AZ-900 Describe Azure architecture and services Practice Test 27 — 15 Questions

Question 1

A company needs to host a website that must automatically scale to handle millions of concurrent users during peak events. Which Azure architecture BEST supports this?

Accepted Answer

Azure App Service with autoscaling and Azure Front Door. Azure App Service with autoscaling and Azure Front Door is the best choice because it provides a fully managed platform for web applications that can automatically scale out (add instances) based on demand, while Azure Front Door offers global load balancing and acceleration at Layer 7 (HTTP/HTTPS) to distribute traffic across multiple regions. This combination ensures the website can handle millions of concurrent users during peak events without manual intervention.

Answer

Single Azure VM with manual scaling

Answer

Azure Blob Storage static website

Answer

Azure VMs without load balancing

Question 2

Which Azure service provides a fully managed PostgreSQL database with automatic backups, high availability, and intelligent performance recommendations?

Accepted Answer

Azure Database for PostgreSQL. Azure Database for PostgreSQL is a fully managed Platform-as-a-Service (PaaS) offering that provides built-in automatic backups, high availability with a 99.99% SLA, and intelligent performance recommendations via the Query Performance Insight and Automatic Tuning features. It handles patching, backups, and replication automatically, freeing you from administrative overhead.

Answer

Azure SQL Database

Answer

Azure Cosmos DB for PostgreSQL

Answer

PostgreSQL on Azure VMs

Question 3

Which Azure service acts as a reverse proxy with Web Application Firewall (WAF) capabilities to protect web applications from common web exploits?

Accepted Answer

Azure Application Gateway with WAF. Azure Application Gateway with WAF is the correct choice because it operates as a Layer 7 reverse proxy, inspecting HTTP/HTTPS traffic and using a Web Application Firewall (WAF) to block common exploits such as SQL injection and cross-site scripting (XSS). The WAF is based on the OWASP Core Rule Set (CRS), providing centralized protection for web applications.

Answer

Azure Firewall

Answer

Network Security Groups

Answer

Azure DDoS Protection

Question 4

A company wants to store sensitive encryption keys in a hardware security module (HSM) to meet compliance requirements. Which Azure service provides HSM-backed key storage?

Accepted Answer

Azure Key Vault Premium tier or Managed HSM. Azure Key Vault Premium tier and Azure Managed HSM both provide FIPS 140-2 Level 3 validated hardware security modules (HSMs) for storing sensitive encryption keys. The Standard tier of Key Vault uses software-backed keys and does not meet compliance requirements that mandate dedicated HSM hardware. Managed HSM offers single-tenant, fully managed HSM appliances with higher throughput and key isolation, making it the correct choice for HSM-backed key storage.

Answer

Azure Key Vault Standard tier

Answer

Azure Storage with encryption at rest

Answer

Azure Active Directory

Question 5

Which Azure service provides a managed Apache Hadoop cluster for processing large amounts of data using batch analytics?

Accepted Answer

Azure HDInsight. Azure HDInsight is the correct answer because it is a fully managed, open-source analytics service that provides Apache Hadoop clusters specifically designed for batch processing of large data sets using MapReduce and other Hadoop ecosystem components. Unlike other services, HDInsight directly supports Hadoop's distributed file system (HDFS) and YARN resource management, making it the native choice for traditional big data batch analytics.

Answer

Azure Databricks

Answer

Azure Synapse Analytics

Answer

Azure Stream Analytics

Question 6

Which Azure storage tier should be used for data that is rarely accessed, can tolerate several hours of retrieval latency, and needs to be stored at the lowest cost?

Accepted Answer

Archive tier. The Archive tier is designed for data that is rarely accessed and can tolerate several hours of retrieval latency, offering the lowest storage cost among Azure Blob Storage tiers. It requires rehydration to a Hot or Cool tier before reading, which typically takes up to 15 hours, making it ideal for long-term backup, archival, and compliance data.

Answer

Hot tier

Answer

Cool tier

Answer

Premium tier

Question 7

Which Azure service provides a fully managed, serverless data warehouse for enterprise analytics with massive parallel processing?

Accepted Answer

Azure Synapse Analytics. Azure Synapse Analytics (formerly SQL Data Warehouse) is the correct answer because it is a fully managed, serverless data warehouse that uses massive parallel processing (MPP) to run complex queries across large datasets. It separates compute from storage, allowing you to scale compute resources independently and pause them when not in use, which is ideal for enterprise analytics workloads.

Answer

Azure SQL Database

Answer

Azure Cosmos DB

Answer

Azure HDInsight

Question 8

Which Azure service allows you to create a private network connection between your Azure VNet and your on-premises network using a dedicated circuit, not over the public internet?

