Enhance your career with AZ-900 PDF Dumps - True Microsoft Exam Questions
New (2025) Download free AZ-900 PDF for Microsoft Practice Tests
Microsoft Azure Fundamentals certification exam is an excellent way to demonstrate your foundational knowledge of cloud computing and Azure services. It is an entry-level certification that is suitable for beginners and professionals in non-technical roles. Passing the exam will provide you with a solid understanding of cloud computing and Azure services, which is essential for a career in cloud computing.
NEW QUESTION # 56
To complete the sentence, select the appropriate option in the answer area.
Answer:
Explanation:
NEW QUESTION # 57
Your network contains an Active Directory forest. The forest contains 5,000 user accounts.
Your company plans to migrate all network resources to Azure and to decommission the on-premises data center.
You need to recommend a solution to minimize the impact on users after the planned migration.
What should you recommend?
- A. Create a guest user account in Azure Active Directory (Azure AD) for each user To migrate to Azure and decommission the on-premises data center, you would need to create the 5,000 user accounts in Azure Active Directory. The easy way to do this is to sync all the Active Directory user accounts to Azure Active Directory (Azure AD). You can even sync their passwords to further minimize the impact on users.
- B. Sync all the Active Directory user accounts to Azure Active Directory (Azure AD)
- C. Instruct all users to change their password
- D. Implement Azure Multi-Factor Authentication (MFA)
Answer: B
Explanation:
The tool you would use to sync the accounts is Azure AD Connect. The Azure Active Directory Connect synchronization services (Azure AD Connect sync) is a main component of Azure AD Connect. It takes care of all the operations that are related to synchronize identity data between your on-premises environment and Azure AD.
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-whatis
NEW QUESTION # 58
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:

NEW QUESTION # 59
Select the answer that correctly completes the sentence.
Answer:
Explanation:
Explanation
NEW QUESTION # 60
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: No
Resource groups are logical containers for Azure resources. You do not pay for resource groups.
Box 2: Yes
Data ingress over a VPN is data 'coming in' to Azure over the VPN. You are charged data transfer costs for data ingress.
Box 3: No
Data egress over a VPN is data 'going out' of Azure over the VPN. You are not charged for data egress.
References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/manage-resource-groups-portal
https://azure.microsoft.com/en-us/pricing/details/bandwidth/
NEW QUESTION # 61
For each of the following statements, select Yes if the statement is true, Otherwise, select No.
NOTE: Each correct match is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 62
This question requires that you evaluate the underlined text to determine if it is correct.
An Availability Zone in Azure has physically separate locations across two continents.
Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed." If the statement is incorrect, select the answer choice that makes the statement correct.
- A. No change is needed.
- B. within multiple Azure regions
- C. within a single Azure region
- D. within a single Azure datacenter
Answer: C
Explanation:
Availability Zones is a high-availability offering that protects your applications and data from datacenter failures. Availability Zones are unique physical locations within an Azure region.
Reference:
https://docs.microsoft.com/en-us/azure/availability-zones/az-overview
NEW QUESTION # 63
To complete the sentence, select the appropriate option in the answer area.
Answer:
Explanation:
NEW QUESTION # 64
You have an Azure application that uses the services shown in the following table.
How should you calculate the composite SLA for the application?
- A. Min(0.999, 0.9999) = 0.999 = 99.9%
- B. Max(0.999, 0.9999) = 0.9999 = 99.99%
- C. 0.999 * 0.9999 = 0.9989001 = 99.89001%
- D. 0.999 / 0.9999 = 4.9991 = 99.91%
Answer: A
NEW QUESTION # 65
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/china/overview-operations
https://docs.microsoft.com/en-us/azure/azure-government/documentation-government-welcome
NEW QUESTION # 66
You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted automatically to change their password.
Which Azure service should you use?
- A. Azure AD Privileged Identity Management
- B. Azure Advanced Threat Protection (ATP)
- C. Azure AD Connect Health
- D. Azure AD Identity Protection
Answer: D
Explanation:
Azure AD Identity Protection includes two risk policies: sign-in risk policy and user risk policy. A sign-in risk represents the probability that a given authentication request isn't authorized by the identity owner.
