AZ-900 Practice Test 15 — 15 Questions

Question 1

A company has deployed a critical production application in an Azure resource group. The security team wants to prevent accidental deletion or modification of any resources within that resource group. They have already configured Azure RBAC roles to grant only necessary permissions to the operations team. However, they need an additional protection that even users with Owner permissions cannot delete the resource group or its resources without a two-step process to remove the protection. Which Azure feature should the company implement?

Accepted Answer

Azure Resource Lock. Azure Resource Lock is the correct feature because it provides a protection mechanism that prevents accidental deletion or modification of resources, even for users with Owner permissions. Unlike RBAC, which controls who can perform actions, a resource lock enforces a restriction that must be explicitly removed (a two-step process) before any changes can be made. This directly addresses the requirement for an additional layer of protection beyond role-based access control.

Answer

Azure Policy

Answer

Azure Blueprint

Answer

Azure Resource Tag

Question 2

Which Azure service provides a relational database compatible with open-source MySQL?

Accepted Answer

Azure Database for MySQL. Azure Database for MySQL is the correct answer because it is a fully managed relational database service specifically built for the MySQL community edition, providing high availability, automatic backups, and built-in security features. It is compatible with the open-source MySQL protocol and tools, allowing you to migrate existing MySQL workloads without code changes.

Answer

Azure SQL Database

Answer

Azure Cosmos DB

Answer

Azure Database for MariaDB

Question 3

A company deploys a multi-tier web application on Azure. The web tier and database tier must be in the same region for low latency, but the database tier must be in a different subnet and have restricted network access from the web tier only. Which Azure network solution should they use?

Accepted Answer

Azure Virtual Network with subnets and Network Security Groups. Azure Virtual Network (VNet) with subnets and Network Security Groups (NSGs) is the correct solution because it allows you to create isolated subnets for the web and database tiers within the same region, ensuring low latency. NSGs can then be applied to the database subnet to restrict inbound traffic exclusively from the web tier's subnet using source IP or service tag rules, providing the required network segmentation and access control.

Answer

Azure Application Gateway

Answer

Azure Load Balancer

Answer

Azure Traffic Manager

Question 4

A company hosts a public-facing e-commerce website on Azure virtual machines deployed in two Azure regions (East US and West Europe). The company wants to automatically route users to the region that provides the lowest network latency based on their geographic location. The solution must use DNS-based traffic routing and does not require terminating HTTP traffic at the load balancer. Which Azure service should the company use?

Accepted Answer

Azure Traffic Manager. Azure Traffic Manager is a DNS-based traffic load balancer that routes incoming DNS requests to the most appropriate endpoint based on the traffic-routing method selected. The 'Performance' routing method directs users to the region with the lowest network latency, and because it operates at the DNS level, it does not terminate HTTP traffic, meeting all stated requirements.

Answer

Azure Application Gateway

Answer

Azure Front Door

Answer

Azure Load Balancer

Question 5

A company is adopting Azure and wants to ensure that every new subscription automatically includes a standard set of governance artifacts: two custom Azure Policy definitions (one for allowed locations, one for resource tagging), a custom Role-Based Access Control (RBAC) assignment for the security team, and an initial resource group with an Azure Resource Manager (ARM) template that sets up a network topology. The company wants to version these artifacts and update them over time, ensuring that new subscriptions always use the latest approved version. Which Azure service should the company use to package and deploy this standardized environment?

Accepted Answer

Azure Blueprints. Azure Blueprints is the correct service because it is designed to orchestrate the deployment of a repeatable, versioned environment that includes policies, RBAC assignments, resource groups, and ARM templates. It allows you to define a blueprint with these artifacts, publish versions, and assign the latest approved version to new subscriptions, ensuring consistent governance across the organization.

Answer

Azure Management Groups

Answer

Azure Policy Initiatives

Answer

Azure Resource Manager (ARM) Templates

Question 6

A company is designing a disaster recovery solution for a multi-tier application hosted in Azure. They need to ensure that if an entire Azure region becomes unavailable, the application can fail over to another region. The application uses Azure SQL Database. Which Azure feature should they use to replicate the database across regions?

Accepted Answer

B) Azure SQL Database automatic failover groups. Azure SQL Database automatic failover groups (Option B) are the correct choice because they provide automated, orchestrated failover of a group of databases across regions, ensuring the entire multi-tier application can fail over when an Azure region becomes unavailable. Unlike geo-replication, which only replicates data, failover groups manage the entire logical server and its databases, including updating the connection string endpoint to the secondary region, which is essential for application continuity.

Answer

A) Azure SQL Database geo-replication

Answer

C) Azure Traffic Manager

Answer

D) Azure Site Recovery

Question 7

A company is deploying a mission-critical application that must remain available even if a physical Azure datacenter within a region fails. The application will run on multiple virtual machines. Which Azure feature should they use to protect against this specific failure scenario?

Accepted Answer

Availability Zones. Availability Zones are physically separate datacenters within an Azure region, each with independent power, cooling, and networking. By deploying VMs across multiple zones, the application remains available even if one entire datacenter fails. This directly addresses the requirement for protection against a physical datacenter failure within a region.

Answer

Availability Sets

Answer

Virtual Machine Scale Sets

Answer

Azure Load Balancer

Question 8

What is the primary purpose of Azure subscriptions?

