AZ-900 · Sample questions

AZ-900 sample questions with answers and explanations

10 real questions from the CertifyDeck AZ-900 bank, spread across the domains of the official Microsoft Certified: Azure Fundamentals skills outline, with the correct answer and a full explanation of why the other options are wrong. They are original questions written from the public syllabus, not exam dumps, and they are the same style you will find in the practice tests and mock exams.

1. Question 1Domain: Describe Azure management and governanceEasy

   An administrator is on a shared computer with no tools installed and needs to run Azure commands directly from the browser. Which service provides this?

   • A.Azure Cloud Shell
   • B.Azure Policy
   • C.Azure Service Health
   • D.Azure Advisor
   Show answer and explanation

   Correct answer: A. Azure Cloud Shell

   Explanation

   Azure Cloud Shell is an interactive, authenticated, browser-accessible terminal for managing Azure resources. Azure Advisor gives recommendations, Azure Policy evaluates compliance rules and Azure Service Health reports on service health; none of them is a terminal.

   Official references

   • What is Azure Cloud Shell?
2. Question 2Domain: Describe Azure management and governanceEasy

   An administrator wants personalized, actionable best-practice recommendations to improve the cost, performance, reliability and security of their Azure resources. Which service provides them?

   • A.Azure Arc
   • B.Azure Service Health
   • C.Azure Advisor
   • D.Application Insights
   Show answer and explanation

   Correct answer: C. Azure Advisor

   Explanation

   Azure Advisor is a digital cloud assistant that analyzes resource configuration and usage telemetry and recommends ways to improve cost effectiveness, performance, reliability and security. Service Health reports Azure service events, Application Insights monitors applications, and Arc extends management to non-Azure resources.

   Official references

   • Introduction to Azure Advisor
3. Question 3Domain: Describe Azure management and governanceMedium

   An analyst must write and run queries, using Kusto Query Language, against the log data that Azure Monitor has collected. Which tool in the Azure portal is meant for this?

   • A.Azure Advisor
   • B.Azure Cloud Shell
   • C.Log Analytics
   • D.The Azure status page
   Show answer and explanation

   Correct answer: C. Log Analytics

   Explanation

   Log Analytics is the tool in the Azure portal for running and editing log queries against data in Azure Monitor Logs, and its KQL mode offers the full power of Kusto Query Language. Advisor does not query logs, the Azure status page reports service health, and Cloud Shell is a command-line terminal.

   Official references

   • Overview of Log Analytics in Azure Monitor
   • Azure Monitor overview
4. Question 4Domain: Describe Azure architecture and servicesEasy

   A company wants Azure to produce a separate invoice and billing report for its development workloads and its production workloads. What should it create?

   • A.Two resource groups in a single subscription
   • B.Two regions
   • C.Two subscriptions
   • D.Two management groups
   Show answer and explanation

   Correct answer: C. Two subscriptions

   Explanation

   A subscription is a billing boundary: Azure generates separate billing reports and invoices for each subscription. Resource groups and management groups organize resources and subscriptions but do not generate separate invoices, and regions are locations rather than billing units.

   Official references

   • Describe Azure management infrastructure
5. Question 5Domain: Describe Azure architecture and servicesMedium

   An architect reads that an Azure region offers availability zones. What is an availability zone?

   • A.One or more physically separate datacenters in a region with independent power, cooling and networking
   • B.A single rack of servers that shares one power supply and cooling system inside a datacenter
   • C.A group of regions operated for government agencies under separate legal and compliance controls
   • D.A pair of regions in the same geography that back each other up and are updated in sequence
   Show answer and explanation

   Correct answer: A. One or more physically separate datacenters in a region with independent power, cooling and networking

   Explanation

   An availability zone is made up of one or more physically separate datacenters in a region, each zone with independent power, cooling, and networking, so it acts as an isolation boundary. The backup pairing of two regions is a region pair, and the government-oriented instances are sovereign regions. A rack is part of a datacenter, not a zone.

