Get Your CertAZ-900PlayCompete
‹ AZ-900 tests

Microsoft Azure Fundamentals (AZ-900) practice questions

100 questions in 10 tests. Open one to answer it on its own, or take a whole test.

Test 1

Take Test 1 ›
  1. Under the Microsoft cloud shared responsibility model, which responsibility does the customer always retain, no matter whether the workload runs on IaaS, PaaS, or SaaS? · Cloud Concepts
  2. A finance director is reviewing a proposal to move the company's servers from its own datacenter into Azure. She wants to understand how the consumption-based model changes the… · Cloud Concepts
  3. A development team needs to host a custom ASP.NET web application in Azure. They want to keep full control of their application code and its scaling settings, but they do not… · Cloud Concepts
  4. Which statement accurately describes an Azure availability zone? · Azure Architecture
  5. An online store runs its web tier on identical Azure virtual machines. Traffic triples every weekday evening and falls away overnight, and the operations team is tired of… · Azure Architecture
  6. A healthcare provider stores patient records in an Azure Storage account. A regulator requires that every copy of the data stay inside the primary Azure region, and an internal… · Azure Architecture
  7. Security staff at a law firm want multifactor authentication to be prompted only when a user signs in from outside the firm's registered office IP address ranges. Sign-ins from… · Identity & Security
  8. Before any resources are deployed, an architect must give the budget owner an estimated monthly bill for a proposed design of four virtual machines, a managed disk set, and a… · Azure Management & Governance
  9. A production resource group was deleted by mistake last quarter. Management now wants it to be impossible for anyone (including users holding the Owner role on the subscription)… · Azure Management & Governance
  10. An operations team keeps hearing about Azure platform incidents from users before they hear about them from Microsoft. They want alerts that cover only the Azure services and… · Azure Management & Governance

Test 2

Take Test 2 ›
  1. A government agency must run its analytics platform on hardware dedicated entirely to itself, with no other organization's data on the same servers and its own IT team keeping… · Cloud Concepts
  2. A team has a short piece of image-resizing code that should run every time a file is uploaded to Azure Blob Storage. They do not want to manage servers, and they want to be… · Cloud Concepts
  3. A nightly reporting job runs on one virtual machine and finishes too slowly. Because the job is single-threaded, running extra copies of it would not help, so the engineers move… · Cloud Concepts
  4. An architect is choosing a secondary Azure region and asks what a region pair actually buys compared with picking any other region. Which statement is correct? · Azure Architecture
  5. Which statement about Azure resource groups is correct? · Azure Architecture
  6. A team has packaged a microservices application into containers. They need Azure to schedule those containers across a pool of nodes, restart any container that crashes, and… · Azure Architecture
  7. A company wants one cloud identity per employee that signs them in to Microsoft 365, to the Azure portal, and to the SaaS applications the business subscribes to. Which Azure… · Identity & Security
  8. An administrator applies the tag CostCenter = Finance to a resource group holding ten virtual machines, then filters Microsoft Cost Management by that tag and sees almost no… · Azure Management & Governance
  9. To satisfy a data residency rule, a company must ensure that nobody can create new resources outside its two approved Azure regions. Existing resources must be left in place, and… · Azure Management & Governance
  10. Azure Advisor analyses your deployed resources and sorts its personalized recommendations into five categories. Which list names them correctly? · Azure Management & Governance

