AZ-900 Describe Azure architecture and services Practice Test 13 — 15 Questions

Question 1

A global retail company hosts its e-commerce web application on Azure virtual machines in three Azure regions: West Europe, East US, and Southeast Asia. The application must provide a single HTTPS entry point for customers worldwide. The company requires the solution to: route each user to the region that provides the best performance (lowest latency), automatically redirect traffic to a healthy region if one becomes unavailable, and protect the application from common web vulnerabilities such as SQL injection and cross-site scripting (XSS) by inspecting all incoming HTTP/HTTPS traffic at the edge. Which Azure service should the company use?

Accepted Answer

Azure Front Door. Azure Front Door is the correct choice because it provides global HTTP(S) load balancing with latency-based routing to the nearest region, automatic failover across regions, and built-in Web Application Firewall (WAF) at the edge to inspect all incoming traffic for SQL injection and XSS. This single service meets all three requirements—performance routing, regional failover, and edge-level web vulnerability protection—without needing additional components.

Answer

Azure Traffic Manager with a Web Application Firewall (WAF) policy applied to each backend virtual machine

Answer

Azure Application Gateway

Answer

Azure Load Balancer

Question 2

A company is migrating a legacy application to Azure. The application stores data on a network file share that is accessed using the SMB protocol. After migration, multiple Azure virtual machines must be able to mount the same file share simultaneously. The company wants a fully managed service that eliminates the need to maintain a file server. Which Azure storage service should the company use?

Accepted Answer

Azure Files. Azure Files provides fully managed file shares that use the SMB protocol, allowing multiple Azure VMs to mount the same share simultaneously. It eliminates the need to maintain a file server because Microsoft handles the underlying infrastructure, patching, and high availability. This makes it the ideal choice for migrating legacy applications that rely on SMB-based network file shares.

Answer

Azure Blob Storage

Answer

Azure Managed Disks

Answer

Azure Queue Storage

Question 3

A company stores compliance logs in Azure Blob Storage. The logs must remain available even if an entire Azure datacenter within the primary region fails. The company is cost-conscious and wants to minimize storage costs while meeting this availability requirement. The company does not need to access the data from a secondary location during a disaster. Which storage replication option should the company choose?

Accepted Answer

Zone-redundant storage (ZRS). Zone-redundant storage (ZRS) replicates data synchronously across three Azure availability zones within the primary region. This ensures data remains available even if an entire datacenter (one zone) fails, while avoiding the higher cost and cross-region replication of GRS. Since the company does not need secondary region access and wants to minimize costs, ZRS meets the requirement without paying for geo-redundancy.

Answer

Locally-redundant storage (LRS)

Answer

Geo-redundant storage (GRS)

Answer

Read-access geo-redundant storage (RA-GRS)

Question 4

Which Azure service allows you to run code on-demand without managing servers, paying only for execution time?

Accepted Answer

Azure Functions. Azure Functions is a serverless compute service that executes code in response to events (e.g., HTTP requests, timers, queue messages) without requiring you to provision or manage virtual machines or infrastructure. You are billed only for the resources consumed during code execution, measured in gigabyte-seconds, making it ideal for on-demand, event-driven workloads.

Answer

Azure Virtual Machines

Answer

Azure App Service

Answer

Azure Kubernetes Service

Question 5

What is the purpose of Azure Availability Zones?

Accepted Answer

To provide fault isolation against datacenter-level failures within a region. Azure Availability Zones are physically separate datacenters within an Azure region, each with independent power, cooling, and networking. By placing VMs or other resources across multiple zones, you protect your application from a single datacenter failure, ensuring high availability and fault isolation at the datacenter level within the region.

Answer

To reduce the latency of content delivery to global users

Answer

To connect on-premises networks to Azure securely

Answer

To replicate data automatically between Azure regions

Question 6

Which Azure storage service is best suited for storing unstructured data such as images, videos, and log files?

Accepted Answer

Azure Blob Storage. Azure Blob Storage is designed for storing massive amounts of unstructured data, such as images, videos, and log files. It offers three types of blobs (block, append, and page) to optimize for different access patterns, making it the ideal choice for binary and text data that does not fit a relational schema.

Answer

Azure Files

Answer

Azure Queue Storage

Answer

Azure Table Storage

Question 7

A company wants to host a web application that automatically scales based on traffic. Which Azure service is most appropriate for hosting this application without managing virtual machines?

Accepted Answer

Azure App Service. Azure App Service is a fully managed platform-as-a-service (PaaS) offering that automatically scales web applications based on traffic without requiring you to manage the underlying virtual machines. It supports built-in autoscaling rules, load balancing, and high availability, making it ideal for hosting web apps with variable demand.

