AZ-900 Describe Azure architecture and services Practice Test 23 — 15 Questions

Question 1

Which Azure service provides a way to implement role-based access control for Kubernetes cluster resources?

Accepted Answer

AKS with Azure AD integration and Kubernetes RBAC. B is correct because Azure Kubernetes Service (AKS) integrates with Azure Active Directory (Azure AD) to provide identity and authentication, and then uses Kubernetes RBAC (Role-Based Access Control) to authorize actions on cluster resources. This combination allows you to define fine-grained permissions for users, groups, or service principals against Kubernetes objects like pods, namespaces, and deployments, using standard Kubernetes Role and ClusterRole objects.

Answer

Azure RBAC at the subscription level

Answer

Azure Policy for Kubernetes

Answer

Network Security Groups on AKS node pools

Question 2

Which Azure service provides application-level, request-based routing with session persistence for web workloads?

Accepted Answer

Azure Application Gateway. Azure Application Gateway is a Layer 7 (HTTP/HTTPS) load balancer that provides application-level, request-based routing based on URL path, host headers, or other HTTP attributes. It also supports session persistence (also known as sticky sessions) using cookies, which ensures that all requests from a client during a session are directed to the same backend server. This makes it the correct choice for web workloads requiring request-level routing and session affinity.

Answer

Azure Load Balancer

Answer

Azure Traffic Manager

Answer

Azure Front Door

Question 3

Which Azure service provides a way to run Windows-based desktop applications from any device without installing them locally?

Accepted Answer

Azure Virtual Desktop. Azure Virtual Desktop (AVD) is a desktop and app virtualization service that runs on Azure. It enables users to access full Windows desktops and applications from virtually any device (including non-Windows devices) without requiring local installation, as the applications execute on remote session hosts in Azure.

Answer

Azure App Service

Answer

Azure Container Instances

Answer

Azure Virtual Machines

Question 4

Which Azure service enables serverless compute for running containers with scale-to-zero capabilities?

Accepted Answer

Azure Container Apps. Azure Container Apps is the correct answer because it is a fully managed serverless container service that automatically scales down to zero when there is no traffic, meaning you only pay for resources when your containers are actively running. This scale-to-zero capability is a key differentiator from other container services, as it allows cost-efficient execution of event-driven or idle workloads without maintaining a running cluster.

Answer

Azure Functions

Answer

Azure Kubernetes Service

Answer

Azure Container Instances

Question 5

What is the purpose of Azure Private DNS zones?

Accepted Answer

To provide DNS name resolution for resources within Azure virtual networks privately. Azure Private DNS zones provide DNS name resolution within a virtual network without requiring a custom DNS solution. They allow you to use your own domain names (e.g., contoso.internal) and automatically resolve them for resources inside the VNet, ensuring that DNS queries never leave the Azure network boundary. This is correct because the primary purpose is private, internal resolution, not public hosting or security filtering.

Answer

To host public-facing domain names and DNS records

Answer

To filter DNS requests for potentially malicious domains

Answer

To translate domain names for cross-region traffic routing

Question 6

Which Azure AI service provides the ability to search, query, and extract insights from large document collections using AI?

Accepted Answer

Azure Cognitive Search. Azure Cognitive Search (now part of Azure AI Search) is the correct service because it is specifically designed to index, search, and extract insights from large document collections using built-in AI capabilities like OCR, entity recognition, key phrase extraction, and language detection. It integrates with Azure Cognitive Services to enrich documents during indexing, enabling powerful search and query experiences over unstructured data.

Answer

Azure Cognitive Services Text Analytics

Answer

Azure Form Recognizer

Answer

Azure Machine Learning text classification

Question 7

Which Azure service provides a set of APIs and tools for building real-time communication features into applications, such as voice and video calling?

Accepted Answer

Azure Communication Services. Azure Communication Services is the correct answer because it provides a set of REST APIs and client SDKs specifically designed to integrate real-time communication features—such as voice, video, and chat—into custom applications. Unlike other Azure services, it offers managed WebRTC-based media streaming and PSTN telephony capabilities, making it the dedicated solution for embedding communication experiences.

Answer

Azure Media Services

Answer

Azure Event Grid

Answer

Azure Bot Service

Question 8

Which Azure service provides fully managed Apache Cassandra NoSQL database with automatic scaling and multi-region writes?

Accepted Answer

Azure Managed Instance for Apache Cassandra. Azure Managed Instance for Apache Cassandra is the correct answer because it is a fully managed service that automates deployment, scaling, and operations of Apache Cassandra clusters, including support for multi-region writes. It provides native Cassandra API compatibility, automatic scaling, and managed multi-region replication, which aligns precisely with the question's requirements.

