AZ-900 Describe Azure architecture and services — 15 Questions

Question 1

A development team wants to deploy a microservices-based application using containers. They want to orchestrate the containers with automatic scaling and rolling updates, but they want to avoid managing the underlying infrastructure such as virtual machines. Which Azure compute service meets these requirements?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Azure Kubernetes Service (AKS). Azure Kubernetes Service (AKS) is the correct choice because it provides a managed Kubernetes orchestration platform that handles container deployment, automatic scaling, and rolling updates. To fully avoid managing virtual machine infrastructure, you can enable virtual nodes (backed by Azure Container Instances), which allow pods to run on serverless infrastructure without managing any VMs. This meets the team's requirement to avoid managing underlying infrastructure.

Answer

Azure Virtual Machines

Answer

Azure Container Instances

Answer

Azure App Service

Question 2

A company has a virtual machine running a legacy application that needs high-performance, low-latency storage for transactional data. They need to attach a storage solution that provides the highest IOPS and throughput. Which Azure managed disk type should they choose?

Accepted Answer

D) Ultra Disk. Ultra Disk is the correct choice because it offers the highest IOPS and throughput of any Azure managed disk, with sub-millisecond latency, making it ideal for high-performance, low-latency transactional workloads. It supports up to 300,000 IOPS and 4,000 MB/s throughput per disk (depending on disk size), and allows independent scaling of IOPS and throughput without requiring a disk swap.

Answer

A) Standard HDD

Answer

B) Standard SSD

Answer

C) Premium SSD

Question 3

A company wants to migrate an on-premises application to Azure. The application requires consistently high disk throughput for database files. They plan to use Azure virtual machines with managed disks. Which disk type should they choose to get the highest possible IOPS and throughput at a premium cost?

Accepted Answer

Ultra Disk. Ultra Disk (Option C) is correct because it provides the highest IOPS and throughput of any Azure managed disk type, with sub-millisecond latency, making it ideal for I/O-intensive workloads like database files. It is designed for premium cost scenarios where maximum performance is required, offering configurable IOPS and throughput independent of disk size.

Answer

Standard SSD

Answer

Premium SSD v2

Answer

Standard HDD

Question 4

A company needs to run a simple background job that runs every hour for 10 minutes. They want to containerize the job but do not want to manage a container orchestration platform. Which Azure service is simplest and most cost-effective?

Accepted Answer

Azure Container Instances. Azure Container Instances (ACI) is the simplest and most cost-effective choice because it allows you to run a containerized job directly without managing any underlying infrastructure or orchestration platform. For a short-lived hourly job that runs for only 10 minutes, ACI provides fast startup and per-second billing. To schedule the job to run every hour, combine ACI with a scheduler such as Azure Logic Apps or Azure Automation, but ACI itself is the container execution service. The `--restart-policy Never` flag ensures the container doesn't restart after it finishes, which is appropriate for a one-time job execution.

Answer

Azure Kubernetes Service

Answer

Azure Batch

Answer

Azure Functions

Question 5

A company needs to share a set of files between multiple Azure VMs using the SMB protocol. They require a managed file share that can be mounted simultaneously by multiple VMs with permissions managed via Active Directory. Which Azure storage services should they use? (Select all that apply.)

Accepted Answer

Azure Files. Azure Files provides fully managed SMB file shares that can be mounted concurrently by multiple Azure VMs and supports Active Directory authentication. However, Azure NetApp Files is also a managed file share service that supports SMB and NFS, can be mounted by multiple VMs, and supports Active Directory permissions. Therefore, both A and D satisfy the criteria as written. The question needs to be revised to differentiate between them (e.g., cost, performance, or service tier), or the correct answer set should include both.

Answer

Azure Blob Storage

Answer

Azure Disk Storage

Question 6

A company is developing a web application that will be deployed to Azure App Service. The application experiences unpredictable spikes in traffic, and the company wants the number of instances to automatically increase during high demand and decrease during low demand to optimize costs. The company also needs to use a custom domain name and ensure the application is accessible over HTTPS. Which App Service plan tier should the company choose?

