AZ-900 Practice Test 23 — 15 Questions

Question 1

A company wants to move from an on-premises data center to Azure. They currently budget for purchasing servers, networking equipment, and software licenses as a one-time capital expense. In Azure, they will pay a monthly fee based on the resources they use. What type of cloud benefit does this represent?

Accepted Answer

Operational expenditure (OpEx). Option C is correct because moving from a capital expense (CapEx) model—where servers, networking gear, and licenses are purchased upfront—to a pay-as-you-go monthly fee in Azure represents a shift to operational expenditure (OpEx). This cloud benefit allows the company to avoid large upfront investments and instead pay for only the compute, storage, and network resources consumed, aligning costs with usage.

Answer

High availability

Answer

Scalability

Answer

Fault tolerance

Question 2

A company wants to deploy a web app that scales automatically based on demand. They do not want to manage any virtual machines or the underlying infrastructure. They only want to upload their code and let the platform handle everything. Which Azure compute service should they choose?

Accepted Answer

Azure App Service. Azure App Service is a fully managed platform-as-a-service (PaaS) offering that enables developers to deploy web applications without managing virtual machines or underlying infrastructure. It provides built-in autoscaling, load balancing, and patching, allowing the company to simply upload their code and let the platform handle scaling based on demand.

Answer

Azure Virtual Machines

Answer

Azure Functions

Answer

Azure Container Instances

Question 3

A company wants to ensure that all new Azure resources in a subscription are automatically tagged with a 'Department' tag. Which Azure service should they use to enforce this requirement?

Accepted Answer

Azure Policy. Azure Policy is correct because it allows you to create, assign, and manage policies that enforce specific rules on your Azure resources. In this scenario, you can use a built-in or custom policy definition to require a 'Department' tag on all new resources, and Azure Policy will automatically evaluate and enforce this rule during resource creation, preventing non-compliant resources from being provisioned.

Answer

Azure Blueprints

Answer

Azure RBAC

Answer

Azure Resource Lock

Question 4

A company wants to monitor the performance of their Azure VMs and receive alerts when CPU usage exceeds 90%. Which Azure service should they use?

Accepted Answer

Azure Monitor. Azure Monitor is the correct service because it provides a comprehensive solution for collecting, analyzing, and acting on telemetry from Azure resources, including VMs. It includes metrics like CPU percentage and allows you to configure metric alerts that trigger when a threshold (e.g., 90% CPU usage) is exceeded. This directly meets the requirement for performance monitoring and alerting.

Answer

Azure Policy

Answer

Azure Security Center

Answer

Azure Cost Management

Question 5

A company uses multiple Azure subscriptions for development and production. The finance team wants to set a monthly budget of $1,000 for a specific dev subscription. When the actual cost reaches 80% of the budget, the team wants to receive an email alert. If the cost exceeds 100%, they want to automatically stop a specific virtual machine in that subscription to prevent overspending. Which Azure feature should the team use to automate the stopping of the VM when the budget is exceeded?

Accepted Answer

Azure Cost Management + Budgets with an action group configured to run a Runbook. Azure Cost Management + Budgets allows you to set a budget and configure alerts based on actual or forecasted cost thresholds. When the cost exceeds 100% of the budget, you can trigger an action group that runs an Azure Automation Runbook, which can be scripted to stop a specific virtual machine. This provides automated cost control without manual intervention.

Answer

Azure Policy with a Deny effect

Answer

Azure Advisor cost recommendations

Answer

Azure Resource Graph queries with Azure Monitor alerts

Question 6

A company wants to enforce a governance policy that only allows virtual machines of the SKU 'Standard_DS2_v2' to be deployed in their Azure subscription. If a user attempts to create a virtual machine with a different SKU (e.g., 'Standard_D2s_v3'), the deployment must be immediately rejected with an error, and the resource must not be created. Which Azure Policy effect should the team use to implement this requirement?

Accepted Answer

Deny. The Deny effect is the correct choice because it actively prevents the creation or deployment of resources that do not comply with the policy rule. In this scenario, when a user attempts to deploy a virtual machine with a SKU other than 'Standard_DS2_v2', the Deny effect immediately rejects the request and blocks the resource from being created, ensuring the governance policy is enforced without exception.

Answer

Append

Answer

Audit

Answer

DeployIfNotExists

Question 7

A company wants to move its on-premises applications to the cloud to benefit from the ability to quickly scale resources up or down based on demand. They want to pay only for what they use. This combination of characteristics is known as:

Accepted Answer

Elasticity. Elasticity is the correct term because it describes the ability to automatically scale computing resources up or down based on demand, combined with a pay-as-you-go pricing model. This allows the company to only pay for the resources they actually use, which is a core benefit of cloud computing.

Answer

High availability

Answer

Fault tolerance

Answer

Disaster recovery

Question 8

A company wants to ensure that all Azure resources are created within a specific set of approved regions. They want to automatically block any resource creation that is not in an approved region. Which Azure Policy effect should they use?

Accepted Answer

Deny. The Deny effect is correct because it actively blocks any resource creation or update that does not comply with the policy rule. In this scenario, the policy would evaluate the location property of the resource against the approved list, and if the region is not approved, the Deny effect prevents the deployment entirely, returning a 403 Forbidden error. This ensures that only resources in approved regions are created, meeting the company's requirement to automatically block non-compliant deployments.

