100% Latest & Updated Microsoft AZ-900 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 380
Two critical VMs in one region need separation from common host hardware maintenance faults. The team observes: Both critical VMs are interrupted by a shared maintenance event. What is the most likely cause of the observed failure?
- It conflated endpoint resource types and their accessibility semantics.
- The deployment included a VM object without required supporting resources.
- They used public exposure instead of private hybrid network connectivity.
- They were not placed in the intended availability-set fault/update separation.
Explanation
Correct Answer
D:They were not placed in the intended availability-set fault/update separation. That explains the symptom: Both critical VMs are interrupted by a shared maintenance event. The targeted corrective action is: Place the appropriate VMs in one availability set with separate fault/update domains.
Incorrect Answers
A:This cause is consistent with a different issue: The design treats a private endpoint as an internet-accessible public IP. It does not account for the reported symptom here: Both critical VMs are interrupted by a shared maintenance event.
B:The alternate mechanism would more directly produce this other failure: A VM declaration fails because essential network/disk prerequisites are absent. The current incident instead involves: Both critical VMs are interrupted by a shared maintenance event.
C:That explanation belongs to a different fault pattern: Administrators publish the internal service on a public endpoint for office access. It does not explain why both critical VMs are interrupted by a shared maintenance event.
Question 381
A company wants hosted Windows desktops accessed by employees from different locations. Which architectural decision meets the described priority?
- Use an authorized public endpoint for the web application's external entry point.
- Separate application ingress from management functions and apply supported controls.
- Select a supported GPU-enabled VM size rather than a generic small VM.
- Choose Azure Virtual Desktop for centrally hosted desktop and app sessions.
Explanation
Correct Answer
D:Choose Azure Virtual Desktop for centrally hosted desktop and app sessions. The governing requirement is: A company wants hosted Windows desktops accessed by employees from different locations. This solution specifically supports the outcome that authorized users open their virtual desktop sessions remotely.
Incorrect Answers
A:This design is appropriate for a different requirement: A public website needs clients worldwide to connect to its internet-accessible service. Here the decisive outcome must instead be: Authorized users open their virtual desktop sessions remotely.
B:That concept addresses this separate situation: A container app should accept HTTP traffic but not expose an internal administrative interface. It does not by itself establish the result required here: Authorized users open their virtual desktop sessions remotely.
C:This option solves a different planning problem: A video encoder needs GPU-accelerated processing inside a customer-controlled guest. The current acceptance criterion is specific: Authorized users open their virtual desktop sessions remotely.
Question 382
A company wants hosted Windows desktops accessed by employees from different locations. Which configuration or operating action most directly puts that decision into practice?
- Configure the VPN gateway, local network gateway and tunnel settings.
- Place the appropriate VMs in one availability set with separate fault/update domains.
- Configure an eligible host pool and identity-aware user access.
- Apply an NSG rule permitting required HTTPS and restricting management ports.
Explanation
Correct Answer
C:Configure an eligible host pool and identity-aware user access. The implementation operationalizes this design choice: Choose Azure Virtual Desktop for centrally hosted desktop and app sessions. Acceptance should demonstrate: Authorized users open their virtual desktop sessions remotely.
Incorrect Answers
A:This setup is relevant to another workload: A company needs encrypted site-to-site connectivity from its existing office to an Azure VNet. The current configuration must instead achieve: Authorized users open their virtual desktop sessions remotely.
B:That action implements a different requirement: Two critical VMs in one region need separation from common host hardware maintenance faults. It does not establish the required result in this case: Authorized users open their virtual desktop sessions remotely.
D:This setup is relevant to another workload: A security administrator wants to allow HTTPS but block unsolicited remote management to a VM. The current configuration must instead achieve: Authorized users open their virtual desktop sessions remotely.
Question 383
A company wants hosted Windows desktops accessed by employees from different locations. Which observation is the strongest acceptance test for this scenario?
- Name lookup returns the intended private IP for supported clients.
- Office hosts reach approved Azure subnet addresses over the VPN.
- Planned maintenance does not remove both members at once in the validated model.
- Authorized users open their virtual desktop sessions remotely.
Explanation
Correct Answer
D:Authorized users open their virtual desktop sessions remotely. That directly tests the stated requirement: A company wants hosted Windows desktops accessed by employees from different locations. It contrasts with the observed failure: The chosen solution provisions server VMs but no managed desktop session delivery.
