Pass the Microsoft Azure AZ-900 Questions and answers with ExamsMirror

Azure Site Recovery helps ensure business continuity by keeping business apps and workloads running during outages. Site Recovery replicates workloads running on physical and virtual machines (VMs) from a primary site to a secondary location.

Box 1: No

Azure firewall does not encrypt network traffic. It is used to block or allow traffic based on source/destination IP address, source/destination ports and protocol.

Box 2: No

A network security group does not encrypt network traffic. It works in a similar way to a firewall in that it is used to block or allow traffic based on source/destination IP address, source/destination ports and protocol.

Box 3: No

The question is rather vague as it would depend on the configuration of the host on the Internet. Windows Server does come with a VPN client and it also supports other encryption methods such IPSec encryption or SSL/TLS so it could encrypt the traffic if the Internet host was configured to require or accept the encryption. However, the VM could not encrypt the traffic to an Internet host that is not configured to require the encryption.

Azure storage offers different access tiers: hot, cool and archive.

The archive access tier has the lowest storage cost. But it has higher data retrieval costs compared to the hot and cool tiers. Data in the archive tier can take several hours to retrieve.

While a blob is in archive storage, the blob data is offline and can't be read, overwritten, or modified. To read or download a blob in archive, you must first rehydrate it to an online tier.

Example usage scenarios for the archive access tier include:

Long-term backup, secondary backup, and archival datasets

Original (raw) data that must be preserved, even after it has been processed into final usable form.

Compliance and archival data that needs to be stored for a long time and is hardly ever accessed.

The Microsoft Privacy Statement explains what personal data Microsoft processes, how Microsoft processes the data, and the purpose of processing the data

Box 1: No

The price of Azure storage varies by region. If you use the Azure storage pricing page, you can select different regions and see how the price changes per region.

Box 2: No

You are charged for read and write operations in general-purpose v2 storage accounts.

Box 3: No

You would be charge for the read operations of the source storage account and write operations in the destination storage account.

Box 1: No

Azure resources deployed to a single resource group can be located in different regions. The resource group only contains metadata about the resources it contains.

When creating a resource group, you need to provide a location for that resource group. You may be wondering, "Why does a resource group need a location? And, if the resources can have different locations than the resource group, why does the resource group location matter at all?" The resource group stores metadata about the resources. When you specify a location for the resource group, you're specifying where that metadata is stored. For compliance reasons, you may need to ensure that your data is stored in a particular region.

Box 2: No

Tags for Resources are not inherited by default from their Resource Group

Box 3: Yes

A resource group can be used to scope access control for administrative actions. By default, permissions set at the resource level are inherited by the resources in the resource group.

Box 1: No

Resource groups are logical containers for Azure resources. You do not pay for resource groups.

Box 2: Yes

Data ingress over a VPN is data ‘coming in’ to Azure over the VPN. You are charged data transfer costs for data ingress.

Box 3: No

Data egress over a VPN is data ‘going out’ of Azure over the VPN. You are not charged for data egress.