AZ-900 Practice Exam 58 — 20 Questions

Question 1

Which Azure service provides a way to build workflows that integrate apps, data, and services across cloud and on-premises environments?

Accepted Answer

Azure Logic Apps. Azure Logic Apps is the correct answer because it is a cloud-based platform for creating and running automated workflows that integrate apps, data, services, and systems across cloud and on-premises environments. It provides a visual designer and hundreds of prebuilt connectors to orchestrate business processes without writing code, making it ideal for enterprise integration scenarios.

Answer

Azure Functions

Answer

Azure Service Bus

Answer

Azure Event Grid

Question 2

A multinational company has multiple Azure subscriptions for different business units. The central governance team wants to define a standardized environment that must be automatically applied to every new subscription. The standard must include a set of Azure Policy definitions (e.g., allowed regions), a specific Azure RBAC role assignment (e.g., a contributor access for a central security group), and a preconfigured resource group with a virtual network. The team wants to package all these components together so that they can be deployed consistently and updated centrally. Which Azure service should the team use?

Accepted Answer

Azure Blueprints. Azure Blueprints is the correct service because it allows packaging of Azure Policy definitions, RBAC assignments, and resource groups with virtual networks into a single artifact that can be applied to subscriptions. It supports centralized updates and consistent deployment across subscriptions.

Answer

Azure Policy

Answer

Azure Management Groups

Answer

Azure Resource Manager templates

Question 3

A company is designing a disaster recovery solution for an application hosted on Azure VMs. They want to replicate the VMs to a secondary Azure region and automatically failover if the primary region fails. Which Azure service should they use?

Accepted Answer

Azure Site Recovery. Azure Site Recovery (ASR) orchestrates replication, failover, and failback of Azure VMs between regions. It continuously replicates VM disks to the secondary region and, upon a failure, allows you to initiate a planned or unplanned failover with a single click, meeting the stated disaster recovery and automatic failover requirements.

Answer

Azure Backup

Answer

Azure Traffic Manager

Answer

Azure Load Balancer

Question 4

A company has 10 Azure subscriptions used by different departments. The finance team wants to receive automated, prioritized recommendations to reduce cloud costs. Specifically, they want suggestions for identifying idle virtual machines and rightsizing underutilized resources across all subscriptions. Which Azure service should the finance team use to get these recommendations?

Accepted Answer

Azure Advisor. Azure Advisor is the correct service because it provides personalized, prioritized recommendations across Azure subscriptions, including cost optimization suggestions such as identifying idle virtual machines and rightsizing underutilized resources. It analyzes resource usage and configuration to deliver actionable insights, making it ideal for the finance team's needs.

Answer

Azure Cost Management + Billing

Answer

Azure Policy

Answer

Azure Monitor

Question 5

What is the purpose of Azure tags?

Accepted Answer

To apply metadata to resources for organization, billing tracking, and filtering. Azure tags are key-value pairs that you can assign to Azure resources to apply metadata for organization, billing tracking, and filtering. They enable you to categorize resources by department, environment, cost center, or any custom taxonomy, which is essential for managing costs and resource inventory at scale. Tags are not used for access control, compliance enforcement, or backup automation.

Answer

To control access to Azure resources based on user roles

Answer

To enforce compliance policies across resource configurations

Answer

To back up resource configurations automatically

Question 6

A company plans to use an infrastructure-as-code approach to deploy its Azure resources. The company wants to define all resources (virtual networks, virtual machines, storage accounts) in a declarative JSON file. This file must ensure that resources are created in the correct order, handle dependencies automatically, and allow the same configuration to be deployed to multiple environments (dev, test, production) with parameterized values. The solution should be a native Azure feature. Which Azure feature should the company use?

Accepted Answer

Azure Resource Manager (ARM) templates. Azure Resource Manager (ARM) templates are the native Azure feature for infrastructure-as-code using a declarative JSON format. They define resources, handle dependencies automatically via the 'dependsOn' element, and support parameterization for deploying the same template to multiple environments (dev, test, production) by passing different parameter files. This directly matches the scenario's requirements for declarative JSON, dependency management, and multi-environment deployment.

Answer

Azure Policy

Answer

Azure Blueprints

Answer

Azure Automation State Configuration

Question 7

A company runs a containerized application on Azure. They want to use Kubernetes for orchestration but do not want to manage the control plane nodes. They need a managed Kubernetes service. Which Azure service should they choose?

Accepted Answer

Azure Kubernetes Service (AKS). Azure Kubernetes Service (AKS) is the correct choice because it provides a fully managed Kubernetes orchestration service. With AKS, Azure manages the control plane nodes (including the API server, etcd, and scheduler) automatically, so the company does not need to manage them. This meets the requirement for a managed Kubernetes service without control plane management overhead.

Answer

Azure Container Instances

Answer

Azure Container Registry

Answer

Azure App Service

Question 8

Which tool allows you to automate the creation and management of Azure resources using declarative JSON or Bicep templates?

