AZ-900 Describe Azure architecture and services Practice Question
A company is deploying two Azure virtual machines that host a critical line-of-business application. The application is stateful and requires that the VMs are located in the same datacenter but on separate physical hardware to protect against a rack-level failure. Additionally, the VMs must be updated during Azure platform maintenance in a staggered manner to ensure the application remains available. Which Azure feature should the company configure for these VMs?
⚠ Common exam trap
It's easy for candidates to confuse Availability Zones (which isolate across datacenters) with Availability Sets (which isolate within a single datacenter), leading candidates to choose Availability Zones despite the explicit requirement that VMs be in the same datacenter.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Availability Set
Azure Availability Set ensures that VMs are placed in the same datacenter (same fault domain) but on separate physical hardware (different fault domains) to protect against rack-level failures. It also distributes VMs across update domains so that during Azure platform maintenance, only one update domain is rebooted at a time, ensuring the application remains available in a staggered manner.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Availability Zones
Why it's wrong here
Availability Zones place VMs in separate datacenters within a region, which provides protection against a datacenter failure but introduces network latency between zones. The scenario requires VMs to be in the same datacenter, so this is incorrect.
When this WOULD be correct
A company needs to protect against an entire datacenter failure and requires high availability across physically separate locations within a region. The application is stateless and can tolerate cross-datacenter latency.
- ✗
Azure Virtual Machine Scale Set with autoscale
Why it's wrong here
A Virtual Machine Scale Set is designed to automatically scale the number of VMs based on demand. It does not guarantee that VMs are placed on separate physical hardware within a single datacenter or provide update domain isolation in the same way as an Availability Set.
When this WOULD be correct
A company needs to run multiple VM instances of a stateless web application that experiences variable traffic. They require automatic scaling to add or remove VMs based on CPU usage, and they want to distribute VMs across fault domains for high availability. In this scenario, Azure Virtual Machine Scale Set with autoscale would be the correct choice.
- ✗
Azure Application Gateway
Why it's wrong here
Application Gateway is a web traffic load balancer that operates at Layer 7. It distributes incoming requests to backend VMs but does not influence the physical placement or update domain scheduling of the VMs themselves.
When this WOULD be correct
A company needs to distribute incoming web traffic across multiple VMs for high availability and wants to offload SSL termination, enable URL-based routing, or protect against web attacks using a web application firewall (WAF).
- ✓
Azure Availability Set
Why this is correct
An Availability Set logically groups VMs to ensure they are distributed across multiple fault domains (different physical racks with independent power and networking) and multiple update domains (VMs in different update domains are not rebooted at the same time during Azure maintenance). This meets the stated requirements for same-datacenter placement with fault tolerance and staggered updates.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Azure Availability SetCorrect answer▾
Why this is correct
An Availability Set logically groups VMs to ensure they are distributed across multiple fault domains (different physical racks with independent power and networking) and multiple update domains (VMs in different update domains are not rebooted at the same time during Azure maintenance). This meets the stated requirements for same-datacenter placement with fault tolerance and staggered updates.
✗Azure Availability ZonesWrong answer — click to see why▾
Why this is wrong here
Azure Availability Zones place VMs in different physical datacenters within a region, not the same datacenter, which violates the requirement that VMs be in the same datacenter.
★ When this WOULD be the correct answer
A company needs to protect against an entire datacenter failure and requires high availability across physically separate locations within a region. The application is stateless and can tolerate cross-datacenter latency.
Why candidates choose this
Candidates may confuse Availability Zones with Availability Sets, as both provide high availability, but Zones offer fault isolation at the datacenter level rather than within a single datacenter.
✗Azure Virtual Machine Scale Set with autoscaleWrong answer — click to see why▾
Why this is wrong here
Azure Virtual Machine Scale Set with autoscale is designed for scaling out/in based on demand, not for ensuring VMs are on separate physical hardware within the same datacenter or for staggered updates during platform maintenance. It does not guarantee fault domain isolation or update domain sequencing.
★ When this WOULD be the correct answer
A company needs to run multiple VM instances of a stateless web application that experiences variable traffic. They require automatic scaling to add or remove VMs based on CPU usage, and they want to distribute VMs across fault domains for high availability. In this scenario, Azure Virtual Machine Scale Set with autoscale would be the correct choice.
Why candidates choose this
Candidates may confuse the high availability features of scale sets (like fault domains) with the specific requirements of availability sets, or they may think autoscale helps with maintenance updates, not realizing scale sets handle updates differently and don't guarantee staggered updates across update domains in the same way.
✗Azure Application GatewayWrong answer — click to see why▾
Why this is wrong here
Azure Application Gateway is a layer-7 load balancer and web application firewall, not a feature for ensuring VMs are on separate physical hardware in the same datacenter or for managing staggered updates during platform maintenance.
★ When this WOULD be the correct answer
A company needs to distribute incoming web traffic across multiple VMs for high availability and wants to offload SSL termination, enable URL-based routing, or protect against web attacks using a web application firewall (WAF).
Why candidates choose this
Candidates may confuse Application Gateway's load balancing and high availability capabilities with the fault domain and update domain management provided by Availability Sets, assuming it can handle placement and maintenance requirements.
Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Azure Regions and Geographies
Key term
Feature
A feature is a distinct unit of functionality that delivers value to the user, often managed and tracked throughout the software development lifecycle.
Key term
Availability
Availability is the measure of how often a system or service is operational and accessible when needed, typically expressed as a percentage of uptime.
About these practice questions
Courseiva writes every AZ-900 question from scratch — 981 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.