100% Latest & Updated Microsoft AZ-900 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 490
A batch team must distinguish a VM scale set from Azure App Service autoscale. What should the team configure or perform to implement the correct approach?
- Connect the function to a compatible trigger with appropriate rights.
- Select VMSS for guest-managed worker images and App Service for eligible web apps.
- Apply an NSG rule permitting required HTTPS and restricting management ports.
- Identify whether clients must traverse a public or private network path.
Explanation
Correct Answer
B:Select VMSS for guest-managed worker images and App Service for eligible web apps. The implementation operationalizes this design choice: Recognize VM Scale Sets manage groups of VMs while App Service manages application hosting. Acceptance should demonstrate: The chosen service exposes the required host-OS control or abstracts it as specified.
Incorrect Answers
A:This setup is relevant to another workload: A data collector runs short tasks when messages arrive, and demand varies sharply. The current configuration must instead achieve: The chosen service exposes the required host-OS control or abstracts it as specified.
C:This change would be appropriate under a different condition: A security administrator wants to allow HTTPS but block unsolicited remote management to a VM. Here it would not validate: The chosen service exposes the required host-OS control or abstracts it as specified.
D:This setup is relevant to another workload: A new cloud student asks whether public and private endpoints both mean publicly reachable Azure services. The current configuration must instead achieve: The chosen service exposes the required host-OS control or abstracts it as specified.
Question 491
A batch team must distinguish a VM scale set from Azure App Service autoscale. Which evidence best confirms the requirement is being met?
- The application hostname resolves to the intended public destination.
- The chosen service exposes the required host-OS control or abstracts it as specified.
- The function executes on schedule without an always-running custom VM.
- Authorized users open their virtual desktop sessions remotely.
Explanation
Correct Answer
B:The chosen service exposes the required host-OS control or abstracts it as specified. That directly tests the stated requirement: A batch team must distinguish a VM scale set from Azure App Service autoscale. It contrasts with the observed failure: The team tries to administer guest operating systems on an App Service web app.
Incorrect Answers
A:This observation is evidence for a separate scenario: An administrator wants hostnames in a company's own domain to resolve to Azure services. It does not test the necessary outcome here: The chosen service exposes the required host-OS control or abstracts it as specified.
C:The test is relevant when an app must respond to scheduled timers without keeping a VM on all day. It cannot establish the specified acceptance result: The chosen service exposes the required host-OS control or abstracts it as specified.
D:This observation is evidence for a separate scenario: A company wants hosted Windows desktops accessed by employees from different locations. It does not test the necessary outcome here: The chosen service exposes the required host-OS control or abstracts it as specified.
Question 492
A batch team must distinguish a VM scale set from Azure App Service autoscale. The team observes: The team tries to administer guest operating systems on an App Service web app. What is the most likely cause of the observed failure?
- A managed app service was chosen despite the need for VM-level control.
- An individual unmanaged VM was used instead of a scalable instance group.
- The platform selection did not support the application's required execution environment.
- It confused VM-level scaling with managed web application scaling.
Explanation
Correct Answer
D:It confused VM-level scaling with managed web application scaling. That explains the symptom: The team tries to administer guest operating systems on an App Service web app. The targeted corrective action is: Select VMSS for guest-managed worker images and App Service for eligible web apps.
Incorrect Answers
A:This cause is consistent with a different issue: The application host does not permit required guest OS changes. It does not account for the reported symptom here: The team tries to administer guest operating systems on an App Service web app.
B:The alternate mechanism would more directly produce this other failure: Operators manually create each VM during every traffic spike. The current incident instead involves: The team tries to administer guest operating systems on an App Service web app.
C:That explanation belongs to a different fault pattern: The application fails because the managed web runtime cannot load its libraries. It does not explain why the team tries to administer guest operating systems on an App Service web app.
Question 493
A service owner uses a VM and assumes a public IP is always required. Which architectural decision meets the described priority?
- Plan virtual networking, storage and compute resources alongside the VM.
- Choose an appropriate load balancing service for supported traffic distribution.
- Use Azure Virtual Machine Scale Sets for repeatable VM instance scaling.
- Recognize Azure VMs may operate using private addresses only.
Explanation
Correct Answer
D:Recognize Azure VMs may operate using private addresses only. The governing requirement is: A service owner uses a VM and assumes a public IP is always required. This solution specifically supports the outcome that the VM works through a VPN/peering path without direct public exposure.
Incorrect Answers
A:This design is appropriate for a different requirement: A firm deploys a Linux Azure VM and asks what supporting Azure resources it requires. Here the decisive outcome must instead be: The VM works through a VPN/peering path without direct public exposure.