Accepted Answer

To serve as the billing unit and access boundary for Azure resources. Azure subscriptions serve as the primary billing unit, aggregating resource usage into a single invoice, and as an access boundary where Azure RBAC policies and management groups define administrative scope. Without a subscription, resources cannot be deployed or tracked for cost. This dual role makes B correct.

Answer

To provide a private network for Azure resources

Answer

To authenticate users accessing Azure resources

Answer

To enforce compliance policies across resource groups

Question 9

A company is considering moving its IT infrastructure to the cloud. The CFO wants to understand the financial impact: instead of purchasing servers and paying for maintenance, the company will pay a monthly fee based on usage. This shift represents moving from which type of expenditure to which?

Accepted Answer

From capital expenditure (CapEx) to operational expenditure (OpEx). This shift represents moving from capital expenditure (CapEx) to operational expenditure (OpEx). CapEx involves upfront costs for physical assets like servers, which depreciate over time, while OpEx involves ongoing, usage-based payments for cloud services. In Azure, this aligns with the consumption-based model where you pay only for resources consumed (e.g., VM hours, storage GBs), eliminating large initial investments and shifting financial risk to the provider.

Answer

From operational expenditure (OpEx) to capital expenditure (CapEx)

Answer

From direct expenditure to indirect expenditure

Answer

From variable expenditure to fixed expenditure

Question 10

A company is moving from an on-premises data center to Azure. They previously had to purchase servers, networking gear, and software licenses as upfront capital expenses. In Azure, they pay a monthly fee based on actual usage. Which cloud benefit does this represent?

Accepted Answer

Consumption-based pricing. This scenario describes the shift from upfront capital expenditure (CapEx) for hardware and licenses to a variable operational expenditure (OpEx) model based on actual resource consumption. Azure's consumption-based pricing (also called pay-as-you-go) directly matches this description, as customers are billed only for the compute, storage, and networking resources they use each month, with no upfront commitment or sunk cost for idle capacity.

Answer

High availability

Answer

Scalability

Answer

Disaster recovery

Question 11

Which Azure service provides centralized log collection, querying, and analysis from multiple Azure resources and services?

Accepted Answer

Azure Log Analytics. Azure Log Analytics is the correct answer because it is the primary Azure service designed for centralized log collection, querying, and analysis across multiple Azure resources and services. It uses a powerful query language (Kusto Query Language, KQL) to aggregate and analyze data from various sources, including Azure Monitor, virtual machines, and custom logs, providing a unified workspace for troubleshooting and monitoring.

Answer

Azure Application Insights

Answer

Azure Service Health

Answer

Azure Network Watcher

Question 12

A company is considering moving its on-premises workloads to Azure. The CFO wants to understand how Azure pricing works. Which pricing model allows them to pay only for what they use, with no upfront costs or termination fees?

Accepted Answer

Pay-as-you-go. Option C (Pay-as-you-go) is correct because it is the Azure pricing model that charges customers only for the resources they consume, with no upfront commitment or termination fees. This model provides maximum flexibility, allowing the company to scale usage up or down as needed without financial penalties, directly addressing the CFO's requirement for a usage-based cost structure.

Answer

Reserved instances

Answer

Spot VMs

Answer

Hybrid Benefit

Question 13

A company is evaluating moving its on-premises applications to the cloud. The IT manager wants to avoid upfront hardware costs and instead pay for resources on a monthly basis based on usage. Which cloud characteristic enables this financial model?

Accepted Answer

Consumption-based pricing. Consumption-based pricing is the cloud characteristic that allows organizations to pay only for the resources they actually use, such as compute hours, storage GBs, or data transfer, without any upfront hardware costs. This model shifts IT spending from a capital expenditure (CapEx) to an operational expenditure (OpEx), aligning costs directly with usage. The IT manager's requirement to avoid upfront costs and pay monthly based on usage is the exact definition of consumption-based pricing.

Answer

Measured service

Answer

Rapid elasticity

Answer

Resource pooling

Question 14

A company is moving from an on-premises data center to Azure. Instead of paying a large upfront cost for servers, they will pay a monthly subscription fee based on usage. This represents a shift from which type of expenditure to which?

Accepted Answer

Capital expenditure to Operational expenditure. This scenario describes a shift from Capital Expenditure (CapEx) to Operational Expenditure (OpEx). CapEx involves upfront, long-term investments in physical assets like servers, while OpEx is a pay-as-you-go model where costs are incurred based on actual usage. Azure's subscription model eliminates the need for large initial capital outlays, aligning costs with consumption.

Answer

Operational expenditure to Capital expenditure

Answer

Direct cost to Indirect cost

Answer

Fixed cost to Variable cost

Question 15

Which of the following best describes Platform as a Service (PaaS)?

Accepted Answer

The provider manages hardware and OS while customers manage their applications and data. Platform as a Service (PaaS) provides a managed hosting environment where the cloud provider handles the underlying infrastructure, including hardware, virtualization, operating system, and middleware. The customer is responsible only for deploying and managing their applications and data, making option B correct because it accurately describes this division of responsibility.

Answer

The customer manages everything including hardware and networking

Answer

The customer accesses a complete application managed entirely by the provider

Answer

The provider manages physical servers while customers manage OS and applications