Free AZ-900 Exam Braindumps
Microsoft Azure Fundamentals Questions 209–216 (page: 28)

Updated On: 26-Apr-2026

DRAG DROP (Drag and Drop is not supported)
Match the Azure compute services to the appropriate descriptions.

To answer, drag the appropriate compute service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.

NOTE: Each correct match is worth one point.

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: Azure Container Instances
Provides software emulation of a physical computer.

Azure Container Instances (ACI) is a service that enables a developer to deploy containers on the Microsoft Azure public cloud without having to provision or manage any underlying infrastructure. The service supports both Linux containers and Windows containers.

Box 2: Azure Virtual Machine Scale Sets
Provides operating system virtualization.

Azure Virtual Machine Scale Sets
Azure Virtual Machine Scale Sets let you create and manage a group of load balanced VMs. The number of VM instances can automatically increase or decrease in response to demand or a defined schedule. Scale sets provide the following key benefits:

Easy to create and manage multiple VMs
Provides high availability and application resiliency by distributing VMs across availability zones or fault domains
Allows your application to automatically scale as resource demand changes
Works at large-scale

Incorrect:
* Azure App Service
Azure App Service enables you to build and host web apps, mobile back ends, and RESTful APIs in the programming language of your choice without managing infrastructure. It offers auto-scaling and high availability, supports both Windows and Linux, and enables automated deployments from GitHub, Azure DevOps, or any Git repo.


Reference:

https://www.techtarget.com/searchcloudcomputing/definition/Azure-Container-Instances



HOTSPOT (Drag and Drop is not supported)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: No
No - You must install Azure Cloud Shell on your computer before you can use it.

You must register it, not install it.

Before you can use Azure Cloud Shell, you must register the Microsoft.CloudShell resource provider. Access to resources is enabled through provider namespaces that must be registered in your subscription. You only need to register the namespace once per subscription.

To see all resource providers, and the registration status for your subscription:

1. Sign in to the Azure portal.

2. On the Azure portal menu, search for Subscriptions. Select it from the available options.

3. Select the subscription you want to view.

4. On the left menu, under Settings, select Resource providers.

5. In the search box, enter cloudshell to search for the resource provider.

6. Select the Microsoft.CloudShell resource provider register from the provider list.

7. Select Register to change the status from unregistered to Registered.

Start Cloud Shell
1. Launch Cloud Shell from the top navigation of the Azure portal.

Box 2: No
No - The Azure Command-Line Interface (CLI) is installed by default in Windows 11

You must install Azure CLI on Windows
The Azure Command-Line Interface (CLI) is a cross-platform command-line tool that can be installed locally on Windows computers. You can use the Azure CLI for Windows to connect to Azure and execute administrative commands on Azure resources. The Azure CLI for Windows can also be used from a browser through the Azure Cloud Shell or run from inside a Docker container.

Box 3: Yes
Yes - Azure PowerShell can be used on computers than run Windows, Linux, or macOS.

Azure CLI and Azure PowerShell are command-line tools that enable you to create and manage Azure resources. Both are cross-platform, installable on Windows, macOS, and Linux.


Reference:

https://learn.microsoft.com/en-us/azure/cloud-shell/get-started/classic
https://learn.microsoft.com/en-us/cli/azure/install-azure-cli-windows
https://learn.microsoft.com/en-us/cli/azure/choose-the-right-azure-command-line-tool



HOTSPOT (Drag and Drop is not supported)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: Yes
Yes - Network security groups (NSGs) can contain multiple inbound and outbound security rules.

Network security groups: Network security groups and application security groups can contain multiple inbound and outbound security rules. These rules enable you to filter traffic to and from resources by source and destination IP address, port, and protocol.

Box 2: Yes
Yes - A VM that performs a particular function such as running a firewall is also called a Network virtual appliance.

Network virtual appliances: A network virtual appliance is a VM that performs a network function, such as a firewall or WAN optimization.

Box 3: No
A user-defined route (UDR) can only control network traffic between subnets of a single network.

You can create custom, or user-defined(static), routes in Azure to override Azure's default system routes, or to add more routes to a subnet's route table.

* Virtual network gateway: Specify when you want traffic destined for specific address prefixes routed to a virtual network gateway.

* Virtual appliance: A virtual appliance is a virtual machine that typically runs a network application, such as a firewall.

* Internet: Specify the Internet option when you want to explicitly route traffic destined to an address prefix to the Internet, or if you want traffic destined for Azure services with public IP addresses kept within the Azure backbone network.

* Etc.


Reference:

https://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-overview



Microsoft 365 is an example of which cloud service model?

  1. infrastructure as a service (IaaS)
  2. platform as a service (PaaS)
  3. software as a service (SaaS)

Answer(s): C

Explanation:

Microsoft 365 is a SaaS (Software as a Service) product. Means it's a software service you pay to use, as you would for any other subscription-based service.


Reference:

https://learn.microsoft.com/en-us/answers/questions/1287347/what-are-the-key-differences-between-microsoft-azu



HOTSPOT (Drag and Drop is not supported)
Select the answer that correctly completes the sentence.

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box: resource group
You can assign an Azure Policy definition to a ___________.

Once your business rules have been formed, the policy definition or initiative is assigned to any scope of resources that Azure supports, such as management groups, subscriptions, resource groups, or individual resources. The assignment applies to all resources within the Resource Manager scope of that assignment.


Reference:

https://learn.microsoft.com/en-us/azure/governance/policy/overview



You have an Azure environment.

You need to create a new Azure virtual machine from a tablet that runs the Android operating system.

What are three possible solutions? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

  1. Use the Settings app.
  2. Use the Azure portal.
  3. Use Bash in Azure Cloud Shell.
  4. Use the PowerApps portal.
  5. Use PowerShell in Azure Cloud Shell.

Answer(s): B,D,E

Explanation:

Correct:
* Use Bash in Azure Cloud Shell.
* Use PowerShell in Azure Cloud Shell.
* Use the Azure portal.

Incorrect:
* Use the PowerApps portal.
* Use the Security & Compliance admin center.
* Use the Settings app.

Note: The Android tablet device will have a web browser (Chrome). That’s enough to connect to the Azure portal.

The Azure portal offers three ways to create a VM:
Using the graphical portal.
Using the Azure Cloud Shell using Bash.
Using the Azure Cloud Shell using PowerShell.


Reference:

https://learn.microsoft.com/en-us/azure/virtual-machines/overview



HOTSPOT (Drag and Drop is not supported)
Select the answer that correctly completes the sentence.

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box: any two virtual networks
Virtual network peering can be configured between ________.

Virtual network peering enables you to seamlessly connect two or more Virtual Networks in Azure. The virtual networks appear as one for connectivity purposes. The traffic between virtual machines in peered virtual networks uses the Microsoft backbone infrastructure. Like traffic between virtual machines in the same network, traffic is routed through Microsoft's private network only.

Azure supports the following types of peering:

* Virtual network peering: Connecting virtual networks within the same Azure region.

* Global virtual network peering: Connecting virtual networks across Azure regions.

The benefits of using virtual network peering, whether local or global, include:
* The ability to transfer data between virtual networks across Azure subscriptions, Microsoft Entra tenants, deployment models, and Azure regions.

* Etc.


Reference:

https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview



HOTSPOT (Drag and Drop is not supported)
Select the answer that correctly completes the sentence.

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box: region
Many Azure resources require you to specify a _______ to which they should be deployed.



Viewing page 28 of 61
Viewing questions 217 - 224 out of 482 questions


Post your Comments and Discuss Microsoft AZ-900 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!