El Blog de BADBOY

28-7-2021 - 41 Questions that i remember to be in AZ-900 Fundamentals Exam

2021-07-28T13:35:00.011-05:00

Exam Questions:41

Pass Score: 700

Score Achivied: 895

Questions for review: 12 (almost 5 never seen questions)

What are two characteristics of the public cloud? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

dedicated hardware

unsecured connections

limited storage

metered pricing
self-service management

Your company plans to migrate all its data and resources to Azure.

The company’s migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure.

You need to deploy an Azure environment that meets the company’s migration plan.

What should you create?

Azure virtual machines, Azure SQL databases, and Azure Storage accounts.

an Azure App Service and Azure virtual machines that have Microsoft SQL Server installed.

an Azure App Service and Azure SQL databases.

Azure storage account and web server in Azure virtual machines.

4 can you deploy physical servers to public cloud?

5
[Azure Databricks] is an Apache Spark-based analytics service.

You have an Azure environment that contains multiple Azure virtual machines.

You plan to implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines.

You need to recommend which Azure resources must be created for the planned solution.

Which two Azure resources should you include in the recommendation? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

a virtual network gateway

a load balancer

an application gateway

a virtual network

a gateway subnet

A team of developers at your company plans to deploy, and then remove, 50 customized virtual machines each week. Thirty of the virtual machines run Windows Server 2016 and 20 of the virtual machines run Ubuntu Linux.

You need to recommend which Azure service will minimize the administrative effort required to deploy and remove the virtual machines.

What should you recommend?

Azure Reserved Virtual Machines (VM) Instances

Azure virtual machine scale sets

Azure DevTest Labs

Microsoft Managed Desktop

You have an on-premises application that sends email notifications automatically based on a rule.

You plan to migrate the application to Azure.

You need to recommend a serverless computing solution for the application.

What should you include in the recommendation?

a web app

a server image in Azure Marketplace

a logic app

an API app

An Azure administrator plans to run a PowerShell script that creates Azure resources.

You need to recommend which computer configuration to use to run the script.

Which three computers can run the script? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

a computer that runs macOS and has PowerShell Core 6.0 installed.

a computer that runs Windows 10 and has the Azure PowerShell module installed.

a computer that runs Linux and has the Azure PowerShell module installed.

a computer that runs Linux and has the Azure CLI tools installed.

a computer that runs Chrome OS and uses Azure Cloud Shell

Which Azure service can you use as a security information and event management (SIEM) solution?

Azure Analysis Services

Azure Sentinel

Azure Information Protection

Azure Cognitive Services

You have an Azure environment that contains 10 virtual networks and 100 virtual machines.

You need to limit the amount of inbound traffic to all the Azure virtual networks.

What should you create?

one application security group (ASG)

10 virtual network gateways

10 Azure ExpressRoute circuits

one Azure firewall

You plan to deploy several Azure virtual machines.

You need to control the ports that devices on the Internet can use to access the virtual machines.

What should you use?

a network security group (NSG)

an Azure Active Directory (Azure AD) role

an Azure Active Directory group

an Azure key vault

Your company plans to deploy several web servers and several database servers to Azure.

You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers.

What should you include in the recommendation?

network security groups (NSGs)

Azure Service Bus

a local network gateway

a route filter

Your company plans to migrate all on-premises data to Azure.

You need to identify whether Azure complies with the company’s regional requirements.

What should you use?

the Knowledge Center

Azure Marketplace

the MyApps portal

the Trust Center

What should you use to evaluate whether your company’s Azure environment meets regulatory requirements?

Azure Service Health

Azure Knowledge Center

Azure Security Center

Azure Advisor

Which two types of customers are eligible to use Azure Government to develop a cloud solution? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

a Canadian government contractor

a European government contractor

a United States government entity

a United States government contractor

a European government entity

Which statement accurately describes the Modern Lifecycle Policy for Azure services?

Microsoft provides mainstream support for a service for five years.

Microsoft provides a minimum of 12 months’ notice before ending support for a service.

After a service is made generally available, Microsoft provides support for the service for a minimum of four years.

When a service is retired, you can purchase extended support for the service for up to five years.

You have 1,000 virtual machines hosted on the Hyper-V hosts in a data center. You plan to migrate all the virtual machines to an Azure pay-as-you-go subscription. You need to identify which expenditure model to use for the planned Azure solution. Which expenditure model should you identify?

operational Opex

elastic

capital Capex

scalable

Reference

This question requires that you evaluate the underlined text to determine if it is correct.

is the process of verifying a user's credentials.

Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed". If the statement is incorrect, select the answer choice that makes the statement correct.

Authorization
Authentication
Federation
Ticketing

Question like this

Availability Zones protect a VM from Region failure

Availability Zones protect a VM from datacenter failure

Availability Zones protect a Management disks from datacenter failure

Question like this

An Azure initiative is a collection of _________or rules, that are grouped together towards a specific goal or purpose. Azure initiatives simplify management of your policies by grouping a set of policies together, logically, as a single item.

