AZ-900 Practice Test 14 — 15 Questions

Question 1

Which Azure feature provides an overview of the overall security posture across your Azure subscriptions with a secure score?

Accepted Answer

Microsoft Defender for Cloud Secure Score. Microsoft Defender for Cloud (formerly Azure Security Center) provides a unified security management dashboard that includes a Secure Score. This score aggregates security recommendations across all your Azure subscriptions and calculates a percentage based on how many of those recommendations you have implemented, giving you a quantifiable measure of your overall security posture.

Answer

Azure Advisor security score

Answer

Azure Policy compliance score

Answer

Azure Sentinel analytics score

Question 2

A company has resources across multiple Azure subscriptions and needs a single dashboard to view cost data across all of them. Which Azure service provides this?

Accepted Answer

Azure Cost Management + Billing. Azure Cost Management + Billing is the correct service because it provides a unified dashboard that aggregates cost data across multiple Azure subscriptions, enabling centralized monitoring and analysis of spending. It supports cross-subscription views, budget tracking, and cost allocation, which directly addresses the requirement for a single dashboard to view cost data across all subscriptions.

Answer

Azure Monitor

Answer

Azure Advisor

Answer

Azure Policy

Question 3

Which Azure IoT service provides end-to-end IoT solutions with pre-built industry templates and no-code/low-code configuration?

Accepted Answer

Azure IoT Central. Azure IoT Central is correct because it is a fully managed IoT application platform that provides end-to-end IoT solutions with pre-built industry templates (e.g., for retail, healthcare, energy) and a no-code/low-code configuration interface. Unlike Azure IoT Hub, which is a lower-level messaging service, IoT Central abstracts the underlying infrastructure and offers built-in dashboards, device management, and analytics, enabling rapid deployment without custom development.

Answer

Azure IoT Hub

Answer

Azure Digital Twins

Answer

Azure Sphere

Question 4

Which type of cloud deployment model uses a combination of on-premises infrastructure and public cloud services?

Accepted Answer

Hybrid cloud. A hybrid cloud deployment model explicitly combines on-premises infrastructure (private cloud or local datacenter) with public cloud services, allowing data and applications to be shared between them. This enables organizations to keep sensitive workloads on-premises while leveraging the scalability of public cloud for burst capacity or less critical workloads, often connected via VPN or dedicated circuits like Azure ExpressRoute.

Answer

Public cloud

Answer

Private cloud

Answer

Multi-cloud

Question 5

Which Azure service helps migrate on-premises VMware, Hyper-V VMs, and physical servers to Azure?

Accepted Answer

Azure Migrate. Azure Migrate is the correct service because it provides a unified platform for assessing and migrating on-premises workloads to Azure, including VMware VMs, Hyper-V VMs, and physical servers. It integrates with Azure Site Recovery for the actual replication and with Azure Database Migration Service for database migrations, but the core discovery, assessment, and migration orchestration for these server types is the primary function of Azure Migrate.

Answer

Azure Site Recovery

Answer

Azure Data Box

Answer

Azure Database Migration Service

Question 6

Which Azure governance feature enables organizations to enforce that all virtual machines be tagged with a specific 'Owner' tag before deployment?

Accepted Answer

Azure Policy with 'Require tag' in deny mode. Azure Policy with the 'Require tag' effect in deny mode is the correct choice because it can enforce tagging rules at resource creation time by evaluating the request against the policy definition and denying any deployment that does not include the specified 'Owner' tag. This is a native governance feature designed to ensure compliance before resources are provisioned, unlike RBAC or templates which do not enforce tag values.

Answer

Azure RBAC with custom permissions

Answer

Azure Resource Manager template validation

Answer

Azure DevOps deployment gates

Question 7

Which Azure monitoring capability sends automated alerts when resource metrics exceed defined thresholds?

Accepted Answer

Azure Monitor Alerts. Azure Monitor Alerts is the correct capability because it proactively notifies you when metrics (e.g., CPU percentage, disk I/O) from Azure resources cross user-defined thresholds. It works by evaluating log search queries or metric signals at a specified frequency and triggering actions (email, SMS, webhook) when conditions are met. This is the core monitoring and alerting service in Azure, not a recommendation or health dashboard.

Answer

Azure Advisor

Answer

Azure Service Health

Answer

Azure Policy

Question 8

Which Azure service provides object storage with a hierarchical namespace optimized for big data and analytics workloads?

Accepted Answer

Azure Data Lake Storage Gen2. Azure Data Lake Storage Gen2 (ADLS Gen2) is the correct answer because it combines Blob Storage’s scalable object storage with a hierarchical namespace, enabling POSIX-like directory structures and fine-grained access control lists (ACLs). This architecture is specifically optimized for big data and analytics workloads, such as those running Apache Spark, Hive, or Azure Databricks, where efficient directory-level operations and high throughput are critical.

