AZ-900 Practice Exam 63 — 20 Questions

Question 1

A company stores critical financial data in Azure Blob Storage. The data must remain available even if an entire Azure region becomes unavailable. Additionally, the company needs the ability to read the data from the secondary region immediately during a regional outage, without waiting for Microsoft to initiate a failover. Which storage redundancy option should the company configure?

Accepted Answer

Read-Access Geo-Redundant Storage (RA-GRS). Read-Access Geo-Redundant Storage (RA-GRS) is the correct choice because it replicates data to a secondary region (geo-redundancy) and allows immediate read access to that secondary copy during a regional outage, without waiting for Microsoft to initiate a failover. This meets both the availability requirement and the need for instant read access from the secondary region.

Answer

Locally Redundant Storage (LRS)

Answer

Geo-Redundant Storage (GRS)

Answer

Zone-Redundant Storage (ZRS)

Question 2

A company runs a critical transaction-processing application on Azure virtual machines in the East US region. The application writes data to Azure managed disks and also stores files in Azure Blob Storage. The company's disaster recovery policy requires that all storage data must survive a complete failure of an Azure availability zone within the same region without any data loss. The solution must use synchronous replication and must not replicate data to a different Azure region. Which Azure storage redundancy option should the company configure for the Blob Storage account?

Accepted Answer

Zone-redundant storage (ZRS). Zone-redundant storage (ZRS) synchronously replicates data across three Azure availability zones within the same region, ensuring no data loss if an entire zone fails. This meets the disaster recovery requirement for synchronous replication and intra-region resilience without replicating to a different region.

Answer

Locally redundant storage (LRS)

Answer

Geo-redundant storage (GRS)

Answer

Read-access geo-redundant storage (RA-GRS)

Question 3

A company wants to analyze historical spending data across all Azure subscriptions and set proactive budget alerts to prevent cost overruns. They also need to identify spending trends by resource type. Which Azure tool should they use to meet all these requirements?

Accepted Answer

Azure Cost Management + Billing. Azure Cost Management + Billing is the correct tool because it provides native capabilities for analyzing historical spending data across all Azure subscriptions, setting proactive budget alerts with cost thresholds, and generating detailed cost analysis reports that can be filtered by resource type to identify spending trends. It integrates directly with Azure billing data and supports multi-subscription views, making it the single solution for all three requirements.

Answer

Azure Advisor

Answer

Azure Monitor

Answer

Azure Policy

Question 4

A company uses Azure for multiple workloads. The finance team wants to identify virtual machines that are consistently underutilized (average CPU usage below 5%) so they can reduce costs by resizing or shutting down those VMs. They want a built-in Azure tool that automatically analyzes resource usage and provides actionable recommendations. Which Azure service should they use?

Accepted Answer

Azure Advisor. Azure Advisor is the correct service because it is a built-in Azure tool that automatically analyzes resource usage and provides actionable recommendations to optimize costs, including identifying underutilized virtual machines. It specifically evaluates CPU usage patterns and suggests resizing or shutting down VMs with consistently low utilization (e.g., average CPU below 5%) to reduce costs without manual intervention.

Answer

Azure Monitor

Answer

Azure Cost Management

Answer

Azure Policy

Question 5

A company wants to enforce a naming convention on all Azure resources by automatically adding a tag with the environment name (e.g., 'Env-Prod' or 'Env-Dev') when a resource is created. They do not want to block resource creation if the tag is missing. Which Azure Policy effect should they use?

Accepted Answer

Append. The Append effect adds a specified tag (e.g., 'Env-Prod' or 'Env-Dev') to a resource during creation or update without blocking the operation. This matches the requirement to enforce a naming convention via tags automatically while allowing resource creation to proceed even if the tag is missing.

Answer

Deny

Answer

Audit

Answer

DeployIfNotExists

Question 6

A company wants to deploy a web application that automatically scales based on traffic, without managing any virtual machines. They need high availability and support for multiple development frameworks. Which Azure service should they use?

Accepted Answer

Azure App Service. Azure App Service is a fully managed Platform-as-a-Service (PaaS) offering that automatically scales web applications based on traffic using built-in autoscale rules, without requiring any virtual machine management. It provides high availability through its SLA-backed multi-instance deployment and supports multiple development frameworks including .NET, Java, Node.js, Python, and PHP, making it the ideal choice for this scenario.

Answer

Azure Virtual Machines

Answer

Azure Functions

Answer

Azure Kubernetes Service

Question 7

A company uses Azure to host its virtual machines and storage. The company receives a monthly invoice that charges based on the exact number of virtual machine hours and gigabytes of storage consumed. No upfront payment is required. Which characteristic of cloud computing does this billing model represent?

Accepted Answer

Measured service. The billing model charges based on exact virtual machine hours and gigabytes of storage consumed, with no upfront payment. This directly reflects the measured service characteristic of cloud computing, where resource usage is metered, monitored, and billed according to consumption. Azure tracks usage metrics (e.g., VM runtime in hours, storage in GB-months) via its meters and generates invoices based on these precise measurements.

