AZ-900 Describe Azure architecture and services Practice Test 2 — 15 Questions

Question 1

Which Azure service acts as a reverse proxy to protect, accelerate, and deliver web applications with SSL termination and layer 7 load balancing?

Accepted Answer

Azure Front Door. Azure Front Door is a global, scalable entry point that acts as a reverse proxy, provides SSL termination, Layer 7 routing, Web Application Firewall (WAF), DDoS protection, and acceleration of web applications. This precisely matches the stem's 'protect, accelerate, and deliver web applications with SSL termination and layer 7 load balancing.' Application Gateway is a regional Layer 7 load balancer but does not offer global acceleration.

Answer

Azure Load Balancer

Answer

Azure Application Gateway

Answer

Azure Traffic Manager

Question 2

Which Azure service provides a managed graph API for accessing Microsoft 365 data, including users, groups, and calendar events?

Accepted Answer

Microsoft Graph. Microsoft Graph is the correct answer because it provides a unified REST API (https://graph.microsoft.com) for accessing Microsoft 365 data, including users, groups, and calendar events. It acts as the gateway to data stored in Microsoft 365 services, replacing the deprecated Microsoft Entra ID Graph API. Cosmos DB for Graph is a graph database service, not an API for Microsoft 365 data; Microsoft Entra ID Graph is deprecated; API Management is for managing APIs, not for direct access to Microsoft 365 data.

Answer

Azure Cosmos DB for Graph

Answer

Azure Active Directory Graph API

Answer

Azure API Management

Question 3

Which Azure service provides an integrated development environment and tools for building and deploying applications to Azure directly from a web browser?

Accepted Answer

Azure Cloud Shell. Azure Cloud Shell is a browser-accessible shell that includes Azure CLI, PowerShell, and a lightweight code editor. It allows developers to build, test, and deploy applications to Azure from a web browser without installing tools locally. While it is not a traditional desktop IDE, among the listed options it is the closest match for the browser-based development environment described.

Answer

Azure App Service Editor

Answer

Azure DevOps

Answer

Azure Sandbox

Question 4

Which Azure database service is a globally distributed, multi-model NoSQL database that supports multiple data models and multi-master global distribution?

Accepted Answer

Azure Cosmos DB. Azure Cosmos DB is a globally distributed, multi-model NoSQL database service that supports multiple data models and provides multi-master replication for writes in any region. The other options are relational databases or analytics services and do not offer native multi-master global distribution or multi-model support.

Answer

Azure SQL Database

Answer

Azure Database for PostgreSQL Hyperscale

Answer

Azure Synapse Analytics

Question 5

Which Azure service provides a way to connect microservices-based applications using patterns like service discovery, circuit breaker, and distributed tracing?

Accepted Answer

Azure Service Fabric. Azure Service Fabric is a distributed systems platform for building, deploying, and managing microservices. It provides built-in service discovery through its Naming Service and supports reliable communication with health/failover handling. Circuit breaker and distributed tracing are common resilience patterns that can be implemented using Service Fabric's Reliable Services/Actors and integrated with Application Insights, but they are not automatic, baked-in features. Among the options, Service Fabric is still the most appropriate answer because it is the dedicated microservices platform.

Answer

Azure API Management

Answer

Azure Kubernetes Service

Answer

Azure Logic Apps

Question 6

Which Azure storage service is optimized for storing transactional records where data is written once and read many times?

Accepted Answer

Azure Blob Storage with immutability policies (WORM). Azure Blob Storage with immutability policies (WORM) is correct for write-once-read-many transactional records due to its immutability enforcement. The explanation is accurate, but the trap note mischaracterizes Data Lake Storage.

Answer

Azure Queue Storage

Answer

Azure Files

Answer

Azure Data Lake Storage

Question 7

Which Azure service provides fully managed file shares in the cloud as part of Azure Storage and supports the NFS protocol for Linux clients?

Accepted Answer

Azure Files (NFS protocol). Azure Files is the fully managed file share service in Azure Storage that supports NFS 4.1 for Linux clients. Azure NetApp Files also supports NFS but is a separate NetApp-managed service, not part of Azure Storage. Azure Blob Storage supports NFS 3.0 but is object storage, not file shares. Azure Data Lake Storage is optimized for analytics and does not provide file shares.

Answer

Azure Blob Storage with NFS 3.0

Answer

Azure NetApp Files

Answer

Azure Data Lake Storage

Question 8

Which Azure service provides a unified inbox for managing customer support communications across email, chat, phone, and social channels?

Accepted Answer

Azure Logic Apps. Azure Logic Apps provides workflow automation and integration capabilities that allow organizations to build a unified inbox by connecting and orchestrating communications across email, chat, phone, and social channels. It is the most suitable service among the options for creating a centralized customer support communication management system.

Answer

Azure Service Bus

Answer

Azure Communication Services

Answer

Azure Notification Hubs

Question 9

Which Azure service enables connecting Azure resources to on-premises systems using standardized industry protocols like SFTP or FTP?

