AZ-900 Practice Test 46 — 15 Questions

Question 1

Which cloud service model gives customers the most control over the underlying infrastructure, including the operating system and networking?

Accepted Answer

Infrastructure as a Service (IaaS). Infrastructure as a Service (IaaS) provides virtualized computing resources over the internet, giving customers direct control over the operating system, storage, and networking components such as virtual networks and firewalls. Unlike higher-level service models, IaaS allows users to manage and configure the underlying infrastructure without physical hardware access, making it the model with the most customer control.

Answer

Software as a Service (SaaS)

Answer

Platform as a Service (PaaS)

Answer

Function as a Service (FaaS)

Question 2

What is disaster recovery in the context of cloud computing?

Accepted Answer

Restoring systems and data after a catastrophic event with minimal downtime. Disaster recovery (DR) in cloud computing focuses on restoring systems, applications, and data after a catastrophic event (e.g., natural disaster, cyberattack) to meet Recovery Time Objective (RTO) and Recovery Point Objective (RPO) targets. Azure Site Recovery orchestrates replication, failover, and failback of workloads between primary and secondary regions, ensuring minimal downtime and data loss. This is distinct from high availability, which prevents outages, or auto-scaling, which handles demand fluctuations.

Answer

Preventing any service outages from occurring

Answer

Automatically scaling resources when demand increases

Answer

Distributing traffic across multiple servers for performance

Question 3

What does an Azure Service Level Agreement (SLA) define?

Accepted Answer

Microsoft's uptime and connectivity commitments for Azure services. An Azure Service Level Agreement (SLA) is a formal document from Microsoft that defines the uptime and connectivity guarantees for each Azure service. For example, a typical SLA for a virtual machine deployed across two availability zones promises 99.99% uptime, meaning Microsoft commits to a maximum of 52.56 minutes of downtime per year. If Microsoft fails to meet these commitments, customers may be eligible for service credits or a refund, making the SLA a critical component of Azure's governance and reliability framework.

Answer

The maximum number of resources you can create in Azure

Answer

The pricing model for Azure services

Answer

The geographic locations where services are available

Question 4

What benefit does Azure provide that specifically helps companies maintain business continuity when their primary location is unavailable?

Accepted Answer

Geo-redundancy and disaster recovery capabilities. Azure's geo-redundancy and disaster recovery capabilities, such as Azure Site Recovery and geo-redundant storage (GRS), replicate workloads and data across paired Azure regions. This ensures that if a primary location fails due to an outage or disaster, services can failover to a secondary region, maintaining business continuity with minimal downtime and data loss.

Answer

Economies of scale reducing operational costs

Answer

Automatic performance optimization for all applications

Answer

Unified billing for all cloud services

Question 5

What is the purpose of Azure's 'Secure Score' in Microsoft Defender for Cloud?

Accepted Answer

To provide a quantified measurement of your security posture with actionable improvements. Azure Secure Score in Microsoft Defender for Cloud provides a quantified measurement of an organization's security posture based on security controls and recommendations. It calculates a percentage score from completed recommendations, and each recommendation includes actionable steps to improve the score, directly reflecting the security state of your Azure resources.

Answer

To measure the performance speed of Azure resources

Answer

To show the availability percentage of Azure security services

Answer

To audit user login attempts and failed authentications

Question 6

Which of the following best describes the 'shared responsibility' for operating system updates under the IaaS model?

Accepted Answer

The customer is responsible for patching the guest OS in IaaS VMs. Under the Infrastructure as a Service (IaaS) model, the cloud provider is responsible for the physical infrastructure and the hypervisor, but the customer retains control over the guest operating system running inside the virtual machine. Therefore, the customer is responsible for patching and updating the guest OS, including applying security updates and managing configuration. This aligns with the shared responsibility model where the customer manages anything they deploy on top of the abstracted infrastructure.

Answer

The cloud provider is responsible for patching the OS in IaaS VMs

Answer

Both customer and provider share equal responsibility for OS patches in IaaS

Answer

OS patching is not required in cloud environments as Azure handles this automatically

Question 7

A small business wants to move its accounting software to the cloud to avoid purchasing and maintaining physical servers. Which cloud service model would provide the accounting application as a ready-to-use service over the internet?

Accepted Answer

Software as a Service (SaaS). (SaaS) is correct because the business needs a ready-to-use accounting application delivered over the internet without managing underlying infrastructure. SaaS provides fully functional software accessed via a web browser, where the provider handles all maintenance, updates, and server management, aligning perfectly with the goal of avoiding physical server ownership.

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Answer

Function as a Service (FaaS)

Question 8

Which Azure feature allows organizations to track spending trends and get spending forecasts for the next 30 days?