Test 3

Take Test 3 ›
  1. A hospital is legally required to keep patient records on servers it owns and controls. It also wants to host its public appointment-booking site in Azure and to add temporary… · Cloud Concepts
  2. An operations lead sums up what her team gains from Azure: resources that scale themselves as demand changes, deployments driven from preconfigured templates instead of manual… · Cloud Concepts
  3. A company runs the same 40 virtual machines around the clock and is confident it will keep doing so for the next three years. It wants the lowest price for that steady base load… · Cloud Concepts
  4. A new team member asks what an Azure region actually is. Which description is correct? · Azure Architecture
  5. An enterprise holds 60 Azure subscriptions in one Microsoft Entra tenant. It wants a single policy limiting deployment regions, and a single role assignment for its security… · Azure Architecture
  6. A team is moving three servers into Azure virtual machines. The VMs must reach each other privately, reach the internet outbound, and eventually connect back to the on-premises… · Azure Architecture
  7. A firm must retain seven years of audit files in Blob Storage at the lowest possible storage cost. The files are almost never read, but a regulator can demand one at any time and… · Azure Architecture
  8. An administrator is on a borrowed laptop with no Azure tooling installed and needs to run a few Azure CLI commands against her subscription right now. She is not allowed to… · Azure Management & Governance
  9. An operations team wants one service that collects metrics and logs from every Azure resource they run, lets them query those logs, and notifies them when a threshold is crossed… · Azure Management & Governance
  10. A company uploads 5 TB of archive data from an on-premises server into Azure Blob Storage, and months later restores 200 GB of it back to that server. Which of those transfers… · Azure Management & Governance

Test 4

Take Test 4 ›
  1. A company wants to move 200 existing on-premises servers into Azure with as few changes as possible, keeping the same operating systems, installed agents, and configuration… · Cloud Concepts
  2. An architect explains that because Azure spreads resources across regions all over the world, an application can be designed so that a catastrophic event in one region does not… · Cloud Concepts
  3. A company runs two databases: one is a SQL Server instance it installed on an Azure virtual machine, and the other is Azure SQL Database, a managed PaaS service. Who is… · Cloud Concepts
  4. A platform team is designing how to organize a large Azure estate. Why would they put a specialized high-performance computing workload into a subscription of its own rather than… · Azure Architecture
  5. A consultancy is onboarding 200 short-term contractors who will use their own laptops. Security requires the corporate Windows desktop and its line-of-business applications to… · Azure Architecture
  6. An application running on several Azure virtual machines, plus a file server still in the office, all need to read and write the same folder of documents using a standard Windows… · Azure Architecture
  7. A user is assigned the Contributor role at the subscription scope, and separately assigned the Reader role on one resource group inside that subscription. What can the user do… · Identity & Security
  8. A team needs to recreate an identical development environment on demand. Resources must be built in the right dependency order, the definition must live in source control… · Azure Management & Governance
  9. A finance team creates a $10,000 monthly budget on a subscription in Microsoft Cost Management, with an alert threshold at 90%. In the third week of the month, actual spending… · Azure Management & Governance
  10. A compliance officer must discover where sensitive customer data sits across the organization's whole data estate, classify it, and then apply retention and data-loss-prevention… · Azure Management & Governance

Test 5

Take Test 5 ›
  1. A 30-person accounting firm wants email, document collaboration, and expense tracking without owning the software or any servers, and accepts that it cannot change how the… · Cloud Concepts
  2. An operations manager asks what "high availability" means for a workload in Azure, and how a concrete number gets attached to the promise. Which answer is correct? · Cloud Concepts
  3. A regulated company is nervous about moving workloads to the cloud. Which statement describes what cloud governance and security features actually give it, without overstating… · Cloud Concepts
  4. Two virtual machines run an internal web application in an Azure region that does not offer availability zones. The team wants Azure to place the VMs so that neither a single… · Azure Architecture
  5. Two teams each run an Azure virtual network in the same region. Their virtual machines now need to reach each other with low latency, over private addresses, without traffic… · Azure Architecture
  6. A media company must move an 80 TB on-premises archive into Azure Blob Storage. Its site internet link is slow enough that uploading the archive over the wire would take many… · Azure Architecture
  7. A security team is agreeing on what genuinely counts as multifactor authentication. Which of these sign-in combinations actually satisfies it? · Identity & Security
  8. A company runs Windows servers in its own datacenter and a Kubernetes cluster at a different cloud provider. It wants all of them to appear in the Azure portal, carry Azure tags… · Azure Management & Governance
  9. A development team needs to see, for their live web application, which requests are slowest, which are failing, and how calls out to a downstream database are performing. What… · Azure Management & Governance
  10. An engineer notices that anything she can do in the Azure portal she can also do from Azure PowerShell, the Azure CLI, and the REST API, with the same behaviour and the same… · Azure Management & Governance

