rule to a network security group or Azure Firewall to allow the connection to the virtual machine on port 80 (HTTP).

References:
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview

QUESTION 18
This question requires that you evaluate the underlined text to determine if it is correct.

Azure Germany can be used by legal residents of Germany only.

Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the
statement correct.

A. no change is needed
B. only enterprises that are registered in Germany
C. only enterprises that purchase their azure licenses from a partner based in Germany
D. any user or enterprise that requires its data to reside in Germany
Correct Answer: D
Section: Describe identity, governance, privacy, and compliance features
Explanation

Explanation/Reference:
Explanation:
Azure Germany is available to eligible customers and partners globally who intend to do business in the EU/EFTA, including the United Kingdom.

Azure Germany offers a separate instance of Microsoft Azure services from within German datacenters. The datacenters are in two locations, Frankfurt/Main and Magdeburg.
This placement ensures that customer data remains in Germany and that the datacenters connect to each other through a private network. All customer data is exclusively stored
in those datacenters. A designated German company--the German data trustee--controls access to customer data and the systems and infrastructure that hold customer data.

References:
https://docs.microsoft.com/en-us/azure/germany/germany-welcome?toc=%2fazure%2fgermany%2ftoc.json

https://docs.microsoft.com/en-us/azure/germany/germany-overview-data-trustee

QUESTION 19
You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted
automatically to change their password.

Which Azure service should you use?

A. Azure AD Connect Health

B. Azure AD Privileged Identity Management
C. Azure Advanced Threat Protection (ATP)
D. Azure AD Identity Protection

Correct Answer: D
Section: Describe identity, governance, privacy, and compliance features
Explanation

Explanation/Reference:
Explanation:
Azure AD Identity Protection includes two risk policies: sign-in risk policy and user risk policy. A sign-in risk represents the probability that a given authentication request isn’t
authorized by the identity owner.

There are several types of risk detection. One of them is Anonymous IP Address. This risk detection type indicates sign-ins from an anonymous IP address (for example, Tor
browser or anonymous VPN). These IP addresses are typically used by actors who want to hide their login telemetry (IP address, location, device, etc.) for potentially
malicious intent.
You can configure the sign-in risk policy to require that users change their password.

References:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-risk-policy

https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks

QUESTION 20
To what should an application connect to retrieve security tokens?

A. an Azure Storage account

B. Azure Active Directory (Azure AD)
C. a certificate store
D. an Azure key vault

Correct Answer: B
Section: Describe identity, governance, privacy, and compliance features
Explanation

Explanation/Reference:
Explanation:
Azure AD authenticates users and provides access tokens. An access token is a security token that is issued by an authorization server. It contains information about the user and
the app for which the token is intended, which can be used to access Web APIs and other protected resources.

Instead of creating apps that each maintain their own username and password information, which incurs a high administrative burden when you need to add or remove users
across multiple apps, apps can delegate that responsibility to a centralized identity provider.

Azure Active Directory (Azure AD) is a centralized identity provider in the cloud. Delegating authentication and authorization to it enables scenarios such as Conditional Access
policies that require a user to be in a specific location, the use of multi-factor authentication, as well as enabling a user to sign in once and then be automatically signed in to all of
the web apps that share the same centralized directory. This capability is referred to as Single Sign On (SSO).

References:
https://docs.microsoft.com/en-us/azure/active-directory/develop/authentication-scenarios

QUESTION 21
Your network contains an Active Directory forest. The forest contains 5,000 user accounts.

Your company plans to migrate all network resources to Azure and to decommission the on-premises data center. You need

to recommend a solution to minimize the impact on users after the planned migration.
What should you recommend?

A. Implement Azure Multi-Factor Authentication (MFA)

B. Sync all the Active Directory user accounts to Azure Active Directory (Azure AD)
C. Instruct all users to change their password
D. Create a guest user account in Azure Active Directory (Azure AD) for each user

Correct Answer: B
Section: Describe identity, governance, privacy, and compliance features
Explanation

Explanation/Reference:
Explanation:
To migrate to Azure and decommission the on-premises data center, you would need to create the 5,000 user accounts in Azure Active Directory. The easy way to do this is to
sync all the Active Directory user accounts to Azure Active Directory (Azure AD). You can even sync their passwords to further minimize the impact on users.
The tool you would use to sync the accounts is Azure AD Connect. The Azure Active Directory Connect synchronization services (Azure AD Connect sync) is a main component of
Azure AD Connect. It takes care of all the operations that are related to synchronize identity data between your on-premises environment and Azure AD.

