AZ-900 Describe Azure architecture and services Practice Test 5 — 15 Questions

Question 1

A company deploys a web application on Azure Virtual Machines across multiple availability zones within a single region. They need to distribute incoming network traffic across these VM instances to ensure high availability. Which Azure service should they use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Azure Load Balancer. Azure Load Balancer is the correct choice because it operates at Layer 4 (TCP/UDP) and distributes incoming traffic across healthy virtual machines within a single region, including across availability zones. It provides high availability by automatically routing traffic only to healthy VM instances based on health probes, and it supports both public and internal load balancing scenarios.

Answer

Azure Application Gateway

Answer

Azure Traffic Manager

Answer

Azure Front Door

Question 2

A company plans to use Azure Site Recovery to replicate on-premises virtual machines to Azure for disaster recovery. Due to regulatory restrictions, they cannot use the paired region and must replicate to a specific Azure region in the same continent. Can they select this non-paired region as the recovery target?

Accepted Answer

Yes, you can select any Azure region as the target for replication.. Azure Site Recovery allows you to replicate on-premises virtual machines to any Azure region that supports the service, not just the paired region. The paired region is a default recommendation for cost and latency optimization, but it is not a mandatory requirement. Therefore, you can select a non-paired region as the recovery target as long as it is within the same continent and meets regulatory restrictions.

Answer

No, replication is only allowed to the paired region.

Answer

Yes, but only if both regions are within the same availability zone.

Answer

No, only to regions that are within the same geography.

Question 3

A company wants to host a static website (HTML, CSS, JavaScript) that is accessed by users worldwide. They need a low-cost solution that provides high availability and global reach without managing servers. Which Azure service is most cost-effective for this scenario?

Accepted Answer

Azure Blob Storage with static website hosting. Azure Blob Storage with static website hosting is the most cost-effective solution because it allows you to host static content (HTML, CSS, JavaScript) directly from a storage container without provisioning any virtual machines or app service plans. It provides built-in high availability through geo-redundant storage (GRS) and global reach via integration with Azure CDN, while the pay-per-GB storage model and no compute costs keep expenses minimal.

Answer

Azure App Service

Answer

Azure Virtual Machines

Answer

Azure CDN

Question 4

A company runs a large data analytics job for a few hours each week. They want to use Azure virtual machines with the lowest possible cost, accepting that the VMs may be reclaimed by Azure at any time. Which pricing option should they choose?

Accepted Answer

Spot VMs. Spot VMs allow you to use unused Azure compute capacity at a significant discount (up to 90% compared to pay-as-you-go) but can be evicted by Azure when capacity is needed elsewhere. This makes them ideal for interruptible, batch-style workloads like a weekly data analytics job that can tolerate interruptions and resume later.

Answer

Reserved Instances

Answer

Pay-as-you-go

Answer

Dedicated Hosts

Question 5

An application deployed on Azure Virtual Machines needs to be resilient to failures within a single Azure region. The VMs are placed across multiple physically separate locations within the region, each with independent power, cooling, and networking. What is this feature called?

Accepted Answer

Availability zone. Availability zones are physically separate locations within an Azure region, each with independent power, cooling, and networking. By placing VMs across different zones, you protect your application from a single point of failure within the region, such as a datacenter outage. This is the correct feature for achieving intra-region resilience.

Answer

Availability set

Answer

Region pair

Answer

Resource group

Question 6

A company runs a containerized application on Azure. They want to use Kubernetes for orchestration but do not want to manage the control plane nodes. They need a managed Kubernetes service. Which Azure service should they choose?

Accepted Answer

Azure Kubernetes Service (AKS). Azure Kubernetes Service (AKS) is the correct choice because it provides a fully managed Kubernetes orchestration service. With AKS, Azure manages the control plane nodes (including the API server, etcd, and scheduler) automatically, so the company does not need to manage them. This meets the requirement for a managed Kubernetes service without control plane management overhead.

Answer

Azure Container Instances

Answer

Azure Container Registry

Answer

Azure App Service

Question 7

A web application needs to store large amounts of unstructured data (images, documents) that will be accessed via HTTP from anywhere in the world. The data must be highly durable and scalable. Which Azure storage solution is most appropriate?

Accepted Answer

Azure Blob Storage. Azure Blob Storage is designed for storing massive amounts of unstructured data, such as images and documents, and provides HTTP/HTTPS access from anywhere. It offers high durability (99.9999999999% with RA-GRS) and massive scalability, making it the ideal choice for globally accessible, unstructured data workloads.

Answer

Azure SQL Database

Answer

Azure File Storage

Answer

Azure Cosmos DB

Question 8

A company has multiple on-premises sites that need to connect to Azure over high-throughput, low-latency private connections. They want a dedicated private connection that does not traverse the internet. Which Azure service should they use?

