AZ-900 Practice Test 3 — 10 Questions

Question 1

A financial services company must migrate a critical application to Azure. Regulatory compliance requires that the virtual machines (VMs) hosting this application run on physical servers that are dedicated solely to the company and not shared with any other Azure customer. The company needs full control over server hardware maintenance, including the ability to schedule updates and isolate the environment at the physical layer. Which Azure compute solution should the company use?

Accepted Answer

Azure Dedicated Host. Azure Dedicated Host provides physical servers dedicated to a single Azure subscription, ensuring that no other customer's VMs share the hardware. This meets the regulatory requirement for physical isolation and gives the company full control over server hardware maintenance, including the ability to schedule updates and manage the host lifecycle independently.

Answer

Azure Reserved Instances

Answer

Azure Virtual Machine Scale Sets

Answer

Azure Confidential Computing

Question 2

A multinational company has a strict data residency requirement: all Azure virtual machines must be deployed only in the East US or West Europe Azure regions. The IT governance team wants to enforce this rule automatically so that any attempt to create a virtual machine in any other region is blocked immediately at the time of deployment. Users must receive a clear error message if they try to create a VM in a disallowed region. Which Azure feature should the governance team configure to meet this requirement?

Accepted Answer

Configure an Azure Policy with the Deny effect assigned to the subscription scope.. Azure Policy with the Deny effect is the correct choice because it enforces organizational rules by evaluating resource properties during deployment and blocking any non-compliant request. In this scenario, a policy can be defined to deny virtual machine creation in any region other than East US or West Europe, and the Deny effect ensures the deployment fails with a clear error message, meeting the real-time enforcement requirement.

Answer

Create a resource lock on the subscription to prevent all resource creation.

Answer

Assign an Azure RBAC role that denies create permissions for VMs in disallowed regions.

Answer

Set up a budget alert in Cost Management to notify when a VM is created in a disallowed region.

Question 3

A company wants to replicate its on-premises production environment to Azure for disaster recovery purposes. In the event of an on-premises outage, they can quickly start the replicated environment in Azure. Which cloud benefit does this best describe?

Accepted Answer

Business continuity. This scenario describes business continuity (C), which ensures that an organization can continue operations during and after a disaster. By replicating the on-premises environment to Azure and enabling rapid startup in the event of an outage, the company is implementing a disaster recovery (DR) strategy—a core component of business continuity. Azure Site Recovery (ASR) is the specific service that orchestrates replication, failover, and failback to meet recovery time objectives (RTO) and recovery point objectives (RPO).

Answer

Scalability

Answer

High availability

Answer

Elasticity

Question 4

A company wants to use a cloud service that provides a fully managed database, including automated backups, patching, and high availability, without managing any underlying servers. Which cloud service model is this?

Accepted Answer

Platform as a Service (PaaS). This scenario describes a fully managed database service where the provider handles backups, patching, and high availability, and the customer does not manage any underlying servers. This is the definition of Platform as a Service (PaaS), which provides a managed platform (including database engines like Azure SQL Database) where the customer only manages data and schema, while the provider handles the OS, runtime, and infrastructure.

Answer

Infrastructure as a Service (IaaS)

Answer

Software as a Service (SaaS)

Answer

Container as a Service (CaaS)

Question 5

A retail company runs an e-commerce website on Azure. The website experiences highly unpredictable traffic with occasional sudden spikes (e.g., during flash sales). Outside of sales events, the website has low traffic. The company wants to automatically increase the number of virtual machines during peak demand and automatically reduce them when demand subsides, without any manual intervention. The primary goal is to handle variable demand efficiently while minimizing cost. Which cloud computing characteristic best describes this capability?

Accepted Answer

Elasticity. Elasticity is the correct answer because it specifically refers to the ability of a cloud system to automatically provision and de-provision resources (such as virtual machines) in response to real-time demand changes. In this scenario, the e-commerce website needs to scale out during flash sales and scale in during low traffic periods without manual intervention, which is the defining characteristic of elasticity. This capability directly supports the goal of handling variable demand efficiently while minimizing cost, as resources are only consumed when needed.

