Course 4 – Preparing for the AZ-900 Microsoft Azure Fundamentals Exam

Module 4: Exam Prep 3

MICROSOFT AZURE FUNDAMENTALS AZ-900 EXAM PREP SPECIALIZATION

Complete Coursera Study Guide

Enroll in Coursera Microsoft Azure AZ-900

Last updated:

TABLE OF CONTENT

INTRODUCTION – Exam Prep 3

In this module, you will review how Azure helps secure access to cloud resources, what it means to develop a cloud governance strategy, and how Azure complies with common regulatory and compliance standards. You will also revisit the main factors influencing costs, explore tools for estimating and managing cloud expenses, and understand how Azure’s service-level agreements (SLAs) can affect your application design choices.

Additionally, you will take a practice exam that covers the skills assessed in the identity, governance, privacy, and compliance features, as well as Azure cost management and SLAs, as part of the AZ-900 Microsoft Certified Azure Fundamentals exam.

Learning Objectives

  • Assess your knowledge of Microsoft Azure cost management and Service Level Agreements
  • Assess your knowledge of identity, governance, privacy, and compliance features on Microsoft Azure

PRACTICE EXAM COVERING AZURE SERVICES & LIFECYCLES

1. Tradewind Traders has recently migrated to Azure cloud services. The company has several departments and management has decided that the departmental administrators will be responsible for managing the resources related to their department. Which of the following will allow for the segmentation of the departments?

Select all options that apply.

  • Multiple Regions
  • Multiple subscriptions (CORRECT)
  • Multiple resource groups (CORRECT)
  • Multiple Azure Active Directory (Azure AD) directories

Correct: An Azure subscription is a container for Azure resources. It is also a boundary for permissions to resources and billing. You are charged monthly for all resources in a subscription. A single Azure tenant (Azure Active Directory) can contain multiple Azure subscriptions.

Correct: A resource group is a container that holds related resources for an Azure solution. The resource group can include all the resources for the solution, or only those resources that you want to manage as a group.

2. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. The company has asked you to research Azure Single Sign On. Based on your research, is the following statement correct in respect of Single Sign-On in Azure?

Single sign-on enables a user to sign in one time and use that credential to access multiple resources and applications from different providers.

  • Yes (CORRECT)
  • No 

Correct:  Single sign-on enables a user to sign in one time and use that credential to access multiple resources and applications from different providers.

3. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. The company has asked you to research multi-factor authentication. A code that’s sent to a mobile phone is an example of which type of multi-factor authentication?

  • Something you have (CORRECT)
  • Something you know
  • something you are

Correct: Something you have might be a code that’s sent to your mobile phone.

4. Tradewind Traders has recently migrated to Azure cloud services. The company has just completed a review of its current configuration and has discovered that there is a selection of unused resources currently in existence including multiple AD accounts, multiple groups, multiple public IP addresses, and multiple network interfaces. The company wants to reduce costs to a minimum. You recommend removing the unused user accounts. Will this reduce the monthly costs?

  • Yes 
  • No (CORRECT)

Correct: You are not charged for user accounts. Therefore, deleting unused user accounts will not reduce the Azure costs for the company.

5. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. The company has many independent departments and as part of this migration, the company wants to allow each department to use different payment options for the resources allocated to them. Which of the following will allow you to configure different payment options for each department?

  • Multiple Reservations
  • Multiple Container Instances 
  • Multiple Subscriptions (CORRECT)
  • Multiple Resource Groups

Correct: There are different payment options in Azure including pay-as-you-go (PAYG), Enterprise Agreement (EA), and Microsoft Customer Agreement (MCA) accounts. Your Azure costs are per subscription. You are charged monthly for all resources in a subscription. Therefore, to use different payment options per department, you will need to create a separate subscription per department. 

6. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. The company has multiple offices around the world. Management wants to be able to generate multiple billing reports from the Azure Portal that will contain the resource utilization from each office. Which feature should you use before you generate the reports?

  • Templates 
  • Policies 
  • Tags (CORRECT)
  • Locks

7. Tradewind Traders has recently migrated to Azure cloud services and management wishes to chargeback some of the resource costs to various departments every month. Which is the best solution to meet these requirements with the least amount of administrative effort?

