AZ-900 Practice Exam 55 — 20 Questions

Question 1

An organization wants to combine on-premises data center resources with Azure public cloud services to extend capacity during peak demand. Which cloud deployment model describes this approach?

Accepted Answer

Hybrid. The hybrid cloud model combines on-premises infrastructure (private cloud) with public cloud services, enabling workload bursting during peak demand. This approach uses technologies like Azure ExpressRoute or VPN gateways to create a seamless network, allowing organizations to scale capacity on-demand without permanently migrating all resources.

Answer

Public

Answer

Private

Answer

Multi-cloud

Question 2

A company wants to segregate their Azure resources into logical groups based on department and environment. They also want to apply access control and management at these group levels. Which Azure construct should they use?

Accepted Answer

Resource groups. Resource groups are logical containers in Azure that allow you to group related resources (e.g., VMs, databases, storage) by department and environment. They enable you to apply access control via Azure RBAC and management policies (e.g., tags, locks) at the group level, ensuring consistent governance across all resources within the group.

Answer

Availability sets

Answer

Virtual networks

Answer

Subscriptions

Question 3

A company wants to receive proactive recommendations to reduce Azure costs, improve security, and increase reliability. They want a single dashboard that provides best practices for their deployed resources. Which Azure service should they use?

Accepted Answer

Azure Advisor. Azure Advisor is the correct service because it provides a personalized, consolidated dashboard of best-practice recommendations across cost optimization, security, reliability, operational excellence, and performance. It analyzes your deployed resources and proactively suggests actions such as resizing underutilized VMs, enabling geo-redundancy, or applying security policies, directly matching the company's need for proactive, single-pane-of-guidance.

Answer

Azure Cost Management + Billing

Answer

Azure Monitor

Answer

Azure Resource Graph

Question 4

Which Azure service acts as a global load balancer that optimizes routing of user traffic to the nearest Azure endpoint for the best performance?

Accepted Answer

Azure Front Door. Azure Front Door is a global, scalable entry point that uses the Microsoft global edge network to route user traffic to the nearest available Azure endpoint based on latency and geographic proximity. It provides HTTP/HTTPS load balancing with advanced traffic acceleration, SSL offload, and application-layer security, making it the correct choice for optimizing performance across global regions.

Answer

Azure Application Gateway

Answer

Azure Traffic Manager

Answer

Azure Load Balancer

Question 5

What is the purpose of Azure Policy initiatives (policy sets)?

Accepted Answer

To group related policy definitions for assignment and management as a single unit. Azure Policy initiatives, also known as policy sets, allow you to group together multiple related policy definitions into a single, manageable unit. This simplifies assignment and management by enabling you to apply a collection of compliance rules (e.g., for security or cost control) to a scope as one entity, rather than assigning each policy individually.

Answer

To deploy a group of Azure resources as a single unit

Answer

To create hierarchical management of Azure subscriptions

Answer

To set spending limits across multiple resource groups

Question 6

A company runs a web application that experiences unpredictable traffic spikes. They want the cloud to automatically increase the number of virtual machine instances during high demand and decrease them when demand drops, without manual intervention. Which cloud computing characteristic does this describe?

Accepted Answer

Elasticity. Elasticity is the ability of a cloud system to dynamically scale resources up and down based on real-time demand. Scalability refers to the ability to handle growth but may not be automatic. High availability focuses on uptime, and fault tolerance ensures operation during failures. This scenario specifically describes automatic scaling, which is elasticity.

Answer

Scalability

Answer

High availability

Answer

Fault tolerance

Question 7

Which Azure service provides a centralized console for monitoring the health, performance, and security of your entire Azure environment?

Accepted Answer

Azure Monitor. Azure Monitor is the correct answer because it provides a centralized, unified console for collecting, analyzing, and acting on telemetry data from your entire Azure environment. It covers health, performance, and security metrics, logs, and alerts across resources, enabling proactive monitoring and troubleshooting. Unlike specialized services, Azure Monitor aggregates data from multiple sources into a single pane of glass.

