AZ-900 Practice Exam 51 — 20 Questions

Question 1

Which Azure feature enables organizations to review and recertify privileged role assignments on a scheduled basis?

Accepted Answer

Azure AD Access Reviews. Azure AD Access Reviews allow administrators to configure periodic reviews of privileged role assignments, ensuring that only authorized users retain access. This feature directly supports recertification workflows by sending reviewers notifications and automatically removing stale assignments based on policy.

Answer

Azure AD Privileged Identity Management role history

Answer

Azure RBAC audit logs

Answer

Azure Policy RBAC compliance

Question 2

A company wants to enforce that all storage accounts use the 'Standard' performance tier and block creation of any 'Premium' storage accounts. Which Azure Policy effect could achieve this?

Accepted Answer

Deny. The Deny effect is the correct choice because it actively prevents the creation of Azure resources that do not comply with the policy definition. In this scenario, by assigning a policy with the Deny effect that targets storage accounts with the 'Premium' performance tier, Azure Resource Manager will block any request to create a Premium storage account, ensuring only 'Standard' tier accounts are provisioned.

Answer

Append

Answer

Audit

Answer

Disabled

Question 3

A company wants to ensure that all new Azure storage accounts have a specific encryption setting enabled. They also want to automatically remediate any existing non-compliant storage accounts without manual effort. Which Azure Policy effect should they use?

Accepted Answer

DeployIfNotExists. DeployIfNotExists is the correct effect because it not only evaluates the compliance of storage accounts against the encryption policy but also automatically deploys a remediation task (e.g., enabling encryption via a linked ARM template or Azure function) to bring non-compliant resources into compliance without manual intervention. This effect is specifically designed for scenarios where the resource itself needs to be modified or configured to meet the policy requirement.

Answer

Append

Answer

AuditIfNotExists

Answer

Deny

Question 4

Which Azure AI service converts spoken audio into text and text into spoken audio?

Accepted Answer

Azure Speech Service. Azure Speech Service provides both speech-to-text and text-to-speech capabilities, enabling bidirectional conversion between spoken audio and written text. It is the single Azure AI service that combines these two functions, unlike other services that handle only one direction or different tasks.

Answer

Azure Language Understanding (LUIS)

Answer

Azure Translator

Answer

Azure Bot Service

Question 5

A company transitions from on-premises IT, where they purchased servers upfront, to Azure, where they pay a monthly subscription for virtual machines. This is an example of moving from capital expenditure (CapEx) to which type of expenditure?

Accepted Answer

Operating expenditure (OpEx). Moving from purchasing servers upfront (CapEx) to paying a monthly subscription for Azure virtual machines shifts costs to an operational expense (OpEx). This is because Azure's pay-as-you-go model charges for compute resources as they are consumed, with no large initial investment, aligning with OpEx accounting where costs are incurred and deducted in the same period.

Answer

Variable expenditure

Answer

Consumption-based expenditure

Answer

Fixed expenditure

Question 6

Arrange the steps to configure an Azure load balancer for high availability.

Accepted Answer

Create load balancer -> Configure frontend IP and backend pool -> Configure health probes -> Configure load balancing rules -> Associate VMs to backend pool. Load balancer setup includes resource creation, IP/pool config, health probes, rules, and VM association.

Answer

Associate VMs to backend pool -> Create load balancer -> Configure frontend IP and backend pool -> Configure health probes -> Configure load balancing rules

Answer

Create load balancer -> Configure frontend IP and backend pool -> Configure load balancing rules -> Configure health probes -> Associate VMs to backend pool

Answer

Configure frontend IP and backend pool -> Create load balancer -> Configure health probes -> Configure load balancing rules -> Associate VMs to backend pool

Question 7

What is 'agility' in the context of cloud computing?