Azure policy definitions

Other

Azure BluePrints

What should you use to evaluate whether your company’s Azure environment meets regulatory requirements?

the Knowledge Center website

the Advisor blade from the Azure portal

Compliance Manager from the Service Trust Portal

the Solutions blade from the Azure portal

This question requires that you evaluate the underlined text to determine if it is correct.

You can use __________- in Azure to send email alerts when the cost of the current billing period for an Azure subscription exceeds a specified limit.

Advisor recommendations.

Access control (IAM)

Budget alerts

Compliance

What is required to use Azure Cost Management?

a Dev/Test subscription

Software Assurance

an Enterprise Agreement (EA)

a pay-as-you-go subscription

(some combination of this questions)

Azure Pay-As-You-Go pricing is an example of CapEx. No

A private cloud must be disconnected from the internet. No

Deploying your own datacenter is an example of CapEx. Yes

A company can extend a private cloud by adding its own physical servers to the public cloud. No

Azure Reserved VM Instances are an example of OpEx.No

Questions like this

You can join Windows 10 devices so you can login to Azure Active Directory (Azure AD) Yes

Users in Azure AD are organized as Resource Groups No

Users in Azure AD can be members of self-service group management: Yes

Questions like this

Azure Security Center can monitor Azure resources and on-premises resources. Yes

All Azure Security Center features are free. No

From Azure Security Center, you can download a Regulatory Compliance report. Yes

Questions like this

An Azure subscription can have multiple account administrators.Yes

An Azure subscription can be managed by using a Microsoft account only. Yes

An Azure resource group can contain multiple Azure subscription. No

Question like this

___________ to permit internet users access to a local server

NAT Firewall rules

Access Rules

Other

question like this

Azure Cost Management shown the cost of a resoruce group YES?

Azure Cost Management shown the cost of a management group YES?

Azure cost Management shown use of virtual machines accumulated costs over time to estimate monthly, quarterly, or even yearly No?

question like this

The NSG default rule is blocking all inbound traffic YES?

Network Security Group (NSG) can implment Aplication security groups YES?

Network Security Group (NSG) has inbound and outbound rukes No?

https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

Other Sources:

https://pupuweb.com/microsoft-azure-fundamentals-az900-actual-exam-question-answer-dumps

https://pupuweb.com/microsoft-azure-fundamentals-az900-actual-exam-question-answer-dumps-2

https://pupuweb.com/microsoft-azure-fundamentals-az900-actual-exam-question-answer-dumps-3

Resetting SID on Windows Server 2012 R2 Cloned Image

2020-05-01T19:36:00.000-05:00

Error al intentar unirse al dominio: domain.local

La unión de dominio no se puede completar porque el SID del dominio que intenta unir es idéntico al SID de este equipo. Esto es síntoma de una instalación de sistema operativo clonada incorrectamente. Se recomienda ejecutar SYSPREP en el equipo para generar el nuevo SID de equipo.

Vea http://go.microsoft.com/fwlink/?LinkId=168895 para obtener más información

Vaya a c:\windows\system32\sysprep
Ejecute sysprep.exe
Marque Iniciar la configuración rápida (OOBE del sistema)
Marque Generalizar

Seleccione Reiniciar y Luego Aceptar

TLB

Escritorio Remoto Error de autenticación No se permite la función solicitada Puede deberse a una actualización de Oracle de cifrado CredSSP

2020-05-01T19:29:00.000-05:00

Fuente:

https://go.microsoft.com/fwlink/?linkid=866660

Error:

Error de autenticación No se permite la función solicitada

Puede deberse a una actualización de Oracle de cifrado CredSSP

Logon Locally into the server that you were unable to connect to before.

Run this from an elevated command prompt to achieve the same result:

REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" /v AllowEncryptionOracle /t REG_DWORD /d 2

This registry entry is a temporary workaround until you have patched your server, when you have done that, remove the setting with this command.

REG Delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" /v

Workaround run Full Windows Update without Optinal Updates.

Descarga de Microsoft Security Essentials - Windows Help

2020-05-01T19:26:00.000-05:00

Source:

https://support.microsoft.com/es-es/help/14210/security-essentials-download

Descarga de Security Essentials

Se aplica a: Windows 7

El soporte para Windows 7 finalizará el 14 de enero de 2020.

Te recomendamos pasar a un PC con Windows 10 para seguir recibiendo actualizaciones de seguridad de Microsoft. Más información.

Protección para el PC

Windows Defender está incluido en las últimas versiones de Windows y ayuda a proteger el PC contra virus y otro software malintencionado.

Si tienes un equipo con una versión anterior de Windows 7, puedes descargar Microsoft Security Essentials por tan poco dinero que es gratis.