Answer

Azure Service Health

Answer

Microsoft Sentinel

Answer

Azure Security Center

Question 8

Which Azure service provides real-time monitoring and alerting for web application availability and performance from multiple global locations?

Accepted Answer

Application Insights Availability tests. Application Insights Availability tests (part of Azure Monitor) are specifically designed to monitor the availability and responsiveness of web applications from multiple geographically distributed locations. These tests simulate user requests from global points of presence and provide real-time alerts when an endpoint fails or responds slowly, making them the correct choice for this scenario.

Answer

Azure Traffic Manager health probes

Answer

Azure Monitor Action Groups

Answer

Azure Load Balancer health probes

Question 9

Which Azure service provides language understanding (NLU) capabilities to build applications that understand natural language commands?

Accepted Answer

Azure Cognitive Service for Language (LUIS). Azure Cognitive Service for Language (formerly LUIS) provides natural language understanding (NLU) capabilities, enabling applications to interpret user intent and extract entities from natural language commands. It is specifically designed to process conversational input and map it to structured data, making it the correct choice for building applications that understand natural language commands.

Answer

Azure Bot Service

Answer

Azure Speech Service

Answer

Azure Form Recognizer

Question 10

Which Azure service allows developers to build, train, and deploy machine learning models at scale using a managed cloud environment?

Accepted Answer

Azure Machine Learning. Azure Machine Learning is the correct service because it provides a fully managed cloud environment specifically designed for the end-to-end machine learning lifecycle, including building, training, and deploying models at scale. It offers capabilities like automated ML, pipeline orchestration, and integration with MLOps tools, which are not available in the other listed services.

Answer

Azure Cognitive Services

Answer

Azure Bot Service

Answer

Azure Databricks

Question 11

A company runs a web application on Azure virtual machines. During a promotional event, the number of users increases significantly. To handle the increased load, the IT team adds five additional virtual machines to the existing pool, so that the total number of VMs increases from three to eight. Which type of scaling is the team using?

Accepted Answer

Horizontal scaling (scale out). Horizontal scaling (scale out) involves increasing the number of virtual machines (VMs) in a pool to distribute load, as seen when the team adds five VMs to go from three to eight. This approach improves capacity by adding more instances, rather than increasing the size of existing ones. In Azure, this is commonly achieved using Virtual Machine Scale Sets or Azure Load Balancer to distribute traffic across the expanded pool.

Answer

Vertical scaling (scale up)

Answer

Elasticity

Answer

High availability

Question 12

Which Azure service provides a managed platform for deploying and running microservices as containers without managing the Kubernetes control plane?

Accepted Answer

Azure Container Apps. Azure Container Apps is a fully managed serverless platform for deploying and running microservices as containers without requiring any management of the underlying Kubernetes control plane. It abstracts away Kubernetes orchestration, providing built-in autoscaling, ingress, and secrets management, making it ideal for event-driven or containerized microservices where operational overhead must be minimized.

Answer

Azure Kubernetes Service

Answer

Azure Container Instances

Answer

Azure App Service

Question 13

Which Azure portal feature enables you to create a customized view of the most important resources and metrics at a glance?

Accepted Answer

Azure Dashboards. Azure Dashboards allow you to create a personalized, tile-based view that can display a mix of Azure resources, metrics, and charts from different resource groups and subscriptions. This enables you to monitor the most critical data at a glance without navigating through multiple blades. The customization includes resizing, rearranging, and sharing dashboards with other team members.

Answer

Azure Advisor

Answer

Azure Resource Graph

Answer

Azure Policy compliance view

Question 14

What is the Azure portal?

Accepted Answer

A web-based graphical console for creating, managing, and monitoring Azure resources. The Azure portal is a web-based graphical user interface (GUI) that allows users to create, manage, and monitor Azure resources through a browser. It provides a unified console for tasks such as deploying virtual machines, configuring networking, and viewing cost analytics, without requiring command-line tools or local software.

