AZ-900 Practice Test 21 — 15 Questions

Question 1

What is the purpose of Azure Marketplace?

Accepted Answer

A catalog for browsing and purchasing third-party software and solutions that run on Azure. Azure Marketplace is an online catalog that allows customers to browse, purchase, and deploy third-party software, services, and solutions that are certified to run on Azure. It provides pre-configured solutions from independent software vendors (ISVs) and simplifies deployment by integrating directly with the Azure portal and Azure Resource Manager.

Answer

A store for buying Azure hardware for on-premises use

Answer

A repository for sharing Azure Resource Manager templates with other organizations

Answer

A portal for comparing prices across different cloud providers

Question 2

What is the purpose of Azure Service Health?

Accepted Answer

To provide personalized alerts about Azure service issues and planned maintenance. Azure Service Health provides a personalized view of the health of Azure services, regions, and resources you use. It delivers proactive alerts and notifications about service-impacting events, planned maintenance, and health advisories, allowing you to take action before or during an incident. This is distinct from monitoring individual resource performance, which is handled by Azure Monitor.

Answer

To monitor the performance of virtual machines

Answer

To enforce security policies across Azure resources

Answer

To provide cost optimization recommendations

Question 3

Which Azure service provides enterprise-grade data integration and ETL/ELT pipelines for moving data between on-premises and cloud data stores?

Accepted Answer

Azure Data Factory. Azure Data Factory (ADF) is the correct answer because it is a cloud-based ETL/ELT service specifically designed for orchestrating and automating data movement and transformation between on-premises and cloud data stores. It provides over 90 built-in connectors, supports hybrid data integration via self-hosted integration runtimes, and enables code-free pipeline creation for complex data workflows.

Answer

Azure Stream Analytics

Answer

Azure Databricks

Answer

Azure HDInsight

Question 4

What is the purpose of Azure Active Directory B2C?

Accepted Answer

To provide customer identity management for consumer-facing applications. Azure Active Directory B2C (Business-to-Consumer) is a customer identity access management (CIAM) solution designed specifically for external-facing applications. It allows developers to manage customer sign-up, sign-in, and profile management using social identity providers (e.g., Google, Facebook) or local accounts, while keeping customer identities isolated from the organization's employee directory (Azure AD). This directly supports consumer-facing applications, not internal employee access.

Answer

To manage employee identities and corporate application access

Answer

To replicate on-premises Active Directory to Azure

Answer

To manage service-to-service authentication using managed identities

Question 5

A company's finance team needs to track Azure costs by project. Each resource is tagged with a 'Project' tag, but some resources were created without tags. The finance team wants to generate a report that shows costs grouped by project and also identifies untagged resources. Which Azure tool should they use?

Accepted Answer

Azure Cost Management + Billing. Azure Cost Management + Billing provides built-in cost analysis capabilities that allow you to group costs by tags (such as 'Project') and filter for untagged resources. It can generate reports that break down spending by tag values and explicitly show costs associated with resources that have no tags, meeting both requirements.

Answer

Azure Budgets

Answer

Azure Advisor

Answer

Azure Resource Graph

Question 6

An e-commerce application needs to handle sudden traffic spikes during flash sales while maintaining consistent performance. Which combination of Azure services BEST addresses this requirement?

Accepted Answer

Azure Front Door with autoscaling backend. Azure Front Door provides global load balancing and traffic acceleration with built-in SSL offload and path-based routing, while its autoscaling backend (e.g., Virtual Machine Scale Sets or App Service) automatically adds or removes instances based on CPU or request metrics. This combination ensures that sudden traffic spikes during flash sales are absorbed without manual intervention, maintaining consistent performance and high availability.

Answer

Azure Load Balancer with manual VM scaling

Answer

Azure Traffic Manager with static VMs

Answer

Azure CDN alone

Question 7

A company needs to store database connection strings and API keys securely, ensuring only authorized applications can access them. Which Azure service is designed for this?

Accepted Answer

Azure Key Vault. Azure Key Vault is the correct service because it is specifically designed to securely store and manage secrets such as database connection strings, API keys, and certificates. It provides fine-grained access control via Azure RBAC and access policies, ensuring only authorized applications and users can retrieve secrets. This aligns directly with the requirement for secure, authorized access to sensitive configuration data.

Answer

Azure Storage with encryption

Answer

Azure Active Directory

Answer

Azure Policy

Question 8

Which Azure service provides a dedicated, hardware-isolated physical server for hosting virtual machines to meet compliance and licensing requirements?