Test 6

Take Test 6 ›
  1. After an acquisition, a company runs some workloads in Azure and inherits others already running with a different public cloud provider. It intends to keep both and manage… · Cloud Concepts
  2. An architect is asked to define cloud computing in one sentence for a board paper. Which definition is correct? · Cloud Concepts
  3. A CFO complains that her team can never predict next quarter's cloud bill. Which practice addresses cost predictability specifically? · Cloud Concepts
  4. A bank must connect its own datacenter to Azure with consistent latency and higher security than the public internet can offer. It accepts the lead time and the need to work with… · Azure Architecture
  5. An engineer creates a single Azure virtual machine in the portal and accepts the defaults. Besides the virtual machine itself, which set of supporting resources does Azure create? · Azure Architecture
  6. Virtual machines must reach one Azure Storage account so that: the traffic never crosses the public internet, the account is addressed by a private IP inside the virtual network… · Azure Architecture
  7. Employees sign in separately to eight different business applications, each with its own password, and the help desk is swamped with password resets. Which capability addresses… · Identity & Security
  8. An engineering manager wants to see which resource groups and which services drove last month's actual Azure charges, and how that compares with the month before. Which tool… · Azure Management & Governance
  9. A Linux-based team wants to script Azure administration from Bash, on their own laptops, and occasionally from a browser. Which statement about the Azure CLI is correct? · Azure Management & Governance
  10. A governance team maintains nine separate Azure Policy definitions that together implement one compliance standard. They are tired of making nine assignments at every scope, and… · Azure Management & Governance

Test 7

Take Test 7 ›
  1. A startup's finance lead wants to avoid a large upfront hardware purchase, and prefers to deduct IT costs in the same tax year they are incurred rather than depreciating… · Cloud Concepts
  2. An IT team wants its Azure footprint to reduce environmental impact as well as cost. It automatically deallocates development virtual machines outside business hours, and it… · Cloud Concepts
  3. An online ticket-sales platform automatically adds virtual machine instances when traffic spikes during an on-sale event, then automatically removes those instances once the… · Cloud Concepts
  4. A subscription administrator assigns an Azure Policy definition that denies the creation of public IP addresses, scoping the assignment to the subscription itself. Six months… · Azure Architecture
  5. A team hosts its production web app on Azure App Service. Before every release, they want to deploy the new version to a separate, fully warmed-up copy of the app, then switch… · Azure Architecture
  6. A platform team creates a new AKS cluster on the default Free pricing tier for a low-traffic internal tool, accepting that the Kubernetes API server has no financially backed… · Azure Architecture
  7. A platform team has ARM templates that many application teams across the company should be able to deploy, without those teams being able to edit the templates themselves. The… · Azure Management & Governance
  8. A company has a single Microsoft Customer Agreement billing account. Finance wants one role that can view and manage invoices and payment methods for the entire organization… · Azure Management & Governance
  9. An application calls two Azure services back-to-back in the same request path: Service A publishes a 99.95% SLA, and Service B publishes a 99.99% SLA, and either one failing… · Azure Management & Governance
  10. A security architect must recommend the minimum Microsoft Entra ID license edition that supports both Conditional Access policies and risk-based Identity Protection sign-in… · Identity & Security