Answer

High availability

Answer

Fault tolerance

Answer

Scalability

Question 6

A development team is building a proof-of-concept microservice that is packaged as a Docker container. They want to deploy it to Azure with the fastest provisioning time and the least operational overhead. The team does not need to manage virtual machines, orchestrate multiple containers, or configure scaling rules. Which Azure compute service should they use?

Accepted Answer

Azure Container Instances (ACI). Azure Container Instances (ACI) is the correct choice because it allows you to deploy a single Docker container directly to Azure without managing any underlying virtual machines or orchestration. It offers the fastest provisioning time (typically seconds) and the least operational overhead, as it is a serverless platform that automatically handles container startup, networking, and resource allocation. The team's requirement to avoid managing VMs, orchestrating multiple containers, or configuring scaling rules aligns perfectly with ACI's design for simple, isolated container workloads.

Answer

Azure Kubernetes Service (AKS)

Answer

Azure Virtual Machines

Answer

Azure Batch

Question 7

A healthcare organization migrates its patient data management application to Azure. The organization's compliance team learns that Azure's underlying physical infrastructure, including servers and storage, is shared by many customers globally. The team is concerned about data leakage and wants to understand which fundamental cloud computing characteristic allows the provider to share physical hardware among multiple tenants while ensuring that each tenant's data and compute resources remain logically isolated and secure from one another.

Accepted Answer

Resource pooling. Resource pooling is the correct answer because it is the fundamental cloud computing characteristic that enables a provider to serve multiple customers (tenants) from the same physical hardware while maintaining logical isolation. In Azure, this is achieved through hypervisor-level virtualization (e.g., Hyper-V) where each tenant's virtual machines and data are isolated at the kernel and memory level, preventing cross-tenant data leakage even though the underlying servers and storage are shared.

Answer

Rapid elasticity

Answer

Measured service

Answer

Broad network access

Question 8

A multinational company uses Azure management groups to organize its subscriptions. The company has a root management group (tenant root group) containing three child management groups: 'Finance', 'HR', and 'IT'. Each child management group contains multiple subscriptions. The global governance team needs to enforce an Azure Policy that restricts all resource deployments across every subscription in the organization to only the 'West US' and 'East US' regions. The policy must automatically apply to any new subscriptions that are created under any management group in the future. The team wants to assign the policy once and have it affect all current and future subscriptions with minimal administrative overhead. At which Azure scope should the team assign the policy?

Accepted Answer

The root management group. Assigning the policy to the root management group ensures it is inherited by all child management groups (Finance, HR, IT) and their subscriptions, including any new subscriptions created in the future. This approach enforces the allowed regions policy across the entire tenant with a single assignment, minimizing administrative overhead. Azure Policy inheritance flows from the root management group down through all levels of the hierarchy.

Answer

Each subscription individually

Answer

Each child management group (Finance, HR, IT) individually

Answer

A single resource group

Question 9

A company wants to run a containerized application that responds to HTTP requests. They want to deploy it without managing any virtual machines or orchestration. Which Azure service is the simplest option?

Accepted Answer

Azure Container Instances. Azure Container Instances (ACI) is the simplest option because it allows you to run a containerized application directly in Azure without managing any underlying virtual machines or orchestration. ACI automatically starts the container, assigns a public IP address, and handles HTTP requests on port 80/443, making it ideal for event-driven or stateless workloads that need rapid deployment.

Answer

Azure Kubernetes Service

Answer

Azure Virtual Machines

Answer

Azure App Service

Question 10

A financial institution must keep sensitive customer financial data on-premises to comply with regulatory requirements. However, they also want to use Azure to run compute-intensive analytics on anonymized datasets, taking advantage of scalable resources without managing physical servers. Which cloud deployment model should they adopt?

Accepted Answer

Hybrid cloud. The hybrid cloud model is correct because it allows the financial institution to keep sensitive customer data on-premises for regulatory compliance while leveraging Azure's public cloud for compute-intensive analytics on anonymized datasets. This approach combines the security and control of a private cloud (on-premises) with the scalability and managed services of a public cloud, without requiring the organization to manage physical servers for the analytics workload.

Answer

Public cloud

Answer

Private cloud

Answer

Community cloud