100% Latest & Updated Microsoft AZ-900 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 270
A data science app needs managed relational storage but keeps its web tier on VMs. Which configuration or operating action most directly puts that decision into practice?
- Provision user access to the approved Microsoft 365 applications.
- Deploy the compatible custom image as a VM and secure privileged access.
- Record which API requirements justify OS control before choosing the service model.
- Run web guests as IaaS and use eligible managed database PaaS for data.
Explanation
Correct Answer
D:Run web guests as IaaS and use eligible managed database PaaS for data. The implementation operationalizes this design choice: Use a mixed service-model architecture where each tier has a justified responsibility boundary. Acceptance should demonstrate: The web team patches guests while the database host is provider-operated.
Incorrect Answers
A:This setup is relevant to another workload: A sales team wants email, calendars, and collaboration without writing a custom application. The current configuration must instead achieve: The web team patches guests while the database host is provider-operated.
B:That action implements a different requirement: A graphic-rendering pipeline must run a specific custom OS image under root administrative control. It does not establish the required result in this case: The web team patches guests while the database host is provider-operated.
C:This change would be appropriate under a different condition: A company compares VM hosting against managed web hosting for a new API. Here it would not validate: The web team patches guests while the database host is provider-operated.
Question 271
A data science app needs managed relational storage but keeps its web tier on VMs. Which observation is the strongest acceptance test for this scenario?
- The selected model matches driver and patch-management expectations.
- Developers deploy code without administrator access to platform servers.
- Developers own function code while provider handles runtime infrastructure.
- The web team patches guests while the database host is provider-operated.
Explanation
Correct Answer
D:The web team patches guests while the database host is provider-operated. That directly tests the stated requirement: A data science app needs managed relational storage but keeps its web tier on VMs. It contrasts with the observed failure: The team assumes all tiers must use one service model.
Incorrect Answers
A:This observation is evidence for a separate scenario: A company compares VM hosting against managed web hosting for a new API. It does not test the necessary outcome here: The web team patches guests while the database host is provider-operated.
B:That check tests another control: A web team wants to focus on application code and have Microsoft maintain underlying runtime infrastructure. The decisive result for this workload is: The web team patches guests while the database host is provider-operated.
C:The test is relevant when a web company uses managed functions but stores data in a customer-controlled database. It cannot establish the specified acceptance result: The web team patches guests while the database host is provider-operated.
Question 272
A data science app needs managed relational storage but keeps its web tier on VMs. The team observes: The team assumes all tiers must use one service model. Which planning or configuration error best accounts for this result?
- It imposed a single service category despite distinct tier requirements.
- The application was deployed using self-managed VMs instead of eligible PaaS.
- The team misclassified managed function execution as SaaS.
- A managed application platform was chosen despite a raw-VM requirement.
Explanation
Correct Answer
A:It imposed a single service category despite distinct tier requirements. That explains the symptom: The team assumes all tiers must use one service model. The targeted corrective action is: Run web guests as IaaS and use eligible managed database PaaS for data.
Incorrect Answers
B:The alternate mechanism would more directly produce this other failure: Operators log into each server to patch the web runtime manually. The current incident instead involves: The team assumes all tiers must use one service model.
C:That explanation belongs to a different fault pattern: Security reviews assume Microsoft authors the function's business logic. It does not explain why the team assumes all tiers must use one service model.
D:This cause is consistent with a different issue: The hosting product does not permit guest OS customization. It does not account for the reported symptom here: The team assumes all tiers must use one service model.
Question 273
A logistics team wants to lift-and-shift an unchanged server before later refactoring. Which Azure or cloud concept most directly matches the requirement?
- Choose PaaS hosting that abstracts guest OS and platform patching.
- Choose IaaS as a suitable initial landing zone for server migration.
- Use a complete education SaaS application if it meets feature needs.
- Describe serverless function execution as a managed platform pattern, not a whole application SaaS.
Explanation
Correct Answer
B:Choose IaaS as a suitable initial landing zone for server migration. The governing requirement is: A logistics team wants to lift-and-shift an unchanged server before later refactoring. This solution specifically supports the outcome that the original server application runs without immediate platform code rewrites.
Incorrect Answers
A:This design is appropriate for a different requirement: A web team wants to focus on application code and have Microsoft maintain underlying runtime infrastructure. Here the decisive outcome must instead be: The original server application runs without immediate platform code rewrites.