Test 8

Take Test 8 ›
  1. A company needs to give an employee at a partner organization access to one internal SharePoint site for a joint project. The partner has its own Microsoft Entra tenant, and the… · Identity & Security
  2. A payment API runs on several instances behind a load balancer. When one instance crashes, the load balancer stops sending it traffic within seconds, and the remaining instances… · Cloud Concepts
  3. A CIO wants a data-driven business case before committing to migrate 200 on-premises servers to Azure. The report needs to compare the current on-premises total cost of ownership… · Azure Management & Governance
  4. A finance team wants a small piece of code to run automatically at 2:00 AM every night to archive stale records. Nobody clicks a button to start it, no other system sends it a… · Azure Architecture
  5. A web app team needs incoming requests split by URL path (/images to one backend pool and /api to another), and they want TLS terminated at the load-balancing layer itself rather… · Azure Architecture
  6. A company runs identical copies of its website in three separate Azure regions. It wants client DNS lookups automatically directed to the closest healthy region, and traffic… · Azure Architecture
  7. Before signing a contract, a customer's compliance team asks for Microsoft's independently audited compliance reports and certificates, such as ISO/IEC 27001 and SOC 2, that… · Azure Management & Governance
  8. An administrator turns on Azure Monitor for a subscription and needs to know two things: where the collected log data actually lands, and what she uses to query it for a custom… · Azure Management & Governance
  9. A governance team needs two separate Azure Policy definitions. The first must block, outright, any new storage account that allows public blob access. The second must flag every… · Azure Management & Governance
  10. A security architect wants to remove passwords from the sign-in flow entirely for a group of users, rather than simply adding a second factor alongside the password they already… · Identity & Security

Test 9

Take Test 9 ›
  1. A three-person startup is building its first product. It owns no servers, wants to avoid any upfront hardware spend, and expects to scale from a handful of users to many… · Cloud Concepts
  2. A media company's users are spread across North America, Europe, and Asia. Users far from the company's single datacenter complain that pages load noticeably slower than for… · Cloud Concepts
  3. A business continuity plan states that, if a disaster takes down the primary system, the application must be back online within four hours, and no more than fifteen minutes of… · Cloud Concepts
  4. Six VMs run a critical workload in a region that supports three availability zones. To maximize resiliency, an engineer proposes putting all six VMs into one availability set and… · Azure Architecture
  5. Before committing to a migration project, a company wants to inventory its on-premises servers and SQL Server databases, check which ones are ready to move to Azure, and get a… · Azure Architecture
  6. A website with visitors worldwide serves large amounts of static content (images, video, and JavaScript bundles) from a single origin server. The team wants that content cached… · Azure Architecture
  7. A governance team has two separate requirements: first, only members of the Network Admins group should be allowed to create or modify virtual networks; second, every storage… · Azure Management & Governance
  8. Three departments share one Azure subscription. Finance wants a monthly report that breaks down Azure spend by department, so each one can be charged back for its own usage. What… · Azure Management & Governance
  9. A finance team wants raw daily usage and cost data delivered automatically into their own reporting pipeline, without anyone signing in to the Azure portal each day to download… · Azure Management & Governance
  10. A developer's application currently has its database connection string, including the password, written directly into the source code. A security review flags this and asks for… · Identity & Security

Test 10

Take Test 10 ›
  1. A US state agency must host a workload in a cloud environment that uses physically isolated datacenters and networks located only in the US, with access to systems processing its… · Azure Architecture
  2. A hospital network must, by regulation, keep patient imaging data on servers under its own physical control at all times. Its billing and website teams also need extra compute… · Cloud Concepts
  3. Before moving to Azure, a company's infrastructure team needed six to eight weeks to order, rack, and configure a new physical server before an application team could use it… · Cloud Concepts
  4. A subnet contains three virtual machines that host an internal API. The team must ensure that only inbound traffic on TCP port 443 from one partner's IP address range can reach… · Azure Architecture
  5. A team is building a new cloud-native application. It wants a relational database that Microsoft patches, backs up, and keeps highly available automatically, so nobody on the… · Azure Architecture
  6. A media company keeps video thumbnails that its website reads dozens of times every day. It wants the access tier with the lowest cost per read and write operation, and it… · Azure Architecture
  7. A subscription has an Azure Policy assignment requiring every storage account to disable public network access. One legacy storage account genuinely needs public access for a… · Azure Management & Governance
  8. An architect reviewing a workload's design wants to check it against Microsoft's framework for evaluating and improving cloud architectures. That framework organizes its guidance… · Azure Management & Governance
  9. A managed service provider (MSP) runs day-to-day operations for 30 client companies, each with its own separate Microsoft Entra tenant and Azure subscriptions. The MSP wants its… · Azure Management & Governance
  10. A subscription owner wants one place to see how securely her Azure resources are currently configured, get a single score summarizing that posture, and receive prioritized… · Identity & Security