AZ-900 Matching — 10 Questions

Question 1

Match each Azure database service to its type.

Accepted Answer

Azure SQL Database: Relational. In this matching exercise, the correct pairs are: Azure SQL Database (Relational), Azure Cosmos DB (NoSQL), Azure Database for MySQL (Relational), Azure Database for PostgreSQL (Relational). The distractors swap the types, incorrectly labeling Cosmos DB as relational and SQL Database as NoSQL.

Answer

Azure Cosmos DB: Relational

Answer

Azure SQL Database: NoSQL

Question 2

Match each Azure pricing model to its definition.

Accepted Answer

Pay-as-you-go: You pay only for what you use, with no upfront commitment.. Correct matches: Pay-as-you-go = pay per use; Reserved Instances = prepay for discount; Spot VMs = discounted but evictable capacity; Azure Hybrid Benefit = use existing licenses. Common confusions involve swapping prepayment with pay-as-you-go or confusing spot with license benefits.

Answer

Pay-as-you-go: You prepay for 1 or 3 years to get a discounted rate.

Answer

Spot Virtual Machines: You use your existing on-premises licenses to save costs.

Question 3

Match each Azure storage type to its use case.

Accepted Answer

Blob Storage: Stores large amounts of unstructured data, such as text or binary data.. The correct matches are: Blob Storage for unstructured data, File Storage for SMB file shares, Queue Storage for messages, and Table Storage for structured NoSQL data. Common confusions include mixing up Blob Storage with relational data (which is Table Storage or SQL) and File Storage with Queue Storage.

Answer

Blob Storage: Stores structured relational data.

Answer

File Storage: Stores messages in a queue.

Question 4

Match each Azure networking service to its purpose.

Accepted Answer

Azure Load Balancer: Distributes network traffic at the transport layer (layer 4).. Azure Load Balancer operates at layer 4, Application Gateway at layer 7, Traffic Manager at DNS level. The distractors mix these characteristics.

Answer

Azure Load Balancer: Provides SSL termination and URL-based routing.

Answer

Azure Application Gateway: Distributes traffic across multiple regions based on DNS.

Answer

Azure Traffic Manager: Manages traffic at the transport layer within a region.

Question 5

Match each Azure governance tool to its purpose.

Accepted Answer

Azure Policy: Enforces rules and compliance across resources.. Correct matches: Azure Policy enforces rules; Azure Blueprints sets up governed environments; Management Groups organize subscriptions for policy management. Common confusions involve swapping these definitions.

Answer

Azure Policy: Enables repeatable setup of governed environments.

Answer

Azure Blueprints: Organize subscriptions for policy and compliance management.

Answer

Management Groups: Enforces rules and compliance across resources.

Question 6

Match each Azure support plan to its key feature.

Accepted Answer

Developer: Tailored for non-production environments, includes email support during business hours.. Azure support plans: Basic is free and provides community support only (no technical support). The statement 'Billed monthly' is incorrect; Basic is included free with Azure subscription. Developer provides email support for non-production. Standard provides phone/email with 1-hour critical response. Professional Direct provides proactive guidance and 15-minute critical response.

Answer

Basic: Billed monthly with access to community forums and no technical support.

Answer

Basic: Provides phone support and 1-hour response time.

Answer

Standard: For non-production environments with community support only.

Question 7

Match each Azure compute option to its description.

Accepted Answer

Azure Virtual Machines: Provides full control over the operating system and allows custom software installations. Azure Virtual Machines provide IaaS with full OS control; Azure App Service is a PaaS for web apps; Azure Functions is serverless compute. Common confusions involve swapping definitions between IaaS, PaaS, and serverless services.

Answer

Azure Virtual Machines: A serverless compute service for running code on demand

Answer

Azure App Service: Provides full control over the virtual machine including OS updates

Answer

Azure Functions: A fully managed platform for building web applications

Question 8

Match each Azure service to its primary function.

Accepted Answer

Azure Virtual Machines: Provides IaaS virtual machines for cloud computing.. The correct matches are: Azure Virtual Machines (IaaS), Azure Functions (serverless compute), Azure Queue Storage (simple messaging), and Azure Service Bus (enterprise messaging). Common confusions include mixing up serverless with IaaS and simple messaging with enterprise brokers.

Answer

Azure Virtual Machines: Serverless compute that runs code in response to events.

Answer

Azure Queue Storage: Enterprise message broker with advanced features like topics.

Question 9

Match each Azure identity service to its description.

Accepted Answer

Microsoft Entra ID: Cloud-based identity and access management service for employees and internal users.. Correct matches: Microsoft Entra ID for internal users, Azure AD B2C for customers, Managed Identities for Azure resources. Common confusions include swapping B2C with domain services or managed identities.

Answer

Azure AD B2C: Provides managed domain services like domain join and group policy.

Answer

Managed Identities: Identity service for managing customer identities and sign-up/sign-in.

Question 10

Match each Azure security service to its role.

Accepted Answer

Azure Security Center: Unified infrastructure security management system that strengthens the security posture of your data centers.. Azure Security Center provides unified security management, Azure Sentinel offers SIEM/SOAR capabilities, Azure Firewall secures network traffic, and Azure DDoS Protection mitigates DDoS attacks. Common confusions include mixing the roles of Security Center and Sentinel.

Answer

Azure Security Center: Protects Azure applications from DDoS attacks.

Answer

Azure Sentinel: Unified infrastructure security management system that strengthens the security posture of your data centers.