AZ-900 Practice Test 24 — 15 Questions

Question 1

A company wants to track costs by department across multiple Azure subscriptions. They have tagged resources with 'Department' tags. However, some resources are missing tags. They want to see a report of costs grouped by department, including untagged resources. Which Azure tool should they use?

Accepted Answer

Azure Cost Management + Billing. Azure Cost Management + Billing provides native cost analysis and reporting capabilities that can group costs by custom tags (like 'Department') and includes an 'Untagged' category for resources missing the specified tag. This allows the company to see a complete cost breakdown by department, including untagged resources, across multiple subscriptions in a single view.

Answer

Azure Policy

Answer

Azure Resource Graph

Answer

Azure Advisor

Question 2

A company wants to track spending across different projects. They have multiple Azure subscriptions and need to assign costs to specific departments based on resource usage. Which Azure feature enables them to view and analyze costs by resource tags?

Accepted Answer

Azure Cost Management. Azure Cost Management provides tools to view, analyze, and optimize cloud spending. It supports filtering and grouping costs by resource tags, enabling you to assign costs to specific departments or projects based on tagged resource usage.

Answer

Azure Policy

Answer

Azure Advisor

Answer

Azure Monitor

Question 3

A company wants to protect their application against a failure that affects an entire data center within an Azure region. Which feature should they use to distribute their VMs across multiple physical locations within that region?

Accepted Answer

Availability Zones. Availability Zones are physically separate locations (each with independent power, cooling, and networking) within an Azure region. By deploying VMs across multiple zones, the application is protected from a failure that affects an entire data center, because each zone is a distinct data center or set of data centers.

Answer

Availability Set

Answer

Azure Site Recovery

Answer

Azure Load Balancer

Question 4

A multinational company has multiple Azure subscriptions for different business units. The central governance team wants to define a standardized environment that must be automatically applied to every new subscription. The standard must include a set of Azure Policy definitions (e.g., allowed regions), a specific Azure RBAC role assignment (e.g., a contributor access for a central security group), and a preconfigured resource group with a virtual network. The team wants to package all these components together so that they can be deployed consistently and updated centrally. Which Azure service should the team use?

Accepted Answer

Azure Blueprints. Azure Blueprints is the service designed to package together Azure Policy definitions, RBAC role assignments, and Azure Resource Manager templates (including resource groups and resources) into a single, versioned artifact that can be assigned to subscriptions. This enables organizations to enforce a consistent governance and compliance baseline across multiple subscriptions. Azure Policy alone cannot deploy RBAC assignments or resources. Azure Management Groups provide hierarchical organization and policy inheritance but do not deploy resources. ARM templates can deploy resources but cannot natively include policy or RBAC assignments as a cohesive package.

Answer

Azure Policy

Answer

Azure Management Groups

Answer

Azure Resource Manager templates

Question 5

A retail company experiences fluctuating customer traffic throughout the year. During peak seasons, traffic can increase by 300% for a few weeks. The company wants to pay only for the compute resources it uses, without needing to invest in permanent infrastructure to handle peak loads. Which cloud computing characteristic best supports this requirement?

Accepted Answer

Elasticity. Elasticity is the cloud computing characteristic that allows resources to automatically scale up or down based on demand. In this scenario, the retail company needs to handle a 300% traffic spike during peak seasons without permanently provisioning infrastructure, and elasticity enables dynamic provisioning and de-provisioning of compute resources to match the fluctuating load, ensuring they pay only for what they use.

Answer

High availability

Answer

Fault tolerance

Answer

Geo-redundancy

Question 6

A hospital is migrating patient data to the cloud. The hospital is responsible for managing who can access the data and for encrypting the data before upload. The cloud provider is responsible for securing the physical datacenters, network infrastructure, and hypervisor. This division of security responsibilities is described by which model?

Accepted Answer

Shared responsibility model. The shared responsibility model defines the division of security obligations between the cloud provider and the customer. In this scenario, the hospital (customer) is responsible for identity and access management (IAM) and data encryption at rest and in transit, while the cloud provider secures the physical datacenter, network infrastructure, and hypervisor. This clear separation of duties is the core of the shared responsibility model, which varies by service model (IaaS, PaaS, SaaS).

Answer

Defense in depth

Answer

Principle of least privilege

Answer

Zero trust model

Question 7

A multinational bank operates a critical financial application that must remain available even if an entire Azure region experiences a prolonged outage. The bank's compliance team mandates that the disaster recovery data must reside in a separate geographic location that is at least 300 miles away from the primary region to reduce the risk of correlated failures. The solution must use Azure's built-in data replication feature without requiring manual pairing of regions. Which Azure feature meets these requirements?

Accepted Answer

Azure Region Pair. Azure Region Pairs are designed to provide built-in disaster recovery by replicating data (e.g., geo-redundant storage) to a paired region that is at least 300 miles away, ensuring geographic separation without manual pairing. This meets the bank's compliance requirement for a separate location and automatic failover capability during a prolonged regional outage.

Answer

Azure Availability Zones

Answer

Azure Resource Manager

Answer

Azure Policy

Question 8

A company wants to use cloud services to temporarily increase compute capacity for a promotional event, then reduce resources afterward. They want to pay only for the extra resources used during that event. Which cloud benefit does this scenario best describe?

Accepted Answer

Scalability. This scenario describes scalability, specifically the ability to scale out (increase capacity) for a promotional event and then scale in (reduce resources) afterward, paying only for what is used. Azure Auto Scaling (e.g., Virtual Machine Scale Sets or Azure App Service autoscale) automatically adjusts compute resources based on demand, aligning with the pay-as-you-go model. The key is that resources are temporarily increased and then reduced, which is the hallmark of scalability, not just the ability to handle load.