Incorrect Answers
A:This observation is evidence for a separate scenario: A company wants to resolve private endpoint hostnames to their private addresses. It does not test the necessary outcome here: Authorized users open their virtual desktop sessions remotely.
B:That check tests another control: A company needs encrypted site-to-site connectivity from its existing office to an Azure VNet. The decisive result for this workload is: Authorized users open their virtual desktop sessions remotely.
C:The test is relevant when two critical VMs in one region need separation from common host hardware maintenance faults. It cannot establish the specified acceptance result: Authorized users open their virtual desktop sessions remotely.
Question 384
A company wants hosted Windows desktops accessed by employees from different locations. The team observes: The chosen solution provisions server VMs but no managed desktop session delivery. Which planning or configuration error best accounts for this result?
- An unmanaged container runtime was chosen instead of orchestration.
- Ingress was configured without endpoint/port restrictions.
- The design ignored a suitable event-driven managed service.
- The team confused basic VMs with Azure Virtual Desktop services.
Explanation
Correct Answer
D:The team confused basic VMs with Azure Virtual Desktop services. That explains the symptom: The chosen solution provisions server VMs but no managed desktop session delivery. The targeted corrective action is: Configure an eligible host pool and identity-aware user access.
Incorrect Answers
A:This cause is consistent with a different issue: Container teams are forced to script every host and scheduler task manually. It does not account for the reported symptom here: The chosen solution provisions server VMs but no managed desktop session delivery.
B:The alternate mechanism would more directly produce this other failure: The deployment publishes every container port to the internet. The current incident instead involves: The chosen solution provisions server VMs but no managed desktop session delivery.
C:That explanation belongs to a different fault pattern: A full-time VM waits idle for rare messages. It does not explain why the chosen solution provisions server VMs but no managed desktop session delivery.
Question 385
An e-commerce team has a simple website and does not want to patch guest OS hosts. Which Azure or cloud concept most directly matches the requirement?
- Design subnet segmentation and network rules within one or more VNets.
- Choose Azure Functions for eligible event-driven execution.
- Select a site-to-site VPN rather than granting the private service a public IP.
- Choose Azure App Service for eligible managed web-app hosting.
Explanation
Correct Answer
D:Choose Azure App Service for eligible managed web-app hosting. The governing requirement is: An e-commerce team has a simple website and does not want to patch guest OS hosts. This solution specifically supports the outcome that the website runs without customers managing its VM guest OS.
Incorrect Answers
A:This design is appropriate for a different requirement: A company needs to isolate customer workloads at the network level using multiple subnets. Here the decisive outcome must instead be: The website runs without customers managing its VM guest OS.
B:That concept addresses this separate situation: A data collector runs short tasks when messages arrive, and demand varies sharply. It does not by itself establish the result required here: The website runs without customers managing its VM guest OS.
C:This option solves a different planning problem: A branch office needs to connect an isolated internal Azure service across an encrypted internet path. The current acceptance criterion is specific: The website runs without customers managing its VM guest OS.
Question 386
An e-commerce team has a simple website and does not want to patch guest OS hosts. Which implementation step would best fulfill the stated requirement?
- Deploy the supported web runtime and set application configuration.
- Apply an NSG rule permitting required HTTPS and restricting management ports.
- Configure a timer-triggered function with authorized resource access.
- Deploy a private NIC and configure authorized VPN network routes.
Explanation
Correct Answer
A:Deploy the supported web runtime and set application configuration. The implementation operationalizes this design choice: Choose Azure App Service for eligible managed web-app hosting. Acceptance should demonstrate: The website runs without customers managing its VM guest OS.
Incorrect Answers
B:That action implements a different requirement: A security administrator wants to allow HTTPS but block unsolicited remote management to a VM. It does not establish the required result in this case: The website runs without customers managing its VM guest OS.
C:This change would be appropriate under a different condition: An app must respond to scheduled timers without keeping a VM on all day. Here it would not validate: The website runs without customers managing its VM guest OS.
D:This setup is relevant to another workload: A development team wants its VM to be reachable only from its private corporate VPN. The current configuration must instead achieve: The website runs without customers managing its VM guest OS.
Question 387
An e-commerce team has a simple website and does not want to patch guest OS hosts. Which result would best demonstrate successful implementation?
- The approved VNets exchange private traffic over supported peering.
- The website runs without customers managing its VM guest OS.
- The VMs communicate over their approved private network.
