AZ-900 Describe Azure architecture and services Practice Test 15 — 15 Questions

Question 1

Which Azure identity service provides single sign-on (SSO) and multi-factor authentication (MFA) for cloud and on-premises applications?

Accepted Answer

Azure Active Directory (Azure AD). Azure Active Directory (Azure AD) is Microsoft's cloud-based identity and access management service that provides single sign-on (SSO) and multi-factor authentication (MFA) for both cloud and on-premises applications. It enables users to sign in once and access multiple resources, while MFA adds an extra layer of security by requiring additional verification methods like a phone call or app notification.

Answer

Azure AD Domain Services

Answer

Azure Key Vault

Answer

Azure Information Protection

Question 2

Which Azure compute service lets you run containers without managing any virtual machine infrastructure, paying only for CPU and memory used while the container runs?

Accepted Answer

Azure Container Instances. Azure Container Instances (ACI) is a serverless container service that allows you to run containers directly on Azure without provisioning or managing any underlying virtual machines. You are billed per second based on the CPU and memory resources consumed while the container is running, making it ideal for burst or short-lived workloads.

Answer

Azure Kubernetes Service

Answer

Azure App Service

Answer

Azure Batch

Question 3

Which Azure service provides intelligent threat protection across your Azure and hybrid environments by collecting and analyzing security data?

Accepted Answer

Microsoft Defender for Cloud. Microsoft Defender for Cloud (formerly Azure Security Center) is the correct answer because it provides unified security management and intelligent threat protection across Azure and hybrid environments. It continuously assesses the security posture of your resources, applies security recommendations, and collects and analyzes security data from various sources to detect and respond to threats. Azure Sentinel, while also a security service, is a cloud-native SIEM (Security Information and Event Management) and SOAR (Security Orchestration Automation and Response) solution that focuses on log aggregation and incident response, not the integrated workload protection and posture management that Defender for Cloud offers.

Answer

Azure Sentinel

Answer

Azure DDoS Protection

Answer

Azure Firewall

Question 4

What is Azure Disk Storage used for?

Accepted Answer

Providing persistent block storage volumes for Azure Virtual Machines. Azure Disk Storage provides durable, high-performance block storage for Azure Virtual Machines. Each disk is a virtual hard disk (VHD) that can be attached to a VM as an OS disk or data disk, offering persistent storage that survives VM reboots and re-deployments. It is the primary storage option for IaaS workloads requiring low-latency, random-access I/O.

Answer

Hosting static websites and web content

Answer

Sharing files between multiple computers via SMB protocol

Answer

Archiving infrequently accessed data at low cost

Question 5

Which Azure service enables businesses to migrate and modernize their SQL Server databases to the cloud with built-in intelligence?

Accepted Answer

Azure SQL Database. Azure SQL Database is a fully managed Platform-as-a-Service (PaaS) offering specifically designed for SQL Server workloads. It provides built-in intelligence features such as automatic tuning, performance insights, and advanced threat protection, making it the correct service for migrating and modernizing SQL Server databases to the cloud.

Answer

Azure Cosmos DB

Answer

Azure Database for PostgreSQL

Answer

Azure Synapse Analytics

Question 6

Which Azure service provides pre-built AI capabilities like language understanding, vision, and speech without requiring custom model training?

Accepted Answer

Azure Cognitive Services. Azure Cognitive Services is the correct answer because it provides a suite of pre-built, pre-trained AI models accessible via REST APIs and SDKs for tasks such as language understanding (e.g., LUIS), computer vision (e.g., Computer Vision API), and speech recognition (e.g., Speech-to-Text). These services require no custom model training or machine learning expertise, allowing developers to integrate AI capabilities directly into applications.

Answer

Azure Machine Learning

Answer

Azure Databricks

Answer

Azure Bot Service

Question 7

Which Azure service provides a way to build workflows that integrate apps, data, and services across cloud and on-premises environments?

Accepted Answer

Azure Logic Apps. Azure Logic Apps is the correct answer because it is a cloud-based platform for creating and running automated workflows that integrate apps, data, services, and systems across cloud and on-premises environments. It provides a visual designer and hundreds of prebuilt connectors to orchestrate business processes without writing code, making it ideal for enterprise integration scenarios.

Answer

Azure Functions

Answer

Azure Service Bus

Answer

Azure Event Grid

Question 8

Which Azure service provides dedicated physical servers for regulatory or licensing requirements where hardware cannot be shared with other customers?

