AZ-900 Practice Test 21 — 15 Questions

Question 1

Which Azure service analyzes patterns in telemetry data from Azure IoT Hub to detect anomalies and predict when equipment will fail?

Accepted Answer

Azure Time Series Insights. Azure Time Series Insights (TSI) is designed to ingest, store, and analyze time-series data from IoT devices, including telemetry from Azure IoT Hub. It provides built-in anomaly detection and pattern recognition capabilities, enabling predictive maintenance by identifying deviations that precede equipment failure.

Answer

Azure IoT Central

Answer

Azure Digital Twins

Answer

Azure Sphere

Question 2

A global e-commerce platform runs on Azure App Service in multiple regions. They need to route user traffic to the nearest region based on geographic location, and also provide automatic failover if a region becomes unavailable. Which Azure service includes these capabilities with integrated Web Application Firewall (WAF)?

Accepted Answer

Azure Front Door. Azure Front Door is a global, scalable entry point that uses the Microsoft global edge network to route user traffic to the nearest region based on geographic location (latency-based routing) and provides automatic failover across regions. It natively integrates Web Application Firewall (WAF) at the edge, protecting against common web exploits like SQL injection and cross-site scripting, making it the correct choice for this scenario.

Answer

Azure Traffic Manager

Answer

Azure Application Gateway

Answer

Azure Load Balancer

Question 3

Which Azure service helps organizations understand their compliance status against regulatory standards like ISO 27001, PCI DSS, and NIST?

Accepted Answer

Microsoft Defender for Cloud Regulatory Compliance. Microsoft Defender for Cloud Regulatory Compliance provides built-in compliance assessments against major regulatory standards such as ISO 27001, PCI DSS, and NIST. It continuously monitors your Azure environment and maps the compliance state of your resources to specific controls within each standard, offering a clear dashboard of your compliance posture.

Answer

Azure Security Center Secure Score

Answer

Azure Policy compliance view

Answer

Azure Advisor security recommendations

Question 4

Which Azure networking service allows applications to send notifications to iOS, Android, and Windows devices with a single API call?

Accepted Answer

Azure Notification Hubs. Azure Notification Hubs is a scalable push notification engine that enables sending notifications to any platform (iOS, Android, Windows, etc.) from a single API call. It abstracts the complexities of platform-specific notification services (e.g., APNs for iOS, FCM for Android, WNS for Windows) and handles device registration, template formatting, and delivery retries.

Answer

Azure Service Bus

Answer

Azure Event Grid

Answer

Azure Communication Services

Question 5

Which Azure service provides a managed caching layer to reduce database load and improve application response times?

Accepted Answer

Azure Cache for Redis. Azure Cache for Redis is a managed in-memory caching service based on the open-source Redis engine. It provides a high-throughput, low-latency data store that can temporarily hold frequently accessed data, thereby reducing the number of direct queries to a backend database and improving application response times. This makes it the correct choice for a managed caching layer.

Answer

Azure Cosmos DB

Answer

Azure SQL Database

Answer

Azure Table Storage

Question 6

What are the two types of Azure Resource Locks?

Accepted Answer

CanNotDelete and ReadOnly. Azure Resource Locks are designed to prevent accidental deletion or modification of critical resources. The two types are CanNotDelete, which allows read and update operations but blocks deletion, and ReadOnly, which permits only read operations and blocks both deletion and update. This distinction is correct because ReadOnly is more restrictive than CanNotDelete, and both are the only lock types available in Azure.

Answer

ReadOnly and ReadWrite

Answer

Shared and Exclusive

Answer

Deny and Allow

Question 7

Which Azure service allows you to run Linux and Windows virtual machines in the cloud with full control over the operating system?

Accepted Answer

Azure Virtual Machines. Azure Virtual Machines (IaaS) provide full control over the guest operating system, including the ability to install custom software, configure the kernel, and manage updates. This is the only service in the list that offers direct access to the OS for both Linux and Windows, as it runs on a hypervisor-managed virtual hardware stack.

Answer

Azure App Service

Answer

Azure Container Instances

Answer

Azure Functions

Question 8

Which Azure tool provides an interactive, browser-based command-line experience that is authenticated and pre-configured for Azure management?