Answer

Azure Virtual Machines

Answer

Azure Batch

Answer

Azure Container Instances

Question 8

Which Azure networking service provides a private connection from an on-premises network to Azure without using the public internet?

Accepted Answer

Azure ExpressRoute. Azure ExpressRoute is the correct answer because it establishes a dedicated, private connection from an on-premises network directly into Azure, bypassing the public internet entirely. This is achieved through a Layer 3 BGP peering session over a provider-managed circuit, ensuring low latency, higher reliability, and data does not traverse the public internet.

Answer

Azure VPN Gateway

Answer

Azure Virtual Network

Answer

Azure Bastion

Question 9

Which Azure service provides a globally distributed, multi-model database service with single-digit millisecond read latency?

Accepted Answer

Azure Cosmos DB. Azure Cosmos DB is a globally distributed, multi-model database service that guarantees single-digit millisecond read latency at the 99th percentile, regardless of the region or consistency level. It supports multiple data models (document, key-value, graph, column-family) and provides turnkey global distribution across any number of Azure regions.

Answer

Azure SQL Database

Answer

Azure Database for MySQL

Answer

Azure Cache for Redis

Question 10

Which Azure service enables you to create, train, and deploy machine learning models using a visual drag-and-drop interface?

Accepted Answer

Azure Machine Learning. Azure Machine Learning provides a visual drag-and-drop interface called the designer, which allows users to create, train, and deploy machine learning models without writing code. This distinguishes it from other Azure services that focus on pre-built APIs, big data processing, or analytics pipelines.

Answer

Azure Cognitive Services

Answer

Azure Databricks

Answer

Azure Synapse Analytics

Question 11

Which Azure service provides a managed Kubernetes environment for deploying and managing containerized applications?

Accepted Answer

Azure Kubernetes Service (AKS). Azure Kubernetes Service (AKS) is the correct answer because it is Azure's managed Kubernetes orchestration service, which handles the control plane (including the API server, etcd, and scheduler) for you, while you manage the worker nodes and your containerized applications. This allows you to deploy, scale, and manage containerized applications using Kubernetes without the operational overhead of maintaining the control plane infrastructure.

Answer

Azure Container Instances

Answer

Azure App Service

Answer

Azure Container Registry

Question 12

Which Azure service acts as a global load balancer that optimizes routing of user traffic to the nearest Azure endpoint for the best performance?

Accepted Answer

Azure Front Door. Azure Front Door is a global, scalable entry point that uses the Microsoft global edge network to route user traffic to the nearest available Azure endpoint based on latency and geographic proximity. It provides HTTP/HTTPS load balancing with advanced traffic acceleration, SSL offload, and application-layer security, making it the correct choice for optimizing performance across global regions.

Answer

Azure Application Gateway

Answer

Azure Traffic Manager

Answer

Azure Load Balancer

Question 13

Which Azure service provides a private, isolated section of the Azure cloud where you can launch Azure resources in a virtual network you define?

Accepted Answer

Azure Virtual Network (VNet). Azure Virtual Network (VNet) is the correct answer because it provides a logically isolated section of the Azure cloud dedicated to your subscription. Within a VNet, you can define your own private IP address space (using RFC 1918 addresses), subnets, and routing policies, and then launch Azure resources such as virtual machines, App Service Environments, and Azure Kubernetes Service clusters into that private network. This isolation is achieved through network segmentation and is the fundamental building block for private connectivity in Azure.

Answer

Azure Virtual WAN

Answer

Azure ExpressRoute

Answer

Azure Network Security Group

Question 14

Which Azure service allows you to create managed file shares in the cloud that are accessible via the SMB protocol?

Accepted Answer

Azure Files. Azure Files provides fully managed file shares in the cloud that can be accessed via the Server Message Block (SMB) protocol, making it the correct choice. It allows you to lift and shift legacy applications that rely on SMB file shares without modifying code, and it supports both SMB 2.1 and SMB 3.0 protocols.

Answer

Azure Blob Storage

Answer

Azure Disk Storage

Answer

Azure Data Lake Storage

Question 15

Which Azure service provides a fully managed platform for building real-time analytics and complex event processing using SQL-like queries on streaming data?

Accepted Answer

Azure Stream Analytics. Azure Stream Analytics is a fully managed platform-as-a-service (PaaS) that enables real-time analytics and complex event processing (CEP) on streaming data using a SQL-like query language. It ingests data from sources like Azure Event Hubs or IoT Hub, applies temporal windows and pattern matching, and outputs results to sinks such as Azure SQL Database or Power BI, all without requiring infrastructure management.

Answer

Azure HDInsight

Answer

Azure Synapse Analytics

Answer

Azure Data Factory