Answer

Rapid elasticity

Answer

Resource pooling

Answer

On-demand self-service

Question 8

A company transitions from on-premises IT, where they purchased servers upfront, to Azure, where they pay a monthly subscription for virtual machines. This is an example of moving from capital expenditure (CapEx) to which type of expenditure?

Accepted Answer

Operating expenditure (OpEx). Moving from purchasing servers upfront (CapEx) to paying a monthly subscription for Azure virtual machines shifts costs to an operational expense (OpEx). This is because Azure's pay-as-you-go model charges for compute resources as they are consumed, with no large initial investment, aligning with OpEx accounting where costs are incurred and deducted in the same period.

Answer

Variable expenditure

Answer

Consumption-based expenditure

Answer

Fixed expenditure

Question 9

A company uses Azure Policy to enforce resource tagging. The governance team creates a policy that requires all resources in a subscription to have a 'CostCenter' tag. However, the team does not want to block resource creation if the tag is missing. Instead, they want the policy to automatically add the tag with a default value of 'Unassigned' to any new resource that is created without the tag. Which Azure Policy effect should the team configure in the policy definition?

Accepted Answer

Modify. The Modify effect is correct because it allows Azure Policy to automatically add or change a tag on a resource during creation or update without blocking the operation. This matches the requirement to add the 'CostCenter' tag with a default value of 'Unassigned' to any new resource missing it, while still permitting resource creation.

Answer

Deny

Answer

Audit

Answer

DeployIfNotExists

Question 10

A company wants to deploy a standardized environment that includes Azure Policy assignments, RBAC roles, and resource group templates. They need to version these components and apply them to multiple subscriptions. Which Azure service should they use?

Accepted Answer

Azure Blueprints. Azure Blueprints is the correct service because it is designed to orchestrate the deployment of a standardized environment by packaging Azure Policy assignments, RBAC roles, and resource group templates into a single, versioned, and repeatable artifact. It allows you to assign these components to multiple subscriptions while maintaining a consistent configuration and tracking changes through versioning.

Answer

Azure Policy

Answer

Azure Resource Manager

Answer

Azure Management Groups

Question 11

A company uses Azure Management Groups to organize subscriptions. The hierarchy is: Root Management Group -> Contoso Management Group -> Sales (management group) and R&D (management group). Under Sales there are two subscriptions: Sales-Prod and Sales-Dev. Under R&D there is one subscription: R&D-Prod. The governance team assigns an Azure Policy definition that denies the creation of resources in the East US region. They assign this policy to the Contoso Management Group, but they add an exclusion for the Sales-Dev subscription. A developer in the Sales-Dev subscription attempts to create a virtual machine in the East US region. What will happen?

Accepted Answer

The creation will succeed because the Sales-Dev subscription is excluded from the policy assignment.. Option C is correct because Azure Policy allows exclusions at any child scope when a policy is assigned at a parent management group. The policy assigned to the Contoso Management Group denies resources in East US, but the Sales-Dev subscription is explicitly excluded from that assignment. Therefore, the developer's virtual machine creation in East US will succeed, as the exclusion overrides the deny effect for that subscription.

Answer

The creation will fail because the policy is assigned to the Contoso Management Group, and all subscriptions under it must comply.

Answer

The creation will succeed because the policy is assigned only to the Sales and R&D management groups, not directly to subscriptions.

Answer

The creation will fail because exclusions cannot be applied at the subscription level when the policy is assigned at a management group scope.

Question 12

A company wants to ensure a specific resource group cannot be deleted, but they also need to be able to delete it temporarily during maintenance windows. Which approach allows the most granular control?

Accepted Answer

Apply a 'CanNotDelete' resource lock and remove it before maintenance.. A 'CanNotDelete' resource lock prevents deletion of a resource group and its resources, but it can be removed and reapplied as needed, providing granular control during maintenance windows. This approach allows temporary deletion by removing the lock, performing the deletion, and then reapplying the lock afterward. It is the only option that directly supports the requirement for both protection and temporary removal without permanent configuration changes.

Answer

Assign an Azure Policy with deny effect on delete operations.

Answer

Use Azure RBAC with a custom role that denies delete.

Answer

Use Azure Blueprints to enforce protection.

Question 13

A company wants to migrate an on-premises SQL Server database to Azure. They require full administrative control over the database engine, including the ability to configure SQL Server Agent jobs and use cross-database queries. They also want to avoid patching the operating system. Which Azure service should they choose?

Accepted Answer

Azure SQL Managed Instance. Azure SQL Managed Instance is the correct choice because it provides near 100% compatibility with on-premises SQL Server, including full administrative control over the database engine, support for SQL Server Agent jobs, and cross-database queries. It also offloads OS patching to Microsoft, meeting the requirement to avoid OS maintenance.