C:This option solves a different planning problem: A school wants instructors to access an online learning application without installing server software. The current acceptance criterion is specific: The original server application runs without immediate platform code rewrites.
D:This design is appropriate for a different requirement: A web company uses managed functions but stores data in a customer-controlled database. Here the decisive outcome must instead be: The original server application runs without immediate platform code rewrites.
Question 274
A logistics team wants to lift-and-shift an unchanged server before later refactoring. Which implementation step would best fulfill the stated requirement?
- Deploy the API to an App Service with supported runtime and configuration.
- Create Azure VM resources matching the app's verified OS and dependency needs.
- Provision instructors and class permissions in the subscribed service.
- Define runtime execution and customer data access roles separately.
Explanation
Correct Answer
B:Create Azure VM resources matching the app's verified OS and dependency needs. The implementation operationalizes this design choice: Choose IaaS as a suitable initial landing zone for server migration. Acceptance should demonstrate: The original server application runs without immediate platform code rewrites.
Incorrect Answers
A:This setup is relevant to another workload: A small company wants to publish a web API while avoiding OS patch management. The current configuration must instead achieve: The original server application runs without immediate platform code rewrites.
C:This change would be appropriate under a different condition: A school wants instructors to access an online learning application without installing server software. Here it would not validate: The original server application runs without immediate platform code rewrites.
D:This setup is relevant to another workload: A web company uses managed functions but stores data in a customer-controlled database. The current configuration must instead achieve: The original server application runs without immediate platform code rewrites.
Question 275
A logistics team wants to lift-and-shift an unchanged server before later refactoring. Which result would best demonstrate successful implementation?
- Lessons are delivered through ready-made application functionality.
- The responsibility matrix leaves provider platform patching separate from app security.
- The original server application runs without immediate platform code rewrites.
- The selected model matches driver and patch-management expectations.
Explanation
Correct Answer
C:The original server application runs without immediate platform code rewrites. That directly tests the stated requirement: A logistics team wants to lift-and-shift an unchanged server before later refactoring. It contrasts with the observed failure: The migration plan insists on rewriting the entire app into SaaS first.
Incorrect Answers
A:This observation is evidence for a separate scenario: A school wants instructors to access an online learning application without installing server software. It does not test the necessary outcome here: The original server application runs without immediate platform code rewrites.
B:That check tests another control: A customer expects Azure PaaS to remove all application security duties. The decisive result for this workload is: The original server application runs without immediate platform code rewrites.
D:This observation is evidence for a separate scenario: A company compares VM hosting against managed web hosting for a new API. It does not test the necessary outcome here: The original server application runs without immediate platform code rewrites.
Question 276
A logistics team wants to lift-and-shift an unchanged server before later refactoring. The team observes: The migration plan insists on rewriting the entire app into SaaS first. What should the team identify as the primary mechanism behind the problem?
- It selected a service model inconsistent with the lift-and-shift requirement.
- The application was deployed as a tenant-managed VM rather than managed PaaS.
- It chose PaaS rather than a ready-to-use SaaS application.
- It imposed a single service category despite distinct tier requirements.
Explanation
Correct Answer
A:It selected a service model inconsistent with the lift-and-shift requirement. That explains the symptom: The migration plan insists on rewriting the entire app into SaaS first. The targeted corrective action is: Create Azure VM resources matching the app's verified OS and dependency needs.
Incorrect Answers
B:The alternate mechanism would more directly produce this other failure: Engineers keep scheduling host OS patches for the app runtime. The current incident instead involves: The migration plan insists on rewriting the entire app into SaaS first.
C:That explanation belongs to a different fault pattern: The selected Azure service provides only a code runtime and no payroll features. It does not explain why the migration plan insists on rewriting the entire app into SaaS first.
D:This cause is consistent with a different issue: The team assumes all tiers must use one service model. It does not account for the reported symptom here: The migration plan insists on rewriting the entire app into SaaS first.
Question 277
A customer expects Azure PaaS to remove all application security duties. Which design choice best fits the stated business constraint?
- Use a complete education SaaS application if it meets feature needs.
- Use a mixed service-model architecture where each tier has a justified responsibility boundary.
- Recognize customer responsibility for application code, data and permissions on PaaS.
- Describe serverless function execution as a managed platform pattern, not a whole application SaaS.
