AZ-900 Describe Azure architecture and services Practice Test 18 — 15 Questions

Question 1

Which Azure service provides a platform for running Apache Spark analytics for big data processing with collaborative notebooks?

Accepted Answer

Azure Databricks. Azure Databricks is correct because it provides a unified analytics platform built on Apache Spark, optimized for big data processing and machine learning. It offers collaborative notebooks that allow data engineers and data scientists to write and execute Spark code interactively, making it the ideal service for this specific use case.

Answer

Azure HDInsight

Answer

Azure Synapse Analytics

Answer

Azure Machine Learning

Question 2

Which Azure service provides secure access to Azure virtual machines using an HTML5 browser-based RDP and SSH connection without requiring public IP addresses?

Accepted Answer

Azure Bastion. Azure Bastion is a fully managed PaaS service that provides secure and seamless RDP and SSH connectivity to Azure virtual machines directly through the Azure portal using an HTML5-based browser. It eliminates the need for public IP addresses on the VMs, as the connection is established over TLS within the same virtual network, bypassing exposure to the internet.

Answer

Azure VPN Gateway

Answer

Azure Private Link

Answer

Azure Active Directory Application Proxy

Question 3

Which Azure service replicates on-premises virtual machines and physical servers to Azure for disaster recovery?

Accepted Answer

Azure Site Recovery. Azure Site Recovery (ASR) is the correct service because it is specifically designed for disaster recovery (DR) by orchestrating replication, failover, and failback of on-premises virtual machines and physical servers to Azure. It uses continuous replication to maintain data consistency and supports planned/unplanned failover, ensuring business continuity during outages.

Answer

Azure Backup

Answer

Azure Migrate

Answer

Azure Archive Storage

Question 4

Which Azure AI service converts spoken audio into text and text into spoken audio?

Accepted Answer

Azure Speech Service. Azure Speech Service provides both speech-to-text and text-to-speech capabilities, enabling bidirectional conversion between spoken audio and written text. It is the single Azure AI service that combines these two functions, unlike other services that handle only one direction or different tasks.

Answer

Azure Language Understanding (LUIS)

Answer

Azure Translator

Answer

Azure Bot Service

Question 5

Which Azure service provides an enterprise messaging service with advanced features like topics, subscriptions, and dead-letter queues?

Accepted Answer

Azure Service Bus. Azure Service Bus is a fully managed enterprise message broker that supports advanced messaging patterns including topics (publish/subscribe), subscriptions (filtered message delivery), and dead-letter queues (for handling undeliverable messages). It is designed for reliable, ordered message delivery with features like sessions, transactions, and duplicate detection, making it the correct choice for this question.

Answer

Azure Queue Storage

Answer

Azure Event Grid

Answer

Azure Event Hubs

Question 6

Which Azure security service provides a cloud-native firewall with built-in high availability and unrestricted cloud scalability?

Accepted Answer

Azure Firewall. Azure Firewall is a cloud-native, stateful firewall as a service that provides built-in high availability and scales automatically to accommodate changing network traffic patterns. Unlike other options, it is designed specifically as a managed firewall service with unrestricted cloud scalability, supporting both inbound and outbound traffic filtering at the network and application layers.

Answer

Network Security Groups

Answer

Azure WAF

Answer

Azure DDoS Protection

Question 7

Which Azure service enables accessing on-premises applications securely from anywhere without requiring VPN or changes to the network perimeter?

Accepted Answer

Azure AD Application Proxy. Azure AD Application Proxy enables secure remote access to on-premises web applications by publishing them through an external endpoint in Azure, without requiring a VPN or changes to the network perimeter. It works by establishing outbound connections from the on-premises Application Proxy connector to Azure AD, which then proxies user requests to the internal application, leveraging Azure AD for authentication and conditional access.

Answer

Azure VPN Gateway

Answer

Azure Bastion

Answer

Azure Front Door

Question 8

Which Azure networking service provides private connectivity from a virtual network to Azure PaaS services without traffic going over the internet?

