AZ-900 Practice Test 45 — 15 Questions

Question 1

Which Azure feature allows you to organize resources into logical groups for billing, management, and access control purposes?

Accepted Answer

Azure Resource Groups. Azure Resource Groups are logical containers that hold related resources for an Azure solution. They enable you to manage resources collectively, apply consistent access control policies via RBAC, and track costs at the group level. This directly supports organizing resources for billing, management, and access control purposes.

Answer

Azure Subscriptions

Answer

Azure Management Groups

Answer

Azure Blueprints

Question 2

A company needs to run a large-scale batch processing job that runs daily for several hours. The job can tolerate interruptions if compute capacity is reclaimed. They want to minimize compute costs. Which Azure compute service is most cost-effective for this scenario?

Accepted Answer

Azure Batch with low-priority VMs. Azure Batch with low-priority VMs is the most cost-effective option because it allows you to run large-scale batch jobs using surplus Azure capacity at a significantly reduced cost (up to 80% less than dedicated VMs). The job can tolerate interruptions, and low-priority VMs can be preempted when Azure needs the capacity back, making this a perfect fit for the scenario.

Answer

Azure Virtual Machines

Answer

Azure Functions

Answer

Azure Container Instances

Question 3

Which Azure service allows you to extend your on-premises Active Directory to the cloud for hybrid identity scenarios?

Accepted Answer

Azure AD Connect. Microsoft Entra Connect is the correct service because it synchronizes on-premises Active Directory identities with Microsoft Entra ID, enabling hybrid identity scenarios where users can use the same credentials for both on-premises and cloud resources. It handles password hash synchronization, pass-through authentication, and federation integration, making it the primary tool for extending on-premises AD to the cloud.

Answer

Azure AD B2C

Answer

Azure Active Directory Domain Services

Answer

Azure Conditional Access

Question 4

Which Azure service provides monitoring and diagnostics for virtual network traffic flows?

Accepted Answer

Azure Network Watcher. Azure Network Watcher is the correct service because it provides a suite of tools specifically designed for monitoring and diagnosing network traffic flows in Azure virtual networks. It includes capabilities like IP flow verify, connection troubleshoot, and network performance monitor, which directly address the need to analyze traffic patterns and diagnose connectivity issues.

Answer

Azure Monitor

Answer

Azure Security Center

Answer

Azure Traffic Manager

Question 5

A hospital is subject to strict data residency laws that require patient data to remain within the country's borders. They are considering using a public cloud provider. Which cloud deployment model would best meet this compliance requirement?

Accepted Answer

Private cloud. A private cloud is dedicated to a single organization, allowing the hospital to deploy and manage infrastructure within its own data center or a colocation facility located within the country's borders. This ensures full control over data storage and processing, directly satisfying data residency laws that prohibit patient data from leaving the country. In contrast, public cloud providers may have data centers in multiple regions, making it harder to guarantee data never crosses borders.

Answer

Public cloud

Answer

Hybrid cloud

Answer

Community cloud

Question 6

A company wants to reduce its carbon footprint by using a cloud provider that invests in renewable energy. They want to ensure that their workloads in Azure run in datacenters that are among the most energy-efficient. Which Azure benefit is most directly related to this goal?

Accepted Answer

Environmental sustainability. Environmental sustainability is the Azure benefit that directly addresses the company's goal of reducing its carbon footprint by using a cloud provider that invests in renewable energy and operates energy-efficient datacenters. Microsoft has committed to being carbon negative by 2030 and powers its Azure datacenters with 100% renewable energy, making this the most relevant benefit for the stated objective.

Answer

Economies of scale

Answer

Scalability

Answer

Security and compliance

Question 7

A company has created an Azure Blueprint to define a standard environment with role assignments and policies. They have published multiple versions. They want all existing subscriptions that were created from an older version to automatically receive the updates from the latest version. What should they do?

Accepted Answer

Upgrade the blueprint assignment on the existing subscriptions. Azure Blueprints allow you to update assignments on existing subscriptions to the latest published version. When you upgrade the blueprint assignment, it applies any new role assignments, policies, or artifacts defined in the newer version to the target subscriptions, ensuring they remain compliant with the updated standard environment.

Answer

Create a new subscription from the latest blueprint version

Answer

Reassign the blueprint to the subscriptions

Answer

Nothing, updates apply automatically

Question 8

A company has three Azure subscriptions: one for the engineering department, one for marketing, and one for finance. The central IT team needs to apply a common set of Azure Policy definitions (e.g., allowed locations for resources) that must be enforced across all three subscriptions. Additionally, each department manager must be able to apply custom policies that only affect their own subscription. The IT team wants to organize the subscriptions into a hierarchy where they can assign the common policy at the top level and delegate custom policy assignment at the subscription level. Which Azure feature should the IT team use to create this hierarchical structure?

