AZ-900 Describe Azure architecture and services Practice Test 2 — 15 Questions

Question 1

Which Azure database service is a globally distributed, multi-model NoSQL database that supports multiple data models and multi-master global distribution?

Accepted Answer

Azure Cosmos DB. Azure Cosmos DB is a globally distributed, multi-model NoSQL database service that supports multiple data models and provides multi-master replication for writes in any region. The other options are relational databases or analytics services and do not offer native multi-master global distribution or multi-model support.

Answer

Azure SQL Database

Answer

Azure Database for PostgreSQL Hyperscale

Answer

Azure Synapse Analytics

Question 2

Which Azure storage redundancy option provides the highest durability by replicating data across two paired Azure regions?

Accepted Answer

Geo-Zone-Redundant Storage (GZRS). Geo-Zone-Redundant Storage (GZRS) provides the highest durability among Azure storage redundancy options by synchronously replicating data across multiple Azure availability zones within the primary region (zone-redundant), and then asynchronously copying that data to a paired secondary region. This combination offers 16 nines (99.99999999999999%) durability, protecting against both zonal failures and complete regional outages. Standard Geo-Redundant Storage (GRS) only replicates three times within a single region (LRS) before geo-copying, achieving 12 nines (99.9999999999%) durability, but GZRS adds zone-level redundancy for even higher durability.

Answer

Zone-Redundant Storage (ZRS)

Answer

Locally Redundant Storage (LRS)

Answer

Geo-Redundant Storage (GRS)

Question 3

Which Azure service provides a way to connect microservices-based applications using patterns like service discovery, circuit breaker, and distributed tracing?

Accepted Answer

Azure Service Fabric. Azure Service Fabric is a distributed systems platform for building, deploying, and managing microservices. It provides built-in service discovery through its Naming Service and supports reliable communication with health/failover handling. Circuit breaker and distributed tracing are common resilience patterns that can be implemented using Service Fabric's Reliable Services/Actors and integrated with Application Insights, but they are not automatic, baked-in features. Among the options, Service Fabric is still the most appropriate answer because it is the dedicated microservices platform.

Answer

Azure API Management

Answer

Azure Kubernetes Service

Answer

Azure Logic Apps

Question 4

Which Azure storage service is optimized for storing transactional records where data is written once and read many times?

Accepted Answer

Azure Blob Storage with immutability policies (WORM). Azure Blob Storage with immutability policies (WORM) is correct for write-once-read-many transactional records due to its immutability enforcement. The explanation is accurate, but the trap note mischaracterizes Data Lake Storage.

Answer

Azure Queue Storage

Answer

Azure Files

Answer

Azure Data Lake Storage

Question 5

Which Azure service provides fully managed file shares in the cloud as part of Azure Storage and supports the NFS protocol for Linux clients?

Accepted Answer

Azure Files (NFS protocol). Azure Files is the fully managed file share service in Azure Storage that supports NFS 4.1 for Linux clients. Azure NetApp Files also supports NFS but is a separate NetApp-managed service, not part of Azure Storage. Azure Blob Storage supports NFS 3.0 but is object storage, not file shares. Azure Data Lake Storage is optimized for analytics and does not provide file shares.

Answer

Azure Blob Storage with NFS 3.0

Answer

Azure NetApp Files

Answer

Azure Data Lake Storage

Question 6

Which Azure service provides a unified inbox for managing customer support communications across email, chat, phone, and social channels?

Accepted Answer

Azure Logic Apps. Azure Logic Apps provides workflow automation and integration capabilities that allow organizations to build a unified inbox by connecting and orchestrating communications across email, chat, phone, and social channels. It is the most suitable service among the options for creating a centralized customer support communication management system.

Answer

Azure Service Bus

Answer

Azure Communication Services

Answer

Azure Notification Hubs

Question 7

Which Azure service enables connecting Azure resources to on-premises systems using standardized industry protocols like SFTP or FTP?

Accepted Answer

Azure Blob Storage SFTP support. Azure Blob Storage SFTP support enables secure file transfers to and from Azure Blob Storage using the SFTP protocol, which is a standardized industry protocol for secure file transfer. This allows on-premises systems to connect directly to Azure storage resources without needing a separate virtual machine or gateway, making it the correct choice for connecting Azure resources to on-premises systems via SFTP.

Answer

Azure VPN Gateway

Answer

Azure ExpressRoute

Answer

Azure Data Factory

Question 8

A company wants to run Windows and Linux containers together in Azure without managing Kubernetes cluster infrastructure. Which service should they use?

Accepted Answer

Azure Container Instances. Azure Container Instances (ACI) is the correct choice because it allows you to run Windows and Linux containers directly in Azure without managing any underlying orchestration infrastructure like Kubernetes. ACI provides a serverless, per-second billing model for containers, making it ideal for simple container workloads where you want to avoid cluster management overhead.

