AZ-900 Describe Azure architecture and services Practice Test 6 — 15 Questions

Question 1

A company wants to run a containerized application that responds to HTTP requests. They want to deploy it without managing any virtual machines or orchestration. Which Azure service is the simplest option?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Azure Container Instances. Azure Container Instances (ACI) is the simplest option because it allows you to run a containerized application directly in Azure without managing any underlying virtual machines or orchestration. ACI automatically starts the container, assigns a public IP address, and handles HTTP requests on port 80/443, making it ideal for event-driven or stateless workloads that need rapid deployment.

Answer

Azure Kubernetes Service

Answer

Azure Virtual Machines

Answer

Azure App Service

Question 2

A company needs to store backup data that must be retained for 7 years. They want to store the data as cheaply as possible, and access may be rare. Which Azure Storage access tier is most cost-effective?

Accepted Answer

Archive tier. The Archive tier is the most cost-effective option for data that must be retained for 7 years with rare access. It offers the lowest storage cost among Azure Blob Storage access tiers, specifically designed for long-term retention where retrieval latency of up to 15 hours is acceptable. This aligns perfectly with the requirement to minimize cost while meeting the 7-year retention period.

Answer

Hot tier

Answer

Cool tier

Answer

Premium tier

Question 3

A company deploys a critical application across two Azure regions for disaster recovery. They want to automatically failover traffic to the secondary region if the primary becomes unavailable. They also want to improve performance by routing users to the closest region. Which Azure service should they use?

Accepted Answer

Azure Traffic Manager. Azure Traffic Manager is a DNS-based traffic load balancer that enables you to distribute traffic optimally to services across global Azure regions. It supports the 'Priority' routing method for automatic failover to a secondary region when the primary is unavailable, and the 'Performance' routing method to direct users to the closest region for improved latency. This combination directly meets the stated requirements for disaster recovery failover and performance-based routing.

Answer

Azure Load Balancer

Answer

Azure Application Gateway

Answer

Azure VPN Gateway

Question 4

A company needs to run a legacy application that requires full control over the operating system, including custom kernel modules. They also need to ensure high availability with multiple instances. Which Azure compute service should they use?

Accepted Answer

Azure Virtual Machines. Azure Virtual Machines (VMs) are the correct choice because they provide full control over the operating system, including the ability to install custom kernel modules, and support high availability through availability sets or zones. This is essential for legacy applications that require OS-level customization and fault-tolerant deployment.

Answer

Azure App Service

Answer

Azure Functions

Answer

Azure Container Instances

Question 5

A company uses Azure SQL Database for a web application. They need to ensure that the database can automatically scale to handle sudden spikes in traffic without downtime. Which feature should they enable?

Accepted Answer

Serverless compute. Serverless compute for Azure SQL Database automatically scales compute resources based on workload demand and pauses the database during idle periods, charging only for consumed resources. This enables handling sudden traffic spikes without downtime because the service dynamically adjusts the vCore count and memory within a configurable range, ensuring continuous availability during bursts.

Answer

Geo-replication

Answer

Active geo-replication

Answer

Elastic pool

Question 6

A company wants to connect an on-premises network to Azure with a dedicated private connection that bypasses the internet. Which service should they use?

Accepted Answer

Azure ExpressRoute. Azure ExpressRoute is the correct service because it provides a dedicated, private connection from an on-premises network directly into Azure, bypassing the public internet entirely. This ensures lower latency, higher reliability, and greater security compared to internet-based connections, and it supports higher bandwidth options.

Answer

Azure VPN Gateway

Answer

Azure Virtual WAN

Answer

Azure DNS

Question 7

A company needs to run a large-scale batch processing job that runs daily for several hours. The job can tolerate interruptions if compute capacity is reclaimed. They want to minimize compute costs. Which Azure compute service is most cost-effective for this scenario?

Accepted Answer

Azure Batch with low-priority VMs. Azure Batch with low-priority VMs is the most cost-effective option because it allows you to run large-scale batch jobs using surplus Azure capacity at a significantly reduced cost (up to 80% less than dedicated VMs). The job can tolerate interruptions, and low-priority VMs can be preempted when Azure needs the capacity back, making this a perfect fit for the scenario.

Answer

Azure Virtual Machines

Answer

Azure Functions

Answer

Azure Container Instances

Question 8

A company needs to store log files from multiple applications. The logs are accessed infrequently for compliance audits but must be retained for 10 years. Storage cost must be minimized. Which Azure Storage access tier should they use for the blob storage?

