AZ-900 Describe cloud concepts Practice Question
A global consulting firm has offices in New York, London, and Tokyo. They deployed a document management system on Azure App Service. Consultants need to access the system from any location worldwide using laptops or smartphones over public Wi-Fi or cellular networks, without needing a VPN connection. After deployment, all consultants can successfully log in and use the application from any internet-connected device. Which characteristic of cloud computing does this scenario best illustrate?
⚠ Common exam trap
Watch out — candidates often confuse 'broad network access' with 'high availability' because both involve being 'accessible from anywhere,' but high availability focuses on uptime and fault tolerance, not the variety of devices and network types used for access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Broad network access
This scenario best illustrates broad network access because the document management system is accessible over the internet from any location using laptops or smartphones without requiring a VPN. Broad network access means resources can be accessed via standard network protocols (e.g., HTTPS) from a wide range of devices, including mobile phones and laptops, over public networks like Wi-Fi or cellular. The consultants' ability to log in and use the application from any internet-connected device directly demonstrates this characteristic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
High availability
Why it's wrong here
High availability is about designing a system to remain operational and accessible even when individual components fail, typically through redundancy and automated failover mechanisms, often backed by an uptime SLA. While consultants do expect the service to be up when they log in from different cities, the question emphasizes the ability to connect from multiple global locations, not resilience against infrastructure failure. Therefore, it misses the core requirement shown in the scenario.
When this WOULD be correct
A scenario where an application must remain operational with minimal downtime, such as a critical e-commerce site that uses multiple Azure regions and load balancing to guarantee 99.99% uptime even if one region fails.
- ✓
Broad network access
Why this is correct
Broad network access enables consultants in New York, London, and other offices to reach the same cloud service over the internet using standard protocols such as HTTPS or TLS, regardless of their physical location or the type of device they use (laptop, tablet, smartphone). This NIST essential characteristic emphasizes that the service is available through the network to heterogeneous clients, not that it is confined to a single on-premises network. It directly addresses the scenario's global distribution, making it the correct answer.
- ✗
Resource pooling
Why it's wrong here
Resource pooling describes how the cloud provider uses a multi-tenant model to serve multiple customers from shared physical and virtual infrastructure, dynamically assigning resources based on demand. It explains the provider's internal efficiency and cost model, not the fact that consultants can access the service from New York, London, or anywhere else. The accessibility described in the question is a network property, not a property of how the underlying compute, storage, and network resources are pooled and shared.
When this WOULD be correct
A scenario where multiple customers share the same underlying infrastructure (e.g., compute, storage) and the provider dynamically assigns resources based on demand, such as a SaaS application used by different organizations on the same server.
- ✗
Rapid elasticity
Why it's wrong here
Rapid elasticity is the cloud capability to quickly and automatically scale compute, storage, and bandwidth resources up or down in response to workload changes, often described as appearing unlimited to the consumer. The scenario merely shows users connecting from different offices, with no mention of fluctuating demand that would require provisioning or releasing resources. The key is the location of the users, not the dynamic adjustment of resource capacity.
When this WOULD be correct
A scenario where a company's application experiences sudden spikes in user traffic (e.g., during a product launch) and the cloud automatically provisions additional virtual machines to handle the load, then deallocates them when traffic subsides.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Broad network accessCorrect answer▾
Why this is correct
Broad network access enables consultants in New York, London, and other offices to reach the same cloud service over the internet using standard protocols such as HTTPS or TLS, regardless of their physical location or the type of device they use (laptop, tablet, smartphone). This NIST essential characteristic emphasizes that the service is available through the network to heterogeneous clients, not that it is confined to a single on-premises network. It directly addresses the scenario's global distribution, making it the correct answer.
✗High availabilityWrong answer — click to see why▾
Why this is wrong here
High availability refers to ensuring the application remains accessible despite component failures, not the ability to access it from various devices and networks without a VPN.
★ When this WOULD be the correct answer
A scenario where an application must remain operational with minimal downtime, such as a critical e-commerce site that uses multiple Azure regions and load balancing to guarantee 99.99% uptime even if one region fails.
Why candidates choose this
Candidates may confuse 'access from anywhere' with 'always available,' mistakenly thinking high availability covers network accessibility rather than fault tolerance.
✗Resource poolingWrong answer — click to see why▾
Why this is wrong here
Resource pooling refers to the provider's multi-tenant model serving multiple customers from shared physical resources, not to the ability of consultants to access the application from any device or network without VPN.
★ When this WOULD be the correct answer
A scenario where multiple customers share the same underlying infrastructure (e.g., compute, storage) and the provider dynamically assigns resources based on demand, such as a SaaS application used by different organizations on the same server.
Why candidates choose this
Candidates may confuse 'resource pooling' with the idea that the application is accessible from many locations, mistakenly thinking that 'pooling' refers to the aggregation of network access points or devices.
✗Rapid elasticityWrong answer — click to see why▾
Why this is wrong here
Rapid elasticity refers to the ability to automatically scale resources up or down based on demand, which is not demonstrated in this scenario where the application is simply accessible from various locations without any mention of scaling.
★ When this WOULD be the correct answer
A scenario where a company's application experiences sudden spikes in user traffic (e.g., during a product launch) and the cloud automatically provisions additional virtual machines to handle the load, then deallocates them when traffic subsides.
Why candidates choose this
Candidates may confuse the ability to access resources from anywhere (broad network access) with the ability to quickly adjust resources (elasticity), especially if they think of 'rapid' as meaning fast access rather than fast scaling.
Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Quick reference
VPN Protocol Comparison
| Protocol | Port | Encryption | Authentication | Use Case |
|---|---|---|---|---|
| IKEv2 / IPsec | UDP 500 / 4500 | AES-256 | Certificates / PSK | Site-to-site & remote access |
| SSL / TLS VPN | TCP 443 | TLS 1.3 | Certificates / MFA | Clientless remote access |
| L2TP / IPsec | UDP 1701 | AES (IPsec) | PSK / Certificates | Legacy remote access |
| WireGuard | UDP 51820 | ChaCha20 | Public keys | Modern high-performance VPN |
| PPTP | TCP 1723 | MPPE (weak) | MS-CHAPv2 | Legacy — avoid in production |
PPTP is considered insecure. IKEv2/IPsec and SSL VPN are the current recommended options.
Go deeper
Related to this question
Learn chapter
What is Cloud Computing?
Key term
Azure App Service
Azure App Service is a fully managed platform for building, deploying, and scaling web applications and APIs without managing the underlying infrastructure.
Key term
Cloud computing
Cloud computing is the on-demand delivery of IT resources over the internet, allowing users to access computing power, storage, and applications without owning physical hardware.
About these practice questions
This AZ-900 question is part of Courseiva's 981-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.