AZ-900 Describe Azure architecture and services Practice Test 19 — 15 Questions

Question 1

Which Azure service provides managed hosting for Hadoop ecosystems including HDFS, Hive, HBase, and Spark?

Accepted Answer

Azure HDInsight. Azure HDInsight is the correct answer because it is a fully managed, open-source analytics service specifically designed for running popular Hadoop ecosystems such as HDFS, Hive, HBase, and Spark on Azure. It provides pre-configured clusters with these components, allowing you to process large-scale data workloads without manual infrastructure management.

Answer

Azure Databricks

Answer

Azure Synapse Analytics

Answer

Azure Data Factory

Question 2

Which Azure identity feature automatically assigns permissions when a user joins a specific group, and removes them when they leave?

Accepted Answer

Azure AD Dynamic Groups. Azure AD Dynamic Groups automatically manage user membership based on rules defined using user or device attributes. When a user meets the rule criteria (e.g., department equals 'Sales'), they are added to the group and receive the associated permissions; when they no longer meet the criteria, they are removed, and permissions are revoked. This is the only Azure identity feature that directly ties group membership and permission assignment to attribute-based rules without manual intervention.

Answer

Azure AD Privileged Identity Management

Answer

Azure AD Conditional Access

Answer

Azure AD Identity Protection

Question 3

Which Azure service provides a low-code platform for building business applications and automating workflows?

Accepted Answer

Microsoft Power Platform. Microsoft Power Platform is the correct answer because it is explicitly designed as a low-code platform for building business applications and automating workflows. It includes Power Apps for app creation, Power Automate for workflow automation, and Power BI for analytics, all with minimal hand-coding required.

Answer

Azure Logic Apps

Answer

Azure Functions

Answer

Azure App Service

Question 4

Which Azure service analyzes patterns in telemetry data from Azure IoT Hub to detect anomalies and predict when equipment will fail?

Accepted Answer

Azure Time Series Insights. Azure Time Series Insights (TSI) is designed to ingest, store, and analyze time-series data from IoT devices, including telemetry from Azure IoT Hub. It provides built-in anomaly detection and pattern recognition capabilities, enabling predictive maintenance by identifying deviations that precede equipment failure.

Answer

Azure IoT Central

Answer

Azure Digital Twins

Answer

Azure Sphere

Question 5

Which Azure service enables you to build, train, and deploy machine learning models using automated ML capabilities?

Accepted Answer

Azure Machine Learning. Azure Machine Learning is the correct service because it provides a comprehensive platform for building, training, and deploying machine learning models, including automated ML (AutoML) capabilities that automatically iterate over algorithms and hyperparameters to find the best model for your data. This directly matches the question's requirement for automated ML features.

Answer

Azure Cognitive Services

Answer

Azure Bot Service

Answer

Azure Databricks

Question 6

Which Azure service provides a platform for running Apache Kafka for real-time event streaming without managing infrastructure?

Accepted Answer

Azure Event Hubs with Kafka endpoint. Azure Event Hubs with Kafka endpoint is correct because it provides a fully managed, Kafka-protocol-compatible event streaming service that allows you to run Apache Kafka workloads without provisioning or managing any Kafka clusters. This enables real-time event streaming using existing Kafka producers and consumers while Azure handles the underlying infrastructure, scaling, and high availability.

Answer

Azure Service Bus

Answer

Azure Stream Analytics

Answer

Azure HDInsight Kafka cluster

Question 7

Which Azure service provides monitoring and diagnostics for virtual network traffic flows?

Accepted Answer

Azure Network Watcher. Azure Network Watcher is the correct service because it provides a suite of tools specifically designed for monitoring and diagnosing network traffic flows in Azure virtual networks. It includes capabilities like IP flow verify, connection troubleshoot, and network performance monitor, which directly address the need to analyze traffic patterns and diagnose connectivity issues.

Answer

Azure Monitor

Answer

Azure Security Center

Answer

Azure Traffic Manager

Question 8

Which Azure service provides a secure way for applications running in Azure to access secrets and keys without storing credentials in code?

