AZ-900 Practice Test 15 — 15 Questions

Question 1

What is the relationship between an Azure tenant, a subscription, and a resource group?

Accepted Answer

A tenant contains subscriptions, subscriptions contain resource groups, resource groups contain resources. The Azure hierarchy is strictly defined: an Azure tenant (representing an organization's identity in Azure AD) contains one or more subscriptions, each subscription contains one or more resource groups, and each resource group contains resources like VMs or databases. This layered structure enables management, billing, and access control at each level.

Answer

A subscription contains tenants, tenants contain resource groups

Answer

Resource groups and subscriptions are the same thing

Answer

A tenant is inside a subscription

Question 2

A healthcare organization stores patient records in Azure Blob Storage. They require that data remains available even if an entire Azure datacenter fails, and they also need to ensure data is replicated within the same region for low latency. Which storage redundancy option should they choose?

Accepted Answer

Zone-Redundant Storage (ZRS). Zone-Redundant Storage (ZRS) synchronously replicates data across three Azure availability zones within the same region, ensuring data remains available even if an entire datacenter (one zone) fails. This meets both the availability requirement and the low-latency requirement because replication stays within the region, avoiding cross-region latency.

Answer

Locally Redundant Storage (LRS)

Answer

Geo-Redundant Storage (GRS)

Answer

Read-Access Geo-Redundant Storage (RA-GRS)

Question 3

Which Azure service provides a fully managed PostgreSQL database with automatic backups, high availability, and intelligent performance recommendations?

Accepted Answer

Azure Database for PostgreSQL. Azure Database for PostgreSQL is a fully managed Platform-as-a-Service (PaaS) offering that provides built-in automatic backups, high availability with a 99.99% SLA, and intelligent performance recommendations via the Query Performance Insight and Automatic Tuning features. It handles patching, backups, and replication automatically, freeing you from administrative overhead.

Answer

Azure SQL Database

Answer

Azure Cosmos DB for PostgreSQL

Answer

PostgreSQL on Azure VMs

Question 4

A company develops a web API that runs on Azure App Service. The development team wants to deploy a new version of the API to a staging environment, run integration tests against it, and then gradually shift production traffic to the new version. If any issues are detected, they want to immediately roll back to the previous version without redeploying. Which Azure App Service feature should the team use to meet these requirements?

Accepted Answer

Deployment slots. Deployment slots are separate, live environments within Azure App Service that allow you to stage a new version of your web API, run integration tests against it, and then swap it into production with zero downtime. The swap operation also enables instant rollback by swapping back to the previous slot, which preserves the old version without requiring a redeployment.

Answer

Autoscale

Answer

Traffic Manager profiles

Answer

Application Insights

Question 5

Which Azure support plan provides 24/7 access to technical support engineers by phone and email for production workloads?

Accepted Answer

Azure Standard support. Azure Standard support is the lowest-tier plan that provides 24/7 access to technical support engineers via phone and email for production workloads. It includes unlimited severity A incidents with a 1-hour response time, making it suitable for production environments. Lower tiers like Developer or Basic support do not offer 24/7 phone support or are limited to non-production scenarios.

Answer

Azure Free support

Answer

Azure Developer support

Answer

Community forums only

Question 6

Which Azure feature reduces costs by allowing customers to use existing on-premises Windows Server licenses in Azure?

Accepted Answer

Azure Hybrid Benefit for Windows Server. Azure Hybrid Benefit for Windows Server allows customers to use their existing on-premises Windows Server licenses with active Software Assurance (or subscription licenses) to run Windows Server virtual machines in Azure at a reduced cost. This benefit effectively covers the Windows Server operating system licensing cost, so customers only pay for the underlying compute (VM) infrastructure, leading to significant savings.

Answer

Azure Reserved Instances

Answer

Azure Spot VMs with Windows

Answer

Azure Free Tier VMs

Question 7

A company wants to enforce a policy that all Azure resources must have a 'CostCenter' tag. They want to automatically apply the tag to new resources, and also to existing resources that are missing it. Which Azure service should they use?

Accepted Answer

Azure Policy. Azure Policy is the correct service because it can enforce tagging rules by evaluating resources against a policy definition and automatically applying the 'CostCenter' tag to new resources via the 'deployIfNotExists' effect. It can also remediate existing non-compliant resources by triggering a remediation task that applies the missing tag. This makes Azure Policy the ideal tool for governance and compliance at scale.

Answer

Azure Blueprints

Answer

Azure Resource Manager

Answer

Azure Cost Management

Question 8

Which Azure compute option is best for running a batch processing job that can be interrupted and resumed without data loss, at the lowest possible cost?

Accepted Answer

Azure Spot Virtual Machines. Azure Spot Virtual Machines are designed for interruptible workloads, such as batch processing jobs, because they use unused Azure capacity at a significant discount (up to 90% compared to pay-as-you-go). When Azure needs the capacity back, these VMs can be evicted with a 30-second notice, but the job can be resumed without data loss if the application is designed to handle interruptions (e.g., using checkpointing or saving state to persistent storage). This makes Spot VMs the most cost-effective option for fault-tolerant, interruptible batch processing.