   Official references

   • Describe Azure physical infrastructure
   • What are Azure Availability Zones?
6. Question 6Domain: Describe Azure architecture and servicesEasy

   A research institute holds tens of terabytes of survey imagery at a remote field station with a very slow internet link. It wants the data in Azure Storage without depending on that link. What should it use?

   • A.Azure File Sync
   • B.AzCopy over the existing connection
   • C.Azure Storage Explorer
   • D.Azure Data Box
   Show answer and explanation

   Correct answer: D. Azure Data Box

   Explanation

   Azure Data Box is a physical migration service: Microsoft ships a rugged device, the institute copies the data locally and returns it, and the data is uploaded in an Azure datacenter. It is intended for very large data sets when bandwidth is limited. AzCopy and Storage Explorer (which uses AzCopy) transfer over the network, and Azure File Sync also syncs over the network, so all of them depend on the slow link.

   Official references

   • Identify Azure data migration options
   • Microsoft Azure Data Box overview
7. Question 7Domain: Describe cloud conceptsEasy

   A company wants the greatest amount of control over its cloud resources, including the operating system and the network configuration. Which cloud service type matches?

   • A.Platform as a service (PaaS)
   • B.A sovereign region
   • C.Infrastructure as a service (IaaS)
   • D.Software as a service (SaaS)
   Show answer and explanation

   Correct answer: C. Infrastructure as a service (IaaS)

   Explanation

   IaaS is the most flexible category and provides the maximum control over cloud resources. PaaS hands the operating system to the provider, SaaS provides a finished application, and a sovereign region is a kind of Azure region rather than a service type.

   Official references

   • Describe Infrastructure as a Service
8. Question 8Domain: Describe cloud conceptsEasy

   A small accounting office with no IT staff wants business email and messaging that work right away, simply by renting a fully developed application. Which service type is this?

   • A.Software as a service
   • B.Infrastructure as a service
   • C.Platform as a service
   • D.A sovereign cloud
   Show answer and explanation

   Correct answer: A. Software as a service

   Explanation

   With SaaS you rent or use a fully developed application, and email and messaging are common examples. IaaS and PaaS would require the office to build or deploy its own solution, and a sovereign cloud is not a service type.

   Official references

   • Describe Software as a Service
9. Question 9Domain: Describe cloud conceptsMedium

   Which statement describes a trade-off of choosing software as a service over the other service types?

   • A.It is the most flexible, but it needs the most technical expertise to run and maintain
   • B.It lets customers install their own operating system, but needs no technical expertise at all
   • C.It has the highest operational overhead for the customer, who must manage everything
   • D.It can be the least flexible, but it is the easiest to start and needs the least expertise
   Show answer and explanation

   Correct answer: D. It can be the least flexible, but it is the easiest to start and needs the least expertise

   Explanation

   SaaS may be the least flexible model, yet it is the easiest to get up and running and requires the least technical knowledge, with the lowest operational overhead for customers. The tempting alternative describes IaaS, which is the most flexible and demands the most expertise.

   Official references

   • Describe Software as a Service
10. Question 10Domain: Describe cloud conceptsMedium

    An internal audit team at an insurance firm wants to learn which of its cloud resources have drifted away from the company baseline and to get suggestions on how to fix them. Which cloud benefit does this describe?

    • A.Geo-redundant replication of data to a second region to survive a regional outage
    • B.Elastic scaling that matches capacity to demand as workload levels rise and fall
    • C.Consumption-based billing that avoids upfront hardware purchases and charges only for use
    • D.Cloud-based auditing that flags non-compliant resources and provides mitigation strategies
    Show answer and explanation

    Correct answer: D. Cloud-based auditing that flags non-compliant resources and provides mitigation strategies

    Explanation

    Cloud-based auditing flags resources that are out of compliance with a baseline and provides mitigation strategies. Scaling, geo-redundant replication and consumption-based billing are real cloud benefits, but none of them detects non-compliant resources.

    Official references

    • Describe the benefits of security and governance in the cloud