Microsoft Azure Fundamentals (AZ-900) Exam Questions

Domain 1: Describe Cloud Concepts (28%)

---

A company wants to move its IT operations away from purchasing and maintaining physical servers, and instead pay only for the compute, storage, and networking it actually consumes, billed monthly. Which cloud computing characteristic does this describe?

⬜ Consumption-based (pay-as-you-go) model
⬜ Economies of scale
⬜ High availability
⬜ Fault tolerance

An organization keeps sensitive financial systems on infrastructure it owns and operates in its own datacenter, while running its public-facing marketing website on Azure. Which cloud deployment model best describes this organization’s overall strategy?

⬜ Public cloud
⬜ Private cloud
⬜ Hybrid cloud
⬜ Community cloud

A development team rents virtual machines, virtual networks, and storage from Azure, and is fully responsible for installing, configuring, and patching the operating system and any software that runs on those VMs. Which cloud service category is this?

⬜ Software as a Service (SaaS)
⬜ Platform as a Service (PaaS)
⬜ Infrastructure as a Service (IaaS)
⬜ Function as a Service (FaaS)

A retail company deploys a web application on Azure App Service, where Microsoft manages the underlying servers, operating system patching, and runtime, while the company’s developers focus only on writing and deploying their application code. Which cloud service category does Azure App Service represent?

⬜ Infrastructure as a Service (IaaS)
⬜ Platform as a Service (PaaS)
⬜ Software as a Service (SaaS)
⬜ On-premises

An organization uses Microsoft 365 (Word, Excel, Outlook) for its employees’ daily productivity needs. The organization does not manage any servers, operating systems, or application code for this software — it simply uses it through a web browser or app and pays a monthly subscription per user. Which cloud service category is Microsoft 365?

⬜ Infrastructure as a Service (IaaS)
⬜ Platform as a Service (PaaS)
⬜ Software as a Service (SaaS)
⬜ Desktop as a Service (DaaS)

During a regional Azure datacenter outage, an application that was deployed across multiple Availability Zones in the region continued serving user requests with minimal disruption. Which cloud computing benefit does this best illustrate?

⬜ Elasticity
⬜ High availability
⬜ Agility
⬜ Economies of scale

An e-commerce website automatically adds additional web server instances during a flash sale when traffic spikes, and automatically removes those instances once traffic returns to normal, without any manual intervention. Which cloud computing benefit does this describe?

⬜ Elasticity
⬜ Fault tolerance
⬜ Agility
⬜ Reliability

A startup needs to launch a new product feature quickly and provisions the required virtual machines, databases, and networking in Azure within minutes through the Azure portal, instead of waiting weeks to order and rack physical hardware. Which cloud computing benefit does this scenario best illustrate?

⬜ Agility
⬜ Fault tolerance
⬜ Economies of scale
⬜ Elasticity

A mission-critical application is designed so that if one of its underlying virtual machines crashes, another instance automatically takes over the workload with no impact on end users. Which term best describes this design characteristic?

⬜ Fault tolerance
⬜ Disaster recovery
⬜ Scalability
⬜ Consumption-based pricing

After a severe flood destroys a company’s on-premises datacenter, the company is able to restore its critical applications and data from Azure backups in a different region within a few hours, following a documented recovery plan. Which term describes this capability?

⬜ Disaster recovery
⬜ Fault tolerance
⬜ Vertical scaling
⬜ Elasticity

A company’s finance team is evaluating whether to buy and depreciate its own servers over several years (a large upfront investment) versus paying a monthly Azure subscription fee that can be adjusted based on usage. What are these two spending models called, respectively?

⬜ Capital Expenditure (CapEx) and Operational Expenditure (OpEx)
⬜ Operational Expenditure (OpEx) and Capital Expenditure (CapEx)
⬜ Elastic spending and fixed spending
⬜ Consumption spending and reservation spending

Because Microsoft operates Azure datacenters at a massive global scale and can negotiate better prices on hardware, electricity, and networking than any single company could on its own, it can offer compute and storage services to customers at a lower cost than most customers could achieve running their own datacenter. Which cloud concept does this describe?

