AZ-900 Practice Test 2 — 10 Questions

Question 1

A company manages hundreds of Azure SQL databases across multiple subscriptions. The compliance team requires that every Azure SQL database has diagnostic settings enabled to send logs to a central Log Analytics workspace. The team wants a solution that automatically configures diagnostic settings for any new Azure SQL database when it is created, without requiring manual intervention or additional scripting. Which Azure governance feature should the team use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Azure Policy with the DeployIfNotExists effect. Azure Policy with the DeployIfNotExists effect is the correct choice because it automatically evaluates new Azure SQL databases against a policy rule and, if diagnostic settings are missing, triggers a remediation task to deploy them to the specified Log Analytics workspace. This effect operates at resource creation time without manual intervention or scripting, fulfilling the compliance team's requirement for automatic, consistent configuration across all subscriptions.

Answer

Azure Blueprints with a resource group artifact

Answer

Azure Resource Manager templates deployed via Azure DevOps

Answer

Azure Monitor with a data collection rule

Question 2

What is an Azure availability zone?

Accepted Answer

A physically separate datacenter within an Azure region with independent power and cooling. An Azure availability zone is a physically separate datacenter within an Azure region, each with its own independent power, cooling, and networking. This isolation ensures that if one zone fails, applications and data in other zones remain unaffected, providing high availability and fault tolerance for critical workloads.

Answer

A geographic region with multiple Azure datacenters

Answer

A pair of geographically distant Azure regions

Answer

A logical grouping of Azure resources for billing

Question 3

Which Azure service provides dedicated physical servers for regulatory or licensing requirements where hardware cannot be shared with other customers?

Accepted Answer

Azure Dedicated Host. Azure Dedicated Host provides physical servers dedicated to a single Azure subscription, ensuring that hardware is not shared with other customers. This meets regulatory or licensing requirements that mandate hardware isolation, such as specific compliance standards or software licensing agreements that restrict usage to dedicated hardware.

Answer

Azure Reserved VM Instances

Answer

Azure Spot VMs

Answer

Azure Isolated VM sizes

Question 4

A company uses a public cloud provider that shares the same physical infrastructure among many customers. This allows the provider to offer lower prices due to economies of scale. Which cloud characteristic describes the sharing of infrastructure?

Accepted Answer

Resource pooling. Resource pooling is the cloud characteristic that allows a provider to serve multiple customers from the same physical infrastructure, using multi-tenant models. This sharing enables economies of scale because the provider can amortize hardware costs across many tenants, reducing per-customer pricing. The scenario directly describes multi-tenancy and shared infrastructure, which is the essence of resource pooling.

Answer

Measured service

Answer

Rapid elasticity

Answer

On-demand self-service

Question 5

Which Azure service provides a way to enforce organizational standards and assess compliance at scale across Azure resources?

Accepted Answer

Azure Policy. Azure Policy allows you to create, assign, and manage policies that enforce rules over your resources. These policies ensure resources stay compliant with corporate standards and service level agreements. Azure Policy can deny non-compliant deployments or audit existing resources.

Answer

Azure RBAC

Answer

Azure Blueprints

Answer

Azure Advisor

Question 6

A company is migrating a legacy customer relationship management (CRM) application to Azure infrastructure as a service (IaaS). The application runs on Windows Server and uses a third-party database. The company's IT team will manage the application and database software. However, they want to minimize their operational overhead for tasks that Azure can handle automatically. According to the shared responsibility model, which of the following tasks is the responsibility of Microsoft?

Accepted Answer

Replacing a failed physical hard disk drive in the Azure data center.. In the shared responsibility model, Microsoft is responsible for the 'physical' aspects of the cloud, including the hardware, network, and data center infrastructure. Replacing a failed physical hard disk drive is a physical infrastructure task that falls under Microsoft's responsibility, as the customer has no access to the underlying hardware in an IaaS environment.

Answer

Applying security updates to the CRM application code.

Answer

Configuring firewall rules within the virtual network.

Answer

Installing the latest Windows Server security patches on the virtual machine.

Question 7

A company uses Azure for its production workloads. The security team wants to receive proactive, personalized recommendations to improve the security of their Azure resources, such as enabling Microsoft Defender for Cloud on subscriptions that do not have it enabled. Which Azure service provides these security recommendations?

Accepted Answer

Azure Advisor. Azure Advisor provides personalized, proactive recommendations to optimize Azure resources for security, reliability, performance, and cost. The question specifically asks for security recommendations, and Azure Advisor includes a dedicated 'Security' category that surfaces actions such as enabling Microsoft Defender for Cloud on subscriptions that lack it. This matches the scenario exactly.

Answer

Azure Policy

Answer

Azure Service Health

Answer

Azure Monitor

Question 8

A company runs a critical line-of-business application on Azure virtual machines. The operations team needs to receive proactive notifications about any upcoming planned maintenance events that could affect their virtual machines, as well as real-time alerts when a service incident occurs in the Azure region where the application is deployed. The team wants a native Azure solution that provides a personalized view of all service health events relevant to their subscriptions, including historical incident reports. Which Azure service should the operations team use?

Accepted Answer

Azure Service Health. Azure Service Health provides a personalized dashboard of service health events, including planned maintenance notifications, real-time service incident alerts, and historical reports, all scoped to the user's subscriptions. This makes it the correct native Azure solution for the operations team's requirements.

Answer

Azure Monitor

Answer

Azure Advisor

Answer

Azure Status Page (status.azure.com)

Question 9

Which cloud concept allows businesses to deploy applications to global markets quickly without building physical infrastructure in those locations?

Accepted Answer

Global reach through cloud infrastructure. Global reach through cloud infrastructure enables businesses to deploy applications in multiple geographic regions using the cloud provider's existing data centers, eliminating the need to build and manage physical infrastructure in each target market. Providers like Azure offer region pairs and geographies that allow low-latency access and compliance with local data residency requirements, enabling rapid global expansion.

Answer

Elasticity

Answer

Capital expense avoidance

Answer

Fault tolerance

Question 10

Which Azure networking service acts as a software-defined WAN that connects branch offices, datacenters, and remote users through an optimized global network?

Accepted Answer

Azure Virtual WAN. Azure Virtual WAN is a software-defined WAN (SD-WAN) service that provides a unified, optimized global network connecting branch offices, datacenters, and remote users. It leverages Microsoft's global backbone to route traffic efficiently, automatically selecting the best path and reducing latency, while integrating with VPN, ExpressRoute, and SD-WAN partners for seamless connectivity.

Answer

Azure VPN Gateway

Answer

Azure ExpressRoute

Answer

Azure Load Balancer