Azure architecture and services — page 2
Objective architecture-and-services of Microsoft Certified: Azure Fundamentals (AZ-900), worth 38.46% of the exam. This is page 2 of 3 of its question list; page one carries the full objective summary.
- Share of the exam
- 38.46%
- Questions in a real sitting
- roughly 19 of 50
- Questions in this bank
- 45
- Signed for by a person
- 0
- Machine-checked only
- 45
Partly checked. None of the 45 questions here has been read against the cited source by a person. 45 questions have been checked against their cited clause by an automated pass — which is not the same thing, and is not a signature.
Only questions a person has signed for are used in mock exams here. That is the whole difference between the two kinds of checking above.
What this objective covers
The 45 questions written for this objective cite 4 Microsoft AZ-900 study guide skill areas (architecture-and-services.compute-and-networking, architecture-and-services.core-architectural-components, architecture-and-services.identity-access-security, architecture-and-services.storage).
They break down as 39 single-answer questions, 4 choose-several questions and 2 type-the-answer questions.
Questions on this objective (page 2 of 3)
- Your storage account replicates to its region's pair. A compliance reviewer asks what pairing actually guarantees about where the second copy sits, and about how Microsoft applies planned platform updates. Which answer is accurate? machine-checked
- A US federal agency requires that its workloads run in an instance of Azure that is physically and logically isolated from the commercial cloud, with its own endpoints and its own operations staff. What do you point them at? machine-checked
- Your design calls for every tier to be zone redundant. Part way through the build you discover the region the business picked does not offer availability zones. What is the correct response? machine-checked
- A three-month proof of concept will create a virtual machine, a storage account, a virtual network and a web app. When it ends, everything it created must go, with nothing left quietly billing. What is the simplest way to arrange that up front? machine-checked
- A department has eleven subscriptions today and adds a few more each quarter. A rule that only approved regions may be used has to apply to all of them, including subscriptions that do not exist yet, without anyone remembering to repeat the setup. Where do you assign it? machine-checked
- A colleague argues that because your resource group was created in West Europe, every resource inside it must also run in West Europe. Is that right? machine-checked
- Which TWO of these statements about subscriptions and management groups are true? machine-checked
- A legacy application being lifted onto Azure virtual machines authenticates users with Kerberos, reads a directory over LDAP, and needs its server domain joined. The team does not want to build, patch and replicate domain controllers. What do you use? machine-checked
- A user proves who they are with a fingerprint and a one-time code, and is then permitted to restart virtual machines but not to delete them. Which part of that is authentication, which is authorisation, and what provides the second part in Azure? machine-checked
- Security wants sign-ins from the office network to proceed normally, sign-ins from anywhere else to require a second factor, and any sign-in to the finance application from an unmanaged device to be refused outright. Which capability expresses all three rules? machine-checked
- A support team must be able to view every resource in a subscription, including anything created next month, and must not be able to change anything. Which assignment is correct? machine-checked
- Which TWO of these statements about authentication methods are true? machine-checked
- Type the name, or the common acronym, of the Azure authorisation system in which access is granted by assigning a role to a principal at a chosen scope. machine-checked
- In a design review a colleague argues that requests arriving from inside the corporate network can skip verification, because the perimeter already vetted whoever sent them. How does a Zero Trust approach answer that? machine-checked
- An architecture protects its edge against volumetric attacks, filters traffic between subnets, runs endpoint protection on its virtual machines, validates input in the application, and encrypts data at rest. Why stack all five when each is meant to work on its own? machine-checked
- A review classifies each control by the defence-in-depth layer it operates at. Where does a network security group blocking traffic between the application subnet and the database subnet belong, and what does that layer contribute? machine-checked
- A security officer wants one continuously updated view of how securely the estate is configured — several Azure subscriptions, some accounts in another public cloud, and a rack of servers in an office — with prioritised recommendations and a single number to track improvement. Which service is that? machine-checked
- A dataset must survive the loss of one datacentre in its primary region without anybody performing a failover, and regulation forbids a copy of it leaving that region. Which redundancy option meets both requirements? machine-checked
- A storage account is configured for geo-redundant storage. During a regional incident a developer tries to read the secondary copy directly and cannot. What is the explanation? machine-checked
- Seven years of audit logs must be retained. They are read perhaps once a year during an investigation, and waiting several hours to get them back is acceptable. The lowest storage cost wins. Which access tier fits? machine-checked
Drill this objective
The trainer can run a practice set drawn from this objective alone, which is what the weight column above is for: revise the heavy objectives first.
Practise Azure architecture and services
The other objectives in Microsoft Certified: Azure Fundamentals (AZ-900)
- cloud-concepts. Cloud concepts — 28.21% of the exam
- management-and-governance. Azure management and governance — 33.33% of the exam