Accepted Answer

Archive tier. The Archive tier is the correct choice because it is designed for data that is rarely accessed and has a flexible retrieval latency of up to 15 hours, making it ideal for compliance logs that are accessed infrequently but must be retained for 10 years. It offers the lowest storage cost among all Azure Blob Storage access tiers, which directly minimizes storage costs for long-term retention. The Hot, Cool, and Cold tiers are progressively more expensive and are optimized for more frequent access patterns, not for archival scenarios.

Answer

Hot tier

Answer

Cool tier

Answer

Cold tier

Question 9

A global e-commerce platform runs on Azure App Service in multiple regions. They need to route user traffic to the nearest region based on geographic location, and also provide automatic failover if a region becomes unavailable. Which Azure service includes these capabilities with integrated Web Application Firewall (WAF)?

Accepted Answer

Azure Front Door. Azure Front Door is a global, scalable entry point that uses the Microsoft global edge network to route user traffic to the nearest region based on geographic location (latency-based routing) and provides automatic failover across regions. It natively integrates Web Application Firewall (WAF) at the edge, protecting against common web exploits like SQL injection and cross-site scripting, making it the correct choice for this scenario.

Answer

Azure Traffic Manager

Answer

Azure Application Gateway

Answer

Azure Load Balancer

Question 10

A company wants to ensure that all Azure resources they deploy are created in the Europe West region to comply with data sovereignty requirements. They want to block creation of resources in any other region. Which Azure service should they use?

Accepted Answer

Azure Policy with allowed locations. Azure Policy with the 'allowed locations' built-in policy definition can enforce that all resources are deployed only in the Europe West region. When assigned to a subscription or resource group scope, this policy denies any resource creation outside the specified regions, directly meeting the data sovereignty requirement.

Answer

Resource groups

Answer

Management groups

Answer

Azure Blueprints

Question 11

A company wants to protect their application against a failure that affects an entire data center within an Azure region. Which feature should they use to distribute their VMs across multiple physical locations within that region?

Accepted Answer

Availability Zones. Availability Zones are physically separate locations (each with independent power, cooling, and networking) within an Azure region. By deploying VMs across multiple zones, the application is protected from a failure that affects an entire data center, because each zone is a distinct data center or set of data centers.

Answer

Availability Set

Answer

Azure Site Recovery

Answer

Azure Load Balancer

Question 12

A company is designing a disaster recovery solution for an application hosted on Azure VMs. They want to replicate the VMs to a secondary Azure region and automatically failover if the primary region fails. Which Azure service should they use?

Accepted Answer

Azure Site Recovery. Azure Site Recovery (ASR) orchestrates replication, failover, and failback of Azure VMs between regions. It continuously replicates VM disks to the secondary region and, upon a failure, allows you to initiate a planned or unplanned failover with a single click, meeting the stated disaster recovery and automatic failover requirements.

Answer

Azure Backup

Answer

Azure Traffic Manager

Answer

Azure Load Balancer

Question 13

A company runs a web application on Azure VMs. They want to distribute incoming traffic evenly across multiple VMs to ensure no single VM is overwhelmed. Which Azure load balancing solution should they use?

Accepted Answer

Azure Load Balancer. Azure Load Balancer (Option D) operates at Layer 4 (TCP/UDP) and distributes incoming traffic across a set of backend VMs based on a hash of the source IP and port, ensuring even distribution and high availability. It is the correct choice for balancing traffic within a single Azure region across multiple VMs to prevent any single VM from being overwhelmed.

Answer

Azure Application Gateway

Answer

Azure Front Door

Answer

Azure Traffic Manager

Question 14

A company needs to run a containerized application without managing any virtual machines or cluster orchestration. Which Azure service is best suited for this?

Accepted Answer

Azure Container Instances. Azure Container Instances (ACI) is the correct choice because it allows you to run a containerized application directly on Azure without provisioning or managing any underlying virtual machines, cluster orchestration, or scheduling. ACI provides a serverless, per-second billing model, making it ideal for simple, isolated containers that do not require the complexity of a full orchestration platform.

Answer

Azure Kubernetes Service

Answer

Azure App Service

Answer

Azure Batch

Question 15

A company wants to connect their on-premises data center to Azure with a dedicated, private connection that does not traverse the internet. They also need to ensure high availability by having two active connections. Which Azure service and configuration should they use?

Accepted Answer

Azure ExpressRoute with two circuits.. Azure ExpressRoute provides a dedicated, private connection from on-premises to Azure that does not traverse the public internet. To achieve high availability with two active connections, you must configure two ExpressRoute circuits, each connecting to different Microsoft Enterprise Edge (MSEE) devices, ensuring redundancy at the physical and network layer.

Answer

Azure VPN Gateway with active-active mode.

Answer

Azure Virtual WAN with a single connection.

Answer

Azure Point-to-Site VPN.