AZ-900 Practice Test 36 — 15 Questions

Question 1

What is a key advantage of using Azure Availability Zones over a single data center deployment?

Accepted Answer

Protection against single data center failures with a 99.99% SLA. Azure Availability Zones are physically separate data centers within an Azure region, each with independent power, cooling, and networking. By deploying resources across multiple zones, you protect your application from a single data center failure, and Azure guarantees 99.99% VM uptime SLA when VMs are deployed across two or more zones. This is a key advantage over a single data center deployment, which would have no such cross-zone redundancy.

Answer

Resources deployed across Availability Zones are cheaper than single-zone deployment

Answer

Resources are automatically replicated to a secondary Azure region

Answer

Availability Zones eliminate the need for load balancing

Question 2

A company runs a web application on Azure App Service. They want to improve performance by caching static content and frequently accessed data closer to users in different geographic locations. Which Azure service should they use?

Accepted Answer

Azure Content Delivery Network. Azure Content Delivery Network (CDN) caches static content and frequently accessed data at edge nodes located closer to users, reducing latency and improving performance for geographically distributed audiences. This directly addresses the requirement to serve cached content from locations near the end users, offloading origin traffic from the App Service.

Answer

Azure Traffic Manager

Answer

Azure Application Gateway

Answer

Azure Front Door

Question 3

Which Azure networking feature enables resources in different Azure virtual networks to communicate as if they were on the same network?

Accepted Answer

Azure Virtual Network Peering. Azure Virtual Network Peering (Option B) connects two or more Azure virtual networks (VNets) directly using the Microsoft backbone infrastructure, enabling resources in each VNet to communicate with each other as if they were on the same network. Unlike a VPN gateway, peering does not require a public internet hop or encryption overhead, and it supports transitive routing only when explicitly configured via a hub-and-spoke topology. This makes it the correct choice for low-latency, high-bandwidth cross-VNet communication.

Answer

Azure VPN Gateway

Answer

Azure ExpressRoute

Answer

Azure Private Link

Question 4

A company is considering moving its on-premises workloads to Azure. The CFO wants to understand how Azure pricing works. Which pricing model allows them to pay only for what they use, with no upfront costs or termination fees?

Accepted Answer

Pay-as-you-go. (Pay-as-you-go) is correct because it is the Azure pricing model that charges customers only for the resources they consume, with no upfront commitment or termination fees. This model provides maximum flexibility, allowing the company to scale usage up or down as needed without financial penalties, directly addressing the CFO's requirement for a usage-based cost structure.

Answer

Reserved instances

Answer

Spot VMs

Answer

Hybrid Benefit

Question 5

A company is moving to the cloud to achieve economies of scale. Which of the following best describes how cloud computing enables economies of scale?

Accepted Answer

Cloud providers purchase large quantities of hardware, reducing per-unit costs, which are passed to customers.. Economies of scale in cloud computing are achieved because providers like AWS, Microsoft Azure, or Google Cloud purchase hardware (servers, networking gear, storage) in massive volumes, negotiating lower per-unit costs from vendors. These savings are passed to customers via lower pay-as-you-go prices, making cloud services cheaper than what an individual company would pay for equivalent on-premises infrastructure.

Answer

Customers can reserve resources in advance for a discount.

Answer

Multiple customers share the same physical hardware, reducing security.

Answer

Customers only pay for resources they use, reducing waste.

Question 6

A company needs to ensure that all Azure resources in a subscription are created only in specific approved regions. Which Azure feature should they implement?

Accepted Answer

Azure Policy with 'Allowed locations' policy. Azure Policy with the 'Allowed locations' policy definition is the correct choice because it enforces organizational compliance by restricting the Azure regions where resources can be deployed. This policy evaluates all resource creation requests against a defined list of approved regions and denies any request that does not match, ensuring that all resources in the subscription are created only in the specified approved locations.

Answer

Azure Resource Locks

Answer

Azure RBAC

Answer

Azure Blueprints

Question 7

A company is deploying a critical application on Azure Virtual Machines. They need to ensure that the application remains available during Azure platform updates. They also want to distribute the VMs across fault domains within an availability set. What is the primary purpose of fault domains?

Accepted Answer

To distribute VMs across different power and cooling racks. Fault domains represent groupings of hardware that share a common power source and network switch. By distributing VMs across multiple fault domains within an availability set, Azure ensures that if a power or cooling failure occurs in one rack, only the VMs in that fault domain are affected, keeping the application available on VMs in other fault domains.

Answer

To distribute VMs across different Azure regions

Answer

To distribute VMs across different availability zones

Answer

To distribute VMs across different virtual networks

Question 8

Which Azure storage service provides a hierarchical namespace and is optimized for big data analytics workloads?