Answer

Azure Kubernetes Service

Answer

Azure Container Apps

Answer

Azure App Service

Question 9

A company wants to synchronize files between multiple on-premises Windows file servers and Azure Blob Storage for backup and centralized access. Which Azure service BEST enables this?

Accepted Answer

Azure Blob Storage with AzCopy. AzCopy is a command-line utility designed for copying data to and from Azure Blob Storage, and it supports synchronization features like incremental sync and filtering. While it is not a fully managed continuous sync service, it is the only option among the listed choices that directly addresses the requirement to synchronize files with Azure Blob Storage. Azure File Sync syncs with Azure Files (SMB file shares), not Blob Storage. Azure Data Box is for offline data transfer, and Storage Explorer is a GUI management tool, neither of which provides synchronization.

Answer

Azure File Sync

Answer

Azure Data Box

Answer

Azure Storage Explorer

Question 10

Which Azure network security service provides stateful, centralized network firewall capabilities with threat intelligence-based filtering?

Accepted Answer

Azure Firewall. Azure Firewall is the correct answer because it is a stateful, managed, cloud-based network security service that provides centralized network firewall capabilities with built-in threat intelligence-based filtering. Unlike Network Security Groups (NSGs), which are stateful but distributed and primarily filter at the network layer (L3/L4) per subnet/NIC, Azure Firewall inspects and filters traffic at the network and application layers (L3-L7) using a central policy, and it integrates with Microsoft Threat Intelligence to block known malicious IPs and domains in real time.

Answer

Network Security Groups

Answer

Azure DDoS Protection

Answer

Azure Application Gateway WAF

Question 11

A company is planning to migrate its on-premises applications to Azure. They have a mix of monolithic and microservices-based applications. Which Azure compute service should they choose for a microservices architecture that requires independent scaling and deployment of components?

Accepted Answer

Azure Kubernetes Service (AKS). Azure Kubernetes Service (AKS) is the correct choice because it provides a managed Kubernetes orchestration platform designed specifically for microservices architectures. AKS enables independent scaling, deployment, and management of containerized components, which aligns with the requirement for decoupled services that can be updated or scaled individually without affecting the entire application.

Answer

Azure Functions

Answer

Azure App Service

Answer

Azure Virtual Machines

Question 12

A solutions architect is designing a storage solution for a large media company. The company needs to store video files that are accessed infrequently but must be retained for several years for compliance. Which two Azure storage options meet these requirements? (Select two.)

Accepted Answer

Blob Storage - Cool tier. Blob Storage Cool tier is correct because it is designed for data that is accessed infrequently but needs to be stored for at least 30 days, offering lower storage costs than the Hot tier while maintaining low-latency access. Blob Storage Archive tier is correct because it is the lowest-cost storage option for data that is rarely accessed and has a flexible retrieval time (hours), making it ideal for long-term compliance retention of video files.

Answer

Blob Storage - Hot tier

Answer

Azure Files - Premium tier

Question 13

A developer is building a serverless application that requires integration with an on-premises SQL Server database for real-time data processing. The on-premises network is connected to Azure via a site-to-site VPN. Which Azure service would allow the function to securely access the on-premises database without exposing it to the public internet?

Accepted Answer

Azure Functions in Premium plan with VNet integration. Azure Functions in the Premium plan supports VNet integration, allowing the function to securely access resources in a connected on-premises network via a site-to-site VPN without exposing the database to the public internet. The Consumption plan lacks VNet integration, and Azure SQL Database is a PaaS service, not a compute service for running serverless code.

Answer

Azure Functions in Consumption plan

Answer

Azure SQL Database

Answer

Hybrid Connections

Question 14

A company is designing a multi-tier application on Azure. The web tier needs to scale out based on CPU usage, while the database tier requires high-performance storage for transactional data. Which combination of Azure services should they choose?

Accepted Answer

Azure App Service and Azure SQL Database. Azure App Service provides built-in autoscaling based on metrics like CPU usage, making it ideal for the web tier that needs to scale out. Azure SQL Database offers high-performance, low-latency storage for transactional data with features like automatic indexing and in-memory OLTP, meeting the database tier's requirements.

Answer

Azure Functions and Azure Cosmos DB

Answer

Azure Virtual Machine Scale Sets and Azure Files

Answer

Azure Kubernetes Service and Blob Storage

Question 15

A company is deploying a mission-critical application that must remain available even if a physical Azure datacenter within a region fails. The application will run on multiple virtual machines. Which Azure feature should they use to protect against this specific failure scenario?

Accepted Answer

Availability Zones. Availability Zones are physically separate datacenters within an Azure region, each with independent power, cooling, and networking. By deploying VMs across multiple zones, the application remains available even if one entire datacenter fails. This directly addresses the requirement for protection against a physical datacenter failure within a region.

Answer

Availability Sets

Answer

Virtual Machine Scale Sets

Answer

Azure Load Balancer