Accepted Answer

Management groups. Management groups allow you to create a hierarchical structure of Azure subscriptions, enabling you to assign common Azure Policy definitions (like allowed locations) at a top-level management group that applies to all child subscriptions. Each department subscription can then have its own custom policy assignments, as management groups support inheritance and delegation of policy assignments across the hierarchy.

Answer

Resource groups

Answer

Azure Policy

Answer

Azure role-based access control (RBAC)

Question 9

Which Azure compute option is BEST for a batch processing job that can tolerate interruptions and needs the lowest possible compute cost?

Accepted Answer

Azure Spot VMs. Azure Spot VMs are designed for interruptible workloads like batch processing jobs that can tolerate preemption. They offer the lowest compute cost by leveraging unused Azure capacity, with discounts of up to 90% compared to pay-as-you-go pricing, making them the optimal choice for cost-sensitive, fault-tolerant tasks.

Answer

Azure Reserved VM Instances

Answer

Azure Dedicated Host

Answer

Azure Functions Consumption Plan

Question 10

Which of the following statements accurately describes the shared responsibility model for SaaS applications?

Accepted Answer

The provider manages everything; the customer manages only data and user access. In the shared responsibility model for SaaS (Software as a Service), the cloud provider is responsible for the entire underlying infrastructure, including the application, runtime, operating system, and physical security. The customer's responsibilities are limited to managing their own data, configuring user access, and ensuring proper usage of the application. This model maximizes the provider's control, minimizing the customer's operational overhead.

Answer

The customer manages the application, runtime, and operating system

Answer

The customer and provider share equal responsibility for all components

Answer

The customer manages the runtime and middleware

Question 11

Which Azure service provides a managed Kubernetes environment that automatically scales node pools based on application demand?

Accepted Answer

AKS with Cluster Autoscaler. Azure Kubernetes Service (AKS) with Cluster Autoscaler is the correct answer because it specifically provides a managed Kubernetes environment where the Cluster Autoscaler automatically adjusts the number of agent nodes in a node pool based on pending pod resource requests. When pods cannot be scheduled due to insufficient compute resources, the Cluster Autoscaler scales out the node pool; when nodes are underutilized for a configurable period, it scales in. This is the only option that combines a managed Kubernetes control plane with intelligent, demand-driven node pool scaling.

Answer

Azure Container Instances

Answer

Azure App Service with auto-scale

Answer

Azure VM Scale Sets

Question 12

When using Azure, a company wants to calculate the composite SLA for two services used together where both must be available. Service A has a 99.9% SLA and Service B has a 99.95% SLA. What is the composite SLA?

Accepted Answer

Approximately 99.85%. When two services must both be available (an 'and' scenario), the composite SLA is calculated by multiplying their individual SLAs. Service A at 99.9% (0.999) and Service B at 99.95% (0.9995) gives 0.999 × 0.9995 = 0.9985005, which rounds to approximately 99.85%. This reflects the increased probability of failure when multiple dependencies are required.

Answer

99.95% (the higher of the two SLAs)

Answer

99.9% (the lower of the two SLAs)

Answer

100% because Azure guarantees maximum availability

Question 13

Match each Azure storage type to its use case.

Accepted Answer

Blob Storage: Stores large amounts of unstructured data, such as text or binary data.. The correct matches are: Blob Storage for unstructured data, File Storage for SMB file shares, Queue Storage for messages, and Table Storage for structured NoSQL data. Common confusions include mixing up Blob Storage with relational data (which is Table Storage or SQL) and File Storage with Queue Storage.

Answer

Blob Storage: Stores structured relational data.

Answer

File Storage: Stores messages in a queue.

Question 14

Match each Azure networking service to its purpose.

Accepted Answer

Azure Load Balancer: Distributes network traffic at the transport layer (layer 4).. Azure Load Balancer operates at layer 4, Application Gateway at layer 7, Traffic Manager at DNS level. The distractors mix these characteristics.

Answer

Azure Load Balancer: Provides SSL termination and URL-based routing.

Answer

Azure Application Gateway: Distributes traffic across multiple regions based on DNS.

Answer

Azure Traffic Manager: Manages traffic at the transport layer within a region.

Question 15

What is the role of a cloud 'service level objective' (SLO) versus a 'service level agreement' (SLA)?

Accepted Answer

SLA is the provider's contractual guarantee; SLO is an internal organizational goal. An SLA is a legally binding contract between a cloud provider and a customer that specifies guaranteed uptime, performance, and credits for breaches, while an SLO is an internal target (e.g., 99.9% uptime) that the provider sets to meet or exceed the SLA. The SLA defines the minimum commitment; the SLO is a stricter internal goal used to drive operational excellence and avoid SLA violations.

Answer

SLA and SLO are identical terms for the same concept

Answer

SLO is the provider's contractual guarantee; SLA is the customer's internal target

Answer

SLA defines performance; SLO defines security requirements