Answer

High availability

Answer

Agility

Answer

Reliability

Question 9

A company wants to organize their Azure subscriptions into a hierarchy for policy and cost management. They have multiple departments, each with multiple subscriptions. What should they create first to establish this structure?

Accepted Answer

Management groups. Management groups are the correct first step because they provide a hierarchical structure above subscriptions, enabling you to organize multiple subscriptions into logical groupings for policy and cost management. By creating management groups first, you can then apply Azure Policy and cost controls at the management group level, which automatically cascades to all child subscriptions and resource groups. This aligns with the Azure governance hierarchy: management groups → subscriptions → resource groups → resources.

Answer

Resource groups

Answer

Policies

Answer

Subscriptions

Question 10

A global consulting firm has offices in New York, London, and Tokyo. They deployed a document management system on Azure App Service. Consultants need to access the system from any location worldwide using laptops or smartphones over public Wi-Fi or cellular networks, without needing a VPN connection. After deployment, all consultants can successfully log in and use the application from any internet-connected device. Which characteristic of cloud computing does this scenario best illustrate?

Accepted Answer

Broad network access. This scenario best illustrates broad network access because the document management system is accessible over the internet from any location using laptops or smartphones without requiring a VPN. Broad network access means resources can be accessed via standard network protocols (e.g., HTTPS) from a wide range of devices, including mobile phones and laptops, over public networks like Wi-Fi or cellular. The consultants' ability to log in and use the application from any internet-connected device directly demonstrates this characteristic.

Answer

High availability

Answer

Resource pooling

Answer

Rapid elasticity

Question 11

A development team wants to deploy a microservices-based application using containers. They want to orchestrate the containers with automatic scaling and rolling updates, but they want to avoid managing the underlying infrastructure such as virtual machines. Which Azure compute service meets these requirements?

Accepted Answer

Azure Kubernetes Service (AKS). Azure Kubernetes Service (AKS) is the correct choice because it provides a managed Kubernetes orchestration platform that handles container deployment, automatic scaling, and rolling updates while abstracting away the underlying virtual machine infrastructure. AKS manages the control plane for you, so you only need to manage the agent nodes (or use virtual nodes for serverless containers), meeting the requirement to avoid managing VMs directly.

Answer

Azure Virtual Machines

Answer

Azure Container Instances

Answer

Azure App Service

Question 12

A multinational corporation must ensure that every new Azure subscription automatically conforms to corporate security and compliance baselines. The team wants to deploy a predefined set of Azure resources (e.g., a central logging storage account, a network security group configuration) and apply a standard set of Azure Policy definitions (e.g., restricting allowed VM sizes, enforcing encryption) to any new subscription. They want to manage these as a single, versioned package that can be updated and re-assigned to existing subscriptions. Which Azure service should they use?

Accepted Answer

Azure Blueprints. Azure Blueprints is the service that enables the orchestrated deployment of resource templates (such as ARM templates) and policy assignments as a single, versioned package. It allows organizations to define a repeatable set of Azure resources and policies that can be applied to new or existing subscriptions to ensure consistency and compliance. Azure Policy alone can enforce rules but cannot deploy resources. Azure Management Groups only organize subscriptions for hierarchical management. Azure Resource Manager templates can deploy resources but cannot natively enforce policies or be versioned as a governance package in the same way as Blueprints.

Answer

Azure Policy

Answer

Azure Management Groups

Answer

Azure Resource Manager templates

Question 13

A multinational corporation wants to deploy a standard set of Azure resources—including virtual networks, virtual machines, and SQL databases—to multiple departments. Each deployment must automatically include assigned Azure Policy definitions to enforce security rules, role-based access control (RBAC) assignments for the operations team, and a predefined naming convention. The solution must provide a single, repeatable package that can be versioned and updated centrally. Which Azure service should the company use?

Accepted Answer

Azure Blueprints. Azure Blueprints is designed to orchestrate the deployment of resource templates (such as ARM templates or Azure Resource Manager templates) along with governance artifacts like Azure Policy assignments, RBAC role assignments, and resource groups. It provides a versioned, repeatable definition that can be assigned to subscriptions or management groups, ensuring consistent and compliant deployments across an organization. Azure Policy alone only enforces rules but does not orchestrate resource deployment. ARM templates define the infrastructure but lack built-in governance artifact management. Management Groups provide hierarchical organization but do not package deployments with policies and RBAC.

Answer

Azure Policy

Answer

Azure Resource Manager templates

Answer

Azure Management Groups

Question 14

A hospital stores patient health records in the cloud. They are responsible for encrypting the data before storing it, while the cloud provider is responsible for securing the physical datacenter. Which cloud model is being described?

Accepted Answer

Shared responsibility model. The scenario describes a division of security responsibilities: the hospital encrypts data (customer responsibility) and the cloud provider secures the physical datacenter (provider responsibility). This is the core definition of the shared responsibility model, where security obligations are split based on the cloud service model (IaaS, PaaS, SaaS) and the customer's control over the data and configurations.

Answer

Community cloud

Answer

Hybrid cloud

Answer

Private cloud

Question 15

A company wants to track resource usage across departments and projects. They have multiple Azure subscriptions. They need to assign costs to specific departments based on resource usage. Which Azure feature enables them to view and analyze costs by resource tags?

Accepted Answer

A) Azure Cost Management + Billing. Azure Cost Management + Billing provides the tools to view, analyze, and allocate costs across subscriptions and resources. By enabling tag inheritance and using cost analysis filters, you can group costs by resource tags (e.g., Department or Project) to assign spending to specific departments. This is the correct feature because it directly supports cost tracking and allocation by tags.

Answer

B) Azure Policy

Answer

C) Azure Tags

Answer

D) Azure Resource Groups