Accepted Answer

ARM templates / Bicep. ARM templates and Bicep are declarative Infrastructure as Code (IaC) tools that allow you to define Azure resources in JSON or Bicep syntax. They enable repeatable, idempotent deployments by describing the desired state of resources, which Azure Resource Manager then orchestrates to create or update resources accordingly.

Answer

Azure PowerShell

Answer

Azure CLI

Answer

Azure Cloud Shell

Question 9

A retail company runs its e-commerce platform on Azure App Service. The platform is configured with an autoscale rule that adds web server instances when CPU usage exceeds 75%. During a holiday flash sale, traffic surges from a baseline of 1,000 concurrent users to over 100,000 concurrent users within minutes. The platform automatically provisions additional instances to handle the load, and once the sale ends, it scales back down. This ability to rapidly adjust resources to meet varying demand is a direct example of which fundamental characteristic of cloud computing?

Accepted Answer

Rapid elasticity. Rapid elasticity is the cloud characteristic that enables resources to scale out (add instances) and scale in (remove instances) automatically and quickly in response to demand changes. In this scenario, the autoscale rule on Azure App Service detects CPU usage exceeding 75% and provisions additional web server instances within minutes to handle the surge from 1,000 to over 100,000 concurrent users, then scales back down after the flash sale ends. This dynamic, near-instantaneous adjustment of capacity is the direct embodiment of rapid elasticity, distinguishing it from manual provisioning or fixed capacity models.

Answer

On-demand self-service

Answer

Measured service

Answer

Resource pooling

Question 10

Which Azure feature enables you to create policy definitions, RBAC role assignments, and ARM templates as a single package and track their deployment relationship?

Accepted Answer

Azure Blueprints. Azure Blueprints is the correct answer because it is specifically designed to package together policy definitions, RBAC role assignments, ARM templates, and other artifacts into a single, versioned, and trackable deployment unit. Unlike individual ARM templates or policy initiatives, Blueprints maintain a relationship between the deployed resources and the blueprint definition, enabling you to audit and track which blueprint version was used for each deployment.

Answer

ARM Templates

Answer

Azure Policy Initiative

Answer

Azure DevOps Pipelines

Question 11

A company uses Azure Resource Manager templates to deploy infrastructure. They need to manage secrets such as database connection strings and passwords securely. Which Azure service should they use to store and retrieve these secrets during deployment?

Accepted Answer

A) Azure Key Vault. Azure Key Vault is the correct service because it is designed specifically to securely store and manage secrets such as database connection strings, passwords, and certificates. During Azure Resource Manager (ARM) template deployments, you can reference Key Vault secrets directly in the template using a linked template or a parameter file, allowing the secrets to be retrieved at deployment time without exposing them in plaintext. This integration ensures that sensitive values are never hardcoded or stored in source control.

Answer

B) Azure Policy

Answer

C) Azure Managed Identity

Answer

D) Azure Service Principal

Question 12

A company runs a web application on an Azure virtual machine. The application experiences periodic traffic surges during promotional campaigns. To handle the increased load, the IT team manually changes the VM size from Standard_D2s_v3 to Standard_D8s_v3 before each campaign and then changes it back after the campaign ends. Which cloud computing concept does this scenario exemplify?

Accepted Answer

Scalability. This scenario exemplifies scalability, specifically vertical scaling (scaling up), because the IT team manually increases the VM size to handle higher demand and then reduces it afterward. Scalability is the ability to adjust resources to meet changing workload demands, which is exactly what occurs when changing from Standard_D2s_v3 to Standard_D8s_v3.

Answer

Elasticity

Answer

High availability

Answer

Disaster recovery

Question 13

A company operates a fleet of on-premises servers running legacy applications. Due to strict regulatory compliance requirements, these servers cannot be migrated to Azure. However, the IT team wants to centrally manage these servers using Azure tools, including applying Azure Policy to enforce configuration standards and using Azure Monitor for log collection and performance monitoring. The team needs to treat these on-premises servers as Azure resources without moving them. Which Azure service should the company use?

Accepted Answer

Azure Arc. Azure Arc is the correct service because it extends Azure Resource Manager (ARM) and Azure management plane to on-premises servers, allowing them to be treated as Azure resources without migration. With Azure Arc, you can apply Azure Policy to enforce configuration standards and use Azure Monitor for log collection and performance monitoring on these servers, meeting the regulatory compliance requirement of keeping them on-premises.

Answer

Azure Stack Edge

Answer

Azure Site Recovery

Answer

Azure Policy

Question 14

What is the purpose of Azure Load Balancer?

