100% Latest & Updated Microsoft AZ-900 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 390
A data collector runs short tasks when messages arrive, and demand varies sharply. Which Azure setup action best follows from this scenario?
- Connect the function to a compatible trigger with appropriate rights.
- Provide a supported subnet, NIC and managed OS disk to the VM.
- Build and deploy an approved container image to an eligible host.
- Configure public ingress and relevant network/access restrictions.
Explanation
Correct Answer
A:Connect the function to a compatible trigger with appropriate rights. The implementation operationalizes this design choice: Choose Azure Functions for eligible event-driven execution. Acceptance should demonstrate: The handler runs when events arrive without permanent application servers.
Incorrect Answers
B:That action implements a different requirement: A firm deploys a Linux Azure VM and asks what supporting Azure resources it requires. It does not establish the required result in this case: The handler runs when events arrive without permanent application servers.
C:This change would be appropriate under a different condition: A team must package a microservice and its libraries consistently across environments. Here it would not validate: The handler runs when events arrive without permanent application servers.
D:This setup is relevant to another workload: A public website needs clients worldwide to connect to its internet-accessible service. The current configuration must instead achieve: The handler runs when events arrive without permanent application servers.
Question 391
A data collector runs short tasks when messages arrive, and demand varies sharply. Which verification outcome should the team expect from the right design?
- Office hosts reach approved Azure subnet addresses over the VPN.
- The handler runs when events arrive without permanent application servers.
- Authorized private addresses communicate between peered VNets.
- Approved internet clients reach the web service through its public address.
Explanation
Correct Answer
B:The handler runs when events arrive without permanent application servers. That directly tests the stated requirement: A data collector runs short tasks when messages arrive, and demand varies sharply. It contrasts with the observed failure: A full-time VM waits idle for rare messages.
Incorrect Answers
A:This observation is evidence for a separate scenario: A company needs encrypted site-to-site connectivity from its existing office to an Azure VNet. It does not test the necessary outcome here: The handler runs when events arrive without permanent application servers.
C:The test is relevant when two business units operate separate VNets in one region and require private connectivity. It cannot establish the specified acceptance result: The handler runs when events arrive without permanent application servers.
D:This observation is evidence for a separate scenario: A public website needs clients worldwide to connect to its internet-accessible service. It does not test the necessary outcome here: The handler runs when events arrive without permanent application servers.
Question 392
A data collector runs short tasks when messages arrive, and demand varies sharply. The team observes: A full-time VM waits idle for rare messages. Which underlying mistake most directly explains the reported symptom?
- The application lacked a consistent containerized dependency package.
- The design omitted subnet-level filtering and security boundaries.
- The design ignored a suitable event-driven managed service.
- They used public exposure instead of private hybrid network connectivity.
Explanation
Correct Answer
C:The design ignored a suitable event-driven managed service. That explains the symptom: A full-time VM waits idle for rare messages. The targeted corrective action is: Connect the function to a compatible trigger with appropriate rights.
Incorrect Answers
A:This cause is consistent with a different issue: A program works on one machine but fails because libraries differ. It does not account for the reported symptom here: A full-time VM waits idle for rare messages.
B:The alternate mechanism would more directly produce this other failure: The database receives connections from every VM in the network. The current incident instead involves: A full-time VM waits idle for rare messages.
D:This cause is consistent with a different issue: Administrators publish the internal service on a public endpoint for office access. It does not account for the reported symptom here: A full-time VM waits idle for rare messages.
Question 393
A team must package a microservice and its libraries consistently across environments. What is the most appropriate cloud concept or service for this need?
- Use a container image for portable application packaging.
- Use an Azure Private Endpoint for private connectivity to the supported PaaS service.
- Use subnets and appropriate network controls within the VNet.
- Use an Azure Function timer trigger where the workload fits.
Explanation
Correct Answer
A:Use a container image for portable application packaging. The governing requirement is: A team must package a microservice and its libraries consistently across environments. This solution specifically supports the outcome that the service runs with the same packaged dependencies in test and production.
Incorrect Answers
B:That concept addresses this separate situation: An internal application must reach an Azure PaaS database by private IP without public service exposure. It does not by itself establish the result required here: The service runs with the same packaged dependencies in test and production.
