AZ-900 Practice Test 25 — 15 Questions

Question 1

What is the purpose of the Azure Total Cost of Ownership (TCO) Calculator?

Accepted Answer

To compare the cost of running workloads on-premises versus on Azure. The Azure TCO Calculator is designed to help organizations estimate the cost savings of migrating on-premises workloads to Azure by comparing the total cost of ownership (including hardware, software, labor, and facility costs) of running those workloads on-premises versus running them on Azure. It does not generate a monthly bill for existing services or provide a cost estimate for new deployments; instead, it focuses on the financial comparison between on-premises and cloud environments.

Answer

To calculate the monthly bill for existing Azure services

Answer

To estimate the cost of new Azure services before deployment

Answer

To allocate Azure costs to different departments

Question 2

Which Azure service provides a fully managed message-passing service for disconnecting front-end web apps from back-end processors?

Accepted Answer

Azure Queue Storage. Azure Queue Storage is a fully managed message-passing service that enables asynchronous communication between application components, such as decoupling a front-end web app from a back-end processor. It stores messages in a durable queue, allowing the front-end to send work items without waiting for the back-end to process them, which improves scalability and reliability.

Answer

Azure Traffic Manager

Answer

Azure CDN

Answer

Azure VNet

Question 3

Which Azure service provides automated build, test, and deployment pipelines for applications using a fully managed service?

Accepted Answer

Azure Pipelines. Azure Pipelines is a fully managed continuous integration and continuous delivery (CI/CD) service that automates the build, test, and deployment of applications to any target. It integrates with GitHub, Azure Repos, and other version control systems to trigger pipelines on code changes, and supports multi-stage YAML-based definitions for complex workflows.

Answer

Azure Container Registry

Answer

Azure Logic Apps

Answer

Azure App Configuration

Question 4

Which of the following is an example of a 'hybrid cloud' deployment?

Accepted Answer

Running customer-facing applications on Azure while keeping sensitive HR data on on-premises servers. A hybrid cloud deployment combines public cloud resources (Azure) with on-premises infrastructure, connected via technologies like VPNs or Azure ExpressRoute. Running customer-facing apps on Azure while keeping sensitive HR data on-premises exemplifies this blend, allowing organizations to maintain compliance or low latency for critical data while leveraging cloud scalability.

Answer

Using only Azure for all company workloads

Answer

Using both Azure and AWS for different workloads

Answer

Storing data only in the cloud with no on-premises infrastructure

Question 5

A company needs to store massive amounts of unstructured data, such as videos and images, that will be accessed over the internet. The data must be highly durable and available. Which Azure service should they use?

Accepted Answer

Azure Blob Storage. Azure Blob Storage is designed for storing massive amounts of unstructured data, such as videos and images, and provides high durability (99.9999999999% with LRS) and availability through geo-redundancy options. It is accessible over the internet via HTTP/HTTPS, making it ideal for serving content globally.

Answer

Azure Files

Answer

Azure Disk Storage

Answer

Azure Queue Storage

Question 6

A company has multiple Azure subscriptions for different departments. They want to track and analyze costs, and allocate costs to each department based on tags applied to resources. Which Azure tool should they use?

Accepted Answer

Azure Cost Management + Billing. Azure Cost Management + Billing provides native capabilities to monitor, analyze, and optimize cloud costs. It supports filtering and grouping costs by custom tags applied to resources, enabling allocation of charges to specific departments or cost centers. This directly meets the requirement to track and allocate costs based on tags.

Answer

Azure Policy

Answer

Azure Blueprints

Answer

Azure Advisor

Question 7

What is a Service Principal in Azure Active Directory?

Accepted Answer

An identity for applications and automated processes to access Azure resources. A Service Principal is an identity created for use with applications, hosted services, and automated tools to access Azure resources. It functions as a security principal that can be assigned roles (via Azure RBAC) to authenticate and authorize operations, enabling secure, programmatic access without requiring a user account.

Answer

A special high-privilege user account for Azure administrators

Answer

A role that grants full access to all Azure resources in a subscription

Answer

A security group for organizing users with similar access needs

Question 8

A company wants to view a consolidated list of all Azure resources across multiple subscriptions and query them using Kusto Query Language (KQL). Which Azure tool should they use?

Accepted Answer

Azure Resource Graph. Azure Resource Graph is the correct tool because it provides a powerful, queryable view of all Azure resources across multiple subscriptions using Kusto Query Language (KQL). It allows you to explore, discover, and analyze resource properties and relationships at scale, making it ideal for consolidated inventory and governance queries.

Answer

Azure Resource Manager

Answer

Azure Monitor

Answer

Azure Policy

Question 9

What is a key difference between Azure Public regions and Azure Government regions?

Accepted Answer

Azure Government regions are isolated, restricted-access clouds for US government compliance. Azure Government regions are isolated from Azure's commercial regions and are dedicated to US government agencies and their partners. They comply with specific government regulations (FedRAMP, DoD, ITAR) and are physically and logically separated from commercial Azure, with access restricted to screened US persons.

Answer

Azure Government regions provide faster network speeds

Answer

Azure Government regions have more available services than commercial regions

Answer

Azure Government regions offer lower pricing than commercial regions

Question 10

A company runs a large data analytics job for a few hours each week. They want to use Azure virtual machines with the lowest possible cost, accepting that the VMs may be reclaimed by Azure at any time. Which pricing option should they choose?

