AZ-900 Practice Test 6 — 10 Questions

Question 1

A multinational company runs a web application that must serve users from around the world with low latency. The application is deployed in multiple Azure regions. The company also requires built-in protection against distributed denial-of-service (DDoS) attacks at the network layer. The solution must automatically route users to the closest healthy endpoint based on geographic location. Which Azure service should the company use?

Accepted Answer

Azure Front Door. Azure Front Door is correct because it provides global load balancing with automatic routing to the closest healthy endpoint based on geographic location (latency-based routing), and it includes built-in DDoS protection at the network layer (L3/L4) as part of the Azure infrastructure. This combination of global routing and integrated DDoS mitigation directly matches the requirements for a multinational application serving users worldwide.

Answer

Azure Traffic Manager

Answer

Azure Load Balancer

Answer

Azure Application Gateway

Question 2

A financial services company must deploy a standardized environment for a new customer-facing application. The environment must include a specific set of Azure resources (such as virtual networks, databases, and App Service plans), pre-configured role assignments for the compliance team, and a collection of Azure Policy definitions that enforce encryption and tagging rules. The company needs to package all these components into a single, versioned artifact that can be consistently deployed across multiple subscriptions and regions, with the ability to track changes and updates. Which Azure service should the company use to achieve this?

Accepted Answer

Azure Blueprints. Azure Blueprints is the correct choice because it is designed to package a standardized environment—including resource templates, role assignments, and policy definitions—into a single, versioned artifact that can be deployed consistently across multiple subscriptions and regions. Unlike ARM templates, Blueprints natively supports versioning, tracking changes, and updating deployments, which meets the company's requirement for a versioned artifact with change tracking.

Answer

Azure Policy

Answer

Azure Resource Manager (ARM) templates

Answer

Azure Management Groups

Question 3

A company runs a web application on two Azure virtual machines (VMs) in different availability zones within the same region. The application maintains user session state in memory on the VMs. The company needs a load balancing solution that distributes incoming HTTP requests across both VMs, ensures all requests from a specific user session are routed to the same VM (session persistence), and terminates SSL/TLS to offload encryption from the VMs. Which Azure service should the company use?

Accepted Answer

Azure Application Gateway v2. Azure Application Gateway v2 is a layer-7 load balancer that supports HTTP/HTTPS traffic, SSL/TLS termination, and session persistence (sticky sessions) via cookie-based affinity. This makes it the correct choice for distributing HTTP requests across VMs in different availability zones while maintaining user session state and offloading encryption.

Answer

Azure Load Balancer (Standard)

Answer

Azure Traffic Manager

Answer

Azure Front Door

Question 4

A company wants to understand who is responsible for securing the operating system on an Azure virtual machine. According to the shared responsibility model, who is responsible?

Accepted Answer

Microsoft is responsible for the physical host and network, while the customer is responsible for the guest OS and applications.. Under the shared responsibility model for IaaS like Azure VMs, Microsoft secures the physical datacenter, host OS, and network infrastructure, while the customer is responsible for securing the guest OS (e.g., applying patches, configuring firewalls) and any applications running on the VM. This division is explicit in Azure's documentation, where the customer retains control over the OS and software stack.

Answer

Microsoft is responsible for all security.

Answer

The customer is responsible for all security.

Answer

Responsibility is split 50/50.

Question 5

A company runs a mission-critical application on Azure virtual machines. The application is hosted in the East US Azure region. To protect against a regional disaster, the company configures Azure Site Recovery to replicate the VMs to a secondary region (West US). If a disaster occurs in East US, the company can initiate a failover to West US and bring the application back online within minutes using the replicated data. Which cloud computing benefit does this scenario best demonstrate?

Accepted Answer

Disaster recovery and business continuity. Option C is correct because Azure Site Recovery provides disaster recovery and business continuity by replicating Azure VMs from the primary region (East US) to a secondary region (West US). In the event of a regional disaster, failover can be initiated to bring the application online within minutes using the replicated data, ensuring minimal downtime and data loss. This directly aligns with the cloud benefit of disaster recovery and business continuity, which focuses on maintaining operations during catastrophic failures.

