AZ-900 Practice Test 42 — 15 Questions

Question 1

Which Azure storage redundancy option stores three copies of data within a single data center in a single region?

Accepted Answer

Locally Redundant Storage (LRS). Locally Redundant Storage (LRS) replicates data three times within a single physical data center in a single region. This provides protection against server rack and drive failures but does not protect against a full data center outage. It is the lowest-cost redundancy option and is suitable for scenarios where data can be reconstructed from other sources.

Answer

Zone-Redundant Storage (ZRS)

Answer

Geo-Redundant Storage (GRS)

Answer

Read-Access Geo-Redundant Storage (RA-GRS)

Question 2

Which Azure service acts as a cloud-based VPN gateway that enables secure site-to-site connectivity between an on-premises network and Azure virtual networks?

Accepted Answer

Azure VPN Gateway. Azure VPN Gateway is the correct service because it is specifically designed to establish secure, encrypted site-to-site connectivity between an on-premises network and Azure virtual networks over the public internet using IPsec/IKE protocols. It acts as a cloud-based VPN endpoint that terminates VPN tunnels from on-premises VPN devices, enabling hybrid connectivity.

Answer

Azure ExpressRoute

Answer

Azure Front Door

Answer

Azure Firewall

Question 3

What is Azure Resource Manager (ARM) template used for?

Accepted Answer

To define and deploy Azure infrastructure as code in a repeatable, consistent way. Azure Resource Manager (ARM) templates are JSON or Bicep files that define the infrastructure and configuration for Azure resources in a declarative manner. They enable Infrastructure as Code (IaC), allowing you to deploy, update, and manage resources consistently across environments without manual steps, ensuring repeatability and idempotency.

Answer

To monitor the health of Azure resources

Answer

To create user accounts in Azure Active Directory

Answer

To generate cost reports for Azure spending

Question 4

Which Azure identity service provides single sign-on (SSO) and multi-factor authentication (MFA) for cloud and on-premises applications?

Accepted Answer

Azure Active Directory (Azure AD). Microsoft Entra ID (Azure AD) is Microsoft's cloud-based identity and access management service that provides single sign-on (SSO) and multi-factor authentication (MFA) for both cloud and on-premises applications. It enables users to sign in once and access multiple resources, while MFA adds an extra layer of security by requiring additional verification methods like a phone call or app notification.

Answer

Azure AD Domain Services

Answer

Azure Key Vault

Answer

Azure Information Protection

Question 5

Which Azure tool provides a unified command-line experience for managing Azure resources across Windows, macOS, and Linux?

Accepted Answer

Azure CLI. Azure CLI (Command-Line Interface) is a cross-platform tool that provides a unified command-line experience for managing Azure resources on Windows, macOS, and Linux. It uses Python-based scripting and can be installed locally or run interactively, offering consistent syntax and commands across all supported operating systems.

Answer

Azure PowerShell only

Answer

Azure Cloud Shell

Answer

Azure Resource Manager API

Question 6

A company needs to ensure that all Azure resources have a mandatory 'CostCenter' tag. If a resource is created without this tag, the resource creation should be blocked. Which Azure Policy effect should they use?

Accepted Answer

Deny. The Deny effect is correct because it actively blocks any resource creation or update that does not comply with the policy rule, such as missing the mandatory 'CostCenter' tag. This ensures that non-compliant resources are never provisioned, enforcing governance at the point of creation.

Answer

Append

Answer

Audit

Answer

DeployIfNotExists

Question 7

A retail company runs an e-commerce application on Azure virtual machines during peak holiday seasons. The application experiences high traffic for a few weeks each year. The IT team wants to automatically provision additional compute resources during high demand and remove them when demand drops, ensuring that the company only pays for resources while they are actively in use. Which cloud computing characteristic does this approach primarily rely on?

Accepted Answer

Elasticity. This approach relies on elasticity, which is the ability of a cloud system to automatically scale resources up or down based on real-time demand. In this scenario, Azure virtual machines are provisioned during peak holiday traffic and deprovisioned when demand drops, ensuring the company only pays for resources while they are actively in use. Elasticity specifically handles dynamic, short-term fluctuations, whereas scalability is a broader term for handling long-term growth.

Answer

Scalability

Answer

High availability

Answer

Fault tolerance

Question 8

A company wants to deploy a custom Linux-based application in Azure. They need full control over the operating system, including installing custom software and configuration. Which Azure compute service should they choose?

Accepted Answer

Azure Virtual Machines. Azure Virtual Machines (VMs) provide full control over the operating system, allowing you to install custom software, configure the kernel, and manage system-level settings. This is the correct choice for a custom Linux-based application that requires complete OS-level access, unlike platform-as-a-service offerings that abstract away the underlying infrastructure.