Accepted Answer

Spot VMs. Spot VMs allow you to use unused Azure compute capacity at a significant discount (up to 90% compared to pay-as-you-go) but can be evicted by Azure when capacity is needed elsewhere. This makes them ideal for interruptible, batch-style workloads like a weekly data analytics job that can tolerate interruptions and resume later.

Answer

Reserved Instances

Answer

Pay-as-you-go

Answer

Dedicated Hosts

Question 11

A company has deployed multiple Azure virtual machines for a production workload. The IT administrator wants a centralized list of prioritized recommendations to improve the security, high availability, and cost efficiency of the virtual machines. The administrator also wants to be able to view the potential impact of implementing each recommendation. Which Azure service should the administrator use?

Accepted Answer

Azure Advisor. Azure Advisor is the correct service because it provides a centralized, personalized list of best practice recommendations across five categories: Reliability, Security, Performance, Cost, and Operational Excellence. It specifically offers prioritized recommendations for Azure VMs with an 'Impact' column (High, Medium, Low) that indicates the potential effect of implementing each suggestion, directly matching the administrator's requirement for security, high availability, and cost efficiency improvements with impact visibility.

Answer

Azure Security Center

Answer

Azure Monitor

Answer

Azure Policy

Question 12

A multinational e-commerce company runs its customer-facing web application on Azure virtual machines deployed in two Azure regions: East US and West Europe. The company wants to automatically route user traffic to the nearest regional deployment based on the user's geographic location. Additionally, if one region becomes unavailable, all traffic should automatically be redirected to the remaining healthy region. The company wants a solution that works at the DNS level and does not require terminating HTTPS traffic at the routing layer. Which Azure service should they use?

Accepted Answer

Azure Traffic Manager. Azure Traffic Manager is a DNS-based traffic load balancer that routes incoming DNS requests to the nearest available endpoint based on geographic location (using the Performance traffic-routing method) and automatically fails over to the next healthy region when a region becomes unavailable. It operates at the DNS level, so it does not terminate HTTPS traffic, meeting the requirement to avoid SSL/TLS termination at the routing layer.

Answer

Azure Load Balancer

Answer

Azure Application Gateway

Answer

Azure Front Door

Question 13

A company is planning to migrate its customer relationship management (CRM) system to the cloud. The company is evaluating three service models: deploying the CRM on Azure Virtual Machines (IaaS), using Azure App Service to host a custom CRM web application (PaaS), and subscribing to a cloud-based CRM software like Dynamics 365 (SaaS). According to the Microsoft shared responsibility model, which of the following statements accurately describes the division of security responsibilities across these three options?

Accepted Answer

In all three models, Microsoft is responsible for securing the physical datacenter and network infrastructure. For IaaS, the customer is responsible for the guest OS and applications; for PaaS, the customer is responsible for the application code and data; for SaaS, the customer is responsible for data and user accounts.. It accurately reflects the Microsoft shared responsibility model across IaaS, PaaS, and SaaS. In all three models, Microsoft is responsible for the physical datacenter and network infrastructure. For IaaS (Azure VMs), the customer manages the guest OS and applications; for PaaS (Azure App Service), the customer manages the application code and data; for SaaS (Dynamics 365), the customer manages data and user accounts. This division aligns with the principle that responsibility shifts from the customer to Microsoft as the service model moves from IaaS to SaaS.

Answer

In IaaS, Microsoft is responsible for the guest OS; in PaaS, Microsoft is responsible for the application code; in SaaS, the customer is responsible only for data.

Answer

In IaaS, the customer is responsible for everything from the physical infrastructure up; in PaaS, Microsoft is responsible for the application runtime and the customer is responsible only for data; in SaaS, Microsoft is responsible for everything.

Answer

In all three models, the customer is responsible for securing all application code and data, while Microsoft secures the underlying hardware and operating system.

Question 14

Match each Azure pricing model to its definition.

Accepted Answer

Pay-as-you-go: You pay only for what you use, with no upfront commitment.. Correct matches: Pay-as-you-go = pay per use; Reserved Instances = prepay for discount; Spot VMs = discounted but evictable capacity; Azure Hybrid Benefit = use existing licenses. Common confusions involve swapping prepayment with pay-as-you-go or confusing spot with license benefits.

Answer

Pay-as-you-go: You prepay for 1 or 3 years to get a discounted rate.

Answer

Spot Virtual Machines: You use your existing on-premises licenses to save costs.

Question 15

A company provides a software-as-a-service (SaaS) application to multiple enterprise customers. Each customer's usage of compute and storage resources is tracked separately. At the end of each month, the company generates detailed invoices that reflect each customer's exact resource consumption, including CPU hours, storage GB-months, and data transfer. The cloud provider automatically measures all resource usage and makes the data available through an API. Which essential characteristic of cloud computing does this scenario primarily demonstrate?

Accepted Answer

Measured service. The scenario describes a SaaS provider that tracks each customer's exact resource consumption (CPU hours, storage GB-months, data transfer) and generates invoices based on that metered usage. This aligns directly with the 'measured service' characteristic of cloud computing, where resource usage is automatically monitored, controlled, and reported, providing transparency for both the provider and consumer. The cloud provider's API making usage data available is a key enabler of this metering and billing capability.

Answer

On-demand self-service

Answer

Broad network access

Answer

Resource pooling