AZ-900 Describe Azure architecture and services Practice Test 26 — 15 Questions

Question 1

Which Azure service provides a fully managed platform for running containerized microservices with built-in traffic splitting for blue-green and canary deployments?

Accepted Answer

Azure Container Apps. Azure Container Apps is a fully managed serverless platform specifically designed for running containerized microservices and applications. It natively supports advanced traffic management features like traffic splitting, which enables blue-green and canary deployment strategies without the complexity of managing an underlying Kubernetes cluster.

Answer

Azure Kubernetes Service

Answer

Azure App Service deployment slots

Answer

Azure Functions

Question 2

Which Azure service provides a way to create, test, and manage APIs, including rate limiting, authentication, and analytics?

Accepted Answer

Azure API Management. Azure API Management is a fully managed service that enables you to publish, secure, transform, maintain, and monitor APIs. It provides built-in capabilities for rate limiting (throttling), authentication (via OAuth 2.0, client certificates, or IP filtering), and analytics (through Azure Monitor and Application Insights), making it the correct choice for creating, testing, and managing APIs with these features.

Answer

Azure Functions

Answer

Azure Application Gateway

Answer

Azure Service Bus

Question 3

Which Azure service provides enterprise-grade data integration and ETL/ELT pipelines for moving data between on-premises and cloud data stores?

Accepted Answer

Azure Data Factory. Azure Data Factory (ADF) is the correct answer because it is a cloud-based ETL/ELT service specifically designed for orchestrating and automating data movement and transformation between on-premises and cloud data stores. It provides over 90 built-in connectors, supports hybrid data integration via self-hosted integration runtimes, and enables code-free pipeline creation for complex data workflows.

Answer

Azure Stream Analytics

Answer

Azure Databricks

Answer

Azure HDInsight

Question 4

Which Azure service enables developers to add authentication and authorization to applications without writing the auth code themselves, supporting social identity providers and enterprise identity?

Accepted Answer

Azure Active Directory B2C. Azure Active Directory B2C (Business-to-Consumer) is the correct choice because it is a customer identity access management (CIAM) service specifically designed to enable developers to add authentication and authorization to consumer-facing applications without writing the authentication code themselves. It supports social identity providers (e.g., Google, Facebook, Microsoft) and enterprise identity providers (e.g., Azure AD, SAML/WS-Fed), and it handles the entire OAuth 2.0, OpenID Connect, and SAML protocol flow, including token issuance and user sign-up/sign-in policies.

Answer

Azure Active Directory

Answer

Azure Key Vault

Answer

Azure Multi-Factor Authentication

Question 5

A web application experiences intermittent performance issues. A developer wants to see the exact path a user request takes through multiple services. Which Azure capability enables this?

Accepted Answer

Azure Application Insights distributed tracing. Azure Application Insights distributed tracing is the correct capability because it provides end-to-end tracking of a user request as it flows across multiple services, components, and dependencies. It uses correlation IDs and telemetry to reconstruct the exact path, latency, and failures at each hop, which is essential for diagnosing intermittent performance issues in a distributed application.

Answer

Azure Monitor Metrics

Answer

Azure Log Analytics queries

Answer

Azure Network Watcher

Question 6

Which Azure service provides managed DNS hosting for domain names, enabling reliable and fast DNS queries?

Accepted Answer

Azure DNS. Azure DNS is the correct answer because it is a dedicated managed DNS hosting service that provides name resolution using the global Microsoft Azure DNS infrastructure. It supports standard DNS record types (A, AAAA, CNAME, MX, NS, PTR, SOA, SRV, TXT) and offers high availability and low-latency responses by leveraging Anycast networking. This makes it ideal for hosting domain names and ensuring reliable, fast DNS queries.

Answer

Azure Traffic Manager

Answer

Azure Front Door

Answer

Azure VPN Gateway

Question 7

Which Azure storage service provides a hierarchical namespace and is optimized for big data analytics workloads?

Accepted Answer

Azure Data Lake Storage Gen2. Azure Data Lake Storage Gen2 (ADLS Gen2) is the correct answer because it combines a hierarchical namespace with Azure Blob Storage, enabling POSIX-like access control and directory-level operations. This architecture is specifically optimized for big data analytics workloads, such as those run by Apache Spark, Hadoop, and Azure HDInsight, by providing high-throughput and low-latency data access.

Answer

Azure Table Storage

Answer

Azure Files

Answer

Azure Queue Storage

Question 8

A company needs to protect their Azure VMs from DDoS attacks at the network layer. Which Azure service provides this protection?

