AZ-900 Practice Questions: 12 Traps the Real Exam Sets
Here are 8 multiple-choice questions designed to match the style, difficulty, and domain coverage of the AZ-900 exam. --- These questions test your understanding of core cloud concepts, Azure architecture, and management tools. Choose the best answer for each scenario. ---
Question 1
A company wants to migrate its on-premises virtual machines to Azure but is concerned about the latency between the application servers and the database server. They plan to move both servers to the same Azure region. Which benefit of cloud computing does this scenario primarily demonstrate? If this interests you, How Hard Is AZ-900? An Honest Difficulty Review goes into more detail.
A. High Availability
B. Elasticity
C. Geographic Distribution
D. Fault Tolerance
Answer: C
Explanation: By placing resources in the same Azure region, the company reduces network latency between them, leveraging the global footprint of Azure. High Availability and Fault Tolerance relate to uptime and redundancy, not network speed, and Elasticity refers to scaling resources up or down.
Question 2
A startup needs to deploy a web application that experiences unpredictable traffic spikes. They want to pay only for the compute resources they use, scaling out during peak hours and scaling in during slow periods. Which cloud model best describes this requirement?
A. Capital Expenditure (CapEx) model
B. Consumption-based pricing model
C. Hybrid cloud model
D. Infrastructure as a Service (IaaS) model
Answer: B
Explanation: The consumption-based (or pay-as-you-go) pricing model allows startups to pay only for the resources they actually use, avoiding upfront capital costs. CapEx is the traditional upfront cost model, and while IaaS can facilitate this scaling, the pricing model is the key differentiator here.
Question 3
A company requires a physical server to be dedicated solely to their workloads for compliance reasons. They must manage the operating system and applications, but they do not want to manage the physical hardware. Which Azure service should they use?
A. Azure Virtual Machine
B. Azure Dedicated Host
C. Azure Container Instances
D. Azure App Service
Answer: B
Explanation: Azure Dedicated Host provides a physical server dedicated to your organization, ensuring compliance and isolation. While an Azure VM runs on shared hardware, and App Service is a PaaS offering, Dedicated Host is the only option that provides a dedicated physical server while you manage the OS and apps.
Question 4
A development team wants to create a lightweight, isolated environment for testing a microservice without managing the underlying virtual machines or operating system. Which Azure compute service is the most cost-effective and efficient choice?
A. Azure Functions
B. Azure Virtual Machine Scale Sets We recommend pairing this with AZ-900 Study Plan: Pass in Under 30 Days Without Cramming.
C. Azure Container Instances
D. Azure Logic Apps
Answer: C
Explanation: Azure Container Instances (ACI) allows you to run containers without provisioning or managing the underlying VMs or OS, making it perfect for simple testing scenarios. Azure Functions is serverless code, not containers, and Virtual Machine Scale Sets require VM management. Logic Apps are for workflow integration, not running microservices.
Question 5
A company has a critical application that must remain available even if an entire Azure data center fails. They plan to deploy the application to two different Azure regions. Which term describes this architectural approach?
A. Fault Tolerance
B. Disaster Recovery
C. High Availability
D. Scalability
Answer: B
Explanation: Disaster Recovery (DR) focuses on maintaining functionality and recovering data after a major, regional-level failure. High Availability is typically for localized failures (e.g., a server or rack), while Fault Tolerance implies zero downtime for component failures. Scalability is about handling load, not regional outages.
Question 6
An organization wants to ensure that its administrators have the exact permissions needed to manage Azure resources, following the principle of least privilege. They need to grant one user the ability to only start and stop a specific virtual machine. What should they use?
A. Azure Policy
B. Azure Role-Based Access Control (RBAC)
C. Azure Blueprints
D. Azure Management Groups
Answer: B
Explanation: Azure RBAC provides fine-grained access management, allowing you to assign specific roles (like Virtual Machine Contributor) to a user for a specific resource scope. Azure Policy enforces organizational standards for resource configurations, Blueprints package policies and roles for deployment, and Management Groups organize subscriptions.
Question 7
A company is subject to strict data residency laws that require customer data to remain within a specific geographic boundary. They also need a guarantee that data is replicated for resilience within that boundary. Which Azure feature should they rely on?
A. Azure Availability Zones
B. Azure Region Pair
C. Azure Sovereign Region
D. Azure Resource Group
Answer: C For background on this area, read GCP Professional Cloud Architect Difficulty: Why Case Studies Are the Real Boss.
Explanation: Azure Sovereign Regions (like Azure Government or Azure Germany) are isolated instances of Azure designed to meet specific compliance and data residency requirements. Availability Zones are within a single region, and a Region Pair involves two regions, which would violate the "single boundary" requirement. Resource Groups are logical containers, not geographic boundaries.
Question 8
A company wants to consolidate billing and apply a company-wide policy that restricts the deployment of virtual machines to only certain approved regions. They plan to apply this policy at the highest level of the management hierarchy. Where should they apply the policy?
A. Azure Subscription
B. Azure Management Group
C. Azure Resource Group
D. Azure Policy Initiative
Answer: B
Explanation: Management Groups are containers that help you manage access, policies, and compliance across multiple Azure subscriptions. Applying a policy at the Management Group level ensures it is inherited by all subscriptions and resource groups beneath it. Applying it to a single subscription or resource group would not enforce it company-wide. An Initiative is a collection of policies, but the scope is what matters here.
Question 9
A company wants to use Azure Active Directory (Azure AD) to authenticate users for both their on-premises applications and their cloud applications. They want to sync their on-premises user accounts and passwords to Azure AD. Which Azure service should they implement?
A. Azure AD Connect
B. Azure AD B2B
C. Azure AD Domain Services
D. Azure Information Protection
Answer: A
Explanation: Azure AD Connect is the tool that synchronizes on-premises identities to Azure AD, enabling a single identity for both environments. Azure AD B2B is for external partners, Azure AD DS provides managed domain services (like LDAP), and Azure Information Protection is for data classification and protection.
Question 10
A company is using Azure Cost Management to analyze their spending. They notice a significant portion of their budget is being consumed by idle virtual machines. Which Azure feature can they use to automatically shut down and start VMs on a defined schedule to reduce these costs?
A. Azure Advisor
B. Azure Automation Runbooks
C. Azure Reserved Instances
D. Azure Spot Instances
Answer: B
Explanation: Azure Automation Runbooks allow you to create scripts that can be scheduled to perform actions like starting or stopping VMs, directly addressing the idle resource problem. Azure Advisor provides recommendations but doesn't take action automatically. Reserved Instances are for upfront cost savings, and Spot Instances are for interruptible workloads, not for managing idle VMs.
Remember, the AZ-900 is a foundational exam. Focus on understanding the why behind each service and concept, rather than memorizing every feature. You've got this! Good luck with your preparation.
If you want a week-by-week schedule that fits your available time, use the free AZ-900 study plan to structure your review.
Find out which topics need more attention by working through timed Microsoft Azure Fundamentals (AZ-900) practice exams in exam mode.
For a quick check of your weak topics before starting a timed exam, use the free AZ-900 readiness check.