Accepted Answer

Azure Dedicated Host. Azure Dedicated Host provides physical servers dedicated to a single Azure subscription, ensuring that hardware is not shared with other customers. This meets regulatory or licensing requirements that mandate hardware isolation, such as specific compliance standards or software licensing agreements that restrict usage to dedicated hardware.

Answer

Azure Reserved VM Instances

Answer

Azure Spot VMs

Answer

Azure Isolated VM sizes

Question 9

Which Azure service provides a relational database compatible with open-source MySQL?

Accepted Answer

Azure Database for MySQL. Azure Database for MySQL is the correct answer because it is a fully managed relational database service specifically built for the MySQL community edition, providing high availability, automatic backups, and built-in security features. It is compatible with the open-source MySQL protocol and tools, allowing you to migrate existing MySQL workloads without code changes.

Answer

Azure SQL Database

Answer

Azure Cosmos DB

Answer

Azure Database for MariaDB

Question 10

Which Azure service manages application secrets, API keys, and certificates in a centralized, secure vault?

Accepted Answer

Azure Key Vault. Azure Key Vault is the correct service because it is specifically designed to centrally store and control access to application secrets, API keys, and certificates. It provides hardware security module (HSM)-backed encryption, granular access policies via Azure RBAC, and integrates seamlessly with Azure services like VMs and App Services to inject secrets at runtime without exposing them in code.

Answer

Azure Active Directory

Answer

Azure Information Protection

Answer

Azure Security Center

Question 11

Which Azure service provides a serverless event routing service that connects event sources to event handlers?

Accepted Answer

Azure Event Grid. Azure Event Grid is a fully managed serverless event routing service that uses a publish-subscribe model to connect event sources (e.g., Azure Blob Storage, resource groups) to event handlers (e.g., Azure Functions, webhooks). It filters and routes events based on event types and subscriptions, enabling reactive programming without polling or custom infrastructure.

Answer

Azure Service Bus

Answer

Azure Event Hubs

Answer

Azure Queue Storage

Question 12

Which Azure region feature pairs two regions together for business continuity and disaster recovery?

Accepted Answer

Azure Region Pairs. Azure Region Pairs are designed to provide business continuity and disaster recovery by pairing two regions within the same geography (e.g., East US and West US) that are at least 300 miles apart. This ensures that if a natural disaster or regional outage occurs, one region in the pair can take over workloads, and Azure prioritizes the recovery of paired regions during outages. The pairing also enables data replication services like Azure Site Recovery and geo-redundant storage (GRS) to automatically replicate data across the pair.

Answer

Availability Zones

Answer

Azure Data Centers

Answer

Sovereign Regions

Question 13

Which Azure service provides a managed Apache Kafka-compatible event streaming service for ingesting millions of events per second?

Accepted Answer

Azure Event Hubs. Azure Event Hubs is a fully managed, real-time data ingestion service that is natively compatible with Apache Kafka, allowing you to use existing Kafka clients and tooling to stream millions of events per second. It provides a partitioned consumer model, high throughput, and low-latency event ingestion, making it the correct choice for a managed Kafka-compatible event streaming service.

Answer

Azure Service Bus

Answer

Azure Event Grid

Answer

Azure Queue Storage

Question 14

Which Azure service provides an enterprise-grade CI/CD pipeline for building, testing, and deploying applications?

Accepted Answer

Azure DevOps. Azure DevOps is the correct answer because it provides a comprehensive, enterprise-grade CI/CD pipeline service that integrates build, test, and deployment stages for applications. It includes Azure Pipelines, which supports multi-platform builds and releases, along with Azure Repos, Azure Boards, and other tools for end-to-end DevOps lifecycle management.

Answer

GitHub Actions

Answer

Azure Kubernetes Service

Answer

Azure App Service

Question 15

Which Azure service enables you to securely connect remote users to Azure and on-premises resources using an SSL-based VPN?

Accepted Answer

Azure VPN Gateway. Azure VPN Gateway supports site-to-site, point-to-site, and VNet-to-VNet connections. Point-to-site (P2S) VPN uses SSTP (Secure Socket Tunneling Protocol) or IKEv2 VPN, and when configured with SSTP, it provides an SSL-based VPN tunnel (TCP port 443) that allows remote users to securely connect to Azure and on-premises resources through the gateway.

Answer

Azure ExpressRoute

Answer

Azure Bastion

Answer

Azure Application Gateway