Answer

Azure SQL Database

Answer

SQL Server on Azure Virtual Machines

Answer

Azure Database for SQL

Question 14

A company uses Azure Policy to enforce that all virtual machines must be from an approved list of SKUs. They want to ensure that any non-compliant VMs that already exist are automatically remediated by changing the VM size to a compliant SKU. Which policy effect should they use?

Accepted Answer

Modify. The Modify effect is correct because it allows Azure Policy to automatically change non-compliant resources to a compliant state during evaluation. In this scenario, it can alter the VM size to an approved SKU without manual intervention, ensuring continuous compliance.

Answer

Deny

Answer

Audit

Answer

Append

Question 15

A company uses Azure and wants to ensure that their IT team receives alerts when virtual machines are deallocated unexpectedly. Which Azure service should they use to create a rule that triggers an action when a VM is deallocated?

Accepted Answer

Azure Monitor. Azure Monitor is the correct service because it provides a unified platform for collecting, analyzing, and acting on telemetry from Azure resources. By creating an alert rule in Azure Monitor with a signal type of 'Administrative' (Azure Activity Log), you can trigger an action group (e.g., email, SMS, webhook) specifically when a virtual machine is deallocated, as this event is logged as an administrative operation in the Activity Log.

Answer

Azure Service Health

Answer

Azure Advisor

Answer

Azure Policy

Question 16

A company wants to connect an on-premises network to Azure with a dedicated private connection that bypasses the internet. Which service should they use?

Accepted Answer

Azure ExpressRoute. Azure ExpressRoute is the correct service because it provides a dedicated, private connection from an on-premises network directly into Azure, bypassing the public internet entirely. This ensures lower latency, higher reliability, and greater security compared to internet-based connections, and it supports higher bandwidth options.

Answer

Azure VPN Gateway

Answer

Azure Virtual WAN

Answer

Azure DNS

Question 17

A company wants to ensure that all resources in their Azure environment are created with mandatory tags for cost tracking. They have already assigned a policy to append tags, but existing resources are still missing tags. They want to automatically add the tags to existing resources without manual intervention. What should they do?

Accepted Answer

Create a remediation task for the policy.. A remediation task is the correct solution because Azure Policy's 'append' effect only applies to new or updated resources. To automatically add the missing tags to existing non-compliant resources, you must create a remediation task that triggers a deployment to apply the policy's 'deployIfNotExists' or 'modify' effect. This task runs on demand or on a schedule to bring existing resources into compliance without manual intervention.

Answer

Modify the policy effect to 'deny' instead of 'append'.

Answer

Use Azure Resource Graph to identify and manually tag.

Answer

Reassign the policy with a new scope.

Question 18

A company wants to run a containerized microservices application on Azure. The application requires automatic scaling, service discovery, and rolling updates without manual intervention. They prefer not to manage the underlying virtual machines. Which Azure compute service should they choose?

Accepted Answer

Azure Kubernetes Service (AKS). Azure Kubernetes Service (AKS) is the correct choice because it provides a fully managed Kubernetes orchestration platform that handles automatic scaling (via Horizontal Pod Autoscaler), service discovery (via Kubernetes DNS and Services), and rolling updates (via Deployment strategies) without requiring you to manage the underlying virtual machines. AKS abstracts the control plane and node management, allowing you to focus on deploying and managing containerized microservices.

Answer

Azure Container Instances

Answer

Azure App Service

Answer

Azure Functions

Question 19

A company uses Azure Resource Manager templates to deploy and manage infrastructure. They need to ensure that resources are deployed in a consistent, repeatable manner across environments. Which two benefits does using ARM templates provide? (Choose two.)

Accepted Answer

Declarative syntax ensures that deployments are idempotent and repeatable.. Option A is correct because ARM templates use declarative syntax, meaning you define the desired state of your infrastructure rather than scripting the steps to achieve it. This makes deployments idempotent: running the same template multiple times produces the same result, ensuring consistency across environments without side effects.

Answer

Templates automatically scale resources based on demand.

Answer

Templates are limited to a specific Azure region.

Question 20

A company uses Azure Policy to enforce governance on their subscriptions. They want to ensure that every newly created Azure resource automatically receives two tags: 'Owner' and 'CostCenter'. If a user or an automated process creates a resource without specifying these tags, the policy should add the missing tags with default values of 'Unassigned' without blocking the resource creation. Which Azure Policy effect should be used in the policy definitions?

Accepted Answer

Append. Option C (Append) is correct because the Append effect adds specified fields (such as tags) to a resource during creation or update without blocking the operation. In this scenario, the policy must automatically add the 'Owner' and 'CostCenter' tags with default values of 'Unassigned' when they are missing, which is exactly what Append does—it modifies the resource request to include the missing tags before the resource is created.

Answer

Deny

Answer

Audit

Answer

DeployIfNotExists