B:That concept addresses this separate situation: A front-end workload must tolerate updates across multiple VM instances. It does not by itself establish the result required here: The VM works through a VPN/peering path without direct public exposure.
C:This option solves a different planning problem: A retail API must automatically add identical VM workers during holiday traffic. The current acceptance criterion is specific: The VM works through a VPN/peering path without direct public exposure.
Question 494
A service owner uses a VM and assumes a public IP is always required. Which configuration or operating action most directly puts that decision into practice?
- Provision a compatible Windows VM with needed disk and network settings.
- Arrange an eligible ExpressRoute circuit and configure associated connectivity.
- Create Kubernetes deployment and service resources on the AKS cluster.
- Deploy the VM without a public IP when private connectivity suffices.
Explanation
Correct Answer
D:Deploy the VM without a public IP when private connectivity suffices. The implementation operationalizes this design choice: Recognize Azure VMs may operate using private addresses only. Acceptance should demonstrate: The VM works through a VPN/peering path without direct public exposure.
Incorrect Answers
A:This setup is relevant to another workload: A legacy finance application requires a full Windows Server guest with installed proprietary software. The current configuration must instead achieve: The VM works through a VPN/peering path without direct public exposure.
B:That action implements a different requirement: A manufacturer requires private dedicated connectivity between its WAN provider and Azure. It does not establish the required result in this case: The VM works through a VPN/peering path without direct public exposure.
C:This change would be appropriate under a different condition: An enterprise has many container replicas and needs automated rollouts and service discovery. Here it would not validate: The VM works through a VPN/peering path without direct public exposure.
Question 495
A service owner uses a VM and assumes a public IP is always required. Which observation is the strongest acceptance test for this scenario?
- Requests to two URL paths reach their respective backend pools.
- Planned maintenance does not remove both members at once in the validated model.
- The VM works through a VPN/peering path without direct public exposure.
- The VM boots with its expected disk and private network attachment.
Explanation
Correct Answer
C:The VM works through a VPN/peering path without direct public exposure. That directly tests the stated requirement: A service owner uses a VM and assumes a public IP is always required. It contrasts with the observed failure: A security review finds an unnecessary internet-reachable address.
Incorrect Answers
A:This observation is evidence for a separate scenario: A web application needs HTTP routing based on hostnames and URL paths. It does not test the necessary outcome here: The VM works through a VPN/peering path without direct public exposure.
B:That check tests another control: Two critical VMs in one region need separation from common host hardware maintenance faults. The decisive result for this workload is: The VM works through a VPN/peering path without direct public exposure.
D:This observation is evidence for a separate scenario: A firm deploys a Linux Azure VM and asks what supporting Azure resources it requires. It does not test the necessary outcome here: The VM works through a VPN/peering path without direct public exposure.
Question 496
A service owner uses a VM and assumes a public IP is always required. The team observes: A security review finds an unnecessary internet-reachable address. Which planning or configuration error best accounts for this result?
- The application lacked a consistent containerized dependency package.
- VNet peering was not configured for the intended private path.
- The VM was assigned a public IP despite private-only requirements.
- Only layer-four load balancing was used for a layer-seven routing need.
Explanation
Correct Answer
C:The VM was assigned a public IP despite private-only requirements. That explains the symptom: A security review finds an unnecessary internet-reachable address. The targeted corrective action is: Deploy the VM without a public IP when private connectivity suffices.
Incorrect Answers
A:This cause is consistent with a different issue: A program works on one machine but fails because libraries differ. It does not account for the reported symptom here: A security review finds an unnecessary internet-reachable address.
B:The alternate mechanism would more directly produce this other failure: Users route all traffic through the public internet unnecessarily. The current incident instead involves: A security review finds an unnecessary internet-reachable address.
D:This cause is consistent with a different issue: All URLs route to one backend despite distinct application paths. It does not account for the reported symptom here: A security review finds an unnecessary internet-reachable address.
Question 497
A company needs to isolate customer workloads at the network level using multiple subnets. Which Azure or cloud concept most directly matches the requirement?
- Select a supported GPU-enabled VM size rather than a generic small VM.
- Choose Azure Functions for eligible event-driven execution.
- Use network security group rules to filter allowed inbound network traffic.
- Design subnet segmentation and network rules within one or more VNets.
Explanation
Correct Answer
D:Design subnet segmentation and network rules within one or more VNets. The governing requirement is: A company needs to isolate customer workloads at the network level using multiple subnets. This solution specifically supports the outcome that network boundaries and permitted inter-subnet flows match the approved design.