Answer

Azure Files

Answer

Azure Blob Storage (flat namespace)

Answer

Azure Queue Storage

Question 9

A company wants to move its on-premises applications to the cloud to benefit from the ability to quickly scale resources up or down based on demand. They want to pay only for what they use. This combination of characteristics is known as:

Accepted Answer

Elasticity. Elasticity is the correct term because it describes the ability to automatically scale computing resources up or down based on demand, combined with a pay-as-you-go pricing model. This allows the company to only pay for the resources they actually use, which is a core benefit of cloud computing.

Answer

High availability

Answer

Fault tolerance

Answer

Disaster recovery

Question 10

Which Azure feature provides audit logs that record every action taken on secrets in Azure Key Vault?

Accepted Answer

Azure Key Vault diagnostic logging. Azure Key Vault diagnostic logging captures detailed audit logs for every operation performed on secrets, keys, and certificates, including read, write, delete, and backup actions. These logs are sent to Azure Monitor Logs, Storage Accounts, or Event Hubs, enabling security auditing and compliance monitoring. This is the correct feature because it directly records all actions on secrets at the vault level.

Answer

Azure Policy

Answer

Azure Monitor Metrics

Answer

Azure RBAC access logs

Question 11

An administrator wants to ensure that all Azure resources in a subscription have a 'CostCenter' tag applied. Which Azure service enforces this requirement?

Accepted Answer

Azure Policy. Azure Policy is the correct service because it allows you to create, assign, and manage policies that enforce specific rules and effects over your resources. In this scenario, you can define a policy that requires the 'CostCenter' tag on all resources, and Azure Policy will automatically evaluate compliance and prevent creation of non-compliant resources or flag existing ones.

Answer

Azure Resource Manager locks

Answer

Azure Blueprints

Answer

Role-Based Access Control

Question 12

A company needs to connect their on-premises network to Azure with a dedicated, private, and high-bandwidth connection that does not traverse the public internet. They require an SLA for availability and performance. Which Azure service should they use?

Accepted Answer

Azure ExpressRoute. Azure ExpressRoute is the correct choice because it provides a dedicated, private connection from on-premises networks to Azure that does not traverse the public internet. It offers a Service-Level Agreement (SLA) for availability (e.g., 99.95% for a single connection with redundancy) and performance, which is not guaranteed over internet-based VPNs. This meets the requirement for high bandwidth, privacy, and a guaranteed SLA.

Answer

Azure VPN Gateway

Answer

Azure Virtual WAN

Answer

Azure Peering Service

Question 13

Which cloud benefit specifically refers to Microsoft's commitment to securing customer data and keeping it private?

Accepted Answer

Security and privacy governance. Microsoft's commitment to securing customer data and keeping it private is encapsulated in the 'Security and privacy governance' benefit. This refers to Microsoft's shared responsibility model and contractual guarantees under the Microsoft Online Services Terms (OST) and the Microsoft Privacy Statement, which ensure that customer data is not used for advertising or mined for AI training without explicit consent. It also includes compliance with global standards like ISO 27001, SOC 2, and GDPR, making it the direct answer to the question.

Answer

Scalability

Answer

Predictable pricing

Answer

Global reach

Question 14

A company wants to prevent any Azure resource from being accidentally deleted by anyone, including subscription owners. Which Azure feature accomplishes this?

Accepted Answer

Azure Resource Manager CanNotDelete lock. The Azure Resource Manager CanNotDelete lock is the correct feature because it prevents any user, including subscription owners, from deleting a resource. This lock overrides all RBAC permissions, ensuring that even users with Owner or Contributor roles cannot delete the resource until the lock is removed. It is specifically designed for accidental deletion prevention at the resource, resource group, or subscription level.

Answer

Azure Policy with Deny effect

Answer

RBAC Reader role

Answer

Azure Blueprints

Question 15

Which Azure service provides a fully managed platform for building real-time analytics and complex event processing using SQL-like queries on streaming data?

Accepted Answer

Azure Stream Analytics. Azure Stream Analytics is a fully managed platform-as-a-service (PaaS) that enables real-time analytics and complex event processing (CEP) on streaming data using a SQL-like query language. It ingests data from sources like Azure Event Hubs or IoT Hub, applies temporal windows and pattern matching, and outputs results to sinks such as Azure SQL Database or Power BI, all without requiring infrastructure management.

Answer

Azure HDInsight

Answer

Azure Synapse Analytics

Answer

Azure Data Factory