Accepted Answer

The ability to quickly deploy and configure resources to meet business needs. Agility in cloud computing refers to the ability to rapidly provision, scale, and decommission resources (such as virtual machines, databases, or containers) to adapt to changing business demands. This is enabled by infrastructure-as-code (IaC) tools like Azure Resource Manager (ARM) templates, which allow you to deploy and configure resources in minutes rather than weeks, directly supporting business responsiveness.

Answer

The ability to protect data from unauthorized access

Answer

The ability to run applications across multiple cloud providers

Answer

The ability to store data permanently without loss

Question 8

A cloud provider offers resources on-demand and measures usage. Customers pay only for what they consume. Which characteristic of cloud computing is this?

Accepted Answer

Measured service. This describes the 'measured service' characteristic, where cloud providers meter resource usage (e.g., compute hours, storage GB, network I/O) and bill customers based on actual consumption. This pay-per-use model is enabled by telemetry and monitoring systems that track metrics like CPU time, bandwidth, and API calls, allowing granular cost allocation.

Answer

Resource pooling

Answer

Broad network access

Answer

Rapid elasticity

Question 9

Which Azure service provides a managed registry for Docker container images and OCI artifacts?

Accepted Answer

Azure Container Registry. Azure Container Registry (ACR) is the correct answer because it is a managed, private Docker registry service that stores and manages container images and Open Container Initiative (OCI) artifacts. It supports Docker Registry HTTP API V2, enabling push/pull operations for containerized workloads across Azure services.

Answer

Azure Kubernetes Service

Answer

Azure Container Instances

Answer

Azure Artifact Repository

Question 10

A company can provision virtual machines in Azure without submitting a request or waiting for hardware procurement. Which cloud characteristic does this describe?

Accepted Answer

On-demand self-service. On-demand self-service allows users to provision virtual machines and other cloud resources automatically without requiring human interaction with the service provider. This eliminates the need for submitting a formal request or waiting for hardware procurement, as the provisioning is handled through a web portal, API, or CLI.

Answer

Rapid elasticity

Answer

Measured service

Answer

Resource pooling

Question 11

A company needs to ensure that Azure resources are deployed with specific settings enforced without the ability for any user to change them. Which approach achieves this?

Accepted Answer

Azure Blueprints with locked assignment mode. Azure Blueprints with locked assignment mode enforces that all resources deployed from the blueprint inherit the blueprint's configuration and cannot be modified or deleted by any user, including those with Owner permissions. This is achieved by setting the blueprint assignment to 'locked' mode, which applies a deny assignment to all resources created by the blueprint, ensuring settings are immutable.

Answer

Assign Contributor role to only trusted users

Answer

Azure Policy with audit effect

Answer

Azure Resource Manager conditional access

Question 12

Which Azure service allows you to run Windows or Linux virtual machines in Azure?

Accepted Answer

Azure Virtual Machines. Azure Virtual Machines (IaaS) provides full control over the guest operating system, allowing you to run both Windows and Linux VMs with custom configurations. Unlike PaaS or serverless services, VMs give you direct access to the OS for installing software, managing updates, and configuring networking.

Answer

Azure App Service

Answer

Azure Container Instances

Answer

Azure Functions

Question 13

Which Azure AI service provides translation between more than 100 languages?

Accepted Answer

Azure Translator. Azure Translator is the correct service because it is specifically designed for text and document translation across more than 100 languages and dialects, using a neural machine translation (NMT) engine. It provides a REST API that supports real-time translation, language detection, and transliteration, making it the direct solution for multi-language translation needs.

Answer

Azure Language Understanding (LUIS)

Answer

Azure Speech Service

Answer

Azure Text Analytics

Question 14

Which Azure service enables bi-directional communication between IoT applications and millions of IoT devices?

Accepted Answer

Azure IoT Hub. Azure IoT Hub is a managed cloud service that acts as a central message hub for bi-directional communication between IoT applications and devices. It supports both device-to-cloud and cloud-to-device messaging, enabling commands, telemetry ingestion, and device management at scale.

Answer

Azure Event Hubs

Answer

Azure Service Bus

Answer

Azure Notification Hubs

Question 15

Arrange the steps to create a virtual machine in Azure in the correct order.

