AZ-900 Describe Azure architecture and services Practice Question
A company deploys virtual machines in Azure. They want to ensure that the VMs are distributed across multiple fault domains and update domains within an Azure datacenter to protect against hardware failures and maintenance. Which Azure construct should they use?
⚠ Common exam trap
Watch out — candidates often confuse Availability Zones (which span multiple datacenters) with Availability Sets (which operate within a single datacenter), leading them to choose the wrong construct for intra-datacenter fault and update domain protection.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A) Availability Set
An Availability Set is the correct Azure construct because it logically groups VMs to protect against both hardware failures (via fault domains) and planned maintenance (via update domains) within a single Azure datacenter. Fault domains distribute VMs across separate racks with independent power, cooling, and network, while update domains ensure VMs in different groups are not rebooted simultaneously during Azure host updates. This directly matches the requirement to isolate VMs across multiple fault and update domains within a datacenter.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
A) Availability Set
Why this is correct
An Availability Set spreads VMs across multiple fault domains (separate power, cooling, and network hardware) and update domains (groups that receive planned maintenance one at a time) within the same datacenter. This placement protects against both hardware failures and maintenance downtime, enabling a higher availability SLA when combined with at least two VMs in the set. It is the correct choice because the requirement is to ensure resilience inside a single Azure datacenter, not across regions.
- ✗
B) Availability Zone
Why it's wrong here
An Availability Zone consists of one or more physically separate datacenters within an Azure region, each with independent power, cooling, and networking, and separated by a meaningful distance. It protects against an entire datacenter failure by allowing VMs to be placed across zones, but it does not address fault and update domain behavior inside a single datacenter. The question specifically asks about resilience within one datacenter, so availability zones are broader than required and not the correct answer.
When this WOULD be correct
A company needs to protect against an entire datacenter failure (e.g., power outage or network failure) and requires high availability by placing VMs in physically separate locations within a region. They would use Availability Zones.
- ✗
C) Region Pair
Why it's wrong here
A Region Pair links two geographically separated Azure regions, typically at least 300 miles apart, to enable disaster recovery and cross-region replication such as storage geo-redundancy. While this protects against a whole-region outage, it does not help distribute VMs within a single datacenter to avoid local hardware failures. Since the company's need is within one datacenter's infrastructure, region pairing is the wrong mechanism.
When this WOULD be correct
A company wants to ensure business continuity and disaster recovery by replicating data and applications across two geographically separated Azure regions, with automatic failover in case of a regional outage.
- ✗
D) Resource Group
Why it's wrong here
A Resource Group is a logical container used to organize and manage related Azure resources, such as VMs, networks, and storage. It does not affect the underlying physical placement or provide any form of redundancy, so deploying VMs in the same resource group cannot protect them from hardware failures or maintenance events. Its purpose is access control, billing, and lifecycle management, not high availability.
When this WOULD be correct
A question asks: 'Which Azure construct should be used to organize and manage related resources, such as VMs, networks, and storage, under a common lifecycle, permissions, and policies?' In that scenario, Resource Group is the correct answer.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓A) Availability SetCorrect answer▾
Why this is correct
An Availability Set spreads VMs across multiple fault domains (separate power, cooling, and network hardware) and update domains (groups that receive planned maintenance one at a time) within the same datacenter. This placement protects against both hardware failures and maintenance downtime, enabling a higher availability SLA when combined with at least two VMs in the set. It is the correct choice because the requirement is to ensure resilience inside a single Azure datacenter, not across regions.
✗B) Availability ZoneWrong answer — click to see why▾
Why this is wrong here
Availability Zones distribute VMs across physically separate datacenters within a region, not across fault domains and update domains within a single datacenter. The question specifies protection within an Azure datacenter, which is the purpose of an Availability Set.
★ When this WOULD be the correct answer
A company needs to protect against an entire datacenter failure (e.g., power outage or network failure) and requires high availability by placing VMs in physically separate locations within a region. They would use Availability Zones.
Why candidates choose this
Candidates confuse 'fault domains' with 'Availability Zones' because both terms involve fault tolerance, but Zones are at a higher level (datacenter vs. rack).
✗C) Region PairWrong answer — click to see why▾
Why this is wrong here
Region pairs are used for disaster recovery and geo-replication across Azure regions, not for distributing VMs within a single datacenter to protect against hardware failures and maintenance.
★ When this WOULD be the correct answer
A company wants to ensure business continuity and disaster recovery by replicating data and applications across two geographically separated Azure regions, with automatic failover in case of a regional outage.
Why candidates choose this
Candidates may confuse region pairs with availability sets because both involve redundancy, but region pairs operate at a much larger scale (region-level) rather than within a datacenter.
✗D) Resource GroupWrong answer — click to see why▾
Why this is wrong here
Resource Groups are logical containers for managing and organizing Azure resources, but they do not provide fault domain or update domain distribution for VMs. Fault and update domain distribution is a feature of Availability Sets or Availability Zones.
★ When this WOULD be the correct answer
A question asks: 'Which Azure construct should be used to organize and manage related resources, such as VMs, networks, and storage, under a common lifecycle, permissions, and policies?' In that scenario, Resource Group is the correct answer.
Why candidates choose this
Candidates may confuse Resource Groups with grouping VMs for high availability, not realizing that Resource Groups are for management and organization, not for infrastructure redundancy.
Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Azure Regions and Geographies
Key term
Azure datacenter
An Azure datacenter is a physical facility that houses Microsoft's cloud computing infrastructure, including servers, storage, and networking equipment, to deliver Azure services globally.
Key term
Availability
Availability is the measure of how often a system or service is operational and accessible when needed, typically expressed as a percentage of uptime.
About these practice questions
One of 981 original AZ-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.