Accepted Answer

Azure Cost Management Cost Analysis. Azure Cost Management Cost Analysis provides interactive dashboards and reports that allow organizations to visualize historical spending trends and generate forecasts for future costs, including a 30-day forecast. This feature uses historical usage data and machine learning models to predict spending, enabling proactive budget management.

Answer

Azure Advisor cost recommendations

Answer

Azure Budgets

Answer

Azure Pricing Calculator

Question 9

What does 'geo-distribution' mean as a benefit of cloud computing?

Accepted Answer

Having datacenters around the world to serve users with low latency. Geo-distribution in cloud computing refers to the global footprint of a cloud provider's infrastructure, with datacenters deployed across multiple geographic regions. This allows applications to be hosted closer to end users, reducing network latency and improving the user experience. It also supports data residency requirements and disaster recovery by replicating data across regions.

Answer

The ability to automatically scale resources up and down

Answer

The ability to recover from hardware failures automatically

Answer

Paying only for what you consume

Question 10

A company wants to host a web application that automatically scales based on traffic. Which Azure service is most appropriate for hosting this application without managing virtual machines?

Accepted Answer

Azure App Service. Azure App Service is a fully managed platform-as-a-service (PaaS) offering that automatically scales web applications based on traffic without requiring you to manage the underlying virtual machines. It supports built-in autoscaling rules, load balancing, and high availability, making it ideal for hosting web apps with variable demand.

Answer

Azure Virtual Machines

Answer

Azure Batch

Answer

Azure Container Instances

Question 11

A company has multiple Azure subscriptions organized under a management group hierarchy. They need to assign the 'Contributor' role to a security team for all subscriptions under the 'Production' management group. They also want new subscriptions added later to automatically inherit this role assignment. What should they do?

Accepted Answer

Assign the role at the management group level. Assigning the 'Contributor' role at the management group level ensures that all subscriptions under that management group inherit the role assignment. When new subscriptions are added to the 'Production' management group, they automatically inherit the role assignment because Azure RBAC supports inheritance down the management group hierarchy. This meets both requirements: immediate coverage and automatic inheritance for future subscriptions.

Answer

Assign the role at the tenant root management group level

Answer

Assign the role at each subscription individually

Answer

Use an Azure Blueprint to assign the role

Question 12

What is Azure Policy's 'audit' effect used for?

Accepted Answer

To evaluate and flag non-compliant resources without blocking them. Azure Policy's 'audit' effect evaluates resources against policy rules and flags any non-compliant resources in the compliance logs, but it does not block or automatically remediate them. This allows administrators to see which resources violate policies without impacting existing workloads or preventing creation of new resources.

Answer

To automatically fix non-compliant resources to match the policy

Answer

To deny creation of resources that don't comply with the policy

Answer

To send security alerts when resources are modified

Question 13

Which of the following best describes Platform as a Service (PaaS)?

Accepted Answer

The provider manages hardware and OS while customers manage their applications and data. Platform as a Service (PaaS) provides a managed hosting environment where the cloud provider handles the underlying infrastructure, including hardware, virtualization, operating system, and middleware. The customer is responsible only for deploying and managing their applications and data, making option B correct because it accurately describes this division of responsibility.

Answer

The customer manages everything including hardware and networking

Answer

The customer accesses a complete application managed entirely by the provider

Answer

The provider manages physical servers while customers manage OS and applications

Question 14

A company needs to ensure that no resources in any subscription can be created without a specific cost center tag. Which Azure feature accomplishes this?

Accepted Answer

Azure Policy with a 'require tag' definition in deny mode. Azure Policy with a 'require tag' definition in deny mode is the correct choice because it enforces a rule that blocks the creation of any resource that does not include the specified cost center tag. Azure Policy evaluates resource creation requests against defined policies and can deny non-compliant requests before the resource is provisioned, ensuring governance at the subscription or management group level.

Answer

Azure Blueprints with tag templates

Answer

Azure RBAC with custom roles

Answer

Azure Resource Groups with tag inheritance

Question 15

What is the key difference between an Azure 'region' and an Azure 'geography'?

Accepted Answer

A geography is a discrete market containing multiple Azure regions for data residency purposes. An Azure geography is a discrete market (e.g., United States, Europe) that contains at least one Azure region, and it is designed to preserve data residency and compliance boundaries. A region is a set of datacenters deployed within a latency-defined perimeter, connected through a dedicated regional low-latency network. Geographies ensure that customer data stays within the specified boundary for legal and regulatory requirements, even if a region fails.

Answer

A region contains multiple geographies; a geography contains a single region

Answer

A geography and a region are identical concepts in Azure

Answer

A geography refers to the physical datacenter building; a region is the city it's in