AZ-900 Describe Azure architecture and services Practice Test 16 — 15 Questions

Question 1

Which Azure service provides network filtering to protect web applications from common exploits like SQL injection and cross-site scripting?

Accepted Answer

Azure Web Application Firewall (WAF). Azure Web Application Firewall (WAF) is specifically designed to inspect and filter HTTP/HTTPS traffic at the application layer (Layer 7). It uses rule sets like the OWASP Core Rule Set to detect and block common web exploits such as SQL injection and cross-site scripting (XSS), making it the correct choice for protecting web applications.

Answer

Azure Firewall

Answer

Azure DDoS Protection

Answer

Network Security Groups (NSG)

Question 2

Which Azure network security service filters network traffic to and from Azure resources using rules based on source, destination, port, and protocol?

Accepted Answer

Network Security Groups (NSGs). Network Security Groups (NSGs) are the correct answer because they filter network traffic to and from Azure resources at the subnet or network interface level using rules that specify source, destination, port, and protocol. NSGs operate as a distributed, stateful firewall that evaluates each packet against a set of allow or deny rules, making them the primary tool for granular network traffic control within a virtual network.

Answer

Azure Firewall

Answer

Azure DDoS Protection

Answer

Azure WAF

Question 3

Which Azure service provides automated build, test, and deployment pipelines for applications using a fully managed service?

Accepted Answer

Azure Pipelines. Azure Pipelines is a fully managed continuous integration and continuous delivery (CI/CD) service that automates the build, test, and deployment of applications to any target. It integrates with GitHub, Azure Repos, and other version control systems to trigger pipelines on code changes, and supports multi-stage YAML-based definitions for complex workflows.

Answer

Azure Container Registry

Answer

Azure Logic Apps

Answer

Azure App Configuration

Question 4

Which Azure compute option is best for running a batch processing job that can be interrupted and resumed without data loss, at the lowest possible cost?

Accepted Answer

Azure Spot Virtual Machines. Azure Spot Virtual Machines are designed for interruptible workloads, such as batch processing jobs, because they use unused Azure capacity at a significant discount (up to 90% compared to pay-as-you-go). When Azure needs the capacity back, these VMs can be evicted with a 30-second notice, but the job can be resumed without data loss if the application is designed to handle interruptions (e.g., using checkpointing or saving state to persistent storage). This makes Spot VMs the most cost-effective option for fault-tolerant, interruptible batch processing.

Answer

Azure Reserved VM Instances

Answer

Azure Dedicated Host

Answer

Standard Pay-as-you-Go VMs

Question 5

Which Azure storage redundancy option stores three copies of data within a single data center in a single region?

Accepted Answer

Locally Redundant Storage (LRS). Locally Redundant Storage (LRS) replicates data three times within a single physical data center in a single region. This provides protection against server rack and drive failures but does not protect against a full data center outage. It is the lowest-cost redundancy option and is suitable for scenarios where data can be reconstructed from other sources.

Answer

Zone-Redundant Storage (ZRS)

Answer

Geo-Redundant Storage (GRS)

Answer

Read-Access Geo-Redundant Storage (RA-GRS)

Question 6

Which Azure service enables you to synchronize your on-premises Active Directory with Azure Active Directory?

Accepted Answer

Azure AD Connect. Microsoft Entra Connect is the correct service because it is specifically designed to synchronize on-premises Active Directory identities with Microsoft Entra ID, enabling hybrid identity scenarios. It handles password hash synchronization, pass-through authentication, and federation integration, ensuring users have a single identity for both on-premises and cloud resources.

Answer

Azure AD Domain Services

Answer

Azure AD B2C

Answer

Azure Multi-Factor Authentication

Question 7

Which Azure service provides a fully managed, cloud-based data integration service for creating data-driven workflows?

Accepted Answer

Azure Data Factory. Azure Data Factory (ADF) is a fully managed, cloud-based data integration service that allows you to create, schedule, and orchestrate data-driven workflows (pipelines). It supports over 90 built-in connectors to ingest, transform, and move data across on-premises and cloud sources, making it the correct choice for this scenario.

Answer

Azure Synapse Analytics

Answer

Azure Databricks

Answer

Azure Stream Analytics

Question 8

Which Azure storage redundancy option replicates data across multiple availability zones within a single region?

Accepted Answer

Zone-Redundant Storage (ZRS). Zone-Redundant Storage (ZRS) is the correct answer because it synchronously replicates data across three Azure availability zones within a single region, ensuring durability even if an entire zone fails. This provides higher availability than LRS (which replicates within a single data center) and lower latency than GRS/RA-GRS (which replicate to a secondary region).