Accepted Answer

Azure Cloud Shell. Azure Cloud Shell is the correct answer because it provides an interactive, browser-based command-line experience (PowerShell or Bash) that is automatically authenticated with your Azure credentials and pre-configured with common Azure management tools like Azure CLI, PowerShell modules, and storage. This allows users to manage Azure resources directly from a web browser without any local installation or configuration.

Answer

Azure DevOps CLI

Answer

Azure Remote Desktop

Answer

Azure Automation

Question 9

Which term describes the cloud's ability to quickly provision and de-provision resources to meet demand without human intervention?

Accepted Answer

Elasticity. Elasticity is the correct term because it specifically refers to the cloud's ability to automatically scale resources up or down in response to fluctuating demand, without requiring manual intervention. This is a core characteristic of cloud computing, enabling dynamic provisioning and de-provisioning of compute, storage, or network resources based on real-time metrics like CPU utilization or request count.

Answer

High availability

Answer

Fault tolerance

Answer

Disaster recovery

Question 10

Which Azure service enables the creation of event-driven architectures by reacting to state changes in Azure resources?

Accepted Answer

Azure Event Grid. Azure Event Grid is the correct service because it is a fully managed event routing service that enables event-driven architectures by reacting to state changes in Azure resources. It uses a publish-subscribe model where events from Azure services (e.g., blob storage, resource groups) are sent to subscribers like Azure Functions or webhooks, allowing automatic reactions to changes such as resource creation or deletion.

Answer

Azure Service Bus

Answer

Azure Event Hubs

Answer

Azure Monitor Alerts

Question 11

A company uses Azure SQL Database (PaaS). According to the shared responsibility model, who is responsible for applying security patches to the underlying operating system that runs the database service?

Accepted Answer

Microsoft. Microsoft is responsible for applying security patches to the underlying operating system that hosts Azure SQL Database because it is a Platform as a Service (PaaS) offering. In the PaaS shared responsibility model, the cloud provider manages the infrastructure, including the OS, runtime, and network, while the customer is responsible for data and access management. Azure SQL Database abstracts the OS layer entirely, so Microsoft handles all patching and maintenance to ensure security and compliance.

Answer

The customer

Answer

Both

Answer

Neither

Question 12

A company wants to replicate its on-premises production environment to Azure for disaster recovery purposes. In the event of an on-premises outage, they can quickly start the replicated environment in Azure. Which cloud benefit does this best describe?

Accepted Answer

Business continuity. This scenario describes business continuity (C), which ensures that an organization can continue operations during and after a disaster. By replicating the on-premises environment to Azure and enabling rapid startup in the event of an outage, the company is implementing a disaster recovery (DR) strategy—a core component of business continuity. Azure Site Recovery (ASR) is the specific service that orchestrates replication, failover, and failback to meet recovery time objectives (RTO) and recovery point objectives (RPO).

Answer

Scalability

Answer

High availability

Answer

Elasticity

Question 13

Which Azure feature allows administrators to set a maximum spending limit to prevent unexpected charges on a subscription?

Accepted Answer

Azure Cost Management budgets. Azure Cost Management budgets allow administrators to set spending limits and receive alerts when costs exceed thresholds, preventing unexpected charges. This feature directly controls subscription spending by defining budget amounts and actions, such as disabling resources or sending notifications, when the budget is reached.

Answer

Azure Policy

Answer

Azure Reservations

Answer

Azure Advisor cost recommendations

Question 14

What happens when an Azure subscription reaches its spending limit?

Accepted Answer

Azure services are stopped and deallocated until the limit is removed or reset. When an Azure subscription reaches its spending limit, Azure suspends the subscription, stopping and deallocating all running services. This prevents any further charges beyond the configured budget. The limit must be removed or reset to resume services; no automatic increase occurs.

Answer

Azure automatically increases the subscription limit to handle additional charges

Answer

Azure notifies the account owner but continues running services

Answer

All data is permanently deleted to prevent additional storage charges

Question 15

A company wants to monitor the performance of their Azure VMs and receive alerts when CPU usage exceeds 90%. Which Azure service should they use?

Accepted Answer

Azure Monitor. Azure Monitor is the correct service because it provides a comprehensive solution for collecting, analyzing, and acting on telemetry from Azure resources, including VMs. It includes metrics like CPU percentage and allows you to configure metric alerts that trigger when a threshold (e.g., 90% CPU usage) is exceeded. This directly meets the requirement for performance monitoring and alerting.

Answer

Azure Policy

Answer

Azure Security Center

Answer

Azure Cost Management