AZ-900 Practice Test 47 — 15 Questions

Question 1

Match each Azure storage type to its use case.

Accepted Answer

Blob Storage: Stores large amounts of unstructured data, such as text or binary data.. The correct matches are: Blob Storage for unstructured data, File Storage for SMB file shares, Queue Storage for messages, and Table Storage for structured NoSQL data. Common confusions include mixing up Blob Storage with relational data (which is Table Storage or SQL) and File Storage with Queue Storage.

Answer

Blob Storage: Stores structured relational data.

Answer

File Storage: Stores messages in a queue.

Question 2

Match each Azure networking service to its purpose.

Accepted Answer

Azure Load Balancer: Distributes network traffic at the transport layer (layer 4).. Azure Load Balancer operates at layer 4, Application Gateway at layer 7, Traffic Manager at DNS level. The distractors mix these characteristics.

Answer

Azure Load Balancer: Provides SSL termination and URL-based routing.

Answer

Azure Application Gateway: Distributes traffic across multiple regions based on DNS.

Answer

Azure Traffic Manager: Manages traffic at the transport layer within a region.

Question 3

What is the role of a cloud 'service level objective' (SLO) versus a 'service level agreement' (SLA)?

Accepted Answer

SLA is the provider's contractual guarantee; SLO is an internal organizational goal. An SLA is a legally binding contract between a cloud provider and a customer that specifies guaranteed uptime, performance, and credits for breaches, while an SLO is an internal target (e.g., 99.9% uptime) that the provider sets to meet or exceed the SLA. The SLA defines the minimum commitment; the SLO is a stricter internal goal used to drive operational excellence and avoid SLA violations.

Answer

SLA and SLO are identical terms for the same concept

Answer

SLO is the provider's contractual guarantee; SLA is the customer's internal target

Answer

SLA defines performance; SLO defines security requirements

Question 4

Which cloud service model gives customers the most control over the underlying infrastructure, including the operating system and networking?

Accepted Answer

Infrastructure as a Service (IaaS). Infrastructure as a Service (IaaS) provides virtualized computing resources over the internet, giving customers direct control over the operating system, storage, and networking components such as virtual networks and firewalls. Unlike higher-level service models, IaaS allows users to manage and configure the underlying infrastructure without physical hardware access, making it the model with the most customer control.

Answer

Software as a Service (SaaS)

Answer

Platform as a Service (PaaS)

Answer

Function as a Service (FaaS)

Question 5

What is disaster recovery in the context of cloud computing?

Accepted Answer

Restoring systems and data after a catastrophic event with minimal downtime. Disaster recovery (DR) in cloud computing focuses on restoring systems, applications, and data after a catastrophic event (e.g., natural disaster, cyberattack) to meet Recovery Time Objective (RTO) and Recovery Point Objective (RPO) targets. Azure Site Recovery orchestrates replication, failover, and failback of workloads between primary and secondary regions, ensuring minimal downtime and data loss. This is distinct from high availability, which prevents outages, or auto-scaling, which handles demand fluctuations.

Answer

Preventing any service outages from occurring

Answer

Automatically scaling resources when demand increases

Answer

Distributing traffic across multiple servers for performance

Question 6

What does an Azure Service Level Agreement (SLA) define?

Accepted Answer

Microsoft's uptime and connectivity commitments for Azure services. An Azure Service Level Agreement (SLA) is a formal document from Microsoft that defines the uptime and connectivity guarantees for each Azure service. For example, a typical SLA for a virtual machine deployed across two availability zones promises 99.99% uptime, meaning Microsoft commits to a maximum of 52.56 minutes of downtime per year. If Microsoft fails to meet these commitments, customers may be eligible for service credits or a refund, making the SLA a critical component of Azure's governance and reliability framework.

Answer

The maximum number of resources you can create in Azure

Answer

The pricing model for Azure services

Answer

The geographic locations where services are available

Question 7

What benefit does Azure provide that specifically helps companies maintain business continuity when their primary location is unavailable?

Accepted Answer

Geo-redundancy and disaster recovery capabilities. Azure's geo-redundancy and disaster recovery capabilities, such as Azure Site Recovery and geo-redundant storage (GRS), replicate workloads and data across paired Azure regions. This ensures that if a primary location fails due to an outage or disaster, services can failover to a secondary region, maintaining business continuity with minimal downtime and data loss.

Answer

Economies of scale reducing operational costs

Answer

Automatic performance optimization for all applications

Answer

Unified billing for all cloud services

Question 8

What is the purpose of Azure's 'Secure Score' in Microsoft Defender for Cloud?

