AZ-900 Describe Azure architecture and services Practice Test 17 — 15 Questions

Question 1

Which Azure service provides a DNS hosting service that resolves domain names using the Azure infrastructure?

Accepted Answer

Azure DNS. Azure DNS is the correct answer because it is a hosting service for DNS domains that provides name resolution using Microsoft Azure infrastructure. It allows you to manage your DNS records using the same credentials, APIs, and billing as your other Azure services, and it supports common DNS record types like A, AAAA, CNAME, MX, NS, PTR, SOA, SRV, and TXT.

Answer

Azure Traffic Manager

Answer

Azure Front Door

Answer

Azure Private Link

Question 2

Which Azure service provides a managed caching layer to reduce database load and improve application response times?

Accepted Answer

Azure Cache for Redis. Azure Cache for Redis is a managed in-memory caching service based on the open-source Redis engine. It provides a high-throughput, low-latency data store that can temporarily hold frequently accessed data, thereby reducing the number of direct queries to a backend database and improving application response times. This makes it the correct choice for a managed caching layer.

Answer

Azure Cosmos DB

Answer

Azure SQL Database

Answer

Azure Table Storage

Question 3

Which Azure service enables automatic scaling of compute resources based on rules or schedules?

Accepted Answer

Azure Autoscale. Azure Autoscale is the native service that automatically adjusts the number of compute instances (e.g., Virtual Machines, App Service plans, or Cloud Services) based on predefined rules (e.g., CPU > 75%) or fixed schedules (e.g., scale out at 8 AM). It works by monitoring metrics via Azure Monitor and triggering scale operations to maintain performance and optimize cost.

Answer

Azure Elastic Pool

Answer

Azure Load Balancer

Answer

Azure Traffic Manager

Question 4

Which Azure networking feature enables resources in different Azure virtual networks to communicate as if they were on the same network?

Accepted Answer

Azure Virtual Network Peering. Azure Virtual Network Peering (Option B) connects two or more Azure virtual networks (VNets) directly using the Microsoft backbone infrastructure, enabling resources in each VNet to communicate with each other as if they were on the same network. Unlike a VPN gateway, peering does not require a public internet hop or encryption overhead, and it supports transitive routing only when explicitly configured via a hub-and-spoke topology. This makes it the correct choice for low-latency, high-bandwidth cross-VNet communication.

Answer

Azure VPN Gateway

Answer

Azure ExpressRoute

Answer

Azure Private Link

Question 5

Which Azure IoT service provides end-to-end IoT solutions with pre-built industry templates and no-code/low-code configuration?

Accepted Answer

Azure IoT Central. Azure IoT Central is correct because it is a fully managed IoT application platform that provides end-to-end IoT solutions with pre-built industry templates (e.g., for retail, healthcare, energy) and a no-code/low-code configuration interface. Unlike Azure IoT Hub, which is a lower-level messaging service, IoT Central abstracts the underlying infrastructure and offers built-in dashboards, device management, and analytics, enabling rapid deployment without custom development.

Answer

Azure IoT Hub

Answer

Azure Digital Twins

Answer

Azure Sphere

Question 6

Which Azure service provides a way to run containerized applications using a managed Kubernetes service without needing to manage the Kubernetes control plane?

Accepted Answer

Azure Kubernetes Service (AKS). Azure Kubernetes Service (AKS) is the correct answer because it provides a managed Kubernetes environment where Microsoft handles the control plane (including the API server, etcd, and scheduler) while you only manage the worker nodes and your containerized applications. This aligns directly with the question's requirement of not needing to manage the Kubernetes control plane.

Answer

Azure Container Instances

Answer

Azure Service Fabric

Answer

Azure Batch

Question 7

Which Azure service provides a hybrid cloud solution that enables running Azure services in on-premises data centers?

Accepted Answer

Azure Stack. Azure Stack is a hybrid cloud solution that extends Azure services and capabilities to on-premises environments. It allows organizations to run Azure compute, storage, and networking services in their own data centers, providing consistency with the public Azure cloud for workloads that require low latency, data residency, or offline operation.

Answer

Azure ExpressRoute

Answer

Azure Arc

Answer

Azure Hybrid Benefit

Question 8

Which Azure storage service is optimized for reading and writing large amounts of sequential data, commonly used for big data analytics?

