AZ-900 Describe Azure architecture and services Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Availability Zones

  Why it's wrong here

  Availability Zones are physically separate groups of datacenters within one Azure region, each with independent power, cooling, and networking to safeguard against a single datacenter failure. While this provides high availability and fault tolerance inside a region, it does not provide cross-region physical isolation or the guarantee that platform maintenance is rolled out sequentially across regions with a time gap. A critical application requiring resilience to a full regional outage must rely on region pairs (or another cross-region replication method), because Availability Zones alone cannot protect against a region-wide disaster or coordinate staggered updates between geographically distant locations.

  When this WOULD be correct

  A question asking how to protect an application from a datacenter failure within a single region, such as deploying VMs across multiple zones for high availability, would make Availability Zones the correct answer.

• ✓

  Region Pairs

  Why this is correct

  Each Azure region is paired with another region in the same geography, providing physical isolation (typically >300 miles) and sequential platform updates. This minimizes the chance of both regions failing simultaneously and ensures that maintenance windows are staggered.

• ✗

  Azure Front Door

  Why it's wrong here

  Azure Front Door is a global entry point that uses anycast and a Microsoft global edge network to route HTTP/S traffic to the nearest or healthiest backend, often for latency reduction and TLS offloading. However, it is application-layer traffic routing and does not define or manage the physical Azure region topology; it can send traffic to any region regardless of its pair. Region pairs are a datacenter-level construct determined by Azure, with fixed geographic distance and maintenance sequencing, which Front Door neither controls nor depends on.

  When this WOULD be correct

  A company wants to distribute traffic across multiple regions for low latency and high availability, and needs to automatically route users to the nearest healthy endpoint. Azure Front Door would be the correct choice for global load balancing with health probes and failover.

• ✗

  Azure Site Recovery

  Why it's wrong here

  Azure Site Recovery is a disaster recovery service that replicates workloads from a primary to a secondary location. However, it does not itself provide the underlying region pairing architecture; it can replicate to any region, but the physical isolation and sequential update benefits are inherent to region pairs.

  When this WOULD be correct

  A company wants to replicate virtual machines from an on-premises datacenter to Azure for disaster recovery, and needs to ensure automated failover and failback with minimal data loss. In that scenario, Azure Site Recovery would be the correct answer.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Go deeper

Related to this question