Accepted Answer

Azure ExpressRoute. Azure ExpressRoute provides a dedicated private connection from on-premises sites to Azure that does not traverse the public internet, ensuring high throughput and low latency. It uses a Layer 3 VPN or direct peering via a connectivity provider, bypassing internet-based routing entirely. This makes it ideal for scenarios requiring consistent performance and security for hybrid connectivity.

Answer

Azure VPN Gateway

Answer

Azure Virtual WAN

Answer

Azure Peering Service

Question 9

A company wants to deploy a web app that scales automatically based on demand. They do not want to manage any virtual machines or the underlying infrastructure. They only want to upload their code and let the platform handle everything. Which Azure compute service should they choose?

Accepted Answer

Azure App Service. Azure App Service is a fully managed platform-as-a-service (PaaS) offering that enables developers to deploy web applications without managing virtual machines or underlying infrastructure. It provides built-in autoscaling, load balancing, and patching, allowing the company to simply upload their code and let the platform handle scaling based on demand.

Answer

Azure Virtual Machines

Answer

Azure Functions

Answer

Azure Container Instances

Question 10

A company deploys a multi-tier web application on Azure. The web tier and database tier must be in the same region for low latency, but the database tier must be in a different subnet and have restricted network access from the web tier only. Which Azure network solution should they use?

Accepted Answer

Azure Virtual Network with subnets and Network Security Groups. Azure Virtual Network (VNet) with subnets and Network Security Groups (NSGs) is the correct solution because it allows you to create isolated subnets for the web and database tiers within the same region, ensuring low latency. NSGs can then be applied to the database subnet to restrict inbound traffic exclusively from the web tier's subnet using source IP or service tag rules, providing the required network segmentation and access control.

Answer

Azure Application Gateway

Answer

Azure Load Balancer

Answer

Azure Traffic Manager

Question 11

A company runs a critical application on Azure VMs. They need to ensure that if one VM fails, the application continues to serve users with another VM. The VMs should be placed in a configuration that protects against failures within a single datacenter. Which feature should they use?

Accepted Answer

Availability Set. An Availability Set ensures that VMs are distributed across multiple fault domains (separate racks with independent power, cooling, and network) and update domains within a single Azure datacenter. This protects against hardware failures or maintenance events within that datacenter, so if one VM fails, another in a different fault domain continues serving users.

Answer

Availability Zone

Answer

Resource Group

Answer

Scale Set

Question 12

A company wants to encrypt data at rest in Azure SQL Database using customer-managed keys stored in Azure Key Vault. They also need to be able to rotate the keys without downtime. Which feature should they use?

Accepted Answer

Transparent Data Encryption with customer-managed keys. Transparent Data Encryption (TDE) with customer-managed keys in Azure Key Vault allows you to encrypt the database at rest using your own keys, which you can rotate without downtime because Azure SQL Database handles the re-encryption of the database encryption key (DEK) transparently in the background, without requiring database offline or performance impact.

Answer

Always Encrypted

Answer

Dynamic Data Masking

Answer

Row-level security

Question 13

A company runs a web application on Azure App Service. They want to route users to the nearest regional deployment based on DNS queries to minimize latency. Which Azure service should they use for this global traffic routing?

Accepted Answer

Traffic Manager. Traffic Manager is a DNS-based traffic load balancer that routes incoming DNS queries to the nearest regional endpoint based on the user's geographic location, network latency, or other routing methods. This ensures users are directed to the closest Azure App Service deployment, minimizing latency for global traffic.

Answer

Azure Load Balancer

Answer

Application Gateway

Answer

Azure Front Door

Question 14

A company is deploying a critical application on Azure Virtual Machines. They need to ensure that the application remains available during Azure platform updates. They also want to distribute the VMs across fault domains within an availability set. What is the primary purpose of fault domains?

Accepted Answer

To distribute VMs across different power and cooling racks. Fault domains represent groupings of hardware that share a common power source and network switch. By distributing VMs across multiple fault domains within an availability set, Azure ensures that if a power or cooling failure occurs in one rack, only the VMs in that fault domain are affected, keeping the application available on VMs in other fault domains.

Answer

To distribute VMs across different Azure regions

Answer

To distribute VMs across different availability zones

Answer

To distribute VMs across different virtual networks

Question 15

A company runs a web application on Azure App Service. They want to improve performance by caching static content and frequently accessed data closer to users in different geographic locations. Which Azure service should they use?

Accepted Answer

Azure Content Delivery Network. Azure Content Delivery Network (CDN) caches static content and frequently accessed data at edge nodes located closer to users, reducing latency and improving performance for geographically distributed audiences. This directly addresses the requirement to serve cached content from locations near the end users, offloading origin traffic from the App Service.

Answer

Azure Traffic Manager

Answer

Azure Application Gateway

Answer

Azure Front Door