AZ-900 Practice Test 48 — 15 Questions

Question 1

Which of the following best describes Platform as a Service (PaaS)?

Accepted Answer

The provider manages hardware and OS while customers manage their applications and data. Platform as a Service (PaaS) provides a managed hosting environment where the cloud provider handles the underlying infrastructure, including hardware, virtualization, operating system, and middleware. The customer is responsible only for deploying and managing their applications and data, making option B correct because it accurately describes this division of responsibility.

Answer

The customer manages everything including hardware and networking

Answer

The customer accesses a complete application managed entirely by the provider

Answer

The provider manages physical servers while customers manage OS and applications

Question 2

A company needs to ensure that no resources in any subscription can be created without a specific cost center tag. Which Azure feature accomplishes this?

Accepted Answer

Azure Policy with a 'require tag' definition in deny mode. Azure Policy with a 'require tag' definition in deny mode is the correct choice because it enforces a rule that blocks the creation of any resource that does not include the specified cost center tag. Azure Policy evaluates resource creation requests against defined policies and can deny non-compliant requests before the resource is provisioned, ensuring governance at the subscription or management group level.

Answer

Azure Blueprints with tag templates

Answer

Azure RBAC with custom roles

Answer

Azure Resource Groups with tag inheritance

Question 3

What is the key difference between an Azure 'region' and an Azure 'geography'?

Accepted Answer

A geography is a discrete market containing multiple Azure regions for data residency purposes. An Azure geography is a discrete market (e.g., United States, Europe) that contains at least one Azure region, and it is designed to preserve data residency and compliance boundaries. A region is a set of datacenters deployed within a latency-defined perimeter, connected through a dedicated regional low-latency network. Geographies ensure that customer data stays within the specified boundary for legal and regulatory requirements, even if a region fails.

Answer

A region contains multiple geographies; a geography contains a single region

Answer

A geography and a region are identical concepts in Azure

Answer

A geography refers to the physical datacenter building; a region is the city it's in

Question 4

A company uses Azure Policy to enforce that all virtual machines must be from an approved list of SKUs. They want to ensure that any non-compliant VMs that already exist are automatically remediated by changing the VM size to a compliant SKU. Which policy effect should they use?

Accepted Answer

Modify. The Modify effect is correct because it allows Azure Policy to automatically change non-compliant resources to a compliant state during evaluation. In this scenario, it can alter the VM size to an approved SKU without manual intervention, ensuring continuous compliance.

Answer

Deny

Answer

Audit

Answer

Append

Question 5

Which Azure service provides IoT device management, real-time analytics, and bi-directional communication between IoT devices and the cloud?

Accepted Answer

Azure IoT Hub. Azure IoT Hub is the correct service because it is specifically designed to provide secure, bi-directional communication between IoT devices and the cloud, along with device management capabilities and real-time analytics. It supports multiple protocols (MQTT, AMQP, HTTPS) and integrates with Azure Stream Analytics for real-time data processing.

Answer

Azure Event Hubs

Answer

Azure Notification Hubs

Answer

Azure Service Bus

Question 6

A company wants to run a containerized application that responds to HTTP requests. They want to deploy it without managing any virtual machines or orchestration. Which Azure service is the simplest option?

Accepted Answer

Azure Container Instances. Azure Container Instances (ACI) is the simplest option because it allows you to run a containerized application directly in Azure without managing any underlying virtual machines or orchestration. ACI automatically starts the container, assigns a public IP address, and handles HTTP requests on port 80/443, making it ideal for event-driven or stateless workloads that need rapid deployment.

Answer

Azure Kubernetes Service

Answer

Azure Virtual Machines

Answer

Azure App Service

Question 7

Which of the following is an advantage of cloud computing related to speed of deployment?

Accepted Answer

Resources can be provisioned in minutes rather than weeks. Cloud computing enables rapid provisioning of resources through self-service portals and automation, allowing virtual machines, storage, and networks to be deployed in minutes via APIs or management consoles. This contrasts with on-premises environments where hardware procurement, racking, and configuration can take weeks. The speed of deployment is a core agility benefit of the cloud, directly supporting faster time-to-market for applications.

Answer

You never need to patch operating systems

Answer

You own the physical hardware

Answer

All data is automatically encrypted at rest

Question 8

Which statement correctly describes the relationship between cloud scalability and business continuity?

Accepted Answer

Scalability supports business continuity by handling unexpected demand without service disruption. Scalability enables a cloud system to automatically add or remove resources (e.g., compute instances, bandwidth) in response to demand fluctuations. This directly supports business continuity by ensuring that sudden traffic spikes or resource surges do not cause service degradation or outages, maintaining availability and performance without manual intervention.