Qué incluye

	Microsoft Security Essentials Windows 7	Windows Defender Windows 8.1, Windows RT 8.1 y Windows 10
Protección en tiempo real contra spyware, virus, rootkits y otro software malintencionado	X	X
Análisis y limpieza del sistema online	X	X
Servicio dinámico de firmas	X	X
Análisis y limpieza del sistema sin conexión	X	X
Protección mejorada contra rootkits y bootkits		X

Windows Defender para Windows 8.1, Windows RT 8.1 y Windows 10 ofrece protección integrada contra el malware. En estas versiones no puedes usar Microsoft Security Essentials, pero no lo necesitas. Windows Defender ya viene incluido y listo para ejecutarse.

Si buscas proteger un PC con una versión más antigua de Windows 7, puedes usar Microsoft Security Essentials, que ofrece una amplia protección contra malware, que te ayudará a protegerte de virus, spyware y otro software malintencionado. Disfruta de una protección en tiempo real gratuita* en tus equipos de casa o de tu pequeña empresa.

Microsoft Security Essentials se encuentra disponible en varios idiomas y configuraciones regionales. Si no está disponible en el idioma que quieres, puedes instalarlo en cualquiera de los otros idiomas que figuran aquí y seguirá funcionando para proteger tu equipo.

Para descargar Microsoft Security Essentials

Elige un idioma o configuración regional en la siguiente lista.
Elige tu sistema operativo para iniciar el proceso de descarga.

Si necesitas ayuda para averiguar qué versión de Windows estás ejecutando, consulta ¿Está ejecutando el PC la versión de Windows de 32 bits o de 64 bits?

Windows Defender for windows server

2020-05-01T19:24:00.003-05:00

Source:https://itpro.tv.

Windows Defender - first line of defense against spyware and other unwanted software

--Windows Defender is now included and enabled by default
-sc query Windefend (sc = service control)
--if STATE equals RUNNING, its running

--Some PowerShell cmdlets
-Get-MpComputerStatus
Gets the status of antimalware software on the computer
-Get-MpThreat
Gets the history of threats detected on the computer
-Get-MpThreatDetection
Gets active and past malware threats that Windows Defender detected
-Remove-MpThreat
Removes active threats from a computer

To turn off Windows Defender real-time monitoring
-Set-MpPreference -DisableRealtimeMonitoring $true

To enable Windows Defender real-time monitoring
-Set-MpPreference -DisableRealtimeMonitoring $false

To add an exclusion
-Add-MpPreference -ExclusionPath "%path%"

To remove an exclusion
-Remove-MpPreference -ExclusionPath "%path%"

-Update-MpSignature
Updates definitions
-Start-MpScan
Starts a scan on a computer

--By default, the GUI for Windows Defender is not installed. To install it...
-Add Roles and Features Wizard
-Features
-Windows Defender
-GUI for Windows Defender

-Get-WindowsFeature
-Install-WindowsFeature Windows-Defender-Gui

--By default, Windows Server Technical Preview does not have Windows Update setup to download and install updates, which includes Defender definition updates.

--Configure Windows Defender with Group Policy
-Compuer Configuration - Admin Templates - Windows Components - Windows Defender

Habilitar Acceso de apps menos seguras cuenta gmail o google

2020-05-01T19:22:00.000-05:00

Direct Link
https://myaccount.google.com/u/0/lesssecureapps?pageId=none&pli=1

This allows POP/IMAP configuration on Microsoft Outlook or similar application installed locally to get Email Downloaded or Sync.

Disable Windows Local Accounts Password Expiration

2020-05-01T19:18:00.004-05:00

source: https://www.top-password.com/blog/set-password-to-never-expire-for-windows-local-account/

Issue:

Windows Home and Pro version asks for password change every n days

Steps:

1 start Command Prompt as administrator

2 run wmic command with PasswordExpires option set to false

Example:

User Name: pcunlocker

wmic useraccount where
"Name='pcunlocker'" set PasswordExpires=false

TLB

Hyper-V virtual machine may not start, and you receive a “‘General access denied error’ (0x80070005)” error message

2020-05-01T19:14:00.004-05:00

Start VM wont start after Restore

Fuente:

https://support.microsoft.com/en-us/help/2249906/hyper-v-virtual-machine-may-not-start-and-you-receive-a-general-access

Error:

‘Unnamed VM’ failed to initialize.

Clic Details

‘Unnamed VM’ failed to initialize. (Virtual machine 466A7A53-EBB7-4029-AF78-F0982EDB20C2)

Reasignar permiso

icalcs "Complete Path to Virtual Hard Disk.VHD"
/grant "NT VIRTUAL MACHINE\virtual machine ID":(F)

En el ejemplo:

icacls "C:\Hyper-V\Virtual Hard Disks\CMFVIS1_c.VHD" /grant "NT VIRTUAL MACHINE\466A7A53-EBB7-4029-AF78-F0982EDB20C2":(F)

TLB