AZ-900 Practice Test 13 — 15 Questions

Question 1

A company plans to migrate its on-premises SQL Server database to Azure. The database uses many features including SQL Server Agent jobs, cross-database queries, and CLR integration. The company wants a fully managed PaaS service that minimizes application code changes and supports native virtual network (VNet) integration without requiring a private endpoint. Which Azure service should the company use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Azure SQL Managed Instance. Azure SQL Managed Instance is the correct choice because it provides near 100% compatibility with on-premises SQL Server, including SQL Server Agent jobs, cross-database queries, and CLR integration, while being a fully managed PaaS service. It supports native VNet integration without requiring a private endpoint, allowing the database to be placed directly into a customer's virtual network for secure, isolated connectivity.

Answer

Azure SQL Database

Answer

SQL Server on Azure Virtual Machine

Answer

Azure Cosmos DB

Question 2

Which Azure storage tier should be used for data that is rarely accessed, can tolerate several hours of retrieval latency, and needs to be stored at the lowest cost?

Accepted Answer

Archive tier. The Archive tier is designed for data that is rarely accessed and can tolerate several hours of retrieval latency, offering the lowest storage cost among Azure Blob Storage tiers. It requires rehydration to a Hot or Cool tier before reading, which typically takes up to 15 hours, making it ideal for long-term backup, archival, and compliance data.

Answer

Hot tier

Answer

Cool tier

Answer

Premium tier

Question 3

Which Azure database service is specifically optimized for running open-source MariaDB workloads as a fully managed service?

Accepted Answer

Azure Database for MariaDB. Azure Database for MariaDB is the correct answer because it is a fully managed relational database service specifically built for the MariaDB community edition, offering high availability, automated backups, and scaling. It uses the same wire protocol as MySQL but is tailored to MariaDB's specific engine features and versioning, such as support for the Aria storage engine and Galera cluster replication.

Answer

Azure Database for MySQL

Answer

Azure SQL Database

Answer

Azure Cosmos DB

Question 4

A company is evaluating moving its on-premises applications to the cloud. The IT manager wants to avoid upfront hardware costs and instead pay for resources on a monthly basis based on usage. Which cloud characteristic enables this financial model?

Accepted Answer

Consumption-based pricing. Consumption-based pricing is the cloud characteristic that allows organizations to pay only for the resources they actually use, such as compute hours, storage GBs, or data transfer, without any upfront hardware costs. This model shifts IT spending from a capital expenditure (CapEx) to an operational expenditure (OpEx), aligning costs directly with usage. The IT manager's requirement to avoid upfront costs and pay monthly based on usage is the exact definition of consumption-based pricing.

Answer

Measured service

Answer

Rapid elasticity

Answer

Resource pooling

Question 5

A company wants to run a containerized application in Azure without managing the underlying virtual machines. Which Azure service should they use?

Accepted Answer

B) Azure Kubernetes Service (AKS). Azure Kubernetes Service (AKS) is a managed container orchestration service that abstracts the underlying virtual machines, allowing you to deploy, scale, and manage containerized applications without having to manage the host infrastructure. AKS handles provisioning, upgrading, and patching of the cluster nodes, so you only interact with the control plane and your workloads.

Answer

A) Azure Virtual Machines

Answer

C) Azure App Service

Answer

D) Azure Functions

Question 6

Which Azure pricing model allows customers to pay less per hour by committing to a 1-year or 3-year term for Azure services like VMs and SQL Database?

Accepted Answer

Azure Reservations. Azure Reservations (also known as Reserved Instances) allow customers to commit to a 1-year or 3-year term for specific Azure services, such as VMs and SQL Database, in exchange for a significant discount (up to 72%) on the pay-as-you-go hourly rate. This pricing model is ideal for workloads with predictable usage, as the upfront commitment lowers the per-hour cost compared to on-demand pricing.

Answer

Pay-as-you-go

Answer

Azure Spot pricing

Answer

Azure Dev/Test pricing

Question 7

Which Azure service allows customers to extend Azure management and governance to non-Azure resources, including on-premises servers and other cloud providers?

Accepted Answer

Azure Arc. Azure Arc is the correct answer because it is specifically designed to extend Azure's management plane and governance policies (such as Azure Policy and Azure RBAC) to resources outside of Azure, including on-premises servers, Kubernetes clusters, and other cloud providers like AWS or GCP. It does this by installing the Azure Connected Machine agent on non-Azure machines, which registers them as Azure resources and enables consistent management through the Azure portal, CLI, and APIs.

Answer

Azure Stack Hub

Answer

Azure ExpressRoute

Answer

Azure VPN Gateway

Question 8

An administrator needs to grant a user the ability to manage virtual machines in a specific resource group but NOT allow them to modify networking or storage. Which approach is BEST?