Answer

Scalability and business continuity are unrelated cloud concepts

Answer

Business continuity only requires geo-redundancy, not scalability

Answer

Scalability reduces the need for security controls in cloud environments

Question 9

What is the purpose of Azure AD Identity Protection?

Accepted Answer

To detect and automatically respond to suspicious identity-related risks. Azure AD Identity Protection is a security tool that uses machine learning and heuristics to detect suspicious activities such as leaked credentials, impossible travel, and anonymous IP address sign-ins. It can automatically respond to these risks by requiring multi-factor authentication or blocking sign-ins, thereby protecting identities without manual intervention.

Answer

To encrypt user passwords stored in Azure AD

Answer

To manage the lifecycle of user accounts in Azure AD

Answer

To synchronize identities between on-premises AD and Azure AD

Question 10

What is Azure Role-Based Access Control (RBAC)?

Accepted Answer

A system for granting specific permissions to users and groups for Azure resources. Azure Role-Based Access Control (RBAC) is an authorization system built on Azure Resource Manager that enables fine-grained access management for Azure resources. It works by assigning roles (collections of permissions) to users, groups, service principals, or managed identities at a specific scope (management group, subscription, resource group, or resource). This allows you to grant only the necessary permissions (e.g., 'Reader' to view resources, 'Contributor' to create and manage them) without sharing account credentials or using a single authentication method.

Answer

A way to authenticate users to Azure using passwords and MFA

Answer

A tool for monitoring resource usage and performance

Answer

A service for encrypting data stored in Azure

Question 11

A company wants to use a cloud service that provides a fully managed database, including automated backups, patching, and high availability, without managing any underlying servers. Which cloud service model is this?

Accepted Answer

Platform as a Service (PaaS). This scenario describes a fully managed database service where the provider handles backups, patching, and high availability, and the customer does not manage any underlying servers. This is the definition of Platform as a Service (PaaS), which provides a managed platform (including database engines like Azure SQL Database) where the customer only manages data and schema, while the provider handles the OS, runtime, and infrastructure.

Answer

Infrastructure as a Service (IaaS)

Answer

Software as a Service (SaaS)

Answer

Container as a Service (CaaS)

Question 12

Which Azure service allows you to create managed file shares in the cloud that are accessible via the SMB protocol?

Accepted Answer

Azure Files. Azure Files provides fully managed file shares in the cloud that can be accessed via the Server Message Block (SMB) protocol, making it the correct choice. It allows you to lift and shift legacy applications that rely on SMB file shares without modifying code, and it supports both SMB 2.1 and SMB 3.0 protocols.

Answer

Azure Blob Storage

Answer

Azure Disk Storage

Answer

Azure Data Lake Storage

Question 13

What is the benefit of 'economies of scale' in cloud computing?

Accepted Answer

Cloud providers pass on lower per-unit costs from massive purchasing power to customers. Economies of scale in cloud computing refers to the cost advantage that cloud providers achieve through massive purchasing power—buying hardware, bandwidth, and power in bulk at discounted rates. They then pass these savings on to customers in the form of lower per-unit costs for compute, storage, and networking services. This is a fundamental economic principle that makes public cloud more cost-effective than running your own data center.

Answer

You can deploy resources in any geographic location worldwide

Answer

You can scale your resources up or down to match demand

Answer

You avoid the cost of managing physical infrastructure

Question 14

Which Azure service provides a unified security management system that strengthens the security posture of data centers and cloud workloads?

Accepted Answer

Microsoft Defender for Cloud. Microsoft Defender for Cloud (formerly Azure Security Center) is a unified security management system that provides continuous assessment, security recommendations, and threat protection across hybrid cloud workloads. It strengthens the security posture of data centers and cloud workloads by offering features like secure score, regulatory compliance dashboards, and just-in-time VM access, making it the correct answer.

Answer

Azure Firewall

Answer

Azure DDoS Protection

Answer

Azure Key Vault

Question 15

Which Azure tool helps organizations evaluate and quantify the potential impact of Azure service disruptions on their operations?

Accepted Answer

Azure Service Health (post-incident reports). Azure Service Health provides post-incident reports (Root Cause Analyses or RCAs) that detail the impact of Azure service disruptions, including affected services, regions, and timelines. This allows organizations to quantify downtime and assess operational impact, which is the specific need described in the question.

Answer

Azure Monitor Alerts

Answer

Azure Application Insights failure analysis

Answer

Azure Advisor reliability recommendations