C:This option solves a different planning problem: A three-tier app must isolate database traffic from front-end workload traffic. The current acceptance criterion is specific: The service runs with the same packaged dependencies in test and production.
D:This design is appropriate for a different requirement: An app must respond to scheduled timers without keeping a VM on all day. Here the decisive outcome must instead be: The service runs with the same packaged dependencies in test and production.
Question 394
A team must package a microservice and its libraries consistently across environments. What should the team configure or perform to implement the correct approach?
- Create the private endpoint and align private DNS resolution as required.
- Provision a compatible Windows VM with needed disk and network settings.
- Build and deploy an approved container image to an eligible host.
- Connect the function to a compatible trigger with appropriate rights.
Explanation
Correct Answer
C:Build and deploy an approved container image to an eligible host. The implementation operationalizes this design choice: Use a container image for portable application packaging. Acceptance should demonstrate: The service runs with the same packaged dependencies in test and production.
Incorrect Answers
A:This setup is relevant to another workload: An internal application must reach an Azure PaaS database by private IP without public service exposure. The current configuration must instead achieve: The service runs with the same packaged dependencies in test and production.
B:That action implements a different requirement: A legacy finance application requires a full Windows Server guest with installed proprietary software. It does not establish the required result in this case: The service runs with the same packaged dependencies in test and production.
D:This setup is relevant to another workload: A data collector runs short tasks when messages arrive, and demand varies sharply. The current configuration must instead achieve: The service runs with the same packaged dependencies in test and production.
Question 395
A team must package a microservice and its libraries consistently across environments. Which evidence best confirms the requirement is being met?
- The function executes on schedule without an always-running custom VM.
- The service runs with the same packaged dependencies in test and production.
- Pods are scheduled and controlled through Kubernetes APIs.
- The website runs without customers managing its VM guest OS.
Explanation
Correct Answer
B:The service runs with the same packaged dependencies in test and production. That directly tests the stated requirement: A team must package a microservice and its libraries consistently across environments. It contrasts with the observed failure: A program works on one machine but fails because libraries differ.
Incorrect Answers
A:This observation is evidence for a separate scenario: An app must respond to scheduled timers without keeping a VM on all day. It does not test the necessary outcome here: The service runs with the same packaged dependencies in test and production.
C:The test is relevant when a business needs a managed Kubernetes control plane for many containerized services. It cannot establish the specified acceptance result: The service runs with the same packaged dependencies in test and production.
D:This observation is evidence for a separate scenario: An e-commerce team has a simple website and does not want to patch guest OS hosts. It does not test the necessary outcome here: The service runs with the same packaged dependencies in test and production.
Question 396
A team must package a microservice and its libraries consistently across environments. The team observes: A program works on one machine but fails because libraries differ. What is the most likely cause of the observed failure?
- The subnet IP prefixes were planned with overlapping address ranges.
- A managed app service was chosen despite the need for VM-level control.
- The application lacked a consistent containerized dependency package.
- The size selected did not offer the required accelerator capability.
Explanation
Correct Answer
C:The application lacked a consistent containerized dependency package. That explains the symptom: A program works on one machine but fails because libraries differ. The targeted corrective action is: Build and deploy an approved container image to an eligible host.
Incorrect Answers
A:This cause is consistent with a different issue: Subnet creation fails because the proposed CIDR blocks overlap. It does not account for the reported symptom here: A program works on one machine but fails because libraries differ.
B:The alternate mechanism would more directly produce this other failure: The application host does not permit required guest OS changes. The current incident instead involves: A program works on one machine but fails because libraries differ.
D:This cause is consistent with a different issue: Encoding fails because the provisioned VM lacks GPU hardware. It does not account for the reported symptom here: A program works on one machine but fails because libraries differ.
Question 397
A business needs a managed Kubernetes control plane for many containerized services. Which architectural decision meets the described priority?
- Distinguish public service access from private IP-bound endpoint access.
- Choose a VM or supported container host that can run the required runtime.
- Choose Azure Kubernetes Service when Kubernetes orchestration is required.
- Use global VNet peering when region and routing prerequisites permit it.
Explanation
Correct Answer
C:Choose Azure Kubernetes Service when Kubernetes orchestration is required. The governing requirement is: A business needs a managed Kubernetes control plane for many containerized services. This solution specifically supports the outcome that pods are scheduled and controlled through Kubernetes APIs.
