AZ-900 Practice Test 19 — 15 Questions

Question 1

Which Azure service provides a managed Apache Spark environment for big data analytics and machine learning workloads?

Accepted Answer

Azure HDInsight. Azure HDInsight is the correct answer because it is a fully managed, open-source analytics service that provides Apache Spark clusters for big data processing and machine learning workloads. It supports Spark, Hadoop, Hive, and other frameworks, allowing users to run distributed data analytics and ML pipelines without managing infrastructure.

Answer

Azure Stream Analytics

Answer

Azure Data Factory

Answer

Azure Synapse Analytics

Question 2

Which Azure service translates text between languages using neural machine translation?

Accepted Answer

Azure Cognitive Services Translator. Azure Cognitive Services Translator is the correct service because it provides neural machine translation (NMT) capabilities, which use deep learning models to translate text between languages with high accuracy and fluency. Unlike traditional statistical methods, NMT considers the full context of a sentence, producing more natural translations. This service is specifically designed for text-to-text translation tasks.

Answer

Azure Language Understanding

Answer

Azure Speech Service

Answer

Azure Text Analytics

Question 3

Which of the following demonstrates how 'increased speed and agility' helps a development team in the cloud?

Accepted Answer

Provisioning a complete test environment in minutes to test a new feature. Cloud computing enables self-service provisioning of resources via APIs, allowing a development team to spin up a complete test environment in minutes without waiting for hardware procurement. This directly demonstrates 'increased speed and agility' by reducing the time from idea to deployment, a core benefit of Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) models.

Answer

Waiting 6 weeks for procurement to buy servers for a new project

Answer

Reducing the team size needed for development projects

Answer

Automatically fixing bugs in production code without developer intervention

Question 4

A company uses Azure and wants to ensure that their IT team receives alerts when virtual machines are deallocated unexpectedly. Which Azure service should they use to create a rule that triggers an action when a VM is deallocated?

Accepted Answer

Azure Monitor. Azure Monitor is the correct service because it provides a unified platform for collecting, analyzing, and acting on telemetry from Azure resources. By creating an alert rule in Azure Monitor with a signal type of 'Administrative' (Azure Activity Log), you can trigger an action group (e.g., email, SMS, webhook) specifically when a virtual machine is deallocated, as this event is logged as an administrative operation in the Activity Log.

Answer

Azure Service Health

Answer

Azure Advisor

Answer

Azure Policy

Question 5

Which Azure feature provides a way to define and enforce allowed resource configurations, like permitted VM sizes or storage redundancy types?

Accepted Answer

Azure Policy definitions. Azure Policy definitions allow you to create, assign, and manage policies that enforce specific rules and effects over your resources. This includes restricting allowed virtual machine SKUs or requiring a specific storage redundancy type (e.g., Geo-Redundant Storage). Policies are evaluated during resource creation and existing resources can be audited or remediated automatically.

Answer

Azure RBAC permissions

Answer

Azure Subscription quotas

Answer

Azure Resource Locks

Question 6

What is Azure Disk Storage used for?

Accepted Answer

Providing persistent block storage volumes for Azure Virtual Machines. Azure Disk Storage provides durable, high-performance block storage for Azure Virtual Machines. Each disk is a virtual hard disk (VHD) that can be attached to a VM as an OS disk or data disk, offering persistent storage that survives VM reboots and re-deployments. It is the primary storage option for IaaS workloads requiring low-latency, random-access I/O.

Answer

Hosting static websites and web content

Answer

Sharing files between multiple computers via SMB protocol

Answer

Archiving infrequently accessed data at low cost

Question 7

What is 'defense in depth' in cloud security?

Accepted Answer

A layered security approach where multiple defenses protect assets. Defense in depth is a layered security strategy that uses multiple, independent security controls across different layers of the IT stack (network, compute, storage, application, data) to protect assets. If one layer is breached, additional layers are in place to prevent or limit further compromise. This approach is fundamental to Azure's security architecture, where tools like Azure Firewall, Network Security Groups (NSGs), Azure Policy, and Azure Defender work together to provide overlapping protections.

Answer

Using a very strong single password for all Azure accounts

Answer

Storing data in multiple geographic locations for backup

Answer

Using the most advanced encryption for all Azure data

Question 8

An organization wants to ensure that no one can create Azure resources outside of approved geographic locations across all of their subscriptions. What is the most scalable way to enforce this?

Accepted Answer

Assign 'Allowed locations' Azure Policy at the Management Group level. Azure Policy at the Management Group level allows you to define a single 'Allowed locations' policy that applies to all subscriptions within that group, ensuring consistent enforcement across the entire organization. This approach is the most scalable because it centralizes governance, automatically covering new subscriptions added to the management group without manual intervention.