⬜ Economies of scale
⬜ High availability
⬜ Serverless computing
⬜ Shared responsibility

When a company runs virtual machines in Azure (Infrastructure as a Service), which of the following is Microsoft responsible for, and which is the customer responsible for, under the shared responsibility model?

⬜ Microsoft is responsible for physical datacenter security and the underlying host infrastructure; the customer is responsible for the guest operating system, applications, and data on the VM
⬜ Microsoft is responsible for everything, including the customer’s application code and data
⬜ The customer is responsible for physical datacenter security; Microsoft is responsible for the guest operating system
⬜ Responsibility is split 50/50 regardless of the service model chosen

A company wants to avoid being locked into a single vendor and decides to run some workloads on Azure and others on a different public cloud provider, integrating them as needed. Which cloud strategy does this describe?

⬜ Multi-cloud
⬜ Hybrid cloud
⬜ Private cloud
⬜ Community cloud

What is one of the platform requirements to confirm when considering cloud service providers?

⬜ Marketing strategies
⬜ Employee training programs
⬜ Virtual machine (VM) compute resources
⬜ User interface design

What is characterized as the ability of a system to recover from failures and continue to function?

⬜ Reliability
⬜ Predictability
⬜ Scalability
⬜ Elasticity

Domain 2: Describe Azure Architecture and Services (40%)

---

A company wants to deploy resources close to its customers in Southeast Asia to reduce network latency. In Azure terminology, what is the term for a set of datacenters deployed within a defined perimeter and connected through a dedicated regional low-latency network, such as “Southeast Asia”?

⬜ Availability Zone
⬜ Region
⬜ Resource group
⬜ Management group

To meet disaster recovery requirements, an organization wants to replicate its data to another Azure region that is specifically matched with its primary region and is unlikely to be updated at the same time during Azure platform updates. What is this matched region called?

⬜ A sovereign region
⬜ A region pair
⬜ An Availability Zone
⬜ A resource group

An architect wants to protect an application from a datacenter-level failure (such as loss of power or cooling in one building) while keeping the resources within the same Azure region for low-latency replication. Which Azure feature should be used to distribute the application’s VMs across physically separate datacenters with independent power, cooling, and networking, all within one region?

⬜ Region pairs
⬜ Availability Zones
⬜ Resource groups
⬜ Azure Migrate

A cloud administrator wants to group a virtual machine, its associated virtual network, and its storage account together so they can be managed, monitored, and deleted as a single unit, since they all belong to the same application. Which Azure construct should be used?

⬜ Subscription
⬜ Management group
⬜ Resource group
⬜ Region

A large enterprise has separate Azure subscriptions for its Finance, HR, and Engineering departments, and wants to apply a single set of compliance policies and access controls across all three subscriptions at once, without configuring each subscription individually. Which Azure resource organization feature enables this?

⬜ Resource groups
⬜ Management groups
⬜ Availability sets
⬜ Region pairs

Which Azure service acts as the deployment and management layer for Azure, processing every request made through the Azure portal, Azure CLI, Azure PowerShell, or REST API, and providing a consistent way to organize, secure, and manage resources through consistent role-based access control and tagging?

⬜ Azure Resource Manager (ARM)
⬜ Azure Monitor
⬜ Azure Advisor
⬜ Azure Policy

A gaming company runs a fleet of identical virtual machines behind a load balancer to handle a game’s backend workload, and wants the number of VM instances to automatically increase during peak play hours and decrease overnight, based on CPU utilization. Which Azure compute service is purpose-built for this scenario?

⬜ Availability sets
⬜ Virtual Machine Scale Sets
⬜ Azure Container Instances
⬜ Resource groups

An administrator configures a group of VMs to be spread across multiple fault domains (separate physical racks, power, and network) and update domains (groups that are rebooted separately during planned maintenance) within a single datacenter, to increase availability against localized hardware failure and maintenance events. What is this Azure feature called?