Answer

Locally Redundant Storage (LRS)

Answer

Geo-Redundant Storage (GRS)

Answer

Read-Access Geo-Redundant Storage (RA-GRS)

Question 9

Which Azure service provides a virtual private network gateway for connecting on-premises networks to Azure virtual networks over the internet?

Accepted Answer

Azure VPN Gateway. Azure VPN Gateway is the correct service because it provides a dedicated virtual private network (VPN) gateway that enables secure site-to-site (S2S) or point-to-site (P2S) connectivity between on-premises networks and Azure virtual networks over the public internet using IPsec/IKE protocols. It creates an encrypted tunnel across the internet, making it the appropriate choice for internet-based hybrid connectivity.

Answer

Azure ExpressRoute

Answer

Azure Virtual Network

Answer

Azure Bastion

Question 10

Which Azure service allows you to run Windows or Linux virtual machines in Azure?

Accepted Answer

Azure Virtual Machines. Azure Virtual Machines (IaaS) provides full control over the guest operating system, allowing you to run both Windows and Linux VMs with custom configurations. Unlike PaaS or serverless services, VMs give you direct access to the OS for installing software, managing updates, and configuring networking.

Answer

Azure App Service

Answer

Azure Container Instances

Answer

Azure Functions

Question 11

What is the purpose of Azure Load Balancer?

Accepted Answer

To distribute incoming network traffic across multiple backend resources. Azure Load Balancer operates at Layer 4 (TCP/UDP) of the OSI model to distribute incoming traffic across healthy backend resources, such as virtual machines or instances in a backend pool. It uses a hash-based distribution algorithm (5-tuple hash for inbound traffic) to ensure high availability and scalability by spreading requests evenly. This directly supports fault tolerance by automatically routing traffic away from unhealthy instances based on health probes.

Answer

To cache web content at edge locations globally

Answer

To connect on-premises networks to Azure

Answer

To manage domain names and DNS routing

Question 12

Which Azure service provides a managed virtual desktop infrastructure (VDI) solution for deploying Windows desktops and apps from Azure?

Accepted Answer

Azure Virtual Desktop. Azure Virtual Desktop (AVD) is the correct answer because it is a managed desktop and app virtualization service that runs on Azure, providing a full multi-session Windows 10/11 experience and remote app streaming. Unlike IaaS-based VMs, AVD abstracts the underlying infrastructure, handles brokering, load balancing, and session management, and supports FSLogix profile containers for persistent user data. It uses the Remote Desktop Protocol (RDP) over HTTPS to deliver a secure, scalable VDI solution without needing to manage RDS roles or gateways.

Answer

Azure Virtual Machines

Answer

Azure App Service

Answer

Azure Remote Desktop Gateway

Question 13

Which Azure service provides a globally distributed data warehouse for running complex analytics queries at petabyte scale?

Accepted Answer

Azure Synapse Analytics. Azure Synapse Analytics is the correct answer because it is a limitless analytics service that brings together enterprise data warehousing and Big Data analytics. It provides a globally distributed, massively parallel processing (MPP) engine capable of running complex queries across petabyte-scale data, with built-in support for T-SQL, Apache Spark, and data integration.

Answer

Azure SQL Database

Answer

Azure HDInsight

Answer

Azure Databricks

Question 14

Which Azure service provides NoSQL wide-column database storage compatible with Apache Cassandra?

Accepted Answer

Azure Cosmos DB for Apache Cassandra. Azure Cosmos DB for Apache Cassandra is the correct choice because it provides a NoSQL wide-column database storage that is fully compatible with the Apache Cassandra Query Language (CQL) and wire protocol. This allows you to run existing Cassandra workloads and tools (like cqlsh and Cassandra drivers) directly on Azure without any code changes, while benefiting from Cosmos DB's global distribution and SLA-backed performance.

Answer

Azure Table Storage

Answer

Azure Cache for Redis

Answer

Azure SQL Database Hyperscale

Question 15

Which Azure service provides a DNS hosting service that resolves domain names using the Azure infrastructure?

Accepted Answer

Azure DNS. Azure DNS is the correct answer because it is a hosting service for DNS domains that provides name resolution using Microsoft Azure infrastructure. It allows you to manage your DNS records using the same credentials, APIs, and billing as your other Azure services, and it supports common DNS record types like A, AAAA, CNAME, MX, NS, PTR, SOA, SRV, and TXT.

Answer

Azure Traffic Manager

Answer

Azure Front Door

Answer

Azure Private Link