Accepted Answer

Standard. The Standard tier is the correct choice because it supports all three requirements: autoscaling, custom domains, and HTTPS (SNI-based SSL/TLS binding). The Free tier does not support custom domains or autoscaling. The Shared tier supports custom domains but does not support HTTPS for custom domains and lacks autoscaling. The Basic tier supports custom domains and HTTPS but lacks autoscaling. Therefore, Standard is the minimum tier that meets all requirements.

Answer

Free

Answer

Shared

Answer

Basic

Question 7

A company plans to deploy a three-tier web application in Azure. The application consists of web servers, application servers, and database servers. The company wants to protect the virtual machines (VMs) from planned maintenance events (e.g., OS updates) and unplanned hardware failures. They want to ensure that at least one VM in each tier remains available during such events. The solution should be deployed entirely within a single Azure region. What should the company use for the VMs?

Accepted Answer

Create an Availability Set containing two VMs per tier, configured with two fault domains and five update domains.. An Availability Set distributes VMs across fault domains (different hardware) and update domains (different maintenance groups), ensuring that during planned maintenance or an unplanned hardware failure, at least one VM per tier remains available. Availability Zones protect against datacenter-level failures, but the question specifically mentions planned maintenance events and hardware failures, which are handled by fault domains and update domains within a datacenter. Therefore, an Availability Set is the appropriate solution within a single Azure region.

Answer

Deploy the VMs across three Availability Zones (Zone 1, Zone 2, and Zone 3) within the region.

Answer

Configure a single Virtual Machine Scale Set that includes all the VMs for all three tiers.

Answer

Use a Virtual Machine Scale Set with autoscale configured to always keep a minimum number of VMs running.

Question 8

A company has an on-premises datacenter with critical line-of-business applications. They plan to migrate some workloads to Azure but need a reliable, high-bandwidth, and low-latency connection that does not traverse the public internet. The connection must be dedicated and guaranteed for a consistent network experience. Which Azure service should the company use?

Accepted Answer

Azure ExpressRoute. Azure ExpressRoute provides a dedicated, private connection from on-premises to Azure that does not traverse the public internet, offering higher reliability, lower latency, and higher bandwidth than internet-based connections. This meets the requirement for a guaranteed, consistent network experience for critical line-of-business applications.

Answer

Azure VPN Gateway (site-to-site)

Answer

Azure Virtual WAN

Answer

Azure Bastion

Question 9

A company is migrating a legacy on-premises application to Azure. The application runs on multiple Windows Server virtual machines and requires a shared file system that multiple servers can mount simultaneously using the SMB protocol. The data must also be accessible from on-premises servers in a hybrid configuration. The IT team wants to minimize management overhead and avoid provisioning additional servers solely for file sharing. Which Azure service should they use?

Accepted Answer

Azure Files. Azure Files provides fully managed SMB file shares that can be mounted simultaneously by multiple Windows Server VMs, both in Azure and on-premises, without provisioning a dedicated file server. It supports SMB 3.0 for hybrid access and offers minimal management overhead. While Azure NetApp Files also provides SMB, Azure Files is the simpler and more cost-effective choice for general-purpose file sharing, aligning with the requirement to minimize management overhead.

Answer

Azure Blob Storage

Answer

Azure Disk Storage

Answer

Azure NetApp Files

Question 10

A global e-commerce company needs to store product catalog data that must be available for reads and writes from multiple Azure regions simultaneously. The application requires consistently low latency (single-digit milliseconds) for writes from any region, and the database must automatically replicate all changes across regions with conflict resolution. The company wants a fully managed database service with native multi-region write support. Which Azure database service should the company use?