Accepted Answer

1. Sign in to Azure portal, 2. Create a new virtual machine resource, 3. Configure VM settings (name, region, size, etc.), 4. Review and create. Creating a VM starts with portal access, then resource creation, configuration, and final validation.

Answer

1. Create a new virtual machine resource, 2. Configure VM settings, 3. Sign in to Azure portal, 4. Review and create

Answer

1. Sign in to Azure portal, 2. Configure VM settings, 3. Create a new virtual machine resource, 4. Review and create

Answer

1. Sign in to Azure portal, 2. Create a new virtual machine resource, 3. Review and create, 4. Configure VM settings

Question 16

Order the steps to set up Azure Site Recovery for disaster recovery.

Accepted Answer

Create a Recovery Services vault, then enable replication for source VMs specifying target settings, then run a test failover, then monitor replication health.. Site Recovery requires a vault, replication enablement, target configuration, validation, and ongoing monitoring.

Answer

Run a test failover, then create a Recovery Services vault, then enable replication, then monitor.

Answer

Create a Recovery Services vault, then run a test failover, then enable replication, then monitor.

Answer

Enable replication, then create a Recovery Services vault, then monitor, then run a test failover.

Question 17

Arrange the steps to implement Azure Backup for a virtual machine.

Accepted Answer

Create Recovery Services vault, then configure backup policy, then enable backup on the VM, then run initial backup, then monitor backup jobs.. Azure Backup requires a vault, policy, enablement, initial backup, and monitoring.

Answer

Configure backup policy, then create Recovery Services vault, then enable backup on the VM, then run initial backup, then monitor backup jobs.

Answer

Create Recovery Services vault, then enable backup on the VM, then configure backup policy, then run initial backup, then monitor backup jobs.

Answer

Create Recovery Services vault, then configure backup policy, then enable backup on the VM, then monitor backup jobs, then run initial backup.

Question 18

Arrange the steps to implement Azure Cost Management and set a budget.

Accepted Answer

Step 1: Access Azure Cost Management in the portal. Step 2: Create a budget with scope and amount. Step 3: Set up alerts for budget thresholds. Step 4: Monitor spending and adjust budget as needed.. Cost management involves portal access, budget creation, alerts, monitoring, and adjustment.

Answer

Step 1: Create a budget with scope and amount. Step 2: Access Azure Cost Management in the portal. Step 3: Set up alerts for budget thresholds. Step 4: Monitor spending and adjust budget as needed.

Answer

Step 1: Set up alerts for budget thresholds. Step 2: Access Azure Cost Management in the portal. Step 3: Create a budget with scope and amount. Step 4: Monitor spending and adjust budget as needed.

Answer

Step 1: Monitor spending and adjust budget as needed. Step 2: Access Azure Cost Management in the portal. Step 3: Create a budget with scope and amount. Step 4: Set up alerts for budget thresholds.

Question 19

Sequence the steps to implement Azure Policy to enforce compliance.

Accepted Answer

Create policy definition, assign policy, review compliance, remediate non-compliant resources.. Policy implementation involves definition, assignment, compliance review, and remediation.

Answer

Assign policy, create policy definition, review compliance, remediate non-compliant resources.

Answer

Create policy definition, review compliance, assign policy, remediate non-compliant resources.

Answer

Remediate non-compliant resources, create policy definition, assign policy, review compliance.

Question 20

Match each Azure governance tool to its purpose.

Accepted Answer

Azure Policy: Enforces rules and compliance across resources.. Correct matches: Azure Policy enforces rules; Azure Blueprints sets up governed environments; Management Groups organize subscriptions for policy management. Common confusions involve swapping these definitions.

Answer

Azure Policy: Enables repeatable setup of governed environments.

Answer

Azure Blueprints: Organize subscriptions for policy and compliance management.

Answer

Management Groups: Enforces rules and compliance across resources.