Accepted Answer

To provide a quantified measurement of your security posture with actionable improvements. Azure Secure Score in Microsoft Defender for Cloud provides a quantified measurement of an organization's security posture based on security controls and recommendations. It calculates a percentage score from completed recommendations, and each recommendation includes actionable steps to improve the score, directly reflecting the security state of your Azure resources.

Answer

To measure the performance speed of Azure resources

Answer

To show the availability percentage of Azure security services

Answer

To audit user login attempts and failed authentications

Question 9

Which of the following best describes the 'shared responsibility' for operating system updates under the IaaS model?

Accepted Answer

The customer is responsible for patching the guest OS in IaaS VMs. Under the Infrastructure as a Service (IaaS) model, the cloud provider is responsible for the physical infrastructure and the hypervisor, but the customer retains control over the guest operating system running inside the virtual machine. Therefore, the customer is responsible for patching and updating the guest OS, including applying security updates and managing configuration. This aligns with the shared responsibility model where the customer manages anything they deploy on top of the abstracted infrastructure.

Answer

The cloud provider is responsible for patching the OS in IaaS VMs

Answer

Both customer and provider share equal responsibility for OS patches in IaaS

Answer

OS patching is not required in cloud environments as Azure handles this automatically

Question 10

A small business wants to move its accounting software to the cloud to avoid purchasing and maintaining physical servers. Which cloud service model would provide the accounting application as a ready-to-use service over the internet?

Accepted Answer

Software as a Service (SaaS). (SaaS) is correct because the business needs a ready-to-use accounting application delivered over the internet without managing underlying infrastructure. SaaS provides fully functional software accessed via a web browser, where the provider handles all maintenance, updates, and server management, aligning perfectly with the goal of avoiding physical server ownership.

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Answer

Function as a Service (FaaS)

Question 11

Which Azure feature allows organizations to track spending trends and get spending forecasts for the next 30 days?

Accepted Answer

Azure Cost Management Cost Analysis. Azure Cost Management Cost Analysis provides interactive dashboards and reports that allow organizations to visualize historical spending trends and generate forecasts for future costs, including a 30-day forecast. This feature uses historical usage data and machine learning models to predict spending, enabling proactive budget management.

Answer

Azure Advisor cost recommendations

Answer

Azure Budgets

Answer

Azure Pricing Calculator

Question 12

What does 'geo-distribution' mean as a benefit of cloud computing?

Accepted Answer

Having datacenters around the world to serve users with low latency. Geo-distribution in cloud computing refers to the global footprint of a cloud provider's infrastructure, with datacenters deployed across multiple geographic regions. This allows applications to be hosted closer to end users, reducing network latency and improving the user experience. It also supports data residency requirements and disaster recovery by replicating data across regions.

Answer

The ability to automatically scale resources up and down

Answer

The ability to recover from hardware failures automatically

Answer

Paying only for what you consume

Question 13

A company wants to host a web application that automatically scales based on traffic. Which Azure service is most appropriate for hosting this application without managing virtual machines?

Accepted Answer

Azure App Service. Azure App Service is a fully managed platform-as-a-service (PaaS) offering that automatically scales web applications based on traffic without requiring you to manage the underlying virtual machines. It supports built-in autoscaling rules, load balancing, and high availability, making it ideal for hosting web apps with variable demand.

Answer

Azure Virtual Machines

Answer

Azure Batch

Answer

Azure Container Instances

Question 14

A company has multiple Azure subscriptions organized under a management group hierarchy. They need to assign the 'Contributor' role to a security team for all subscriptions under the 'Production' management group. They also want new subscriptions added later to automatically inherit this role assignment. What should they do?

Accepted Answer

Assign the role at the management group level. Assigning the 'Contributor' role at the management group level ensures that all subscriptions under that management group inherit the role assignment. When new subscriptions are added to the 'Production' management group, they automatically inherit the role assignment because Azure RBAC supports inheritance down the management group hierarchy. This meets both requirements: immediate coverage and automatic inheritance for future subscriptions.

Answer

Assign the role at the tenant root management group level

Answer

Assign the role at each subscription individually

Answer

Use an Azure Blueprint to assign the role

Question 15

What is Azure Policy's 'audit' effect used for?

Accepted Answer

To evaluate and flag non-compliant resources without blocking them. Azure Policy's 'audit' effect evaluates resources against policy rules and flags any non-compliant resources in the compliance logs, but it does not block or automatically remediate them. This allows administrators to see which resources violate policies without impacting existing workloads or preventing creation of new resources.

Answer

To automatically fix non-compliant resources to match the policy

Answer

To deny creation of resources that don't comply with the policy

Answer

To send security alerts when resources are modified