Accepted Answer

Azure Cosmos DB. Azure Cosmos DB is the correct choice because it is a fully managed NoSQL database service that natively supports multi-region writes with automatic replication across any number of Azure regions. It guarantees single-digit millisecond latency for reads and writes at the 99th percentile, and provides built-in conflict resolution policies (e.g., last-writer-wins or custom) to handle concurrent updates from different regions. This makes it ideal for globally distributed applications requiring consistent low-latency writes and automatic replication.

Answer

Azure SQL Database

Answer

Azure Database for PostgreSQL

Answer

Azure Cache for Redis

Question 11

A company plans to migrate their on-premises file server to Azure. The file server stores shared documents that are accessed by multiple Windows and Linux virtual machines using the SMB protocol. The company wants a fully managed cloud file share that can be mounted simultaneously by multiple VMs, and they want to minimize management overhead. Which Azure service should they use?

Accepted Answer

Azure Files. Azure Files provides fully managed SMB file shares that can be mounted simultaneously by multiple Windows and Linux VMs. It uses the SMB 3.0 protocol, supports both Windows and Linux clients, and eliminates the need to manage the underlying storage infrastructure, minimizing management overhead.

Answer

Azure Blob Storage

Answer

Azure Disks

Answer

Azure NetApp Files

Question 12

A global e-commerce company runs its website on Azure virtual machines in two different Azure regions: West US and East US. The company wants to distribute incoming web traffic to the region that provides the lowest latency for each user. Additionally, if one region becomes unavailable, all traffic should automatically fail over to the healthy region. The solution must not require any changes to the web application code. Which Azure service should the company use?

Accepted Answer

Azure Traffic Manager. Azure Traffic Manager is a DNS-based traffic load balancer that directs incoming web traffic to the region with the lowest latency based on the user's DNS resolver location. It supports automatic failover by routing traffic to the next healthy endpoint if a region becomes unavailable, and it requires no changes to the web application code because it operates at the DNS level.

Answer

Azure Load Balancer

Answer

Azure Application Gateway

Answer

Azure Front Door

Question 13

Which Azure service acts as a reverse proxy to protect, accelerate, and deliver web applications with SSL termination and layer 7 load balancing?

Accepted Answer

Azure Front Door. Azure Front Door is a global, scalable entry point that acts as a reverse proxy, provides SSL termination, Layer 7 routing, Web Application Firewall (WAF), DDoS protection, and acceleration of web applications. This precisely matches the stem's 'protect, accelerate, and deliver web applications with SSL termination and layer 7 load balancing.' Application Gateway is a regional Layer 7 load balancer but does not offer global acceleration.

Answer

Azure Load Balancer

Answer

Azure Application Gateway

Answer

Azure Traffic Manager

Question 14

Which Azure service provides a managed graph API for accessing Microsoft 365 data, including users, groups, and calendar events?

Accepted Answer

Microsoft Graph. Microsoft Graph is the correct answer because it provides a unified REST API (https://graph.microsoft.com) for accessing Microsoft 365 data, including users, groups, and calendar events. It acts as the gateway to data stored in Microsoft 365 services, replacing the deprecated Azure AD Graph API. Cosmos DB for Graph is a graph database service, not an API for Microsoft 365 data; Azure AD Graph is deprecated; API Management is for managing APIs, not for direct access to Microsoft 365 data.

Answer

Azure Cosmos DB for Graph

Answer

Azure Active Directory Graph API

Answer

Azure API Management

Question 15

Which Azure service provides an integrated development environment and tools for building and deploying applications to Azure directly from a web browser?

Accepted Answer

Azure Cloud Shell. Azure Cloud Shell is a browser-accessible shell that includes Azure CLI, PowerShell, and a lightweight code editor. It allows developers to build, test, and deploy applications to Azure from a web browser without installing tools locally. While it is not a traditional desktop IDE, among the listed options it is the closest match for the browser-based development environment described.

Answer

Azure App Service Editor

Answer

Azure DevOps

Answer

Azure Sandbox