Explanation
Correct Answer
C:Recognize customer responsibility for application code, data and permissions on PaaS. The governing requirement is: A customer expects Azure PaaS to remove all application security duties. This solution specifically supports the outcome that the responsibility matrix leaves provider platform patching separate from app security.
Incorrect Answers
A:This design is appropriate for a different requirement: A school wants instructors to access an online learning application without installing server software. Here the decisive outcome must instead be: The responsibility matrix leaves provider platform patching separate from app security.
B:That concept addresses this separate situation: A data science app needs managed relational storage but keeps its web tier on VMs. It does not by itself establish the result required here: The responsibility matrix leaves provider platform patching separate from app security.
D:This design is appropriate for a different requirement: A web company uses managed functions but stores data in a customer-controlled database. Here the decisive outcome must instead be: The responsibility matrix leaves provider platform patching separate from app security.
Question 278
A customer expects Azure PaaS to remove all application security duties. Which Azure setup action best follows from this scenario?
- Run web guests as IaaS and use eligible managed database PaaS for data.
- Assign secure-code, identity and data-policy controls to the application owner.
- Configure employee access and data settings within the licensed service.
- Provision a supported Azure VM and manage the guest image and updates.
Explanation
Correct Answer
B:Assign secure-code, identity and data-policy controls to the application owner. The implementation operationalizes this design choice: Recognize customer responsibility for application code, data and permissions on PaaS. Acceptance should demonstrate: The responsibility matrix leaves provider platform patching separate from app security.
Incorrect Answers
A:This setup is relevant to another workload: A data science app needs managed relational storage but keeps its web tier on VMs. The current configuration must instead achieve: The responsibility matrix leaves provider platform patching separate from app security.
C:This change would be appropriate under a different condition: An HR team wants an immediately usable payroll application sold by subscription. Here it would not validate: The responsibility matrix leaves provider platform patching separate from app security.
D:This setup is relevant to another workload: A startup needs complete control of guest OS settings and kernel-level software. The current configuration must instead achieve: The responsibility matrix leaves provider platform patching separate from app security.
Question 279
A customer expects Azure PaaS to remove all application security duties. Which verification outcome should the team expect from the right design?
- The web team patches guests while the database host is provider-operated.
- The service binds to the guest environment as required by its licensing rules.
- The organization uses complete payroll workflows without building an app.
- The responsibility matrix leaves provider platform patching separate from app security.
Explanation
Correct Answer
D:The responsibility matrix leaves provider platform patching separate from app security. That directly tests the stated requirement: A customer expects Azure PaaS to remove all application security duties. It contrasts with the observed failure: No team owns app authorization because hosting is called PaaS.
Incorrect Answers
A:This observation is evidence for a separate scenario: A data science app needs managed relational storage but keeps its web tier on VMs. It does not test the necessary outcome here: The responsibility matrix leaves provider platform patching separate from app security.
B:That check tests another control: An IT team needs a dedicated Linux server for a hard-coded proprietary licensing service. The decisive result for this workload is: The responsibility matrix leaves provider platform patching separate from app security.
C:The test is relevant when an HR team wants an immediately usable payroll application sold by subscription. It cannot establish the specified acceptance result: The responsibility matrix leaves provider platform patching separate from app security.
Question 280
A customer expects Azure PaaS to remove all application security duties. The team observes: No team owns app authorization because hosting is called PaaS. Which underlying mistake most directly explains the reported symptom?
- The assessment ignored service-model differences in control and responsibility.
- It chose PaaS rather than a ready-to-use SaaS application.
- The shared-responsibility boundary was overextended to customer application security.
- The service model lacks required guest-level control.
Explanation
Correct Answer
C:The shared-responsibility boundary was overextended to customer application security. That explains the symptom: No team owns app authorization because hosting is called PaaS. The targeted corrective action is: Assign secure-code, identity and data-policy controls to the application owner.
Incorrect Answers
A:This cause is consistent with a different issue: Developers assume a VM and App Service offer identical guest OS privileges. It does not account for the reported symptom here: No team owns app authorization because hosting is called PaaS.
B:The alternate mechanism would more directly produce this other failure: The selected Azure service provides only a code runtime and no payroll features. The current incident instead involves: No team owns app authorization because hosting is called PaaS.
D:This cause is consistent with a different issue: A managed app runtime rejects the renderer's OS dependencies. It does not account for the reported symptom here: No team owns app authorization because hosting is called PaaS.
Microsoft Azure Fundamentals (AZ-900) Practice Tests