References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-whatis

QUESTION 22
You have a resource group named RG1.

You need to prevent the creation of virtual machines only in RG1. The solution must ensure that other objects can be created in RG1. What should you

use?

A. a lock
B. an Azure role
C. a tag
D. an Azure policy

Correct Answer: D
Section: Describe identity, governance, privacy, and compliance features
Explanation
Explanation/Reference:
Explanation:
Azure policies can be used to define requirements for resource properties during deployment and for already existing resources. Azure Policy controls properties such as the types
or locations of resources.

Azure Policy is a service in Azure that you use to create, assign, and manage policies. These policies enforce different rules and effects over your resources, so those resources
stay compliant with your corporate standards and service level agreements.

In this question, we would create an Azure policy assigned to the resource group that denies the creation of virtual machines in the resource group.

You could place a read-only lock on the resource group. However, that would prevent the creation of any resources in the resource group, not virtual machines only. Therefore, an
Azure Policy is a better solution.

Reference:
https://docs.microsoft.com/en-us/azure/governance/policy/overview

QUESTION 23
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to purchase an Azure subscription.

The company’s support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to

recommend which support plan meets the support policy requirement.

Solution: Recommend a Basic support plan.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: Describe Azure cost management and Service Level
Agreements Explanation

Explanation/Reference:
Explanation:
The Basic support plan does not have any technical support for engineers.
Access to Support Engineers via email or phone is available in the following support plans: Premier, Professional Direct and standard.

Reference:
https://azure.microsoft.com/en-gb/support/plans/

QUESTION 24
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to purchase an Azure subscription.

The company’s support policy states that the Azure environment must provide an option to access support engineers by phone or email. You need to

recommend which support plan meets the support policy requirement.

Solution: Recommend a Professional Direct support plan. Does this

meet the goal?

A. Yes
B. No

Correct Answer: A
Section: Describe Azure cost management and Service Level
Agreements Explanation

Explanation/Reference:
Explanation:
The Basic support plan does not have any technical support for engineers. The
Developer support plan has only technical support for engineers via email.
The Standard, Professional Direct, and Premier support plans have technical support for engineers via email and phone.

Reference:
https://azure.microsoft.com/en-gb/support/plans/

QUESTION 25
This question requires that you evaluate the underlined text to determine if it is correct.

You can use Advisor recommendations in Azure to send email alerts when the cost of the current billing period for an Azure subscription exceeds a specified limit.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed.” If the statement is incorrect, select the answer choice that makes the
statement correct.

A. No change is needed.
B. Access control (IAM)
C. Budget alerts
D. Compliance

Correct Answer: C
Section: Describe Azure cost management and Service Level
Agreements Explanation

Explanation/Reference:
Explanation:
Budget alerts notify you when spending, based on usage or cost, reaches or exceeds the amount defined in the alert condition of the budget. Cost Management budgets are created
using the Azure portal or the Azure Consumption API.

Reference:
https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/cost-mgt-alerts-monitor-usage-spending

QUESTION 26
This question requires that you evaluate the underlined text to determine if it is correct.

If Microsoft plans to end support for an Azure service that does NOT have a successor service, Microsoft will provide notification at least 12 months before.

Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the
statement correct.

A. No change is needed.
B. 6 months
C. 90 days
D. 30 days

Correct Answer: A
Section: Describe Azure cost management and Service Level
Agreements Explanation

Explanation/Reference:
Explanation:
The Modern Lifecycle Policy covers products and services that are serviced and supported continuously. For products governed by the Modern Lifecycle Policy, Microsoft will
provide a minimum of 12 months' notification prior to ending support if no successor product or service is offered—excluding free services or preview releases.

Reference:
https://support.microsoft.com/en-us/help/30881

QUESTION 27
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has an Azure subscription that contains the following unused resources: 20 user

accounts in Azure Active Directory (Azure AD)

Five groups in Azure AD
10 public IP addresses 10
network interfaces

You need to reduce the Azure costs for the company. Solution:

You remove the unused groups.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: Describe Azure cost management and Service Level
Agreements Explanation

Explanation/Reference:
Explanation:
You are not charged for Azure Active Directory Groups. Therefore, deleting unused groups will not reduce your Azure costs.

Reference:
https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations#reduce-costs-by-deleting-or-reconfiguring-idle-virtual-network-gateways