AZ-900 Practice Test 14 — 15 Questions

Question 1

Which Azure service provides object storage with a hierarchical namespace optimized for big data and analytics workloads?

Accepted Answer

Azure Data Lake Storage Gen2. Azure Data Lake Storage Gen2 (ADLS Gen2) is the correct answer because it combines Blob Storage’s scalable object storage with a hierarchical namespace, enabling POSIX-like directory structures and fine-grained access control lists (ACLs). This architecture is specifically optimized for big data and analytics workloads, such as those running Apache Spark, Hive, or Azure Databricks, where efficient directory-level operations and high throughput are critical.

Answer

Azure Files

Answer

Azure Blob Storage (flat namespace)

Answer

Azure Queue Storage

Question 2

A company wants to move its on-premises applications to the cloud to benefit from the ability to quickly scale resources up or down based on demand. They want to pay only for what they use. This combination of characteristics is known as:

Accepted Answer

Elasticity. Elasticity is the correct term because it describes the ability to automatically scale computing resources up or down based on demand, combined with a pay-as-you-go pricing model. This allows the company to only pay for the resources they actually use, which is a core benefit of cloud computing.

Answer

High availability

Answer

Fault tolerance

Answer

Disaster recovery

Question 3

Which Azure feature provides audit logs that record every action taken on secrets in Azure Key Vault?

Accepted Answer

Azure Key Vault diagnostic logging. Azure Key Vault diagnostic logging captures detailed audit logs for every operation performed on secrets, keys, and certificates, including read, write, delete, and backup actions. These logs are sent to Azure Monitor Logs, Storage Accounts, or Event Hubs, enabling security auditing and compliance monitoring. This is the correct feature because it directly records all actions on secrets at the vault level.

Answer

Azure Policy

Answer

Azure Monitor Metrics

Answer

Azure RBAC access logs

Question 4

An administrator wants to ensure that all Azure resources in a subscription have a 'CostCenter' tag applied. Which Azure service enforces this requirement?

Accepted Answer

Azure Policy. Azure Policy is the correct service because it allows you to create, assign, and manage policies that enforce specific rules and effects over your resources. In this scenario, you can define a policy that requires the 'CostCenter' tag on all resources, and Azure Policy will automatically evaluate compliance and prevent creation of non-compliant resources or flag existing ones.

Answer

Azure Resource Manager locks

Answer

Azure Blueprints

Answer

Role-Based Access Control

Question 5

A company needs to connect their on-premises network to Azure with a dedicated, private, and high-bandwidth connection that does not traverse the public internet. They require an SLA for availability and performance. Which Azure service should they use?

Accepted Answer

Azure ExpressRoute. Azure ExpressRoute is the correct choice because it provides a dedicated, private connection from on-premises networks to Azure that does not traverse the public internet. It offers a Service-Level Agreement (SLA) for availability (e.g., 99.95% for a single connection with redundancy) and performance, which is not guaranteed over internet-based VPNs. This meets the requirement for high bandwidth, privacy, and a guaranteed SLA.

Answer

Azure VPN Gateway

Answer

Azure Virtual WAN

Answer

Azure Peering Service

Question 6

Which cloud benefit specifically refers to Microsoft's commitment to securing customer data and keeping it private?

Accepted Answer

Security and privacy governance. Microsoft's commitment to securing customer data and keeping it private is encapsulated in the 'Security and privacy governance' benefit. This refers to Microsoft's shared responsibility model and contractual guarantees under the Microsoft Online Services Terms (OST) and the Microsoft Privacy Statement, which ensure that customer data is not used for advertising or mined for AI training without explicit consent. It also includes compliance with global standards like ISO 27001, SOC 2, and GDPR, making it the direct answer to the question.

Answer

Scalability

Answer

Predictable pricing

Answer

Global reach

Question 7

A company wants to prevent any Azure resource from being accidentally deleted by anyone, including subscription owners. Which Azure feature accomplishes this?

Accepted Answer

Azure Resource Manager CanNotDelete lock. The Azure Resource Manager CanNotDelete lock is the correct feature because it prevents any user, including subscription owners, from deleting a resource. This lock overrides all RBAC permissions, ensuring that even users with Owner or Contributor roles cannot delete the resource until the lock is removed. It is specifically designed for accidental deletion prevention at the resource, resource group, or subscription level.

Answer

Azure Policy with Deny effect

Answer

RBAC Reader role

Answer

Azure Blueprints

Question 8

Which Azure service provides a fully managed platform for building real-time analytics and complex event processing using SQL-like queries on streaming data?

Accepted Answer

Azure Stream Analytics. Azure Stream Analytics is a fully managed platform-as-a-service (PaaS) that enables real-time analytics and complex event processing (CEP) on streaming data using a SQL-like query language. It ingests data from sources like Azure Event Hubs or IoT Hub, applies temporal windows and pattern matching, and outputs results to sinks such as Azure SQL Database or Power BI, all without requiring infrastructure management.