  • Create Subscriptions for each department 
  • Tags (CORRECT)
  • Manually track using a Microsoft Excel spreadsheet

Correct: Tags provide extra information, or metadata, about your resources. You might create a tag that’s named Sales whose value is the name of the billing department. You can use Azure Policy to ensure that the proper tags are assigned when resources are provisioned.

8. Tradewind Traders has recently migrated to Azure cloud services. Management wants access to in-depth information about security, privacy, compliance offerings, policies, features, and practices across Microsoft cloud products. Which tool should you recommend for them to use?

  • Azure Advisor 
  • Azure Monitor 
  • Microsoft Trust Center (CORRECT)
  • Azure Portal 

Correct: The Trust Center provides in-depth information about security, privacy, compliance offerings, policies, features, and practices across Microsoft cloud products including links to the security, privacy, and compliance blogs.

9. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. As part of this migration, the company wants to create a support plan that will provide its users with access to Azure support engineers by phone and email. You have been asked to research the available support plans and recommend one that will provide this service. You recommend the Professional Direct support plan. Does this meet the company’s requirements?

  • Yes (CORRECT)
  • No 

Correct: The Basic support plan does not have any technical support for engineers. The Developer support plan has only technical support for engineers via email. The Standard, Professional Direct, and Premier support plans have technical support for engineers via email and phone. The Standard support plan would be the cheapest plan to implement however this was not stated as a requirement in the question

10. Tradewind Traders has recently migrated to Azure cloud services. The company’s development team creates virtual machines for testing regularly. These test machines are only used during certain times. In your opinion what is the most efficient way to save costs on virtual machines when they are not in use?

  • Delete the virtual machines when they are not in use because once they are deleted, they will not incur any charges. 
  • Deallocate the virtual machines when they are not in use. (CORRECT)
  • Use virtual machines that are only chargeable when accessed remotely. Try going back and Managing Costs and SLA Service Cycles.

Correct: When you deallocate virtual machines, the associated hard disks and data are kept in Azure. But you don’t pay for CPU or network consumption, which can help save costs.

11. Tradewind Traders has recently migrated to Azure cloud services. Management wants clarification as to what will occur if Microsoft plans to end support for an Azure service and does NOT have a successor service. What notification period will Microsoft provide in this scenario?

  • 90 days 
  • 12 months (CORRECT)
  • 6 months
  • 30 days 

Correct: The Modern Lifecycle Policy covers products and services that are serviced and supported continuously. For products governed by the Modern Lifecycle Policy, Microsoft will provide a minimum of 12 months’ notification before ending support if no successor product or service is offered.

12. Tradewind Traders has recently migrated to Azure cloud services. The company is reviewing its support plans. You have been asked to identify the lowest-cost support plan that allows 24×7 access to support engineers by phone. Which of the following support options allow this at a low cost?

  • Azure Standard support plan
  • Azure Professional Direct support plan 
  • Azure Basic support plan 
  • Azure Developer support plan (CORRECT)

13. Tradewind Traders has recently migrated to Azure cloud services. The company is reviewing its support plans. The company requires their users to be able to open new support requests and you have been asked to determine which support plan will provide this feature. Which of the following statements is correct?

  • Premier, Professional Direct, and Standard only
  • Premier and Professional Direct only
  • Premier, Professional Direct, Standard, and Developer only (CORRECT)
  • Premier, Professional Direct, Standard, Developer, and Basic

Correct: You can open support cases in the following plans: Premier, Professional Direct, Standard, and Developer only. You cannot open support cases in the Basic support plan. Try going back and Managing Costs and SLA Service Cycles.

14. Tradewind Traders has recently migrated to Azure cloud services. The company is reviewing its support plans. Management has asked you to determine what is guaranteed in an Azure Service Level Agreement (SLA) for virtual machines? Select the appropriate option.

  • Bandwidth 
  • 22 (CORRECT)
  • Performance 
  • Feature Availability

Correct: The SLA for virtual machines guarantees “uptime”. The amount of uptime guaranteed depends on factors such as whether the VMs are in an availability set or availability zone.

15. Tradewind Traders is planning to migrate to Azure cloud services. However, before this happens management requires some comparisons of the costs involved in using cloud services as opposed to an on-premises solution. What would be the first step you could take to provide this comparison information?