Accepted Answer

Azure Data Lake Storage Gen2. Azure Data Lake Storage Gen2 is optimized for high-throughput analytics workloads that require reading and writing large amounts of sequential data. It combines a hierarchical namespace with Azure Blob Storage's scalable object storage, enabling POSIX-like access control and directory-level operations that are essential for big data frameworks like Apache Spark and Hadoop.

Answer

Azure Blob Storage (Cool tier)

Answer

Azure Files Premium

Answer

Azure Queue Storage

Question 9

Which Azure service provides a globally distributed content delivery network with DDoS protection and Web Application Firewall capabilities?

Accepted Answer

Azure Front Door. Azure Front Door is a global, scalable entry point that provides a content delivery network (CDN) with built-in DDoS protection and Web Application Firewall (WAF) capabilities. It operates at Layer 7 (HTTP/HTTPS) and uses Microsoft's global edge network to accelerate and secure web applications. Unlike a standard CDN, Front Door integrates intelligent traffic routing, SSL termination, and application-layer security in a single service.

Answer

Azure CDN with WAF

Answer

Azure Application Gateway

Answer

Azure DDoS Protection Standard

Question 10

Which Azure service provides a fully managed message queuing service for decoupling application components?

Accepted Answer

Azure Queue Storage. Azure Queue Storage is a fully managed message queuing service that enables decoupling of application components by allowing them to communicate asynchronously via durable messages. It supports large volumes of messages (up to 64 KB each) and provides a simple REST-based API for producers to enqueue messages and consumers to dequeue them, ensuring reliable message delivery and scalability without managing infrastructure.

Answer

Azure Event Grid

Answer

Azure Event Hubs

Answer

Azure Notification Hubs

Question 11

Which Azure AI service can analyze images and return information about people, objects, brands, and text within those images?

Accepted Answer

Azure Computer Vision. Azure Computer Vision is the correct service because it is specifically designed to extract rich information from images, including the detection of people, objects, brands, and embedded text (via OCR). It provides a comprehensive set of pre-built image analysis capabilities without requiring custom training, making it the appropriate choice for this general-purpose scenario.

Answer

Azure Face API

Answer

Azure Custom Vision

Answer

Azure Form Recognizer

Question 12

Which Azure service provides a hybrid connection solution for enabling applications to access on-premises resources without inbound firewall changes?

Accepted Answer

Azure Hybrid Connections. Azure Hybrid Connections (part of Azure App Service and Azure Relay) allows applications to securely connect to on-premises resources over port 443 using WebSockets and TLS, without requiring any inbound firewall rules or changes to the on-premises network. This is achieved by establishing an outbound-only tunnel from the on-premises Hybrid Connection Manager to Azure, which then relays traffic to the target resource.

Answer

Azure VPN Gateway

Answer

Azure Private Link

Answer

Azure ExpressRoute

Question 13

Which Azure service provides a managed registry for Docker container images and OCI artifacts?

Accepted Answer

Azure Container Registry. Azure Container Registry (ACR) is the correct answer because it is a managed, private Docker registry service that stores and manages container images and Open Container Initiative (OCI) artifacts. It supports Docker Registry HTTP API V2, enabling push/pull operations for containerized workloads across Azure services.

Answer

Azure Kubernetes Service

Answer

Azure Container Instances

Answer

Azure Artifact Repository

Question 14

Which Azure service provides a platform for analyzing and visualizing large amounts of data stored in Azure Data Lake or Azure Blob Storage?

Accepted Answer

Azure HDInsight. Azure HDInsight is a fully managed, open-source analytics service that runs popular frameworks like Apache Spark, Apache Hive, and Apache Hadoop. It is specifically designed for processing and analyzing large-scale data stored in Azure Data Lake Storage or Azure Blob Storage, and integrates with visualization tools like Power BI for insights.

Answer

Azure Data Factory

Answer

Azure SQL Database

Answer

Azure Cognitive Services

Question 15

Which Azure service translates domain names to IP addresses for routing internet traffic?

Accepted Answer

Azure DNS. Azure DNS is the correct service because it provides domain name resolution, translating human-readable domain names (e.g., www.example.com) into IP addresses using the DNS protocol. This is the fundamental function of a DNS service, enabling internet traffic to be routed to the correct destination based on the resolved IP address.

Answer

Azure Traffic Manager

Answer

Azure Private DNS

Answer

Azure Application Gateway