AZ-900 Practice Test 19 — 15 Questions

Question 1

Which Azure service provides an enterprise-grade, fully managed graph database as a service?

Accepted Answer

Azure Cosmos DB for Gremlin. Azure Cosmos DB for Gremlin is the correct answer because it provides a fully managed, enterprise-grade graph database service that uses the Apache TinkerPop Gremlin graph traversal language. It supports graph data models with vertices and edges, enabling complex relationship queries at global scale with turnkey distribution and SLA-backed performance.

Answer

Azure SQL Database

Answer

Azure Table Storage

Answer

Azure Cache for Redis

Question 2

Which Azure feature automatically identifies and informs you of Azure service issues that may be affecting your resources in your region?

Accepted Answer

Azure Service Health alerts. Azure Service Health alerts proactively notify you about Azure service issues, planned maintenance, and health advisories that may affect your resources in a specific region. This feature combines global service issues with regional impacts, allowing you to configure alerts based on service health events. It is the correct choice because it directly addresses the requirement of automatically identifying and informing you of Azure service issues affecting your resources.

Answer

Azure Monitor resource health

Answer

Azure Advisor notifications

Answer

Azure Policy compliance alerts

Question 3

A company stores critical configuration data in an Azure Storage account. The IT administrator wants to prevent accidental deletion of this storage account. However, the administrator must still be able to read and update the data within the storage account. The company uses Azure Role-Based Access Control (RBAC) to manage permissions. Which Azure governance feature should the administrator implement to achieve this goal?

Accepted Answer

A Delete lock on the storage account. A Delete lock on the storage account prevents deletion of the resource while still allowing read and update operations on the data within it. Azure resource locks operate at the resource level, overriding any RBAC permissions that would otherwise allow deletion, but they do not restrict data plane operations like reading or writing blobs or tables. This directly meets the administrator's requirement to protect against accidental deletion while maintaining full read/update access.

Answer

Azure Policy with the deny effect to block deletion of the storage account

Answer

An Azure Blueprint that includes the storage account with a policy to prevent deletion

Answer

A Read-only lock on the storage account

Question 4

A company has multiple departments, each with its own Azure subscription. They want to apply the same set of policies and role assignments to all subscriptions under the Sales department. They also plan to create more subscriptions for Sales in the future. Which Azure construct should they use?

Accepted Answer

Management group. Management groups allow you to apply Azure Policy and role-based access control (RBAC) assignments hierarchically across multiple subscriptions. By placing all Sales department subscriptions under a single management group, any policies or role assignments defined at that management group level will be inherited by all current and future subscriptions within it, ensuring consistent governance.

Answer

Resource group

Answer

Policy initiative

Answer

Blueprint

Question 5

Which Azure feature allows organizations to apply the same governance at a hierarchy of subscriptions and resource groups?

Accepted Answer

Azure Policy and RBAC inheritance through the management hierarchy. Azure Policy and RBAC (Role-Based Access Control) inheritance through the management hierarchy allows organizations to apply consistent governance across multiple subscriptions and resource groups. When a policy or RBAC assignment is applied at a management group, it is inherited by all child subscriptions and resource groups, ensuring uniform compliance and access control without manual reconfiguration.

Answer

Azure Resource Locks inheritance

Answer

Azure Blueprints auto-assignment

Answer

Azure Cost Management budget inheritance

Question 6

An organization wants to review the compliance status of all resources across multiple subscriptions against a set of regulatory standards. Which Azure tool provides this consolidated view?

Accepted Answer

Microsoft Defender for Cloud. Microsoft Defender for Cloud (formerly Azure Security Center) provides a unified view of compliance posture across all Azure subscriptions by continuously assessing resources against built-in regulatory standards (e.g., SOC 2, ISO 27001, PCI DSS) and custom policies. It aggregates compliance scores, recommendations, and security findings into a single dashboard, enabling centralized compliance management.

Answer

Azure Monitor

Answer

Azure Advisor

Answer

Azure Policy

Question 7

What is the purpose of Azure's 'Cost Management + Billing' service?

Accepted Answer

To monitor, analyze, and optimize Azure spending across subscriptions. Azure Cost Management + Billing is the dedicated service for monitoring, analyzing, and optimizing Azure spending. It provides tools to track costs across subscriptions, set budgets, create alerts, and generate reports, enabling organizations to control cloud expenditure and improve cost efficiency.

Answer

To provision and manage Azure resources automatically

Answer

To enforce security policies across Azure resources

Answer

To manage Azure support tickets and technical issues

Question 8

A company uses Azure Blueprints to define a standard environment for all new development subscriptions. The blueprint includes a set of Azure policies, role assignments, and resource templates. However, after applying the blueprint, some resources are created that do not comply with the policies. The company wants to be notified of these non-compliant resources without blocking their creation. Which Azure Policy effect should be used in the blueprint?