⬜ Availability Zone
⬜ Availability set
⬜ Region pair
⬜ Scale set

A team wants to deploy a web application without provisioning or managing any virtual machines, and wants Azure to automatically handle OS patching, scaling, and load balancing for the web tier. Which Azure service is the best fit?

⬜ Azure App Service
⬜ Azure Virtual Machines
⬜ Azure Virtual Desktop
⬜ Azure ExpressRoute

A developer needs to run a single containerized batch job for a short burst of time without provisioning a virtual machine or setting up a container orchestrator like Kubernetes. Which Azure service is designed for quickly running a single container with minimal management overhead?

⬜ Azure Kubernetes Service (AKS)
⬜ Azure Container Instances (ACI)
⬜ Azure Virtual Machine Scale Sets
⬜ Azure Functions

An organization wants to orchestrate dozens of containerized microservices, automatically handling scaling, self-healing, rolling updates, and load balancing across a cluster of nodes. Which Azure service should they use?

⬜ Azure Kubernetes Service (AKS)
⬜ Azure Container Instances
⬜ Azure App Service
⬜ Azure Functions

A developer wants to run a small piece of code that automatically triggers whenever a new file is uploaded to Azure Blob Storage, without provisioning any servers, and wants to pay only for the compute time consumed while the code executes. Which Azure service fits this requirement?

⬜ Azure Functions
⬜ Azure Virtual Machines
⬜ Azure Kubernetes Service
⬜ Azure Virtual Desktop

A company wants its remote employees to securely access a full Windows desktop environment and their corporate applications from any device, with the desktop session actually running in Azure rather than on the employee’s local machine. Which Azure service is designed for this?

⬜ Azure Virtual Desktop
⬜ Azure App Service
⬜ Azure Container Instances
⬜ Azure Functions

An architect is designing a network in Azure and needs private IP address spaces so that virtual machines and other resources can communicate securely with each other, the internet, and on-premises networks. Which Azure resource provides this fundamental building block for private networking?

⬜ Azure Virtual Network (VNet)
⬜ Azure DNS
⬜ Azure Load Balancer
⬜ Azure ExpressRoute

A bank needs to connect its on-premises datacenter to Azure over a dedicated, private, high-bandwidth connection that does not travel over the public internet at all, for both performance and compliance reasons. Which Azure networking service should it use?

⬜ Site-to-site VPN Gateway
⬜ Azure ExpressRoute
⬜ Azure DNS
⬜ Azure Load Balancer

A company needs to establish an encrypted connection between its on-premises network and its Azure Virtual Network over the public internet, as a lower-cost alternative to a dedicated private circuit. Which Azure service is designed for this?

⬜ VPN Gateway
⬜ Azure ExpressRoute
⬜ Azure Bastion
⬜ Azure Front Door

An application receives a large volume of incoming traffic, and the company wants to distribute that traffic evenly across several virtual machines to improve responsiveness and avoid overloading any single VM. Which Azure networking service should be used?

⬜ Azure Load Balancer
⬜ Azure DNS
⬜ Azure Virtual Network
⬜ Azure ExpressRoute

A company wants to store business-critical data so that it survives not just a hardware failure but even the loss of an entire Azure region, by maintaining copies of the data in a secondary, geographically distant Azure region. Which storage redundancy option should it choose?

⬜ Locally Redundant Storage (LRS)
⬜ Zone-Redundant Storage (ZRS)
⬜ Geo-Redundant Storage (GRS)
⬜ No redundancy needed

A media company has large video archive files that are accessed only once every few years for compliance retention purposes, and it wants to minimize storage costs for this data while accepting that retrieval may take several hours when needed. Which Azure Blob Storage access tier is most appropriate?