Incorrect Answers
A:This design is appropriate for a different requirement: A video encoder needs GPU-accelerated processing inside a customer-controlled guest. Here the decisive outcome must instead be: Network boundaries and permitted inter-subnet flows match the approved design.
B:That concept addresses this separate situation: A data collector runs short tasks when messages arrive, and demand varies sharply. It does not by itself establish the result required here: Network boundaries and permitted inter-subnet flows match the approved design.
C:This option solves a different planning problem: A security administrator wants to allow HTTPS but block unsolicited remote management to a VM. The current acceptance criterion is specific: Network boundaries and permitted inter-subnet flows match the approved design.
Question 498
A company needs to isolate customer workloads at the network level using multiple subnets. Which implementation step would best fulfill the stated requirement?
- Identify whether clients must traverse a public or private network path.
- Associate the appropriate Private DNS zone with the client VNet.
- Choose the appropriate VM SKU and compatible driver stack.
- Assign supported subnet address spaces without overlapping prefixes.
Explanation
Correct Answer
D:Assign supported subnet address spaces without overlapping prefixes. The implementation operationalizes this design choice: Design subnet segmentation and network rules within one or more VNets. Acceptance should demonstrate: Network boundaries and permitted inter-subnet flows match the approved design.
Incorrect Answers
A:This setup is relevant to another workload: A new cloud student asks whether public and private endpoints both mean publicly reachable Azure services. The current configuration must instead achieve: Network boundaries and permitted inter-subnet flows match the approved design.
B:That action implements a different requirement: A company wants to resolve private endpoint hostnames to their private addresses. It does not establish the required result in this case: Network boundaries and permitted inter-subnet flows match the approved design.
C:This change would be appropriate under a different condition: A video encoder needs GPU-accelerated processing inside a customer-controlled guest. Here it would not validate: Network boundaries and permitted inter-subnet flows match the approved design.
Question 499
A company needs to isolate customer workloads at the network level using multiple subnets. Which result would best demonstrate successful implementation?
- Client requests move to healthy instances when one backend fails.
- Network boundaries and permitted inter-subnet flows match the approved design.
- Approved internet clients reach the web service through its public address.
- The chosen service exposes the required host-OS control or abstracts it as specified.
Explanation
Correct Answer
B:Network boundaries and permitted inter-subnet flows match the approved design. That directly tests the stated requirement: A company needs to isolate customer workloads at the network level using multiple subnets. It contrasts with the observed failure: Subnet creation fails because the proposed CIDR blocks overlap.
Incorrect Answers
A:This observation is evidence for a separate scenario: A front-end workload must tolerate updates across multiple VM instances. It does not test the necessary outcome here: Network boundaries and permitted inter-subnet flows match the approved design.
C:The test is relevant when a public website needs clients worldwide to connect to its internet-accessible service. It cannot establish the specified acceptance result: Network boundaries and permitted inter-subnet flows match the approved design.
D:This observation is evidence for a separate scenario: A batch team must distinguish a VM scale set from Azure App Service autoscale. It does not test the necessary outcome here: Network boundaries and permitted inter-subnet flows match the approved design.
Question 500
A company needs to isolate customer workloads at the network level using multiple subnets. The team observes: Subnet creation fails because the proposed CIDR blocks overlap. What should the team identify as the primary mechanism behind the problem?
- The service model was more operationally complex than necessary.
- VNet peering was not configured for the intended private path.
- The subnet IP prefixes were planned with overlapping address ranges.
- It confused VM-level scaling with managed web application scaling.
Explanation
Correct Answer
C:The subnet IP prefixes were planned with overlapping address ranges. That explains the symptom: Subnet creation fails because the proposed CIDR blocks overlap. The targeted corrective action is: Assign supported subnet address spaces without overlapping prefixes.
Incorrect Answers
A:This cause is consistent with a different issue: Engineers must manage Kubernetes masters for a simple container app. It does not account for the reported symptom here: Subnet creation fails because the proposed CIDR blocks overlap.
B:The alternate mechanism would more directly produce this other failure: Users route all traffic through the public internet unnecessarily. The current incident instead involves: Subnet creation fails because the proposed CIDR blocks overlap.
D:This cause is consistent with a different issue: The team tries to administer guest operating systems on an App Service web app. It does not account for the reported symptom here: Subnet creation fails because the proposed CIDR blocks overlap.
Microsoft Azure Fundamentals (AZ-900) Practice Tests