Answer

Azure HDInsight

Answer

Azure Synapse Analytics

Answer

Azure Data Factory

Question 9

What is the relationship between an Azure tenant, a subscription, and a resource group?

Accepted Answer

A tenant contains subscriptions, subscriptions contain resource groups, resource groups contain resources. The Azure hierarchy is strictly defined: an Azure tenant (representing an organization's identity in Microsoft Entra ID) contains one or more subscriptions, each subscription contains one or more resource groups, and each resource group contains resources like VMs or databases. This layered structure enables management, billing, and access control at each level.

Answer

A subscription contains tenants, tenants contain resource groups

Answer

Resource groups and subscriptions are the same thing

Answer

A tenant is inside a subscription

Question 10

A healthcare organization stores patient records in Azure Blob Storage. They require that data remains available even if an entire Azure datacenter fails, and they also need to ensure data is replicated within the same region for low latency. Which storage redundancy option should they choose?

Accepted Answer

Zone-Redundant Storage (ZRS). Zone-Redundant Storage (ZRS) synchronously replicates data across three Azure availability zones within the same region, ensuring data remains available even if an entire datacenter (one zone) fails. This meets both the availability requirement and the low-latency requirement because replication stays within the region, avoiding cross-region latency.

Answer

Locally Redundant Storage (LRS)

Answer

Geo-Redundant Storage (GRS)

Answer

Read-Access Geo-Redundant Storage (RA-GRS)

Question 11

Which Azure service provides a fully managed PostgreSQL database with automatic backups, high availability, and intelligent performance recommendations?

Accepted Answer

Azure Database for PostgreSQL. Azure Database for PostgreSQL is a fully managed Platform-as-a-Service (PaaS) offering that provides built-in automatic backups, high availability with a 99.99% SLA, and intelligent performance recommendations via the Query Performance Insight and Automatic Tuning features. It handles patching, backups, and replication automatically, freeing you from administrative overhead.

Answer

Azure SQL Database

Answer

Azure Cosmos DB for PostgreSQL

Answer

PostgreSQL on Azure VMs

Question 12

A company develops a web API that runs on Azure App Service. The development team wants to deploy a new version of the API to a staging environment, run integration tests against it, and then gradually shift production traffic to the new version. If any issues are detected, they want to immediately roll back to the previous version without redeploying. Which Azure App Service feature should the team use to meet these requirements?

Accepted Answer

Deployment slots. Deployment slots are separate, live environments within Azure App Service that allow you to stage a new version of your web API, run integration tests against it, and then swap it into production with zero downtime. The swap operation also enables instant rollback by swapping back to the previous slot, which preserves the old version without requiring a redeployment.

Answer

Autoscale

Answer

Traffic Manager profiles

Answer

Application Insights

Question 13

Which Azure support plan provides 24/7 access to technical support engineers by phone and email for production workloads?

Accepted Answer

Azure Standard support. Azure Standard support is the lowest-tier plan that provides 24/7 access to technical support engineers via phone and email for production workloads. It includes unlimited severity A incidents with a 1-hour response time, making it suitable for production environments. Lower tiers like Developer or Basic support do not offer 24/7 phone support or are limited to non-production scenarios.

Answer

Azure Free support

Answer

Azure Developer support

Answer

Community forums only

Question 14

Which Azure feature reduces costs by allowing customers to use existing on-premises Windows Server licenses in Azure?

Accepted Answer

Azure Hybrid Benefit for Windows Server. Azure Hybrid Benefit for Windows Server allows customers to use their existing on-premises Windows Server licenses with active Software Assurance (or subscription licenses) to run Windows Server virtual machines in Azure at a reduced cost. This benefit effectively covers the Windows Server operating system licensing cost, so customers only pay for the underlying compute (VM) infrastructure, leading to significant savings.

Answer

Azure Reserved Instances

Answer

Azure Spot VMs with Windows

Answer

Azure Free Tier VMs

Question 15

A company wants to enforce a policy that all Azure resources must have a 'CostCenter' tag. They want to automatically apply the tag to new resources, and also to existing resources that are missing it. Which Azure service should they use?

Accepted Answer

Azure Policy. Azure Policy is the correct service because it can enforce tagging rules by evaluating resources against a policy definition and automatically applying the 'CostCenter' tag to new resources via the 'deployIfNotExists' effect. It can also remediate existing non-compliant resources by triggering a remediation task that applies the missing tag. This makes Azure Policy the ideal tool for governance and compliance at scale.

Answer

Azure Blueprints

Answer

Azure Resource Manager

Answer

Azure Cost Management