Answer

Azure Reserved VM Instances

Answer

Azure Dedicated Host

Answer

Standard Pay-as-you-Go VMs

Question 9

Which Azure service provides a managed virtual desktop infrastructure (VDI) solution for deploying Windows desktops and apps from Azure?

Accepted Answer

Azure Virtual Desktop. Azure Virtual Desktop (AVD) is the correct answer because it is a managed desktop and app virtualization service that runs on Azure, providing a full multi-session Windows 10/11 experience and remote app streaming. Unlike IaaS-based VMs, AVD abstracts the underlying infrastructure, handles brokering, load balancing, and session management, and supports FSLogix profile containers for persistent user data. It uses the Remote Desktop Protocol (RDP) over HTTPS to deliver a secure, scalable VDI solution without needing to manage RDS roles or gateways.

Answer

Azure Virtual Machines

Answer

Azure App Service

Answer

Azure Remote Desktop Gateway

Question 10

Which Azure storage tier should you use for data that is stored for at least 180 days and is rarely accessed?

Accepted Answer

Archive tier. The Archive tier is designed for data that is rarely accessed and has a minimum storage duration of 180 days. It offers the lowest storage cost but requires several hours to rehydrate data before it can be read, making it ideal for long-term backup or compliance data that is infrequently needed.

Answer

Hot tier

Answer

Cool tier

Answer

Standard tier

Question 11

What is the difference between 'high availability' and 'fault tolerance' in cloud computing?

Accepted Answer

High availability minimizes downtime during failures; fault tolerance aims for zero interruption despite failures. High availability (HA) focuses on minimizing downtime by using redundant components and failover mechanisms, typically achieving uptime of 99.99% or higher, but it may allow brief interruptions during failover. Fault tolerance, in contrast, is designed to operate without any interruption at all, often through active-active configurations or redundant hardware that masks failures completely. Option B correctly captures this distinction: HA reduces downtime, while fault tolerance aims for zero interruption.

Answer

High availability and fault tolerance are identical concepts

Answer

High availability requires multiple regions; fault tolerance requires only one region

Answer

Fault tolerance is only for databases; high availability is for compute

Question 12

Which Azure identity feature ensures that users must provide an additional form of verification beyond their password when signing in?

Accepted Answer

Azure Multi-Factor Authentication (MFA). Azure Multi-Factor Authentication (MFA) is the correct answer because it explicitly requires users to provide an additional verification factor—such as a phone call, text message, or app notification—beyond just their password. This implements a second layer of security, making it harder for unauthorized users to gain access even if a password is compromised. MFA is a core identity security feature in Azure AD that directly addresses the requirement for extra verification.

Answer

Azure AD Single Sign-On

Answer

Azure AD Conditional Access

Answer

Azure Identity Protection

Question 13

A company manages multiple Azure subscriptions for development, testing, and production environments. The governance team needs to ensure that every new subscription automatically includes a consistent baseline consisting of Azure Policy definitions, role assignments, and a predefined resource group structure. The team wants to package these governance components into a single deployable artifact that can be applied to any subscription with minimal manual effort. Which Azure feature should the team use?

Accepted Answer

Azure Blueprints. Azure Blueprints is the correct choice because it is specifically designed to orchestrate the deployment of a consistent baseline—including Azure Policy definitions, role assignments, and resource groups—as a single, versioned, and repeatable artifact. Unlike other tools, Blueprints packages these governance components together and can be applied to any subscription with minimal manual effort, ensuring every new subscription automatically inherits the defined baseline.

Answer

Azure Policy

Answer

Azure Resource Manager (ARM) templates

Answer

Azure Management Groups

Question 14

Which Azure service provides a globally distributed content delivery network with DDoS protection and Web Application Firewall capabilities?

Accepted Answer

Azure Front Door. Azure Front Door is a global, scalable entry point that provides a content delivery network (CDN) with built-in DDoS protection and Web Application Firewall (WAF) capabilities. It operates at Layer 7 (HTTP/HTTPS) and uses Microsoft's global edge network to accelerate and secure web applications. Unlike a standard CDN, Front Door integrates intelligent traffic routing, SSL termination, and application-layer security in a single service.

Answer

Azure CDN with WAF

Answer

Azure Application Gateway

Answer

Azure DDoS Protection Standard

Question 15

A company needs to store and analyze large amounts of unstructured log data at low cost. Which Azure storage solution is MOST appropriate?

Accepted Answer

Azure Blob Storage with cool tier. Azure Blob Storage with cool tier is the most appropriate solution because it is optimized for storing large amounts of unstructured log data at low cost. The cool tier offers lower storage costs than the hot tier, making it ideal for infrequently accessed data like logs, while still providing high durability and scalability. Blob Storage natively supports unstructured data such as text logs, binary files, and streaming data, which aligns perfectly with the requirement.

Answer

Azure SQL Database

Answer

Azure Table Storage

Answer

Azure Files