Answer

Elasticity

Answer

Pay-as-you-go pricing

Answer

Geo-redundancy

Question 6

A company has multiple Azure subscriptions for different projects. They want to apply the same set of Azure policies and role assignments to all subscriptions under a specific department, and they plan to add more subscriptions in the future. Which Azure construct should they use?

Accepted Answer

Management group. A management group is the correct construct because it allows you to manage governance, policy, and role assignments across multiple Azure subscriptions hierarchically. By placing all subscriptions for a department under a single management group, you can apply the same Azure Policy and role-based access control (RBAC) assignments once, and any new subscriptions added to that group will automatically inherit those settings.

Answer

Resource group

Answer

Azure Policy initiative

Answer

Azure Blueprint

Question 7

A company needs to store large amounts of unstructured data, such as images and videos, which will be accessed by multiple applications over the internet. The data must be highly durable and available. Which Azure storage service should they use?

Accepted Answer

Azure Blob Storage. Azure Blob Storage is designed for storing massive amounts of unstructured data, such as images and videos, and provides high durability (99.9999999999% with LRS) and availability through geo-replication options. It supports access via HTTP/HTTPS from any internet-connected application, making it ideal for this scenario.

Answer

Azure Files

Answer

Azure Queue Storage

Answer

Azure Disk Storage

Question 8

A financial services company is evaluating a public cloud provider. They are concerned about the shared responsibility model for security. The company must ensure that their customer data is encrypted at rest and in transit. Under the shared responsibility model, which security control is the cloud provider typically responsible for?

Accepted Answer

Physical network security. Under the shared responsibility model, the cloud provider is responsible for the security OF the cloud, which includes physical network security such as protecting the data center perimeter, network infrastructure, and hardware. This is correct because physical security controls (e.g., access badges, surveillance, and network firewalls at the provider's edge) are entirely the provider's domain and cannot be delegated to the customer.

Answer

Encrypting customer data at rest

Answer

Patching virtual machines

Answer

Managing customer access policies

Question 9

A rapidly growing e-commerce company currently hosts its website on a single server in a US data center. Customers in Europe and Asia report slow load times and timeouts. The company wants to improve performance for global users without building and managing data centers worldwide. They plan to deploy the website on Azure virtual machines in multiple Azure regions (e.g., West Europe, Southeast Asia) and use Azure Traffic Manager to route users to the closest region. Which benefit of cloud computing does this approach primarily demonstrate?

Accepted Answer

Global reach. This approach primarily demonstrates global reach, which is the ability to deploy applications and services across multiple geographic regions to provide low-latency access to users worldwide. By hosting the website on Azure VMs in West Europe and Southeast Asia, and using Azure Traffic Manager to route users to the closest region based on DNS-based traffic routing (e.g., performance or geographic routing methods), the company leverages Azure's distributed infrastructure without building or managing its own data centers. This directly addresses the performance issues for European and Asian customers by reducing network latency and avoiding timeouts.

Answer

Scalability

Answer

Elasticity

Answer

High availability

Question 10

A startup wants to run a web application without purchasing or managing any servers. They only want to upload their code and let the cloud provider handle everything from the runtime to scaling. Which cloud service model best fits this requirement?

Accepted Answer

Platform as a Service (PaaS). Platform as a Service (PaaS) is the correct model because it provides a fully managed hosting environment where the startup can deploy their web application code without needing to provision or manage underlying servers, operating systems, or runtime infrastructure. Azure App Service is a prime example of PaaS that handles automatic scaling, load balancing, and patching, allowing developers to focus solely on code.

Answer

Infrastructure as a Service (IaaS)

Answer

Software as a Service (SaaS)

Answer

Function as a Service (FaaS)