Accepted Answer

Azure Blob Storage SFTP support. Azure Blob Storage SFTP support enables secure file transfers to and from Azure Blob Storage using the SFTP protocol, which is a standardized industry protocol for secure file transfer. This allows on-premises systems to connect directly to Azure storage resources without needing a separate virtual machine or gateway, making it the correct choice for connecting Azure resources to on-premises systems via SFTP.

Answer

Azure VPN Gateway

Answer

Azure ExpressRoute

Answer

Azure Data Factory

Question 10

A company wants to run Windows and Linux containers together in Azure without managing Kubernetes cluster infrastructure. Which service should they use?

Accepted Answer

Azure Container Instances. Azure Container Instances (ACI) is the correct choice because it allows you to run Windows and Linux containers directly in Azure without managing any underlying orchestration infrastructure like Kubernetes. ACI provides a serverless, per-second billing model for containers, making it ideal for simple container workloads where you want to avoid cluster management overhead.

Answer

Azure Kubernetes Service

Answer

Azure Container Apps

Answer

Azure App Service

Question 11

Which Azure network security service provides stateful, centralized network firewall capabilities with threat intelligence-based filtering?

Accepted Answer

Azure Firewall. Azure Firewall is the correct answer because it is a stateful, managed, cloud-based network security service that provides centralized network firewall capabilities with built-in threat intelligence-based filtering. Unlike Network Security Groups (NSGs), which are stateful but distributed and primarily filter at the network layer (L3/L4) per subnet/NIC, Azure Firewall inspects and filters traffic at the network and application layers (L3-L7) using a central policy, and it integrates with Microsoft Threat Intelligence to block known malicious IPs and domains in real time.

Answer

Network Security Groups

Answer

Azure DDoS Protection

Answer

Azure Application Gateway WAF

Question 12

A solutions architect is comparing Azure availability options for a new line-of-business application. The application must remain available even if an entire Azure datacenter fails, and the architect also wants the ability to distribute virtual machines across isolated hardware clusters within a single region. Which two Azure constructs should the architect use to meet these goals? (Choose two.)

Accepted Answer

Availability zones, which are physically separate datacenters within an Azure region, each with independent power, cooling, and networking.. Availability zones provide datacenter-level fault isolation because each zone has independent power, cooling, and networking, so an application spread across zones survives the loss of one datacenter. Availability sets provide rack-level isolation inside a single datacenter by using fault domains and update domains. Used together, they satisfy both the datacenter-failure requirement and the hardware-cluster distribution requirement.

Answer

Region pairs, which replicate all resources in a region to a predetermined partner region automatically.

Answer

Resource groups, which provide logical containers that isolate deployed resources from failures in other resource groups.

Answer

Azure Dedicated Host, which provides a physical server dedicated to a single organization's workloads.

Question 13

A company is planning to migrate its on-premises applications to Azure. They have a mix of monolithic and microservices-based applications. Which Azure compute service should they choose for a microservices architecture that requires independent scaling and deployment of components?

Accepted Answer

Azure Kubernetes Service (AKS). Azure Kubernetes Service (AKS) is the correct choice because it provides a managed Kubernetes orchestration platform designed specifically for microservices architectures. AKS enables independent scaling, deployment, and management of containerized components, which aligns with the requirement for decoupled services that can be updated or scaled individually without affecting the entire application.

Answer

Azure Functions

Answer

Azure App Service

Answer

Azure Virtual Machines

Question 14

A solutions architect is designing a storage solution for a large media company. The company needs to store video files that are accessed infrequently but must be retained for several years for compliance. Which two Azure storage options meet these requirements? (Select two.)

Accepted Answer

Blob Storage - Cool tier. Blob Storage Cool tier is correct because it is designed for data that is accessed infrequently but needs to be stored for at least 30 days, offering lower storage costs than the Hot tier while maintaining low-latency access. Blob Storage Archive tier is correct because it is the lowest-cost storage option for data that is rarely accessed and has a flexible retrieval time (hours), making it ideal for long-term compliance retention of video files.

Answer

Blob Storage - Hot tier

Answer

Azure Files - Premium tier

Question 15

A developer is building a serverless application that requires integration with an on-premises SQL Server database for real-time data processing. The on-premises network is connected to Azure via a site-to-site VPN. Which Azure service would allow the function to securely access the on-premises database without exposing it to the public internet?

Accepted Answer

Azure Functions in Premium plan with VNet integration. Azure Functions in the Premium plan supports VNet integration, allowing the function to securely access resources in a connected on-premises network via a site-to-site VPN without exposing the database to the public internet. The Consumption plan lacks VNet integration, and Azure SQL Database is a PaaS service, not a compute service for running serverless code.

Answer

Azure Functions in Consumption plan

Answer

Azure SQL Database

Answer

Hybrid Connections