⬜ Hot tier
⬜ Cool tier
⬜ Archive tier
⬜ Premium tier

A global retailer wants every employee to sign in once with a single set of credentials to securely access Microsoft 365, internal line-of-business applications, and third-party SaaS applications, with support for multi-factor authentication and conditional access policies. Which Azure service provides this centralized identity and access management?

⬜ Microsoft Entra ID
⬜ Azure Resource Manager
⬜ Azure Key Vault
⬜ Azure Policy

What service helps you manage your Azure, on-premises, and multicloud environments?

⬜ Azure Arc
⬜ Azure Policy
⬜ Azure Monitor
⬜ Azure Cloud Shell

What two components could you use to implement an “infrastructure as code” deployment in Azure? (Choose two.)

⬜ Bicep templates
⬜ ARM (Azure Resource Manager) templates
⬜ Azure Monitor workbooks
⬜ Azure Cost Management budgets

Which Azure virtual machine feature staggers updates across VMs based on their update domain and fault domain?

⬜ Availability sets
⬜ Virtual machine scale sets
⬜ Update sets
⬜ Availability zones

Which of the following statements about Azure virtual networks are true? (Select two.)

⬜ A virtual network is a logical, software-defined construct, so its configuration isn’t dependent on the physical network hardware of the underlying host
⬜ A single physical network adapter on a host can be associated with only one virtual network at a time
⬜ Virtual networks and the subnets within them deliver isolation and segmentation benefits, letting resources in one VNet be isolated from another by default
⬜ A virtual network’s address space and subnets must span every Availability Zone and region in the subscription

Domain 3: Describe Azure Management and Governance (32%)

---

Before deploying any resources, an organization wants to estimate the monthly cost of a planned Azure architecture (specific VM sizes, storage accounts, and databases) so it can budget accurately. Which Azure tool is designed specifically for this pre-deployment cost estimation?

⬜ Azure Cost Management
⬜ Pricing calculator
⬜ Azure Advisor
⬜ Azure Monitor

A company runs dozens of Azure resources across several departments and wants to see spending broken down by department and project, set budgets with alerts, and analyze cost trends over time for resources that are already running. Which Azure tool provides this?

⬜ Azure Cost Management
⬜ Pricing calculator
⬜ Azure Policy
⬜ Azure Blueprints

A company wants to label its Azure resources with metadata such as “CostCenter: Marketing” and “Environment: Production” so it can filter and group resources for cost reporting and organization across resource groups and subscriptions. Which Azure feature enables this?

⬜ Resource locks
⬜ Resource tags
⬜ Management groups
⬜ Availability sets

A company runs a steady, predictable workload on a set of virtual machines 24/7 for the next three years and wants to significantly reduce its compute costs compared to paying the standard pay-as-you-go rate, in exchange for committing to that usage upfront. Which Azure pricing option should it use?

⬜ Spot VMs
⬜ Reserved Instances (reservations)
⬜ Pay-as-you-go pricing
⬜ Free tier pricing

A data analytics team has a large, interruptible batch-processing job that can tolerate being stopped and restarted, and wants to run it as cheaply as possible by taking advantage of Azure’s spare, unused compute capacity. Which Azure pricing/VM option is best suited for this workload?

⬜ Reserved Instances
⬜ Spot VMs
⬜ Dedicated Hosts
⬜ Premium SSD storage

A company’s compliance team wants to enforce a rule across all subscriptions that only allows virtual machines to be deployed in the “East US” and “West Europe” regions, and wants Azure to automatically flag or block any deployment that violates this rule. Which Azure service should be used?

⬜ Azure Policy
⬜ Azure Monitor
⬜ Azure Advisor
⬜ Resource locks

An administrator wants to prevent a critical production database resource from being accidentally deleted by any team member, while still allowing normal read and write operations against the database to continue. Which Azure governance feature should be applied to the resource?