Accepted Answer

Azure Managed Identities. Azure Managed Identities (Option C) provide an automatically managed identity in Azure AD that applications can use to authenticate to any service supporting Azure AD authentication, including Key Vault, without storing any credentials in code. This eliminates the need for developers to manage secrets or keys, as the Azure infrastructure automatically rotates the identity's credentials.

Answer

Azure Key Vault

Answer

Azure AD Service Principals with client secrets

Answer

Azure Certificate Manager

Question 9

Which Azure service provides near real-time data analytics using SQL queries on streaming data from sources like IoT devices?

Accepted Answer

Azure Stream Analytics. Azure Stream Analytics is a fully managed, real-time analytics service designed to process high-velocity streaming data from sources like IoT devices, social media feeds, or application logs. It uses a SQL-like query language to perform near real-time analytics, aggregations, and pattern matching on data as it arrives, making it the correct choice for this scenario.

Answer

Azure Synapse Analytics

Answer

Azure Data Factory

Answer

Azure Log Analytics

Question 10

Which Azure storage service uses a flat namespace for storing objects and can host static websites?

Accepted Answer

Azure Blob Storage (static website hosting). Azure Blob Storage provides a flat namespace (container/blob hierarchy) and supports static website hosting by enabling a static website endpoint on a storage account. This allows users to serve HTML, CSS, and JavaScript files directly from a blob container without needing a web server.

Answer

Azure Files

Answer

Azure Table Storage

Answer

Azure Queue Storage

Question 11

Which Azure compute option allows you to run code in response to events without provisioning or managing servers, and supports triggers from HTTP, timers, and Azure service events?

Accepted Answer

Azure Functions. Azure Functions is the correct answer because it is a serverless compute service that executes code in response to events, such as HTTP requests, timer-based schedules, or Azure service events (e.g., Blob Storage or Queue triggers). It abstracts server management entirely, allowing you to focus solely on the code logic, and automatically scales based on demand.

Answer

Azure Logic Apps

Answer

Azure Container Instances

Answer

Azure App Service WebJobs

Question 12

Which Azure compute service runs identical VM instances in multiple Availability Zones with automatic load balancing?

Accepted Answer

Azure Virtual Machine Scale Sets across Availability Zones. Azure Virtual Machine Scale Sets (VMSS) can be configured to span multiple Availability Zones, automatically distributing VM instances across those zones for high availability. When combined with an Azure Load Balancer or Application Gateway, the scale set provides automatic load balancing of incoming traffic across all instances, meeting the requirement exactly.

Answer

Azure Availability Sets

Answer

Azure Dedicated Host

Answer

Azure Batch

Question 13

Which Azure service enables bi-directional communication between IoT applications and millions of IoT devices?

Accepted Answer

Azure IoT Hub. Azure IoT Hub is a managed cloud service that acts as a central message hub for bi-directional communication between IoT applications and devices. It supports both device-to-cloud and cloud-to-device messaging, enabling commands, telemetry ingestion, and device management at scale.

Answer

Azure Event Hubs

Answer

Azure Service Bus

Answer

Azure Notification Hubs

Question 14

Which Azure AI service provides translation between more than 100 languages?

Accepted Answer

Azure Translator. Azure Translator is the correct service because it is specifically designed for text and document translation across more than 100 languages and dialects, using a neural machine translation (NMT) engine. It provides a REST API that supports real-time translation, language detection, and transliteration, making it the direct solution for multi-language translation needs.

Answer

Azure Language Understanding (LUIS)

Answer

Azure Speech Service

Answer

Azure Text Analytics

Question 15

Which Azure networking service allows you to privately access Azure PaaS services from your virtual network using a private IP address?

Accepted Answer

Azure Private Endpoint. Azure Private Endpoint is correct because it assigns a private IP address from your virtual network to an Azure PaaS service (e.g., Azure SQL Database, Storage), enabling secure, private connectivity without traversing the public internet. This uses Azure Private Link to bring the service into your VNet, ensuring traffic stays within the Microsoft backbone network.

Answer

Azure Service Endpoint

Answer

Azure NAT Gateway

Answer

Azure VPN Gateway