Accepted Answer

Azure Private Link. Azure Private Link (option B) is correct because it exposes Azure PaaS services via private IP addresses within a virtual network, using private endpoints that map the service to a network interface in the VNet. This ensures all traffic to the PaaS service traverses the Microsoft Azure backbone network, never the public internet, providing true private connectivity.

Answer

Azure Service Endpoints

Answer

Azure VNet Peering

Answer

Azure ExpressRoute

Question 9

Which Azure service provides a fully managed message-passing service for disconnecting front-end web apps from back-end processors?

Accepted Answer

Azure Queue Storage. Azure Queue Storage is a fully managed message-passing service that enables asynchronous communication between application components, such as decoupling a front-end web app from a back-end processor. It stores messages in a durable queue, allowing the front-end to send work items without waiting for the back-end to process them, which improves scalability and reliability.

Answer

Azure Traffic Manager

Answer

Azure CDN

Answer

Azure VNet

Question 10

Which Azure service helps migrate on-premises VMware, Hyper-V VMs, and physical servers to Azure?

Accepted Answer

Azure Migrate. Azure Migrate is the correct service because it provides a unified platform for assessing and migrating on-premises workloads to Azure, including VMware VMs, Hyper-V VMs, and physical servers. It integrates with Azure Site Recovery for the actual replication and with Azure Database Migration Service for database migrations, but the core discovery, assessment, and migration orchestration for these server types is the primary function of Azure Migrate.

Answer

Azure Site Recovery

Answer

Azure Data Box

Answer

Azure Database Migration Service

Question 11

Which Azure service enables language understanding by recognizing intents and entities from natural language text?

Accepted Answer

Azure Language Understanding (LUIS). Azure Language Understanding (LUIS) is the correct service because it is specifically designed to extract intents (the user's goal) and entities (key data points) from natural language text. This enables applications to understand user requests in a conversational context, making it the appropriate choice for intent and entity recognition.

Answer

Azure Text Analytics

Answer

Azure Translator

Answer

Azure QnA Maker

Question 12

Which Azure storage tier should you use for data that is stored for at least 180 days and is rarely accessed?

Accepted Answer

Archive tier. The Archive tier is designed for data that is rarely accessed and has a minimum storage duration of 180 days. It offers the lowest storage cost but requires several hours to rehydrate data before it can be read, making it ideal for long-term backup or compliance data that is infrequently needed.

Answer

Hot tier

Answer

Cool tier

Answer

Standard tier

Question 13

Which Azure compute service allows you to run a group of identical virtual machines that can automatically scale in or out based on demand?

Accepted Answer

Azure Virtual Machine Scale Sets. Azure Virtual Machine Scale Sets (VMSS) is the correct answer because it is specifically designed to deploy and manage a group of identical, load-balanced VMs that can automatically increase or decrease the number of VM instances based on demand or a defined schedule. This autoscaling capability is built into the VMSS resource, using metrics like CPU or memory thresholds to trigger scale-out or scale-in operations, making it the ideal service for elastic workloads.

Answer

Azure Availability Sets

Answer

Azure Kubernetes Service

Answer

Azure Batch

Question 14

Which Azure service provides real-time performance monitoring and alerting for live web applications, including request rates and failure rates?

Accepted Answer

Azure Application Insights. Azure Application Insights is a feature of Azure Monitor specifically designed for Application Performance Management (APM) of live web applications. It automatically detects performance anomalies, includes powerful analytics tools to diagnose issues, and provides real-time metrics such as request rates, response times, and failure rates directly from the application code.

Answer

Azure Monitor Metrics

Answer

Azure Log Analytics

Answer

Azure Network Watcher

Question 15

Which Azure service provides a secure, scalable API gateway that manages access to backend services?

Accepted Answer

Azure API Management. Azure API Management is the correct service because it provides a secure, scalable API gateway that manages access to backend services. It handles API publishing, versioning, rate limiting, authentication (e.g., OAuth 2.0, JWT validation), and request/response transformation, acting as a centralized facade between clients and backend APIs.

Answer

Azure Application Gateway

Answer

Azure Front Door

Answer

Azure Service Bus