⬜ A CanNotDelete resource lock
⬜ A ReadOnly resource lock
⬜ Azure Policy
⬜ A management group

An organization is planning a large-scale, multi-year migration to Azure and wants a structured, Microsoft-provided methodology covering strategy, planning, readiness, adoption, governance, and management to guide the initiative. Which Microsoft resource is designed for this purpose?

⬜ Cloud Adoption Framework (CAF)
⬜ Azure Policy
⬜ Azure Advisor
⬜ Total Cost of Ownership calculator

A company has servers running in its own datacenter and in another cloud provider, and wants to manage and apply consistent Azure governance, such as Azure Policy and tagging, to those non-Azure servers from within the Azure portal, alongside its native Azure resources. Which Azure service enables this?

⬜ Azure Arc
⬜ Azure Migrate
⬜ Azure Resource Manager
⬜ Azure Advisor

A new Azure administrator wants a web-based, graphical interface to create, manage, and monitor Azure resources, with visual dashboards, without needing to write any scripts or commands. Which Azure tool should they use?

⬜ Azure Cloud Shell
⬜ Azure portal
⬜ Azure CLI
⬜ Azure PowerShell

A DevOps engineer wants to automate repetitive Azure resource management tasks using scripts, and wants a browser-based, pre-authenticated command-line environment (supporting both Bash and PowerShell) accessible directly from the Azure portal without installing anything locally. Which Azure tool fits this need?

⬜ Azure Cloud Shell
⬜ Azure Advisor
⬜ Azure Policy
⬜ Azure Monitor

A team wants to define their entire Azure infrastructure (VMs, networking, storage) as a declarative JSON or Bicep file, so the same environment can be deployed repeatedly and consistently across development, test, and production, following Infrastructure as Code practices. Which Azure feature supports this?

⬜ Azure Resource Manager (ARM) templates
⬜ Azure Advisor
⬜ Azure Cost Management
⬜ Resource locks

After running several Azure resources for a few months, an administrator wants personalized, automated recommendations for improving cost efficiency, security posture, reliability, and performance based on the actual configuration and usage of their existing resources. Which Azure service provides this?

⬜ Azure Advisor
⬜ Azure Policy
⬜ Azure Blueprints
⬜ Azure Resource Manager

An operations team wants a single service to collect, analyze, and act on telemetry (metrics and logs) from applications and infrastructure across their entire Azure environment, so they can set up alerts, build dashboards, and troubleshoot performance issues. Which Azure service serves as this central monitoring solution?

⬜ Azure Monitor
⬜ Azure Advisor
⬜ Azure Policy
⬜ Azure Service Health

A development team wants to monitor the live performance of their web application — including response times, failure rates, and user behavior such as page views — and receive alerts when the application starts throwing unusual numbers of exceptions. Which component of Azure Monitor is purpose-built for this application performance monitoring?

⬜ Log Analytics
⬜ Application Insights
⬜ Azure Advisor
⬜ Azure Service Health

During a widespread Azure outage affecting several services in a specific region, an administrator wants a personalized view showing exactly which of their subscriptions’ resources are impacted, along with guidance and estimated restoration times, as opposed to a generic status page for all of Azure. Which service should they check?

⬜ Azure Service Health
⬜ Microsoft Trust Center
⬜ Azure Advisor
⬜ Compliance Manager

You have on-premises servers. You need to use Azure to centrally manage, govern, and secure the servers without migrating them to Azure. What should you use? (Select only one answer.)

⬜ Azure Advisor
⬜ Azure Arc
⬜ Azure Monitor
⬜ Azure Service Health

Which of the following is NOT one of the recommendation categories provided by Azure Advisor?

⬜ Reliability
⬜ Capacity
⬜ Cost
⬜ Operational Excellence

You receive an email notification that virtual machines (VMs) in an Azure region where you have VMs deployed are experiencing an outage. Which component of Azure Service Health will let you know if your application is impacted?

⬜ Azure Status
⬜ Service Health
⬜ Resource Health
⬜ Azure Monitor Metrics