Accepted Answer

Audit. The Audit effect is correct because it enables Azure Policy to evaluate resources against the defined policies and log compliance warnings in the activity log without blocking resource creation. This meets the requirement to be notified of non-compliant resources while allowing them to be created.

Answer

Deny

Answer

Append

Answer

DeployIfNotExists

Question 9

Which Azure service provides a platform for running Apache Kafka for real-time event streaming without managing infrastructure?

Accepted Answer

Azure Event Hubs with Kafka endpoint. Azure Event Hubs with Kafka endpoint is correct because it provides a fully managed, Kafka-protocol-compatible event streaming service that allows you to run Apache Kafka workloads without provisioning or managing any Kafka clusters. This enables real-time event streaming using existing Kafka producers and consumers while Azure handles the underlying infrastructure, scaling, and high availability.

Answer

Azure Service Bus

Answer

Azure Stream Analytics

Answer

Azure HDInsight Kafka cluster

Question 10

Which Azure service enables automated configuration management and desired state enforcement for Windows and Linux VMs?

Accepted Answer

Azure Automation State Configuration. Azure Automation State Configuration (DSC) is the correct service because it provides PowerShell Desired State Configuration (DSC) for Windows and Linux VMs, enabling automated configuration management and enforcement of a desired state. It uses a pull or push model to ensure VMs remain compliant with defined configurations, such as installed software or registry settings, without manual intervention.

Answer

Azure Policy

Answer

Azure Monitor

Answer

Azure Blueprints

Question 11

Which Azure service provides a managed Apache Hadoop cluster for processing large amounts of data using batch analytics?

Accepted Answer

Azure HDInsight. Azure HDInsight is the correct answer because it is a fully managed, open-source analytics service that provides Apache Hadoop clusters specifically designed for batch processing of large data sets using MapReduce and other Hadoop ecosystem components. Unlike other services, HDInsight directly supports Hadoop's distributed file system (HDFS) and YARN resource management, making it the native choice for traditional big data batch analytics.

Answer

Azure Databricks

Answer

Azure Synapse Analytics

Answer

Azure Stream Analytics

Question 12

Which Azure service provides NoSQL wide-column database storage compatible with Apache Cassandra?

Accepted Answer

Azure Cosmos DB for Apache Cassandra. Azure Cosmos DB for Apache Cassandra is the correct choice because it provides a NoSQL wide-column database storage that is fully compatible with the Apache Cassandra Query Language (CQL) and wire protocol. This allows you to run existing Cassandra workloads and tools (like cqlsh and Cassandra drivers) directly on Azure without any code changes, while benefiting from Cosmos DB's global distribution and SLA-backed performance.

Answer

Azure Table Storage

Answer

Azure Cache for Redis

Answer

Azure SQL Database Hyperscale

Question 13

A company runs a seasonal e-commerce application. During the holiday season, demand spikes significantly, but the company does not want to pay for idle resources the rest of the year. They want the cloud to automatically add or remove compute resources based on real-time demand. Which cloud computing characteristic does this scenario best describe?

Accepted Answer

Elasticity. Elasticity is the cloud characteristic that enables automatic scaling of resources up or down in real-time to match demand. In this scenario, the e-commerce application needs to add compute resources during holiday spikes and remove them when demand drops, avoiding paying for idle resources. This aligns directly with elasticity, which is often implemented via auto-scaling groups and load balancers that adjust capacity based on metrics like CPU utilization or request count.

Answer

Scalability

Answer

High availability

Answer

Disaster recovery

Question 14

A company has a policy that all Azure resources must have a 'CostCenter' tag. They want to automatically audit and deny the creation of any resource that does not include this tag. Which Azure Policy effect should they use?

Accepted Answer

Deny. The 'Deny' effect is correct because the company's policy requires that any resource creation attempt missing the 'CostCenter' tag must be blocked entirely, not just reported or modified. Azure Policy's Deny effect actively prevents the resource from being provisioned by rejecting the API call at the Azure Resource Manager level, ensuring non-compliant resources are never created.

Answer

Audit

Answer

Append

Answer

DeployIfNotExists

Question 15

Which of the following is a characteristic of the public cloud deployment model?

Accepted Answer

Infrastructure is owned by the provider and shared among multiple customers. In the public cloud deployment model, the cloud provider owns and manages the physical infrastructure (servers, storage, networking), and that infrastructure is shared among multiple customer organizations (tenants). This multi-tenant architecture is a defining characteristic, enabling economies of scale and on-demand resource allocation. Option C correctly identifies this shared, provider-owned model.

Answer

All hardware is owned and managed by the customer

Answer

Resources are dedicated to a single customer organization

Answer

Computing resources are hosted in the customer's own data center