Accepted Answer

Azure DDoS Protection Standard. Azure DDoS Protection Standard is the correct service because it provides dedicated mitigation against Distributed Denial of Service (DDoS) attacks targeting Azure virtual machines at the network layer (Layer 3/4). It uses adaptive tuning, traffic monitoring, and automatic attack mitigation to protect public IP addresses associated with Azure resources, including VMs, without requiring any application-level changes.

Answer

Azure Firewall

Answer

Network Security Groups

Answer

Azure WAF

Question 9

Which Azure service provides distributed, low-latency access to large files (like game assets or software packages) for global users?

Accepted Answer

Azure CDN with Blob Storage origin. Azure CDN (Content Delivery Network) with a Blob Storage origin is the correct choice because it caches large files like game assets or software packages at edge nodes distributed globally, providing low-latency access to users. Blob Storage alone offers scalable storage but lacks the distributed caching and geographic proximity that CDN provides, which is essential for reducing latency for global users.

Answer

Azure Blob Storage alone

Answer

Azure Front Door

Answer

Azure Files

Question 10

Which Azure service provides automatic threat detection and response for Azure SQL Database, detecting anomalous activities like SQL injection?

Accepted Answer

Microsoft Defender for SQL. Microsoft Defender for SQL is the correct answer because it is a cloud-native security solution specifically designed to detect and respond to threats against Azure SQL Database, including SQL injection attacks. It provides advanced threat protection by continuously monitoring database activities and generating security alerts for anomalous behaviors, such as unusual access patterns or injection attempts, without requiring manual intervention.

Answer

Azure SQL Database auditing

Answer

Azure Policy

Answer

Azure Firewall

Question 11

Which Azure compute option is BEST for a batch processing job that can tolerate interruptions and needs the lowest possible compute cost?

Accepted Answer

Azure Spot VMs. Azure Spot VMs are designed for interruptible workloads like batch processing jobs that can tolerate preemption. They offer the lowest compute cost by leveraging unused Azure capacity, with discounts of up to 90% compared to pay-as-you-go pricing, making them the optimal choice for cost-sensitive, fault-tolerant tasks.

Answer

Azure Reserved VM Instances

Answer

Azure Dedicated Host

Answer

Azure Functions Consumption Plan

Question 12

Which Azure service allows you to extend your on-premises Active Directory to the cloud for hybrid identity scenarios?

Accepted Answer

Azure AD Connect. Azure AD Connect is the correct service because it synchronizes on-premises Active Directory identities with Azure AD, enabling hybrid identity scenarios where users can use the same credentials for both on-premises and cloud resources. It handles password hash synchronization, pass-through authentication, and federation integration, making it the primary tool for extending on-premises AD to the cloud.

Answer

Azure AD B2C

Answer

Azure Active Directory Domain Services

Answer

Azure Conditional Access

Question 13

What is an Azure availability zone?

Accepted Answer

A physically separate datacenter within an Azure region with independent power and cooling. An Azure availability zone is a physically separate datacenter within an Azure region, each with its own independent power, cooling, and networking. This isolation ensures that if one zone fails, applications and data in other zones remain unaffected, providing high availability and fault tolerance for critical workloads.

Answer

A geographic region with multiple Azure datacenters

Answer

A pair of geographically distant Azure regions

Answer

A logical grouping of Azure resources for billing

Question 14

Which Azure service provides a fully managed message broker that supports queues and publish-subscribe topics for enterprise application integration?

Accepted Answer

Azure Service Bus. Azure Service Bus is a fully managed enterprise message broker that supports both queues (point-to-point) and topics (publish-subscribe) with features like dead-lettering, sessions, and transactions. It is designed for reliable, ordered message delivery in enterprise application integration scenarios, using AMQP, SBMP, or HTTPS protocols.

Answer

Azure Event Hubs

Answer

Azure Queue Storage

Answer

Azure Notification Hubs

Question 15

Which Azure service provides a managed Apache Kafka-as-a-service offering that allows existing Kafka applications to work without code changes?

Accepted Answer

Azure Event Hubs with Kafka protocol support. Azure Event Hubs with Kafka protocol support provides a fully managed, Apache Kafka-compatible endpoint that allows existing Kafka producer and consumer applications to connect without any code changes. This service leverages the Kafka protocol 1.0 and later, enabling seamless migration of Kafka workloads to Azure while benefiting from Event Hubs' scalability and security features.

Answer

Azure HDInsight with Kafka

Answer

Azure Service Bus

Answer

Azure Event Grid