Accepted Answer

Azure ExpressRoute. Azure ExpressRoute is the correct answer because it provides a dedicated, private connection from your on-premises network to Azure, bypassing the public internet entirely. This is achieved through a direct, private circuit provided by a connectivity partner, offering higher reliability, lower latency, and higher bandwidth than internet-based connections.

Answer

Azure VPN Gateway

Answer

Azure Virtual WAN

Answer

Azure Bastion

Question 9

Which Azure service provides a hub for connecting IoT devices to Azure, supporting device management, telemetry ingestion, and bidirectional communication?

Accepted Answer

Azure IoT Hub. Azure IoT Hub is the correct service because it is specifically designed as a cloud gateway for IoT devices, providing device identity registry, secure device-to-cloud and cloud-to-device messaging, and built-in device management capabilities. It supports bidirectional communication using MQTT, AMQP, and HTTPS protocols, making it the central hub for IoT solutions.

Answer

Azure Event Hubs

Answer

Azure Stream Analytics

Answer

Azure Service Bus

Question 10

What is Azure Resource Manager (ARM) template used for?

Accepted Answer

To define and deploy Azure infrastructure as code in a repeatable, consistent way. Azure Resource Manager (ARM) templates are JSON or Bicep files that define the infrastructure and configuration for Azure resources in a declarative manner. They enable Infrastructure as Code (IaC), allowing you to deploy, update, and manage resources consistently across environments without manual steps, ensuring repeatability and idempotency.

Answer

To monitor the health of Azure resources

Answer

To create user accounts in Azure Active Directory

Answer

To generate cost reports for Azure spending

Question 11

Which Azure service provides language understanding (NLU) capabilities to build applications that understand natural language commands?

Accepted Answer

Azure Cognitive Service for Language (LUIS). Azure Cognitive Service for Language (formerly LUIS) provides natural language understanding (NLU) capabilities, enabling applications to interpret user intent and extract entities from natural language commands. It is specifically designed to process conversational input and map it to structured data, making it the correct choice for building applications that understand natural language commands.

Answer

Azure Bot Service

Answer

Azure Speech Service

Answer

Azure Form Recognizer

Question 12

Which Azure service translates text between languages using neural machine translation?

Accepted Answer

Azure Cognitive Services Translator. Azure Cognitive Services Translator is the correct service because it provides neural machine translation (NMT) capabilities, which use deep learning models to translate text between languages with high accuracy and fluency. Unlike traditional statistical methods, NMT considers the full context of a sentence, producing more natural translations. This service is specifically designed for text-to-text translation tasks.

Answer

Azure Language Understanding

Answer

Azure Speech Service

Answer

Azure Text Analytics

Question 13

Which Azure service allows you to run Linux and Windows virtual machines in the cloud with full control over the operating system?

Accepted Answer

Azure Virtual Machines. Azure Virtual Machines (IaaS) provide full control over the guest operating system, including the ability to install custom software, configure the kernel, and manage updates. This is the only service in the list that offers direct access to the OS for both Linux and Windows, as it runs on a hypervisor-managed virtual hardware stack.

Answer

Azure App Service

Answer

Azure Container Instances

Answer

Azure Functions

Question 14

Order the steps to set up Azure Site Recovery for disaster recovery.

Accepted Answer

Create a Recovery Services vault, then enable replication for source VMs specifying target settings, then run a test failover, then monitor replication health.. Site Recovery requires a vault, replication enablement, target configuration, validation, and ongoing monitoring.

Answer

Run a test failover, then create a Recovery Services vault, then enable replication, then monitor.

Answer

Create a Recovery Services vault, then run a test failover, then enable replication, then monitor.

Answer

Enable replication, then create a Recovery Services vault, then monitor, then run a test failover.

Question 15

Order the steps to deploy an Azure app service (Web App) with a custom domain.

Accepted Answer

Step 1: Create an App Service plan, Step 2: Create a web app, Step 3: Deploy application code, Step 4: Add a custom domain, Step 5: Configure SSL binding. Deploying a web app requires plan creation, code deployment, DNS configuration, domain binding, and SSL.

Answer

Step 1: Create a web app, Step 2: Create an App Service plan, Step 3: Deploy application code, Step 4: Add a custom domain, Step 5: Configure SSL binding

Answer

Step 1: Create an App Service plan, Step 2: Deploy application code, Step 3: Create a web app, Step 4: Add a custom domain, Step 5: Configure SSL binding

Answer

Step 1: Create an App Service plan, Step 2: Create a web app, Step 3: Add a custom domain, Step 4: Deploy application code, Step 5: Configure SSL binding