AZ-900 Practice Test 47 — 15 Questions

Question 1

A company uses Azure Policy to enforce that all virtual machines must be from an approved list of SKUs. They want to ensure that any non-compliant VMs that already exist are automatically remediated by changing the VM size to a compliant SKU. Which policy effect should they use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Modify. The Modify effect is correct because it allows Azure Policy to automatically change non-compliant resources to a compliant state during evaluation. In this scenario, it can alter the VM size to an approved SKU without manual intervention, ensuring continuous compliance.

Answer

Deny

Answer

Audit

Answer

Append

Question 2

Which Azure service provides IoT device management, real-time analytics, and bi-directional communication between IoT devices and the cloud?

Accepted Answer

Azure IoT Hub. Azure IoT Hub is the correct service because it is specifically designed to provide secure, bi-directional communication between IoT devices and the cloud, along with device management capabilities and real-time analytics. It supports multiple protocols (MQTT, AMQP, HTTPS) and integrates with Azure Stream Analytics for real-time data processing.

Answer

Azure Event Hubs

Answer

Azure Notification Hubs

Answer

Azure Service Bus

Question 3

A company wants to run a containerized application that responds to HTTP requests. They want to deploy it without managing any virtual machines or orchestration. Which Azure service is the simplest option?

Accepted Answer

Azure Container Instances. Azure Container Instances (ACI) is the simplest option because it allows you to run a containerized application directly in Azure without managing any underlying virtual machines or orchestration. ACI automatically starts the container, assigns a public IP address, and handles HTTP requests on port 80/443, making it ideal for event-driven or stateless workloads that need rapid deployment.

Answer

Azure Kubernetes Service

Answer

Azure Virtual Machines

Answer

Azure App Service

Question 4

Which of the following is an advantage of cloud computing related to speed of deployment?

Accepted Answer

Resources can be provisioned in minutes rather than weeks. Cloud computing enables rapid provisioning of resources through self-service portals and automation, allowing virtual machines, storage, and networks to be deployed in minutes via APIs or management consoles. This contrasts with on-premises environments where hardware procurement, racking, and configuration can take weeks. The speed of deployment is a core agility benefit of the cloud, directly supporting faster time-to-market for applications.

Answer

You never need to patch operating systems

Answer

You own the physical hardware

Answer

All data is automatically encrypted at rest

Question 5

Which statement correctly describes the relationship between cloud scalability and business continuity?

Accepted Answer

Scalability supports business continuity by handling unexpected demand without service disruption. Scalability enables a cloud system to automatically add or remove resources (e.g., compute instances, bandwidth) in response to demand fluctuations. This directly supports business continuity by ensuring that sudden traffic spikes or resource surges do not cause service degradation or outages, maintaining availability and performance without manual intervention.

Answer

Scalability and business continuity are unrelated cloud concepts

Answer

Business continuity only requires geo-redundancy, not scalability

Answer

Scalability reduces the need for security controls in cloud environments

Question 6

What is the purpose of Azure AD Identity Protection?

Accepted Answer

To detect and automatically respond to suspicious identity-related risks. Microsoft Entra ID Protection is a security tool that uses machine learning and heuristics to detect suspicious activities such as leaked credentials, impossible travel, and anonymous IP address sign-ins. It can automatically respond to these risks by requiring multi-factor authentication or blocking sign-ins, thereby protecting identities without manual intervention.

Answer

To encrypt user passwords stored in Azure AD

Answer

To manage the lifecycle of user accounts in Azure AD

Answer

To synchronize identities between on-premises AD and Azure AD

Question 7

What is Azure Role-Based Access Control (RBAC)?

Accepted Answer

A system for granting specific permissions to users and groups for Azure resources. Azure Role-Based Access Control (RBAC) is an authorization system built on Azure Resource Manager that enables fine-grained access management for Azure resources. It works by assigning roles (collections of permissions) to users, groups, service principals, or managed identities at a specific scope (management group, subscription, resource group, or resource). This allows you to grant only the necessary permissions (e.g., 'Reader' to view resources, 'Contributor' to create and manage them) without sharing account credentials or using a single authentication method.

Answer

A way to authenticate users to Azure using passwords and MFA

Answer

A tool for monitoring resource usage and performance

Answer

A service for encrypting data stored in Azure

Question 8

A company wants to use a cloud service that provides a fully managed database, including automated backups, patching, and high availability, without managing any underlying servers. Which cloud service model is this?