Accepted Answer

Azure Dedicated Host. Azure Dedicated Host provides a single-tenant, hardware-isolated physical server dedicated to your Azure subscription. This ensures that virtual machines run on a server that is not shared with any other customer, meeting strict compliance and licensing requirements such as those for Windows Server per-core licensing or SQL Server licensing that require dedicated hardware.

Answer

Azure Isolated VM sizes

Answer

Azure Reserved Instances

Answer

Azure Spot VMs

Question 9

In cloud computing, what does 'consumption-based pricing' mean?

Accepted Answer

Paying only for the resources you actually use, measured by time, amount, or transactions. Consumption-based pricing is a cloud billing model where you pay only for the resources you consume, measured by metrics such as compute hours, storage GB-months, or number of transactions. This aligns with the operational expenditure (OpEx) model, allowing you to scale costs with usage without upfront commitments. Microsoft Azure implements this through pay-as-you-go pricing, where you are billed at the end of each billing cycle based on metered usage.

Answer

Paying a fixed monthly fee regardless of actual resource usage

Answer

Purchasing capacity upfront for a year at a discounted rate

Answer

Paying a per-user license fee for cloud software access

Question 10

An application needs to store session state that can be accessed by multiple web server instances. The state must be retrieved in under 1 millisecond. Which Azure service BEST meets this requirement?

Accepted Answer

Azure Cache for Redis. Azure Cache for Redis is an in-memory data store that provides extremely low-latency (sub-millisecond) read and write operations, making it ideal for storing session state that must be accessed quickly by multiple web server instances. Unlike disk-based storage services, Redis keeps data in RAM, ensuring consistent retrieval times under 1 millisecond even under load.

Answer

Azure SQL Database

Answer

Azure Blob Storage

Answer

Azure Table Storage

Question 11

Which Azure service analyzes patterns in telemetry data from Azure IoT Hub to detect anomalies and predict when equipment will fail?

Accepted Answer

Azure Time Series Insights. Azure Time Series Insights (TSI) is designed to ingest, store, and analyze time-series data from IoT devices, including telemetry from Azure IoT Hub. It provides built-in anomaly detection and pattern recognition capabilities, enabling predictive maintenance by identifying deviations that precede equipment failure.

Answer

Azure IoT Central

Answer

Azure Digital Twins

Answer

Azure Sphere

Question 12

A global e-commerce platform runs on Azure App Service in multiple regions. They need to route user traffic to the nearest region based on geographic location, and also provide automatic failover if a region becomes unavailable. Which Azure service includes these capabilities with integrated Web Application Firewall (WAF)?

Accepted Answer

Azure Front Door. Azure Front Door is a global, scalable entry point that uses the Microsoft global edge network to route user traffic to the nearest region based on geographic location (latency-based routing) and provides automatic failover across regions. It natively integrates Web Application Firewall (WAF) at the edge, protecting against common web exploits like SQL injection and cross-site scripting, making it the correct choice for this scenario.

Answer

Azure Traffic Manager

Answer

Azure Application Gateway

Answer

Azure Load Balancer

Question 13

Which Azure service helps organizations understand their compliance status against regulatory standards like ISO 27001, PCI DSS, and NIST?

Accepted Answer

Microsoft Defender for Cloud Regulatory Compliance. Microsoft Defender for Cloud Regulatory Compliance provides built-in compliance assessments against major regulatory standards such as ISO 27001, PCI DSS, and NIST. It continuously monitors your Azure environment and maps the compliance state of your resources to specific controls within each standard, offering a clear dashboard of your compliance posture.

Answer

Azure Security Center Secure Score

Answer

Azure Policy compliance view

Answer

Azure Advisor security recommendations

Question 14

Which Azure networking service allows applications to send notifications to iOS, Android, and Windows devices with a single API call?

Accepted Answer

Azure Notification Hubs. Azure Notification Hubs is a scalable push notification engine that enables sending notifications to any platform (iOS, Android, Windows, etc.) from a single API call. It abstracts the complexities of platform-specific notification services (e.g., APNs for iOS, FCM for Android, WNS for Windows) and handles device registration, template formatting, and delivery retries.

Answer

Azure Service Bus

Answer

Azure Event Grid

Answer

Azure Communication Services

Question 15

Which Azure service provides a managed caching layer to reduce database load and improve application response times?

Accepted Answer

Azure Cache for Redis. Azure Cache for Redis is a managed in-memory caching service based on the open-source Redis engine. It provides a high-throughput, low-latency data store that can temporarily hold frequently accessed data, thereby reducing the number of direct queries to a backend database and improving application response times. This makes it the correct choice for a managed caching layer.

Answer

Azure Cosmos DB

Answer

Azure SQL Database

Answer

Azure Table Storage