- The application hostname resolves to the intended public destination.
Explanation
Correct Answer
B:The website runs without customers managing its VM guest OS. That directly tests the stated requirement: An e-commerce team has a simple website and does not want to patch guest OS hosts. It contrasts with the observed failure: Developers manually patch a VM hosting the simple web app.
Incorrect Answers
A:This observation is evidence for a separate scenario: A remote office wants two VNets connected even though they sit in different Azure regions. It does not test the necessary outcome here: The website runs without customers managing its VM guest OS.
C:The test is relevant when a security team needs to place two front-end VMs on the same isolated Azure network. It cannot establish the specified acceptance result: The website runs without customers managing its VM guest OS.
D:This observation is evidence for a separate scenario: An administrator wants hostnames in a company's own domain to resolve to Azure services. It does not test the necessary outcome here: The website runs without customers managing its VM guest OS.
Question 388
An e-commerce team has a simple website and does not want to patch guest OS hosts. The team observes: Developers manually patch a VM hosting the simple web app. What should the team identify as the primary mechanism behind the problem?
- The design ignored a suitable event-driven managed service.
- The architecture lacks the Kubernetes control-plane orchestration functions.
- A public IP and permissive rule were added against private-only intent.
- The solution used raw virtual machines rather than managed app hosting.
Explanation
Correct Answer
D:The solution used raw virtual machines rather than managed app hosting. That explains the symptom: Developers manually patch a VM hosting the simple web app. The targeted corrective action is: Deploy the supported web runtime and set application configuration.
Incorrect Answers
A:This cause is consistent with a different issue: A full-time VM waits idle for rare messages. It does not account for the reported symptom here: Developers manually patch a VM hosting the simple web app.
B:The alternate mechanism would more directly produce this other failure: Each update requires SSH into each container host and manual replacement. The current incident instead involves: Developers manually patch a VM hosting the simple web app.
C:That explanation belongs to a different fault pattern: The VM exposes an RDP/SSH public endpoint to everyone. It does not explain why developers manually patch a VM hosting the simple web app.
Question 389
A data collector runs short tasks when messages arrive, and demand varies sharply. Which design choice best fits the stated business constraint?
- Choose Azure Functions for eligible event-driven execution.
- Use a container image for portable application packaging.
- Use network security group rules to filter allowed inbound network traffic.
- Evaluate an Azure availability set where it meets the workload's resilience needs.
Explanation
Correct Answer
A:Choose Azure Functions for eligible event-driven execution. The governing requirement is: A data collector runs short tasks when messages arrive, and demand varies sharply. This solution specifically supports the outcome that the handler runs when events arrive without permanent application servers.
Incorrect Answers
B:That concept addresses this separate situation: A team must package a microservice and its libraries consistently across environments. It does not by itself establish the result required here: The handler runs when events arrive without permanent application servers.
C:This option solves a different planning problem: A security administrator wants to allow HTTPS but block unsolicited remote management to a VM. The current acceptance criterion is specific: The handler runs when events arrive without permanent application servers.
D:This design is appropriate for a different requirement: Two critical VMs in one region need separation from common host hardware maintenance faults. Here the decisive outcome must instead be: The handler runs when events arrive without permanent application servers.
Question 390
A data collector runs short tasks when messages arrive, and demand varies sharply. Which Azure setup action best follows from this scenario?
- Connect the function to a compatible trigger with appropriate rights.
- Provide a supported subnet, NIC and managed OS disk to the VM.
- Build and deploy an approved container image to an eligible host.
- Configure public ingress and relevant network/access restrictions.
Explanation
Correct Answer
A:Connect the function to a compatible trigger with appropriate rights. The implementation operationalizes this design choice: Choose Azure Functions for eligible event-driven execution. Acceptance should demonstrate: The handler runs when events arrive without permanent application servers.
Incorrect Answers
B:That action implements a different requirement: A firm deploys a Linux Azure VM and asks what supporting Azure resources it requires. It does not establish the required result in this case: The handler runs when events arrive without permanent application servers.
C:This change would be appropriate under a different condition: A team must package a microservice and its libraries consistently across environments. Here it would not validate: The handler runs when events arrive without permanent application servers.
D:This setup is relevant to another workload: A public website needs clients worldwide to connect to its internet-accessible service. The current configuration must instead achieve: The handler runs when events arrive without permanent application servers.
Microsoft Azure Fundamentals (AZ-900) Practice Tests