Answer

A marketplace for purchasing Azure hardware for on-premises deployment

Answer

A command-line tool for automating Azure resource deployments

Answer

A documentation site for Azure services

Question 15

A multinational corporation must ensure that every new Azure subscription automatically conforms to corporate security and compliance baselines. The team wants to deploy a predefined set of Azure resources (e.g., a central logging storage account, a network security group configuration) and apply a standard set of Azure Policy definitions (e.g., restricting allowed VM sizes, enforcing encryption) to any new subscription. They want to manage these as a single, versioned package that can be updated and re-assigned to existing subscriptions. Which Azure service should they use?

Accepted Answer

Azure Blueprints. Azure Blueprints is the service that enables the orchestrated deployment of resource templates (such as ARM templates) and policy assignments as a single, versioned package. It allows organizations to define a repeatable set of Azure resources and policies that can be applied to new or existing subscriptions to ensure consistency and compliance. Azure Policy alone can enforce rules but cannot deploy resources. Azure Management Groups only organize subscriptions for hierarchical management. Azure Resource Manager templates can deploy resources but cannot natively enforce policies or be versioned as a governance package in the same way as Blueprints.

Answer

Azure Policy

Answer

Azure Management Groups

Answer

Azure Resource Manager templates

Question 16

Which Azure networking service provides a private connection from an on-premises network to Azure without using the public internet?

Accepted Answer

Azure ExpressRoute. Azure ExpressRoute is the correct answer because it establishes a dedicated, private connection from an on-premises network directly into Azure, bypassing the public internet entirely. This is achieved through a Layer 3 BGP peering session over a provider-managed circuit, ensuring low latency, higher reliability, and data does not traverse the public internet.

Answer

Azure VPN Gateway

Answer

Azure Virtual Network

Answer

Azure Bastion

Question 17

Which Azure service allows developers to store application configuration settings centrally and toggle feature flags?

Accepted Answer

Azure App Configuration. Azure App Configuration is a managed service specifically designed for centrally storing application configuration settings and feature flags. It provides a unified hub for managing configuration across multiple environments and applications, with built-in support for dynamic updates and feature management without redeploying code.

Answer

Azure Key Vault

Answer

Azure App Service settings

Answer

Azure Storage Table

Question 18

Which Azure database service provides a fully managed MariaDB database in the cloud?

Accepted Answer

Azure Database for MariaDB. Azure Database for MariaDB is the correct answer because it is the specific Azure service designed to provide a fully managed, enterprise-ready MariaDB database in the cloud. MariaDB is a community-developed fork of MySQL, and Azure offers a dedicated managed service for it, including built-in high availability, automated backups, and scaling, without requiring you to manage the underlying infrastructure.

Answer

Azure Database for MySQL

Answer

Azure SQL Database

Answer

Azure Database for PostgreSQL

Question 19

Which Azure service provides code repository hosting with features like pull requests, code review, and branch protection?

Accepted Answer

Azure Repos. Azure Repos is the correct answer because it provides Git-based code repository hosting with full support for pull requests, code review workflows, and branch protection policies. These features enable teams to collaborate on code changes, enforce quality gates, and prevent direct pushes to critical branches.

Answer

Azure Artifacts

Answer

Azure Pipelines

Answer

Azure Boards

Question 20

Which Azure feature provides Just-In-Time (JIT) VM access to reduce the attack surface of management ports?

Accepted Answer

JIT VM Access in Microsoft Defender for Cloud. Just-In-Time (JIT) VM access in Microsoft Defender for Cloud reduces the attack surface by locking down inbound traffic to VMs, only opening management ports (e.g., RDP port 3389 or SSH port 22) when requested and for a specific time window. This is the correct feature because it directly implements JIT access to management ports, as described in the question.

Answer

Azure Bastion

Answer

Azure AD Privileged Identity Management

Answer

Azure Key Vault Certificate access