  • Setup some resources in Azure as this is a free service.
  • Run the Total Cost of Ownership Calculator. (CORRECT)
  • Assume that the cost of running workloads on Azure is similar to running workloads on-premises. 

Correct: Running the Total Cost of Ownership Calculator is a great first step because it can provide an accurate comparison of running workloads in the datacenter versus on Azure and is certified by an independent research company.

16. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. As part of this migration, you have been asked to research the purpose of Azure Advisor. Based on this research, which of the following can be performed by using Azure Advisor?

  • Evaluate which on-premises resources can be migrated to Azure. 
  • Integrate Active Directory and Azure Active Directory (Azure AD). 
  • Confirm that Azure subscription security follows best practices. (CORRECT)
  • Estimate the costs of an Azure solution.

17. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. The company has asked you to research the differences between Authorisation and Authentication in Azure. Based on your research, which of the following is the process of establishing the identity of a person or service that wants to access a resource known as?

  • Authentication (CORRECT)
  • Authorisation

Correct: Authentication is the process of establishing the identity of a person or service that wants to access a resource. It involves the act of challenging a party for legitimate credentials and provides the basis for creating a security principle for identity and access control. It establishes whether the user is who they say they are.

18. Tradewind Traders has recently migrated to Azure cloud services. Management wants clarification on their legal agreement between themselves and Microsoft that details the obligations by both parties concerning the processing and security of customer data and personal data. Which of the following should you refer management to? 

  • Online Services Terms (CORRECT)
  • Microsoft Privacy Statement 

Correct: The Online Services Terms (OST) is a legal agreement between Microsoft and the customer that details the obligations by both parties concerning the processing and security of customer data and personal data. The OST applies specifically to Microsoft’s online services that you license through a subscription including Azure, Dynamics 365, Office 365, and Bing Maps.

19. True or False?

Azure China is operated by 21Vianet and is a physically separated instance of cloud services located in China.

  • True (CORRECT)
  • False

Correct: Azure China is operated by 21Vianet is a physically separated instance of cloud services located in China. It is independently operated and transacted by Shanghai Blue Cloud Technology Co., Ltd. (“21Vianet”), a wholly-owned subsidiary of Beijing 21Vianet Broadband Data Center Co., Ltd.

20. Which of the following define performance targets such as uptime?

  • Service Level Agreements (CORRECT)
  • Usage Meters
  • Support plans

Correct: Service Level Agreements or SLAs define performance targets for an Azure product or service.

21. Tradewind Traders has recently migrated to Azure cloud services. Users have deployed multiple resources since the migration however today one of the developers has received a message when creating several SQL database instances stating that that the Azure subscription limits must be increased. What must be done to increase this limit?

  • Create a new support request (CORRECT)
  • Modify an Azure policy 
  • Upgrade your support plan 
  • Create a service health alert

Correct: Many Azure resources have quota limits. The purpose of the quota limits is to help you control your Azure costs. It is common to require an increase to the default quota. You can request a quota limit increase by opening a support request. Selecting your subscription and the service you want to increase the quota in this case SQL Database Managed Instance would be the quota type.

22. Tradewind Traders has recently migrated to Azure cloud services. The company is reviewing its support plans. You have been asked to determine which support plan will provide best practice information, health status and notifications, and 24/7 access to billing information at the lowest possible cost. Which support plan should you choose?

  • Basic (CORRECT)
  • Developer 
  • Standard support plan 
  • Premier

Correct: A basic support plan provides 24×7 access to billing and subscription support, online self-help, documentation, whitepapers, and supports forums. Access to the full set of Azure Advisor recommendations and access to personalized Service Health Dashboard & Health APIs.

23. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. As part of this migration, you have been asked to research the Modern Lifecycle Policy for Azure services. Based on your research Which of the following statements do you think most accurately defines Modern Lifecycle Policy for Azure services?

  • After a service is made generally available, Microsoft provides support for the service for a minimum of four years. 
  • Microsoft provides a minimum of 12 months’ notice before ending support for a service. (CORRECT)
  • When a service is retired, you can purchase extended support for the service for up to five years.
  • Microsoft provides mainstream support for a service for five years.