Answer

Azure Cosmos DB for Apache Cassandra

Answer

Azure Table Storage with Cassandra drivers

Answer

Azure HDInsight with Cassandra

Question 9

Which Azure service enables automated build and release pipelines triggered by code changes in a Git repository?

Accepted Answer

Azure Pipelines. Azure Pipelines is the correct service because it is specifically designed for continuous integration and continuous delivery (CI/CD), enabling automated build and test workflows that trigger on code changes in a Git repository. It supports multiple Git providers (e.g., GitHub, Azure Repos, Bitbucket) and can deploy to any target, making it the native DevOps solution for automating pipelines from source control commits.

Answer

Azure Logic Apps

Answer

Azure Resource Manager templates

Answer

Azure Automation runbooks

Question 10

Which Azure service provides intelligent, AI-powered search over internal business data, including documents, databases, and Teams conversations?

Accepted Answer

Azure Cognitive Search. Azure Cognitive Search (now also known as Azure AI Search) is the correct service because it provides AI-powered indexing and search capabilities over heterogeneous internal business data, including documents, databases, and Microsoft Teams conversations. It uses built-in AI enrichment (e.g., OCR, entity recognition, key phrase extraction) to extract insights from unstructured content and supports semantic search for more relevant results.

Answer

Azure Monitor Log Analytics search

Answer

Azure Resource Graph

Answer

Azure Synapse Analytics

Question 11

Which Azure service provides a way to automatically extract and load data from external SaaS applications like Salesforce and ServiceNow into Azure data stores?

Accepted Answer

Azure Data Factory. Azure Data Factory (ADF) is the correct answer because it is a cloud-based ETL (Extract, Transform, Load) and data integration service specifically designed to ingest data from a wide variety of sources—including SaaS applications like Salesforce and ServiceNow—and load it into Azure data stores such as Azure SQL Database, Azure Data Lake Storage, or Azure Synapse Analytics. ADF provides built-in connectors for these SaaS platforms, enabling automated, scheduled, or event-triggered data movement without requiring custom code.

Answer

Azure Logic Apps

Answer

Azure Event Grid subscriptions

Answer

Azure Service Bus

Question 12

Which Azure service provides a way to deploy and manage Azure services at the edge, close to IoT devices and end users?

Accepted Answer

Azure IoT Edge. Azure IoT Edge is correct because it extends cloud intelligence to edge devices, allowing you to deploy and manage Azure services (like Azure Functions, Stream Analytics, and custom modules) directly on IoT devices or gateways. This enables local data processing and decision-making close to IoT sensors and end users, reducing latency and bandwidth usage.

Answer

Azure IoT Hub

Answer

Azure Stack Edge

Answer

Azure Arc for IoT

Question 13

A company needs to run a batch job that processes large amounts of data nightly. The job requires hundreds of VMs for a few hours and then terminates. Which Azure service is BEST suited for this workload?

Accepted Answer

Azure Batch. Azure Batch is designed specifically for large-scale parallel and high-performance computing (HPC) workloads that require hundreds of VMs for a short duration. It automatically provisions, manages, and deallocates the VMs, scaling to the required number of nodes, running the batch job, and then terminating them—matching the nightly processing requirement exactly.

Answer

Azure Virtual Machine Scale Sets

Answer

Azure Functions

Answer

Azure Container Instances

Question 14

Which Azure storage redundancy option replicates data synchronously across three availability zones within a single region?

Accepted Answer

Zone-Redundant Storage (ZRS). Zone-Redundant Storage (ZRS) is the correct answer because it synchronously replicates data across three Azure availability zones within a single region, ensuring high durability and availability even if an entire zone fails. This meets the exact requirement of the question: synchronous replication across multiple zones in one region.

Answer

Locally Redundant Storage (LRS)

Answer

Geo-Redundant Storage (GRS)

Answer

Geo-Zone-Redundant Storage (GZRS)

Question 15

A developer wants to send notifications to mobile devices from a backend service. Which Azure service is designed for this purpose?

Accepted Answer

Azure Notification Hubs. Azure Notification Hubs is a scalable push notification engine that enables sending notifications to any platform (iOS, Android, Windows, etc.) from any backend. It abstracts the complexities of platform-specific notification services (e.g., APNs, FCM, WNS) and provides features like template-based broadcasts, device tagging, and telemetry, making it the correct choice for sending mobile push notifications from a backend service.

Answer

Azure Service Bus

Answer

Azure Event Grid

Answer

Azure Queue Storage