AZ-900 Describe Azure architecture and services Practice Test 24 — 15 Questions

Question 1

Which Azure service acts as a cloud-based VPN gateway that enables secure site-to-site connectivity between an on-premises network and Azure virtual networks?

Accepted Answer

Azure VPN Gateway. Azure VPN Gateway is the correct service because it is specifically designed to establish secure, encrypted site-to-site connectivity between an on-premises network and Azure virtual networks over the public internet using IPsec/IKE protocols. It acts as a cloud-based VPN endpoint that terminates VPN tunnels from on-premises VPN devices, enabling hybrid connectivity.

Answer

Azure ExpressRoute

Answer

Azure Front Door

Answer

Azure Firewall

Question 2

An e-commerce application needs to handle sudden traffic spikes during flash sales while maintaining consistent performance. Which combination of Azure services BEST addresses this requirement?

Accepted Answer

Azure Front Door with autoscaling backend. Azure Front Door provides global load balancing and traffic acceleration with built-in SSL offload and path-based routing, while its autoscaling backend (e.g., Virtual Machine Scale Sets or App Service) automatically adds or removes instances based on CPU or request metrics. This combination ensures that sudden traffic spikes during flash sales are absorbed without manual intervention, maintaining consistent performance and high availability.

Answer

Azure Load Balancer with manual VM scaling

Answer

Azure Traffic Manager with static VMs

Answer

Azure CDN alone

Question 3

Which Azure service provides a managed Apache Spark environment for big data analytics and machine learning workloads?

Accepted Answer

Azure HDInsight. Azure HDInsight is the correct answer because it is a fully managed, open-source analytics service that provides Apache Spark clusters for big data processing and machine learning workloads. It supports Spark, Hadoop, Hive, and other frameworks, allowing users to run distributed data analytics and ML pipelines without managing infrastructure.

Answer

Azure Stream Analytics

Answer

Azure Data Factory

Answer

Azure Synapse Analytics

Question 4

A company needs to make their web application available with a custom domain name and SSL certificate. Which Azure service provides this capability for App Service?

Accepted Answer

Azure App Service custom domain and SSL binding. Azure App Service natively supports binding a custom domain to your web app and uploading or configuring an SSL/TLS certificate for HTTPS. This is done through the 'Custom domains' and 'TLS/SSL settings' blades in the portal, which directly associate the domain and certificate with the App Service resource, enabling secure access over HTTPS without additional services.

Answer

Azure DNS with Azure CDN

Answer

Azure Front Door

Answer

Azure Key Vault only

Question 5

Which Azure service provides an enterprise-grade, fully managed graph database as a service?

Accepted Answer

Azure Cosmos DB for Gremlin. Azure Cosmos DB for Gremlin is the correct answer because it provides a fully managed, enterprise-grade graph database service that uses the Apache TinkerPop Gremlin graph traversal language. It supports graph data models with vertices and edges, enabling complex relationship queries at global scale with turnkey distribution and SLA-backed performance.

Answer

Azure SQL Database

Answer

Azure Table Storage

Answer

Azure Cache for Redis

Question 6

Which Azure service enables you to monitor, diagnose, and gain insights into the performance of web applications, including user behavior analytics?

Accepted Answer

Azure Application Insights. Azure Application Insights is an extensible Application Performance Management (APM) service for web developers. It automatically detects performance anomalies, includes powerful analytics tools to help diagnose issues, and provides user behavior analytics (e.g., page views, session duration, click patterns) via its telemetry pipeline. This makes it the correct choice for monitoring, diagnosing, and gaining insights into web application performance and user behavior.

Answer

Azure Monitor Logs

Answer

Azure Service Health

Answer

Azure Security Center

Question 7

A company needs to store and analyze large amounts of unstructured log data at low cost. Which Azure storage solution is MOST appropriate?

Accepted Answer

Azure Blob Storage with cool tier. Azure Blob Storage with cool tier is the most appropriate solution because it is optimized for storing large amounts of unstructured log data at low cost. The cool tier offers lower storage costs than the hot tier, making it ideal for infrequently accessed data like logs, while still providing high durability and scalability. Blob Storage natively supports unstructured data such as text logs, binary files, and streaming data, which aligns perfectly with the requirement.

Answer

Azure SQL Database

Answer

Azure Table Storage

Answer

Azure Files

Question 8

What is Azure Active Directory (Azure AD)?