Accepted Answer

Assign Virtual Machine Contributor role scoped to the resource group. The Virtual Machine Contributor role provides exactly the permissions needed to manage virtual machines, including starting, stopping, and restarting them, but explicitly excludes access to the virtual network and storage account resources. By scoping this role to the specific resource group, the administrator ensures the user cannot modify networking or storage resources outside of the VM's operational scope. This is the most precise and secure approach because it follows the principle of least privilege.

Answer

Assign Owner role at the subscription level

Answer

Assign Contributor role at the resource group level

Answer

Use Azure Policy to restrict the user's actions

Question 9

Which Azure feature provides an overview of the overall security posture across your Azure subscriptions with a secure score?

Accepted Answer

Microsoft Defender for Cloud Secure Score. Microsoft Defender for Cloud (formerly Azure Security Center) provides a unified security management dashboard that includes a Secure Score. This score aggregates security recommendations across all your Azure subscriptions and calculates a percentage based on how many of those recommendations you have implemented, giving you a quantifiable measure of your overall security posture.

Answer

Azure Advisor security score

Answer

Azure Policy compliance score

Answer

Azure Sentinel analytics score

Question 10

A company has resources across multiple Azure subscriptions and needs a single dashboard to view cost data across all of them. Which Azure service provides this?

Accepted Answer

Azure Cost Management + Billing. Azure Cost Management + Billing is the correct service because it provides a unified dashboard that aggregates cost data across multiple Azure subscriptions, enabling centralized monitoring and analysis of spending. It supports cross-subscription views, budget tracking, and cost allocation, which directly addresses the requirement for a single dashboard to view cost data across all subscriptions.

Answer

Azure Monitor

Answer

Azure Advisor

Answer

Azure Policy

Question 11

Which Azure IoT service provides end-to-end IoT solutions with pre-built industry templates and no-code/low-code configuration?

Accepted Answer

Azure IoT Central. Azure IoT Central is correct because it is a fully managed IoT application platform that provides end-to-end IoT solutions with pre-built industry templates (e.g., for retail, healthcare, energy) and a no-code/low-code configuration interface. Unlike Azure IoT Hub, which is a lower-level messaging service, IoT Central abstracts the underlying infrastructure and offers built-in dashboards, device management, and analytics, enabling rapid deployment without custom development.

Answer

Azure IoT Hub

Answer

Azure Digital Twins

Answer

Azure Sphere

Question 12

Which type of cloud deployment model uses a combination of on-premises infrastructure and public cloud services?

Accepted Answer

Hybrid cloud. A hybrid cloud deployment model explicitly combines on-premises infrastructure (private cloud or local datacenter) with public cloud services, allowing data and applications to be shared between them. This enables organizations to keep sensitive workloads on-premises while leveraging the scalability of public cloud for burst capacity or less critical workloads, often connected via VPN or dedicated circuits like Azure ExpressRoute.

Answer

Public cloud

Answer

Private cloud

Answer

Multi-cloud

Question 13

Which Azure service helps migrate on-premises VMware, Hyper-V VMs, and physical servers to Azure?

Accepted Answer

Azure Migrate. Azure Migrate is the correct service because it provides a unified platform for assessing and migrating on-premises workloads to Azure, including VMware VMs, Hyper-V VMs, and physical servers. It integrates with Azure Site Recovery for the actual replication and with Azure Database Migration Service for database migrations, but the core discovery, assessment, and migration orchestration for these server types is the primary function of Azure Migrate.

Answer

Azure Site Recovery

Answer

Azure Data Box

Answer

Azure Database Migration Service

Question 14

Which Azure governance feature enables organizations to enforce that all virtual machines be tagged with a specific 'Owner' tag before deployment?

Accepted Answer

Azure Policy with 'Require tag' in deny mode. Azure Policy with the 'Require tag' effect in deny mode is the correct choice because it can enforce tagging rules at resource creation time by evaluating the request against the policy definition and denying any deployment that does not include the specified 'Owner' tag. This is a native governance feature designed to ensure compliance before resources are provisioned, unlike RBAC or templates which do not enforce tag values.

Answer

Azure RBAC with custom permissions

Answer

Azure Resource Manager template validation

Answer

Azure DevOps deployment gates

Question 15

Which Azure monitoring capability sends automated alerts when resource metrics exceed defined thresholds?

Accepted Answer

Azure Monitor Alerts. Azure Monitor Alerts is the correct capability because it proactively notifies you when metrics (e.g., CPU percentage, disk I/O) from Azure resources cross user-defined thresholds. It works by evaluating log search queries or metric signals at a specified frequency and triggering actions (email, SMS, webhook) when conditions are met. This is the core monitoring and alerting service in Azure, not a recommendation or health dashboard.

Answer

Azure Advisor

Answer

Azure Service Health

Answer

Azure Policy