Answer

Append

Answer

Audit

Answer

DeployIfNotExists

Question 9

A company wants to run some applications in its own on-premises datacenter for compliance reasons, while also using cloud services for burst capacity and development/testing. Which cloud deployment model should they adopt?

Accepted Answer

Hybrid cloud. The hybrid cloud model is correct because it combines on-premises infrastructure (private cloud) with public cloud services, enabling the company to keep sensitive applications in its own datacenter for compliance while using the public cloud for burst capacity and development/testing. This directly matches the scenario's requirement for a unified environment that spans both local and cloud resources.

Answer

Private cloud

Answer

Public cloud

Answer

Community cloud

Question 10

A hospital stores sensitive patient data in the cloud. They want to ensure that data remains secure and that the cloud provider has implemented strict physical security controls, such as biometric access and 24/7 surveillance at datacenters. Which aspect of the shared responsibility model does this describe?

Accepted Answer

Responsibility of the cloud provider for physical security. The shared responsibility model delineates that the cloud provider is responsible for the security 'of' the cloud, which includes physical infrastructure controls like biometric access and 24/7 surveillance at datacenters. This question specifically asks about physical security controls, which fall under the provider's domain regardless of the deployment model (IaaS, PaaS, or SaaS). Therefore, option B is correct because the provider must secure the physical premises housing the servers and storage.

Answer

Responsibility of the customer for network security

Answer

Responsibility of the customer for data classification

Answer

Responsibility of the customer for identity and access management

Question 11

A company wants to move from paying large upfront costs for hardware to a model where they only pay for what they use on a monthly basis. This represents a shift from CapEx to which type of expenditure?

Accepted Answer

Operational expenditure (OpEx). This scenario describes a shift from Capital Expenditure (CapEx), where large upfront costs are incurred for hardware, to Operational Expenditure (OpEx), where costs are based on actual usage and billed monthly. In cloud computing, OpEx aligns with the consumption-based model, where you pay only for resources consumed (e.g., compute hours, storage GB) without upfront commitments. This is a core financial benefit of cloud services like Azure, enabling variable costs instead of fixed capital investments.

Answer

Direct expenditure

Answer

Indirect expenditure

Answer

Capital expenditure

Question 12

A global e-commerce platform runs on Azure App Service in multiple regions. They need to route user traffic to the nearest region based on geographic location, and also provide automatic failover if a region becomes unavailable. Which Azure service includes these capabilities with integrated Web Application Firewall (WAF)?

Accepted Answer

Azure Front Door. Azure Front Door is a global, scalable entry point that uses the Microsoft global edge network to route user traffic to the nearest region based on geographic location (latency-based routing) and provides automatic failover across regions. It natively integrates Web Application Firewall (WAF) at the edge, protecting against common web exploits like SQL injection and cross-site scripting, making it the correct choice for this scenario.

Answer

Azure Traffic Manager

Answer

Azure Application Gateway

Answer

Azure Load Balancer

Question 13

A manufacturing company is building a web-based dashboard to display real-time production metrics from sensors. The development team wants to deploy the application without managing the underlying infrastructure, including the web server and operating system. The application uses ASP.NET Core. Which Azure service should they use?

Accepted Answer

Azure App Service. Azure App Service is the correct choice because it provides a fully managed platform for hosting web applications, including ASP.NET Core, without requiring the user to manage the underlying web server or operating system. It supports continuous deployment, auto-scaling, and built-in load balancing, making it ideal for a real-time dashboard that needs high availability and minimal operational overhead.

Answer

Azure Functions

Answer

Azure Kubernetes Service (AKS)

Answer

Azure Virtual Machines

Question 14

A global e-commerce company has web applications deployed on Azure virtual machines in the West US and West Europe regions. The company needs a single, global HTTP-based entry point that can perform SSL offloading, route requests based on the URL path (e.g., /api to one backend pool, /images to another), and provide a web application firewall (WAF) to protect against common web attacks. Additionally, the solution must automatically direct users to the closest regional deployment to minimize latency. Which Azure service should the company use?

Accepted Answer

Azure Front Door. Azure Front Door is the correct choice because it provides a global, HTTP/HTTPS-based entry point with SSL offloading, URL path-based routing to different backend pools, and a built-in web application firewall (WAF). It also uses Anycast-based routing to automatically direct users to the closest regional deployment, minimizing latency.

Answer

Azure Traffic Manager

Answer

Azure Application Gateway

Answer

Azure Load Balancer

Question 15

A retail company migrates its e-commerce platform to Azure Virtual Machines. The workload is seasonal, with high traffic during holiday sales and low traffic otherwise. To manage costs, the IT team configures Azure Automation to power off VMs during low-traffic periods and power them back on when demand increases. The company's monthly bill reflects charges only for the hours each VM was actually running; no charges are incurred for the time the VMs were in the 'Stopped (deallocated)' state. This consumption-based billing model is a direct example of which fundamental characteristic of cloud computing?

Accepted Answer

Measured service. The correct answer is C because the scenario describes a consumption-based billing model where charges are incurred only for the hours each VM is actually running, and no charges apply when VMs are in the 'Stopped (deallocated)' state. This directly exemplifies the 'measured service' characteristic of cloud computing, where resource usage (e.g., compute hours) is metered and billed based on actual consumption, enabling pay-as-you-go pricing.

Answer

Rapid elasticity

Answer

Resource pooling

Answer

Broad network access