Accepted Answer

To distribute incoming network traffic across multiple backend resources. Azure Load Balancer operates at Layer 4 (TCP/UDP) of the OSI model to distribute incoming traffic across healthy backend resources, such as virtual machines or instances in a backend pool. It uses a hash-based distribution algorithm (5-tuple hash for inbound traffic) to ensure high availability and scalability by spreading requests evenly. This directly supports fault tolerance by automatically routing traffic away from unhealthy instances based on health probes.

Answer

To cache web content at edge locations globally

Answer

To connect on-premises networks to Azure

Answer

To manage domain names and DNS routing

Question 15

Which Azure service provides a way to create, test, and manage APIs, including rate limiting, authentication, and analytics?

Accepted Answer

Azure API Management. Azure API Management is a fully managed service that enables you to publish, secure, transform, maintain, and monitor APIs. It provides built-in capabilities for rate limiting (throttling), authentication (via OAuth 2.0, client certificates, or IP filtering), and analytics (through Azure Monitor and Application Insights), making it the correct choice for creating, testing, and managing APIs with these features.

Answer

Azure Functions

Answer

Azure Application Gateway

Answer

Azure Service Bus

Question 16

A global company wants to organize its Azure resources by department and project. They need to enforce cost allocation and apply governance policies consistently across all subscriptions. Which two Azure features should they use together? (Select two.)

Accepted Answer

Management groups. Management groups (B) are correct because they provide a hierarchical structure above subscriptions, enabling consistent governance and policy assignment across multiple subscriptions. Tags (C) are correct because they allow you to attach metadata (e.g., department and project) to resources for cost allocation and organization. Together, management groups enforce policies at scale, while tags enable granular cost tracking and reporting.

Answer

Resource groups

Answer

Azure Policies

Question 17

A company uses Azure to host a web application. At the end of each month, the finance team receives an invoice that details charges for compute hours, storage consumption, and outbound data transfer. The IT manager explains that this granular billing is possible because Azure continuously monitors resource usage and provides detailed usage data for cost allocation. This capability is a direct example of which essential characteristic of cloud computing as defined by the National Institute of Standards and Technology (NIST)?

Accepted Answer

Measured service. Measured service, because the scenario describes Azure's ability to continuously monitor resource usage (compute hours, storage, data transfer) and provide detailed billing data. This aligns with NIST's definition of measured service, where cloud systems automatically control and optimize resource use by leveraging a metering capability at some level of abstraction appropriate to the type of service (e.g., storage, processing, bandwidth, and active user accounts). The granular invoice is a direct output of this metering and reporting feature.

Answer

On-demand self-service

Answer

Broad network access

Answer

Resource pooling

Question 18

A company runs a latency-sensitive application on Azure virtual machines and needs to connect its on-premises data center to Azure. The connection must offer high reliability, predictable performance, and a service-level agreement (SLA) from the connectivity provider. It must also bypass the public internet for security and performance reasons. Which Azure service should the company use?

Accepted Answer

Azure ExpressRoute. Azure ExpressRoute is the correct choice because it provides a dedicated, private connection from the on-premises data center to Azure that bypasses the public internet entirely. This ensures high reliability, predictable performance (low latency and jitter), and a financially backed SLA of up to 99.95% availability. For latency-sensitive applications, ExpressRoute offers consistent network performance that VPNs over the internet cannot guarantee.

Answer

Azure VPN Gateway

Answer

Azure Virtual WAN

Answer

Azure Application Gateway

Question 19

A company's finance team wants to proactively monitor Azure spending and receive automated email notifications when costs reach 80% of a predefined monthly limit. They want to avoid manual cost tracking and set up alerts without custom scripting. Which Azure feature should they use?

Accepted Answer

Create a budget in Azure Cost Management with an alert at 80% of the budget amount.. Azure Cost Management budgets allow you to set a spending limit and configure alert thresholds (e.g., 80%) that trigger automated email notifications when costs reach that percentage. This meets the finance team's requirement for proactive monitoring without custom scripting or manual tracking.

Answer

Use Azure Advisor cost recommendations and configure an alert on the recommendations.

Answer

Configure an Azure Policy with a deny effect to block any spending that exceeds the monthly limit.

Answer

Use the Azure Pricing Calculator to estimate costs and set a manual reminder to check the Azure portal each month.

Question 20

A company deploys an Azure SQL Database. The company is billed based on the amount of data stored and the number of transactions per second (DTUs). At the end of each month, the company receives an invoice that itemizes the exact usage and the corresponding charges. Which of the five essential characteristics of cloud computing does this billing model primarily demonstrate?

Accepted Answer

Measured service. The billing model for Azure SQL Database, which itemizes usage based on data stored and transactions per second (DTUs), directly demonstrates the 'Measured service' characteristic. This is because cloud providers meter and charge for resource consumption (storage and DTUs) with pay-per-use billing, providing transparency for both the provider and consumer. The detailed invoice showing exact usage and charges is the hallmark of measured service, where usage is monitored, controlled, and reported.

Answer

On-demand self-service

Answer

Broad network access

Answer

Resource pooling