AZ-900 Practice Test 4 — 10 Questions

Question 1

A global company wants to organize its Azure resources by department and project. They need to enforce cost allocation and apply governance policies consistently across all subscriptions. Which two Azure features should they use together? (Select two.)

Accepted Answer

Management groups. Management groups (B) are correct because they provide a hierarchical structure above subscriptions, enabling consistent governance and policy assignment across multiple subscriptions. Tags (C) are correct because they allow you to attach metadata (e.g., department and project) to resources for cost allocation and organization. Together, management groups enforce policies at scale, while tags enable granular cost tracking and reporting.

Answer

Resource groups

Answer

Azure Policies

Question 2

A multinational e-commerce company runs its customer-facing web application on Azure virtual machines deployed in two Azure regions: East US and West Europe. The company wants to automatically route user traffic to the nearest regional deployment based on the user's geographic location. Additionally, if one region becomes unavailable, all traffic should automatically be redirected to the remaining healthy region. The company wants a solution that works at the DNS level and does not require terminating HTTPS traffic at the routing layer. Which Azure service should they use?

Accepted Answer

Azure Traffic Manager. Azure Traffic Manager is a DNS-based traffic load balancer that routes incoming DNS requests to the nearest available endpoint based on geographic location (using the Performance traffic-routing method) and automatically fails over to the next healthy region when a region becomes unavailable. It operates at the DNS level, so it does not terminate HTTPS traffic, meeting the requirement to avoid SSL/TLS termination at the routing layer.

Answer

Azure Load Balancer

Answer

Azure Application Gateway

Answer

Azure Front Door

Question 3

Which Azure service provides a way to deploy and manage Azure services at the edge, close to IoT devices and end users?

Accepted Answer

Azure IoT Edge. Azure IoT Edge is correct because it extends cloud intelligence to edge devices, allowing you to deploy and manage Azure services (like Azure Functions, Stream Analytics, and custom modules) directly on IoT devices or gateways. This enables local data processing and decision-making close to IoT sensors and end users, reducing latency and bandwidth usage.

Answer

Azure IoT Hub

Answer

Azure Stack Edge

Answer

Azure Arc for IoT

Question 4

A hospital is subject to strict data residency laws that require patient data to remain within the country's borders. They are considering using a public cloud provider. Which cloud deployment model would best meet this compliance requirement?

Accepted Answer

Private cloud. A private cloud is dedicated to a single organization, allowing the hospital to deploy and manage infrastructure within its own data center or a colocation facility located within the country's borders. This ensures full control over data storage and processing, directly satisfying data residency laws that prohibit patient data from leaving the country. In contrast, public cloud providers may have data centers in multiple regions, making it harder to guarantee data never crosses borders.

Answer

Public cloud

Answer

Hybrid cloud

Answer

Community cloud

Question 5

A multinational company has 10 Azure subscriptions, each managed by a different department. The central governance team wants to deploy a standardized environment that includes a specific network topology (virtual network, subnets, and network security groups), a set of Azure Policy definitions to enforce tagging and encryption, and a role assignment granting the 'Reader' role to a central security team in every subscription. The team must be able to update this standard definition in one place, and any changes should automatically apply to all existing deployments that were created from the definition. Which Azure service should they use?

Accepted Answer

Azure Blueprints. Azure Blueprints is the correct choice because it enables the central governance team to define a repeatable, versioned environment that includes network topology, Azure Policy definitions, and role assignments. Blueprints support versioning and automatic updates: when a blueprint is updated and published, existing blueprint assignments can be upgraded to apply the new definitions to all deployed resources, ensuring consistency across all 10 subscriptions.

Answer

Azure Policy

Answer

Azure Resource Manager (ARM) templates

Answer

Azure Management Groups

Question 6

A retail company has 50 on-premises servers in multiple branch offices that run legacy applications that cannot be migrated to Azure. The company wants to govern these servers using the same Azure Policy and tagging standards that they use for their Azure virtual machines. They also want to view these servers alongside Azure resources in the Azure portal. Which Azure service should they deploy to extend Azure management capabilities to these on-premises servers?

Accepted Answer

Azure Arc. Azure Arc is the correct service because it extends Azure Resource Manager (ARM) control plane to on-premises servers, allowing them to be projected as Azure resources. This enables you to apply Azure Policy and tagging standards to these servers and view them alongside Azure VMs in the Azure portal, even though the legacy applications cannot be migrated.

Answer

Azure Policy

Answer

Azure Management Groups

Answer

Azure Resource Manager

Question 7

A multinational company has multiple Azure subscriptions managed by different teams. The compliance team requires that all new virtual machines deployed in any subscription must have a specific tag (e.g., 'CostCenter') and must be deployed in approved regions only. They also want to automatically enforce these requirements without manual intervention. Which Azure service should the compliance team use to achieve this?

Accepted Answer

Azure Policy. Azure Policy is correct because it enables the compliance team to create, assign, and manage policies that enforce rules (like requiring a 'CostCenter' tag and restricting VM deployment to approved regions) across all subscriptions. Policies are evaluated during resource creation and can automatically deny or audit non-compliant resources, ensuring enforcement without manual intervention.

Answer

Azure Role-Based Access Control (RBAC)

Answer

Azure Blueprints

Answer

Azure Management Groups

Question 8

A company wants to increase the number of virtual machines it uses during peak hours and decrease them during off-peak hours without manual intervention. Which characteristic of cloud computing does this represent?

Accepted Answer

Elasticity. Elasticity is the cloud characteristic that allows resources to automatically scale out (increase) during peak demand and scale in (decrease) during off-peak hours without manual intervention. This matches the company's requirement for dynamic, automatic adjustment of virtual machine counts based on workload changes.

Answer

High Availability

Answer

Scalability

Answer

Load Balancing

Question 9

A retail company is planning to migrate its e-commerce application to Azure. The application will run on an Azure virtual machine that the company will manage. The IT manager wants to ensure that security patches are applied promptly. According to the shared responsibility model, who is responsible for applying security updates to the guest operating system of the Azure virtual machine?

Accepted Answer

The customer, because the guest operating system is under the customer's control.. In the shared responsibility model, the customer is responsible for securing and patching the guest operating system (OS) of an Azure virtual machine because the customer retains control over the OS, applications, and data. Microsoft manages the underlying hypervisor and physical infrastructure but does not have access to the guest OS. Therefore, the customer must apply security updates to the guest OS.

Answer

Microsoft, because they manage the hypervisor under the virtual machine.

Answer

Both Microsoft and the customer share responsibility equally for patching the guest operating system.

Answer

The customer, but only if they have configured Azure Policy to enforce patch compliance.

Question 10

A multinational company is expanding its online retail business to new countries. The company needs to deploy its web application in Azure regions that are geographically close to customers in Europe, Asia, and North America to minimize latency. The IT team can deploy identical application instances in multiple regions within minutes using Azure Resource Manager templates. Which benefit of cloud computing does this scenario best illustrate?

Accepted Answer

Global reach. Option C is correct because the scenario emphasizes deploying identical application instances in multiple Azure regions across Europe, Asia, and North America to serve customers geographically close to each region, which directly illustrates the global reach benefit of cloud computing. Azure Resource Manager (ARM) templates enable rapid, consistent deployment to any region, allowing the company to expand its global footprint and reduce latency by leveraging Azure's distributed infrastructure.

Answer

High availability

Answer

Elasticity

Answer

Disaster recovery