Correct: For products governed by the Modern Lifecycle Policy, Microsoft will provide a minimum of 12 months’ notification before ending support if no successor product or service is offered, excluding free services or preview releases.

24. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. The company has asked you to research Azure AD. What types of resources can Azure AD help secure?

  • Only internal resources 
  • Both External and Internal Resources (CORRECT)
  • Only external resources 

Correct: Azure AD helps users access both external and internal resources. External resources might include Microsoft Office 365, the Azure portal, and thousands of other software as a service (SaaS) applications. Internal resources might include apps on your corporate network and intranet, along with any cloud applications developed within your organization.

25. Tradewind Traders is planning to migrate its data and resources to Azure cloud services. The company has asked you to research Azure Single Sign On. Based on your research, is the following statement correct in respect of Single Sign-On in Azure?

Single sign-on enables a user to sign in one time and use that credential to access multiple resources and applications from different providers.

  • Yes (CORRECT)
  • No

Correct: Single sign-on enables a user to sign in one time and use that credential to access multiple resources and applications from different providers.

26. Tradewind Traders has recently migrated to Azure cloud services. Management has asked you to research Azure Blueprints which are composed of artifacts. Which of the following resources as artifacts are currently supported by Azure Blueprints?

Select all options that apply.

  • Management Groups
  • Role Assignment (CORRECT)
  • ARM Templates (CORRECT)
  • Policy Assignment (CORRECT)

Correct: Azure Blueprints currently supports Resource Groups, ARM template, Policy Assignment, and Role Assignment as artifacts.

Correct: Azure Blueprints currently supports Resource Groups, ARM template, Policy Assignment, and Role Assignment as artifacts.

Correct: Azure Blueprints currently supports Resource Groups, ARM template, Policy Assignment, and Role Assignment as artifacts.

27. Tradewind Traders has recently migrated to Azure cloud services management wants you to implement resource locks to prevent accidental changes or deletions. Which of the following are valid options when configuring Resource Locks?

Select all options that apply.

  • ReadOnly (CORRECT)
  • CanNotDelete (CORRECT)
  • CanNotModify

Correct: ReadOnly means authorized people can read a resource, but they can’t delete or change the resource. Applying this lock is like restricting all authorized users to the permissions granted by the Reader role in Azure RBAC:

Correct: CanNotDelete means authorized people can still read and modify a resource, but they can’t delete the resource without first removing the lock.

28. Tradewind Traders has recently migrated to Azure cloud services. The company has just completed a review of its current configuration and has discovered that there is a selection of unused resources currently in existence including multiple AD accounts, multiple groups, multiple public IP addresses, and multiple network interfaces. The company wants to reduce costs to a minimum. You recommend removing the network interfaces. Will this reduce the monthly costs?

  • Yes 
  • No (CORRECT)

29. Tradewind Traders has recently migrated to Azure cloud services and management is in the process of setting up an SLA with Microsoft. They want clarification on the time duration that the service is unavailable based on the percentages listed. How much cumulative downtime per year will an SLA percentage of 99.95 give?

  • 4.38 hours (CORRECT)
  • 52.56 minutes  
  • 8.76 hours 
  • 3.65 days 

30. If you have a free trial subscription to Azure and you reach your credit limit during the trial period, what will happen to your resources?

  • The oldest resources will be deleted once the credit limit has been reached allowing you to create new resources. 
  • You can carry on and access existing resources, but you will not be able to create new resources.
  • Your existing Azure resources are removed from production and your Azure virtual machines are stopped and deallocated. (CORRECT)

CONCLUSION – Exam Prep 3

In conclusion, this module has provided an overview of how Azure secures access to cloud resources, the importance of building a cloud governance strategy, and Azure’s adherence to regulatory and compliance standards. You have revisited key factors that influence costs, explored tools for estimating and managing cloud expenses, and learned how Azure’s SLAs can impact your application design decisions.

By taking the practice exam, you are now better prepared for the identity, governance, privacy, and compliance features, as well as Azure cost management and SLAs domains of the AZ-900 Microsoft Certified Azure Fundamentals exam.

Previous Module
Next Module

Quiztudy Top Courses

Popular in Coursera

Liking our content? Then, don’t forget to ad us to your BOOKMARKS so you can find us easily!

Expanded Thumbnail Promo1

Mood Zone for Studying & Relaxing