Accepted Answer

A cloud-based identity and access management service. Azure Active Directory (Azure AD) is Microsoft's cloud-based identity and access management (IAM) service. It provides authentication and authorization for users, applications, and resources in the cloud, supporting protocols like OAuth 2.0, OpenID Connect, and SAML. Unlike on-premises Active Directory, Azure AD is a multi-tenant, directory-as-a-service platform designed for cloud and hybrid scenarios.

Answer

A domain controller service for on-premises Active Directory

Answer

A firewall service for protecting Azure resources

Answer

A virtual private network for connecting to Azure

Question 9

Which Azure service provides distributed tracing across microservices to help developers identify performance bottlenecks and failures?

Accepted Answer

Azure Application Insights. Azure Application Insights is the correct service because it provides distributed tracing, which allows developers to track requests as they travel across multiple microservices. This capability helps identify performance bottlenecks and failures by correlating telemetry from different components, using a correlation ID to link operations. It is part of Azure Monitor and supports OpenTelemetry for standardized instrumentation.

Answer

Azure Log Analytics

Answer

Azure Monitor Metrics

Answer

Azure Sentinel

Question 10

Which Azure service provides real-time analytics on fast-moving streaming data from IoT devices and applications?

Accepted Answer

Azure Stream Analytics. Azure Stream Analytics is a serverless, real-time analytics service designed to process high-velocity streaming data from sources like IoT devices, applications, and sensors. It uses SQL-based query language to analyze data in motion, enabling immediate insights and triggering actions without storing the data first.

Answer

Azure Data Factory

Answer

Azure Synapse Analytics

Answer

Azure HDInsight

Question 11

A company wants to migrate their on-premises SQL Server database to Azure with minimal changes to their existing application code. Which service offers the highest compatibility?

Accepted Answer

Azure SQL Managed Instance. Azure SQL Managed Instance is correct because it provides near 100% compatibility with on-premises SQL Server, including support for SQL Server Agent, cross-database queries, and CLR integration, enabling a lift-and-shift migration with minimal application code changes. In contrast, Azure SQL Database is a Platform-as-a-Service offering that lacks many SQL Server features like instance-scoped objects, making it less compatible for existing applications.

Answer

Azure SQL Database

Answer

Azure Database for PostgreSQL

Answer

Azure Cosmos DB

Question 12

Which Azure networking service acts as a software-defined WAN that connects branch offices, datacenters, and remote users through an optimized global network?

Accepted Answer

Azure Virtual WAN. Azure Virtual WAN is a software-defined WAN (SD-WAN) service that provides a unified, optimized global network connecting branch offices, datacenters, and remote users. It leverages Microsoft's global backbone to route traffic efficiently, automatically selecting the best path and reducing latency, while integrating with VPN, ExpressRoute, and SD-WAN partners for seamless connectivity.

Answer

Azure VPN Gateway

Answer

Azure ExpressRoute

Answer

Azure Load Balancer

Question 13

An application needs to store session state that can be accessed by multiple web server instances. The state must be retrieved in under 1 millisecond. Which Azure service BEST meets this requirement?

Accepted Answer

Azure Cache for Redis. Azure Cache for Redis is an in-memory data store that provides extremely low-latency (sub-millisecond) read and write operations, making it ideal for storing session state that must be accessed quickly by multiple web server instances. Unlike disk-based storage services, Redis keeps data in RAM, ensuring consistent retrieval times under 1 millisecond even under load.

Answer

Azure SQL Database

Answer

Azure Blob Storage

Answer

Azure Table Storage

Question 14

Which Azure service provides a content delivery network (CDN) that caches static content at edge locations worldwide to reduce latency for users?

Accepted Answer

Azure CDN. Azure CDN is the correct answer because it is specifically designed as a content delivery network that caches static content (such as images, CSS, JavaScript files) at edge locations worldwide. By distributing cached copies closer to users, it reduces latency and offloads origin server traffic. Azure Front Door also uses edge caching but is primarily a global load balancer and application delivery controller, not a dedicated CDN service.

Answer

Azure Front Door

Answer

Azure Traffic Manager

Answer

Azure Application Gateway

Question 15

Which Azure service allows developers to build, train, and deploy machine learning models at scale using a managed cloud environment?

Accepted Answer

Azure Machine Learning. Azure Machine Learning is the correct service because it provides a fully managed cloud environment specifically designed for the end-to-end machine learning lifecycle, including building, training, and deploying models at scale. It offers capabilities like automated ML, pipeline orchestration, and integration with MLOps tools, which are not available in the other listed services.

Answer

Azure Cognitive Services

Answer

Azure Bot Service

Answer

Azure Databricks