Answer

Azure App Service

Answer

Azure Container Instances

Answer

Azure Functions

Question 9

Which cloud computing characteristic allows a single set of physical hardware to serve multiple customers with isolated virtual environments?

Accepted Answer

Multi-tenancy. Multi-tenancy is the cloud computing characteristic that enables a single set of physical hardware to host multiple customers (tenants) while keeping their virtual environments isolated from one another. This is achieved through hypervisor-level virtualization, where each tenant runs in its own virtual machine (VM) with dedicated memory, CPU, and storage allocations, preventing cross-tenant access. In Azure, multi-tenancy is fundamental to the public cloud model, allowing shared infrastructure without compromising security or privacy.

Answer

High availability

Answer

Geo-distribution

Answer

Elasticity

Question 10

A startup wants to deploy a web application that experiences unpredictable traffic spikes. They need to scale resources automatically without manual intervention. Which benefit of cloud computing directly addresses this requirement?

Accepted Answer

Elasticity. Elasticity is the cloud computing benefit that enables resources to automatically scale out (add instances) during traffic spikes and scale in (remove instances) when demand drops, without manual intervention. This directly matches the startup's need to handle unpredictable traffic patterns by dynamically adjusting compute capacity, typically using services like Azure Virtual Machine Scale Sets or Azure App Service auto-scale rules.

Answer

High availability

Answer

Disaster recovery

Answer

Fault tolerance

Question 11

A company wants to store sensitive encryption keys in a hardware security module (HSM) to meet compliance requirements. Which Azure service provides HSM-backed key storage?

Accepted Answer

Azure Key Vault Premium tier or Managed HSM. Azure Key Vault Premium tier and Azure Managed HSM both provide FIPS 140-2 Level 3 validated hardware security modules (HSMs) for storing sensitive encryption keys. The Standard tier of Key Vault uses software-backed keys and does not meet compliance requirements that mandate dedicated HSM hardware. Managed HSM offers single-tenant, fully managed HSM appliances with higher throughput and key isolation, making it the correct choice for HSM-backed key storage.

Answer

Azure Key Vault Standard tier

Answer

Azure Storage with encryption at rest

Answer

Azure Active Directory

Question 12

A company stores billions of image files that are accessed frequently via HTTP from a web application. They need a highly scalable and durable storage solution with global accessibility. Which Azure storage service should they use?

Accepted Answer

Azure Blob Storage. Azure Blob Storage is designed for storing massive amounts of unstructured data, such as image files, and provides HTTP/HTTPS access via REST APIs. It offers high scalability (up to petabytes), durability (99.9999999999% with LRS/RA-GRS), and global accessibility through a globally unique endpoint and optional CDN integration. This makes it the ideal choice for frequently accessed image files in a web application.

Answer

Azure Files

Answer

Azure Queue Storage

Answer

Azure Disk Storage

Question 13

Which Azure service provides a hub for connecting IoT devices to Azure, supporting device management, telemetry ingestion, and bidirectional communication?

Accepted Answer

Azure IoT Hub. Azure IoT Hub is the correct service because it is specifically designed as a cloud gateway for IoT devices, providing device identity registry, secure device-to-cloud and cloud-to-device messaging, and built-in device management capabilities. It supports bidirectional communication using MQTT, AMQP, and HTTPS protocols, making it the central hub for IoT solutions.

Answer

Azure Event Hubs

Answer

Azure Stream Analytics

Answer

Azure Service Bus

Question 14

Which Azure service provides network filtering to protect web applications from common exploits like SQL injection and cross-site scripting?

Accepted Answer

Azure Web Application Firewall (WAF). Azure Web Application Firewall (WAF) is specifically designed to inspect and filter HTTP/HTTPS traffic at the application layer (Layer 7). It uses rule sets like the OWASP Core Rule Set to detect and block common web exploits such as SQL injection and cross-site scripting (XSS), making it the correct choice for protecting web applications.

Answer

Azure Firewall

Answer

Azure DDoS Protection

Answer

Network Security Groups (NSG)

Question 15

What is the primary difference between a public cloud and a private cloud?

Accepted Answer

Public cloud infrastructure is shared among multiple customers; private is dedicated to one organization. The primary difference is that a public cloud uses a multi-tenant architecture where infrastructure resources like compute, storage, and networking are shared across multiple unrelated customers, while a private cloud provisions dedicated infrastructure for a single organization, either on-premises or hosted by a third party. This distinction is fundamental to cloud deployment models as defined by NIST SP 800-145, which emphasizes resource pooling in public clouds versus single-tenant isolation in private clouds.

Answer

Public cloud is more secure than private cloud

Answer

Private cloud is always hosted by a third-party provider

Answer

Public cloud can only be accessed from within the organization's network