AZ-900 Practice Test 40 — 15 Questions

Question 1

What is the primary benefit of Azure Management Groups in a large enterprise with hundreds of subscriptions?

Accepted Answer

Applying governance policies and RBAC to all subscriptions in a hierarchy at once. Azure Management Groups allow you to organize subscriptions into a hierarchy and apply governance policies (via Azure Policy) and role-based access control (RBAC) at the management group level, which then cascades down to all subscriptions and resources within that group. This enables consistent governance across hundreds of subscriptions without needing to configure each one individually, which is the primary benefit for large enterprises.

Answer

Automatically reducing the cost of Azure subscriptions

Answer

Merging multiple subscriptions into a single billing account

Answer

Allowing resources in different subscriptions to share the same virtual network

Question 2

A company wants to ensure their application remains available even if an entire Azure region experiences an outage. Which Azure feature should they implement?

Accepted Answer

Region pairs. Region pairs are designed to provide resilience against a complete Azure region outage by pairing each region with another region in the same geography (e.g., East US paired with West US). If one region fails, Azure can fail over services like storage (GRS) and SQL Database (Geo-Replication) to the paired region, ensuring application availability. This is the only option that protects against an entire region failure, as it leverages physically separate datacenters with independent power, cooling, and networking.

Answer

Availability sets

Answer

Availability zones

Answer

Load balancer

Question 3

Which Azure region feature pairs two regions together for business continuity and disaster recovery?

Accepted Answer

Azure Region Pairs. Azure Region Pairs are designed to provide business continuity and disaster recovery by pairing two regions within the same geography (e.g., East US and West US) that are at least 300 miles apart. This ensures that if a natural disaster or regional outage occurs, one region in the pair can take over workloads, and Azure prioritizes the recovery of paired regions during outages. The pairing also enables data replication services like Azure Site Recovery and geo-redundant storage (GRS) to automatically replicate data across the pair.

Answer

Availability Zones

Answer

Azure Data Centers

Answer

Sovereign Regions

Question 4

Which statement accurately describes the consumption-based pricing model in cloud computing?

Accepted Answer

You pay only for the resources you actually use. The consumption-based pricing model, also known as pay-as-you-go, is a core financial model in cloud computing where you are billed only for the specific resources you consume (e.g., compute hours, storage GB, data transfer). This model eliminates upfront capital expenditure and allows costs to scale dynamically with usage, directly aligning expenses with actual consumption rather than capacity.

Answer

You pay a flat monthly fee regardless of how much you use

Answer

You must commit to a one-year contract

Answer

Cloud resources are always free during off-peak hours

Question 5

A company is planning to migrate its on-premises applications to Azure. They have a mix of monolithic and microservices-based applications. Which Azure compute service should they choose for a microservices architecture that requires independent scaling and deployment of components?

Accepted Answer

Azure Kubernetes Service (AKS). Azure Kubernetes Service (AKS) is the correct choice because it provides a managed Kubernetes orchestration platform designed specifically for microservices architectures. AKS enables independent scaling, deployment, and management of containerized components, which aligns with the requirement for decoupled services that can be updated or scaled individually without affecting the entire application.

Answer

Azure Functions

Answer

Azure App Service

Answer

Azure Virtual Machines

Question 6

A company has a policy that all Azure resources must have an 'Owner' tag. They want to automatically add the 'Owner' tag with a value 'Default' to any resource created without it. Which Azure Policy effect should they use?

Accepted Answer

Append. The Append effect is correct because it allows Azure Policy to add the 'Owner' tag with a value 'Default' to any resource that is created without that tag. Append works by adding specified fields (like tags) to the resource during creation or update, without blocking the operation. This ensures compliance with the tagging policy automatically, without denying the resource creation.

Answer

Modify

Answer

Deny

Answer

Audit

Question 7

Which Azure feature automatically turns off virtual machines at a scheduled time daily to reduce development costs?

Accepted Answer

Azure VM Auto-Shutdown. Azure VM Auto-Shutdown is a built-in feature that allows you to schedule automatic shutdown of virtual machines at a specified time daily, reducing costs by ensuring VMs are not running when not needed. It is configured directly on the VM blade in the Azure portal and requires no additional scripting or automation services.

Answer

Azure Policy VM power state enforcement

Answer

Azure DevTest Labs cost controls

Answer

Azure Automation runbooks for VM shutdown

Question 8

A company plans to use Azure Site Recovery to replicate on-premises virtual machines to Azure for disaster recovery. Due to regulatory restrictions, they cannot use the paired region and must replicate to a specific Azure region in the same continent. Can they select this non-paired region as the recovery target?

Accepted Answer

Yes, you can select any Azure region as the target for replication.. Azure Site Recovery allows you to replicate on-premises virtual machines to any Azure region that supports the service, not just the paired region. The paired region is a default recommendation for cost and latency optimization, but it is not a mandatory requirement. Therefore, you can select a non-paired region as the recovery target as long as it is within the same continent and meets regulatory restrictions.