Accepted Answer

Platform as a Service (PaaS). This scenario describes a fully managed database service where the provider handles backups, patching, and high availability, and the customer does not manage any underlying servers. This is the definition of Platform as a Service (PaaS), which provides a managed platform (including database engines like Azure SQL Database) where the customer only manages data and schema, while the provider handles the OS, runtime, and infrastructure.

Answer

Infrastructure as a Service (IaaS)

Answer

Software as a Service (SaaS)

Answer

Container as a Service (CaaS)

Question 9

Which Azure service allows you to create managed file shares in the cloud that are accessible via the SMB protocol?

Accepted Answer

Azure Files. Azure Files provides fully managed file shares in the cloud that can be accessed via the Server Message Block (SMB) protocol, making it the correct choice. It allows you to lift and shift legacy applications that rely on SMB file shares without modifying code, and it supports both SMB 2.1 and SMB 3.0 protocols.

Answer

Azure Blob Storage

Answer

Azure Disk Storage

Answer

Azure Data Lake Storage

Question 10

What is the benefit of 'economies of scale' in cloud computing?

Accepted Answer

Cloud providers pass on lower per-unit costs from massive purchasing power to customers. Economies of scale in cloud computing refers to the cost advantage that cloud providers achieve through massive purchasing power—buying hardware, bandwidth, and power in bulk at discounted rates. They then pass these savings on to customers in the form of lower per-unit costs for compute, storage, and networking services. This is a fundamental economic principle that makes public cloud more cost-effective than running your own data center.

Answer

You can deploy resources in any geographic location worldwide

Answer

You can scale your resources up or down to match demand

Answer

You avoid the cost of managing physical infrastructure

Question 11

Which Azure service provides a unified security management system that strengthens the security posture of data centers and cloud workloads?

Accepted Answer

Microsoft Defender for Cloud. Microsoft Defender for Cloud (formerly Azure Security Center) is a unified security management system that provides continuous assessment, security recommendations, and threat protection across hybrid cloud workloads. It strengthens the security posture of data centers and cloud workloads by offering features like secure score, regulatory compliance dashboards, and just-in-time VM access, making it the correct answer.

Answer

Azure Firewall

Answer

Azure DDoS Protection

Answer

Azure Key Vault

Question 12

Which Azure tool helps organizations evaluate and quantify the potential impact of Azure service disruptions on their operations?

Accepted Answer

Azure Service Health (post-incident reports). Azure Service Health provides post-incident reports (Root Cause Analyses or RCAs) that detail the impact of Azure service disruptions, including affected services, regions, and timelines. This allows organizations to quantify downtime and assess operational impact, which is the specific need described in the question.

Answer

Azure Monitor Alerts

Answer

Azure Application Insights failure analysis

Answer

Azure Advisor reliability recommendations

Question 13

Which Azure service provides a hybrid cloud solution that enables running Azure services in on-premises data centers?

Accepted Answer

Azure Stack. Azure Stack is a hybrid cloud solution that extends Azure services and capabilities to on-premises environments. It allows organizations to run Azure compute, storage, and networking services in their own data centers, providing consistency with the public Azure cloud for workloads that require low latency, data residency, or offline operation.

Answer

Azure ExpressRoute

Answer

Azure Arc

Answer

Azure Hybrid Benefit

Question 14

A retail company runs its e-commerce platform on a public cloud. During a major sale event, they want to ensure that the application remains accessible even if an entire data center fails. Which cloud computing concept does this describe?

Accepted Answer

High availability. High availability ensures that the application remains accessible even if an entire data center fails, typically through redundant infrastructure across multiple availability zones. This is achieved by deploying the application in a load-balanced, multi-AZ configuration that automatically fails over to healthy instances, maintaining uptime despite a complete data center outage.

Answer

Scalability

Answer

Elasticity

Answer

Disaster recovery

Question 15

A startup wants to quickly deploy a web application without worrying about server maintenance. They only want to focus on writing code and deploying it. Which cloud service model best fits this requirement?

Accepted Answer

B) Platform as a Service (PaaS). Platform as a Service (PaaS) provides a managed hosting environment where the cloud provider handles the underlying infrastructure (servers, storage, networking, OS patches) while the customer focuses solely on deploying and managing their own code and data. This directly matches the startup's requirement to avoid server maintenance and concentrate on writing and deploying code.

Answer

A) Infrastructure as a Service (IaaS)

Answer

C) Software as a Service (SaaS)

Answer

D) Functions as a Service (FaaS)