Incorrect Answers
A:This design is appropriate for a different requirement: A new cloud student asks whether public and private endpoints both mean publicly reachable Azure services. Here the decisive outcome must instead be: Pods are scheduled and controlled through Kubernetes APIs.
B:That concept addresses this separate situation: A developer wants to host a Linux application with a custom runtime not supported by a managed web tier. It does not by itself establish the result required here: Pods are scheduled and controlled through Kubernetes APIs.
D:This design is appropriate for a different requirement: A remote office wants two VNets connected even though they sit in different Azure regions. Here the decisive outcome must instead be: Pods are scheduled and controlled through Kubernetes APIs.
Question 398
A business needs a managed Kubernetes control plane for many containerized services. Which configuration or operating action most directly puts that decision into practice?
- Create an AKS cluster and configure supported node and network settings.
- Configure public ingress and relevant network/access restrictions.
- Link the private DNS zone to the appropriate VNet and add records.
- Identify whether clients must traverse a public or private network path.
Explanation
Correct Answer
A:Create an AKS cluster and configure supported node and network settings. The implementation operationalizes this design choice: Choose Azure Kubernetes Service when Kubernetes orchestration is required. Acceptance should demonstrate: Pods are scheduled and controlled through Kubernetes APIs.
Incorrect Answers
B:That action implements a different requirement: A public website needs clients worldwide to connect to its internet-accessible service. It does not establish the required result in this case: Pods are scheduled and controlled through Kubernetes APIs.
C:This change would be appropriate under a different condition: A private VNet workload needs internal name resolution not exposed to public DNS. Here it would not validate: Pods are scheduled and controlled through Kubernetes APIs.
D:This setup is relevant to another workload: A new cloud student asks whether public and private endpoints both mean publicly reachable Azure services. The current configuration must instead achieve: Pods are scheduled and controlled through Kubernetes APIs.
Question 399
A business needs a managed Kubernetes control plane for many containerized services. Which observation is the strongest acceptance test for this scenario?
- Company VPN users connect while direct unsolicited internet connection fails.
- Planned maintenance does not remove both members at once in the validated model.
- Pods are scheduled and controlled through Kubernetes APIs.
- The runtime executes with the needed dependencies and access boundary.
Explanation
Correct Answer
C:Pods are scheduled and controlled through Kubernetes APIs. That directly tests the stated requirement: A business needs a managed Kubernetes control plane for many containerized services. It contrasts with the observed failure: Container teams are forced to script every host and scheduler task manually.
Incorrect Answers
A:This observation is evidence for a separate scenario: A development team wants its VM to be reachable only from its private corporate VPN. It does not test the necessary outcome here: Pods are scheduled and controlled through Kubernetes APIs.
B:That check tests another control: Two critical VMs in one region need separation from common host hardware maintenance faults. The decisive result for this workload is: Pods are scheduled and controlled through Kubernetes APIs.
D:This observation is evidence for a separate scenario: A developer wants to host a Linux application with a custom runtime not supported by a managed web tier. It does not test the necessary outcome here: Pods are scheduled and controlled through Kubernetes APIs.
Question 400
A business needs a managed Kubernetes control plane for many containerized services. The team observes: Container teams are forced to script every host and scheduler task manually. Which planning or configuration error best accounts for this result?
- They were not placed in the intended availability-set fault/update separation.
- Private zone records or VNet links were not configured correctly.
- An unmanaged container runtime was chosen instead of orchestration.
- A managed app service was chosen despite the need for VM-level control.
Explanation
Correct Answer
C:An unmanaged container runtime was chosen instead of orchestration. That explains the symptom: Container teams are forced to script every host and scheduler task manually. The targeted corrective action is: Create an AKS cluster and configure supported node and network settings.
Incorrect Answers
A:This cause is consistent with a different issue: Both critical VMs are interrupted by a shared maintenance event. It does not account for the reported symptom here: Container teams are forced to script every host and scheduler task manually.
B:The alternate mechanism would more directly produce this other failure: DNS returns the public address despite an existing private endpoint. The current incident instead involves: Container teams are forced to script every host and scheduler task manually.
D:This cause is consistent with a different issue: The application host does not permit required guest OS changes. It does not account for the reported symptom here: Container teams are forced to script every host and scheduler task manually.
Microsoft Azure Fundamentals (AZ-900) Practice Tests