There are several types of risk detection. One of them is Anonymous IP Address. This risk detection type indicates sign-ins from an anonymous IP address (for example, Tor browser or anonymous VPN). These IP addresses are typically used by actors who want to hide their login telemetry (IP address, location, device, etc.) for potentially malicious intent.
You can configure the sign-in risk policy to require that users change their password.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-risk-policy
NEW QUESTION # 67
Match the Azure Services service to the correct description.
Instructions: To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure-sphere/product-overview/what-is-azure-sphere
https://docs.microsoft.com/en-us/azure/iot-central/core/overview-iot-central
https://docs.microsoft.com/en-us/azure/iot-hub/about-iot-hub
NEW QUESTION # 68
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 69
You need to configure an Azure solution that meets the following requirements:
* Secures websites from attacks
* Generates reports that contain details of attempted attacks
What should you include in the solution?
- A. Azure Firewall
- B. DDoS protection
- C. Azure Information Protection
- D. a network security group (NSG)
Answer: B
Explanation:
Section: Understand Security, Privacy, Compliance and Trust
Explanation:
DDoS is a type of attack that tries to exhaust application resources. The goal is to affect the application's availability and its ability to handle legitimate requests. DDoS attacks can be targeted at any endpoint that is publicly reachable through the internet.
Azure has two DDoS service offerings that provide protection from network attacks: DDoS Protection Basic and DDoS Protection Standard.
DDoS Basic protection is integrated into the Azure platform by default and at no extra cost.
You have the option of paying for DDoS Standard. It has several advantages over the basic service, including logging, alerting, and telemetry. DDoS Standard can generate reports that contain details of attempted attacks as required in this question.
References:
https://docs.microsoft.com/en-us/azure/security/fundamentals/ddos-best-practices
NEW QUESTION # 70
For each of the following statements, select Yes if the statement is tine. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 71
Which cloud deployment solution is used for Azure virtual machines and Azure SQL databases? To answer, select the appropriate options in the answer area.
Hot Area:
Answer:
Explanation:
Explanation
NEW QUESTION # 72
Match the Azure governance feature to the correct description.
Instructions: To answer, drag the appropriate feature from the column on the left to its description on the right. Each feature may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 73
This question requires that you evaluate the underlined text to determine if it is correct.
If a resource group named RG1 has a delete lock, only a member of the global administrators group can delete RG1.
Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.
- A. an Azure policy must be modified before an administrator
- B. an Azure tag must be added before an administrator
- C. the delete lock must be removed before an administrator
- D. No change is needed
Answer: C
Explanation:
Section: Understand Security, Privacy, Compliance and Trust
NEW QUESTION # 74
To complete the sentence, select the appropriate option in the answer area.
Answer:
Explanation:
Explanation:
NEW QUESTION # 75
Several support engineers plan to manage Azure by using the computers shown in the following table:
You need to identify which Azure management tools can be used from each computer.
What should you identify for each computer? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Section: Understand Core Azure Services
References:
https://buildazure.com/2016/08/18/powershell-now-open-source-and-cross-platform-linux-macos-windows/
NEW QUESTION # 76
Match the Azure service to the correct description.
Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Select and Place:
Answer:
Explanation:
Explanation:
References:
https://azure.microsoft.com/en-us/services/sql-database/
https://docs.microsoft.com/en-us/azure/sql-data-warehouse/sql-data-warehouse-overview-what-is
https://docs.microsoft.com/bs-latn-ba/azure/hdinsight/hadoop/apache-hadoop-introduction
NEW QUESTION # 77
......
Microsoft AZ-900 exam is an excellent way to learn about cloud computing and Microsoft Azure fundamentals. It is a valuable certification for individuals who want to start their career in the cloud computing industry or want to validate their understanding of Azure services. Microsoft Azure Fundamentals certification is accessible to everyone and does not require any prior experience, making it an excellent starting point for individuals looking to get certified in the cloud computing industry.
100% Free AZ-900 Files For passing the exam Quickly: https://dumpstorrent.prep4surereview.com/AZ-900-latest-braindumps.html