Accepted Answer

Azure Data Lake Storage Gen2. Azure Data Lake Storage Gen2 (ADLS Gen2) is the correct answer because it combines a hierarchical namespace with Azure Blob Storage, enabling POSIX-like access control and directory-level operations. This architecture is specifically optimized for big data analytics workloads, such as those run by Apache Spark, Hadoop, and Azure HDInsight, by providing high-throughput and low-latency data access.

Answer

Azure Table Storage

Answer

Azure Files

Answer

Azure Queue Storage

Question 9

Which Azure service provides a globally distributed, multi-model database service with single-digit millisecond read latency?

Accepted Answer

Azure Cosmos DB. Azure Cosmos DB is a globally distributed, multi-model database service that guarantees single-digit millisecond read latency at the 99th percentile, regardless of the region or consistency level. It supports multiple data models (document, key-value, graph, column-family) and provides turnkey global distribution across any number of Azure regions.

Answer

Azure SQL Database

Answer

Azure Database for MySQL

Answer

Azure Cache for Redis

Question 10

Which Azure service provides a low-code platform for building business applications and automating workflows?

Accepted Answer

Microsoft Power Platform. Microsoft Power Platform is the correct answer because it is explicitly designed as a low-code platform for building business applications and automating workflows. It includes Power Apps for app creation, Power Automate for workflow automation, and Power BI for analytics, all with minimal hand-coding required.

Answer

Azure Logic Apps

Answer

Azure Functions

Answer

Azure App Service

Question 11

Which Azure storage service is optimized for reading and writing large amounts of sequential data, commonly used for big data analytics?

Accepted Answer

Azure Data Lake Storage Gen2. Azure Data Lake Storage Gen2 is optimized for high-throughput analytics workloads that require reading and writing large amounts of sequential data. It combines a hierarchical namespace with Azure Blob Storage's scalable object storage, enabling POSIX-like access control and directory-level operations that are essential for big data frameworks like Apache Spark and Hadoop.

Answer

Azure Blob Storage (Cool tier)

Answer

Azure Files Premium

Answer

Azure Queue Storage

Question 12

A company wants to receive notifications when Azure services in their region experience an outage or planned maintenance that might affect their resources. Which Azure service should they set up alerts for?

Accepted Answer

Azure Service Health. Azure Service Health is the correct service because it provides personalized alerts and notifications specifically for Azure service issues—such as outages and planned maintenance—that affect your subscriptions and resources in a given region. It combines global service health information with region-specific and resource-specific impacts, allowing you to configure alerts via Azure Service Health alerts (formerly known as Service Health Alerts).

Answer

Azure Monitor

Answer

Azure Advisor

Answer

Azure Resource Health

Question 13

Which Azure service provides a content delivery network (CDN) to cache static content at edge locations close to users?

Accepted Answer

Azure CDN. Azure CDN (Content Delivery Network) is the dedicated Azure service designed to cache static content—such as images, CSS, JavaScript files, and videos—at strategically placed edge nodes (Points of Presence, or PoPs) around the world. By serving content from the edge location closest to the user, Azure CDN reduces latency, offloads origin server traffic, and improves load times for global audiences. This directly matches the question's requirement for a service that caches static content at edge locations.

Answer

Azure Traffic Manager

Answer

Azure Front Door

Answer

Azure Application Gateway

Question 14

Which Azure service provides a way to implement role-based access control for Kubernetes cluster resources?

Accepted Answer

AKS with Azure AD integration and Kubernetes RBAC. B is correct because Azure Kubernetes Service (AKS) integrates with Microsoft Entra ID (Azure AD) to provide identity and authentication, and then uses Kubernetes RBAC (Role-Based Access Control) to authorize actions on cluster resources. This combination allows you to define fine-grained permissions for users, groups, or service principals against Kubernetes objects like pods, namespaces, and deployments, using standard Kubernetes Role and ClusterRole objects.

Answer

Azure RBAC at the subscription level

Answer

Azure Policy for Kubernetes

Answer

Network Security Groups on AKS node pools

Question 15

Which Azure AI service can analyze images and return information about people, objects, brands, and text within those images?

Accepted Answer

Azure Computer Vision. Azure Computer Vision is the correct service because it is specifically designed to extract rich information from images, including the detection of people, objects, brands, and embedded text (via OCR). It provides a comprehensive set of pre-built image analysis capabilities without requiring custom training, making it the appropriate choice for this general-purpose scenario.

Answer

Azure Face API

Answer

Azure Custom Vision

Answer

Azure Form Recognizer