Answer

No, replication is only allowed to the paired region.

Answer

Yes, but only if both regions are within the same availability zone.

Answer

No, only to regions that are within the same geography.

Question 9

A company needs to enforce compliance by deploying a standard set of Azure resources, policies, and RBAC assignments for each new development subscription. They want to define this environment as a repeatable package. Which Azure service should they use?

Accepted Answer

Azure Blueprints. Azure Blueprints is the correct service because it enables the orchestrated deployment of a repeatable, governed environment that includes resource templates, policies, and RBAC assignments as a single, versioned package. Unlike individual services, Blueprints coordinates these components together, ensuring compliance from the moment a new subscription is created.

Answer

Azure Policy

Answer

Azure Resource Manager Templates

Answer

Management Groups

Question 10

Which Azure service enables you to stream live events and on-demand video content to global audiences?

Accepted Answer

Azure Media Services. Azure Media Services is the correct choice because it is a PaaS offering specifically designed for encoding, packaging, and streaming both live events and on-demand video content at scale. It supports industry-standard protocols like HLS and MPEG-DASH, and integrates with Azure CDN for global delivery, making it the dedicated service for end-to-end video workflows.

Answer

Azure CDN

Answer

Azure Communication Services

Answer

Azure Video Analyzer for Media

Question 11

A company needs to store archival data for 10 years with the lowest possible storage cost. Data may be accessed once a year for compliance audits. Which Azure Storage access tier should they choose?

Accepted Answer

Archive. The Archive access tier is designed for data that is rarely accessed and has a flexible latency requirement, making it the most cost-effective option for long-term archival storage. With a 10-year retention period and only annual access for compliance audits, Archive provides the lowest storage cost per gigabyte compared to Cool or Hot tiers, though it incurs higher retrieval costs and latency (typically hours to rehydrate data).

Answer

Cool

Answer

Hot

Answer

Premium

Question 12

Which Azure service provides managed DNS hosting for domain names, enabling reliable and fast DNS queries?

Accepted Answer

Azure DNS. Azure DNS is the correct answer because it is a dedicated managed DNS hosting service that provides name resolution using the global Microsoft Azure DNS infrastructure. It supports standard DNS record types (A, AAAA, CNAME, MX, NS, PTR, SOA, SRV, TXT) and offers high availability and low-latency responses by leveraging Anycast networking. This makes it ideal for hosting domain names and ensuring reliable, fast DNS queries.

Answer

Azure Traffic Manager

Answer

Azure Front Door

Answer

Azure VPN Gateway

Question 13

A company wants to understand who is responsible for securing the operating system on an Azure virtual machine. According to the shared responsibility model, who is responsible?

Accepted Answer

Microsoft is responsible for the physical host and network, while the customer is responsible for the guest OS and applications.. Under the shared responsibility model for IaaS like Azure VMs, Microsoft secures the physical datacenter, host OS, and network infrastructure, while the customer is responsible for securing the guest OS (e.g., applying patches, configuring firewalls) and any applications running on the VM. This division is explicit in Azure's documentation, where the customer retains control over the OS and software stack.

Answer

Microsoft is responsible for all security.

Answer

The customer is responsible for all security.

Answer

Responsibility is split 50/50.

Question 14

A startup wants to use a cloud-based email service without installing any software on their own computers. They access the service through a web browser and the provider manages all updates and maintenance. Which cloud service model does this represent?

Accepted Answer

Software as a Service (SaaS). This scenario describes Software as a Service (SaaS) because the startup is using a fully managed cloud-based email application accessed via a web browser, with no local installation required. The provider handles all updates, maintenance, and infrastructure, which is the defining characteristic of SaaS. Examples include Microsoft 365 or Google Workspace, where the consumer only uses the software without managing the underlying platform or infrastructure.

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Answer

Anything as a Service (XaaS)

Question 15

A company has a root management group containing three subscriptions: Production, Development, and Sandbox. The governance team assigns an Azure Policy initiative to the root management group that enforces tagging requirements. The Sandbox subscription is used for experimental testing and needs to be temporarily excluded from the tagging requirements while the team evaluates a new tagging schema. The team must ensure the policy assignment remains active in Production and Development but does not affect resources in Sandbox. Which Azure Policy feature should the team use?

Accepted Answer

Policy Exemption. A Policy Exemption allows the team to exclude a specific scope (the Sandbox subscription) from the enforcement of an Azure Policy initiative while keeping the policy assignment active at the root management group. This feature is designed for temporary exceptions, such as evaluating a new tagging schema, without modifying the underlying policy assignment or creating exclusions at the resource level. The exemption can be set with an expiration date, ensuring the Sandbox subscription automatically returns to compliance after the evaluation period.

Answer

Policy Remediation

Answer

Policy Exclusion

Answer

Policy Override