Answer

Configure RBAC to deny resource creation permissions in all subscriptions

Answer

Create separate 'Allowed locations' policies in each subscription

Answer

Use Azure Blueprints to restrict locations in each new subscription

Question 9

A company wants to ensure that whenever a new Azure subscription is created, it automatically inherits a set of baseline policies, role assignments, and resource groups. Which Azure tool should they use to package and deploy these governance components consistently?

Accepted Answer

Azure Blueprints. Azure Blueprints is the correct tool because it is specifically designed to orchestrate the deployment of a repeatable set of Azure resources, policies, role assignments, and resource groups into a new subscription. It packages these governance components into a single blueprint definition that can be assigned to a subscription, ensuring consistent inheritance and compliance from creation.

Answer

Azure Policy

Answer

Azure Management Groups

Answer

Azure Resource Manager templates

Question 10

Which Azure service provides a fully managed message queuing service for decoupling application components?

Accepted Answer

Azure Queue Storage. Azure Queue Storage is a fully managed message queuing service that enables decoupling of application components by allowing them to communicate asynchronously via durable messages. It supports large volumes of messages (up to 64 KB each) and provides a simple REST-based API for producers to enqueue messages and consumers to dequeue them, ensuring reliable message delivery and scalability without managing infrastructure.

Answer

Azure Event Grid

Answer

Azure Event Hubs

Answer

Azure Notification Hubs

Question 11

Which Azure service provides an enterprise-grade, fully managed graph database as a service?

Accepted Answer

Azure Cosmos DB for Gremlin. Azure Cosmos DB for Gremlin is the correct answer because it provides a fully managed, enterprise-grade graph database service that uses the Apache TinkerPop Gremlin graph traversal language. It supports graph data models with vertices and edges, enabling complex relationship queries at global scale with turnkey distribution and SLA-backed performance.

Answer

Azure SQL Database

Answer

Azure Table Storage

Answer

Azure Cache for Redis

Question 12

Which Azure feature automatically identifies and informs you of Azure service issues that may be affecting your resources in your region?

Accepted Answer

Azure Service Health alerts. Azure Service Health alerts proactively notify you about Azure service issues, planned maintenance, and health advisories that may affect your resources in a specific region. This feature combines global service issues with regional impacts, allowing you to configure alerts based on service health events. It is the correct choice because it directly addresses the requirement of automatically identifying and informing you of Azure service issues affecting your resources.

Answer

Azure Monitor resource health

Answer

Azure Advisor notifications

Answer

Azure Policy compliance alerts

Question 13

A company stores critical configuration data in an Azure Storage account. The IT administrator wants to prevent accidental deletion of this storage account. However, the administrator must still be able to read and update the data within the storage account. The company uses Azure Role-Based Access Control (RBAC) to manage permissions. Which Azure governance feature should the administrator implement to achieve this goal?

Accepted Answer

A Delete lock on the storage account. A Delete lock on the storage account prevents deletion of the resource while still allowing read and update operations on the data within it. Azure resource locks operate at the resource level, overriding any RBAC permissions that would otherwise allow deletion, but they do not restrict data plane operations like reading or writing blobs or tables. This directly meets the administrator's requirement to protect against accidental deletion while maintaining full read/update access.

Answer

Azure Policy with the deny effect to block deletion of the storage account

Answer

An Azure Blueprint that includes the storage account with a policy to prevent deletion

Answer

A Read-only lock on the storage account

Question 14

A company has multiple departments, each with its own Azure subscription. They want to apply the same set of policies and role assignments to all subscriptions under the Sales department. They also plan to create more subscriptions for Sales in the future. Which Azure construct should they use?

Accepted Answer

Management group. Management groups allow you to apply Azure Policy and role-based access control (RBAC) assignments hierarchically across multiple subscriptions. By placing all Sales department subscriptions under a single management group, any policies or role assignments defined at that management group level will be inherited by all current and future subscriptions within it, ensuring consistent governance.

Answer

Resource group

Answer

Policy initiative

Answer

Blueprint

Question 15

Which Azure feature allows organizations to apply the same governance at a hierarchy of subscriptions and resource groups?

Accepted Answer

Azure Policy and RBAC inheritance through the management hierarchy. Azure Policy and RBAC (Role-Based Access Control) inheritance through the management hierarchy allows organizations to apply consistent governance across multiple subscriptions and resource groups. When a policy or RBAC assignment is applied at a management group, it is inherited by all child subscriptions and resource groups, ensuring uniform compliance and access control without manual reconfiguration.

Answer

Azure Resource Locks inheritance

Answer

Azure Blueprints auto-assignment

Answer

Azure Cost Management budget inheritance