AZ-900 Describe Azure architecture and services Practice Question
A company wants to run a containerized application in Azure without managing the underlying virtual machines. Which Azure service should they use?
⚠ Common exam trap
A common mix-up: candidates confuse Azure App Service's container support (Web App for Containers) with full container orchestration, but App Service lacks Kubernetes-native features like pod-level networking, persistent volume claims, and advanced scheduling policies that AKS provides.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
B) Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS) is a managed container orchestration service that abstracts the underlying virtual machines, allowing you to deploy, scale, and manage containerized applications without having to manage the host infrastructure. AKS handles provisioning, upgrading, and patching of the cluster nodes, so you only interact with the control plane and your workloads.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A) Azure Virtual Machines
Why it's wrong here
With Azure Virtual Machines, you are responsible for provisioning, patching, securing, and maintaining the operating system, the container runtime, and any orchestration tooling that runs on top of it. There is no platform-level abstraction: you must handle VM health, scaling, and failover logic yourself. Thus, using VMs to run a containerized application means fully managing the infrastructure, which directly contradicts the goal of running the app without managing the underlying servers.
When this WOULD be correct
If the question asked for a service to run a custom application with full control over the OS and software stack, and managing VMs is acceptable, then Azure Virtual Machines would be correct.
- ✓
B) Azure Kubernetes Service (AKS)
Why this is correct
Azure Kubernetes Service (AKS) is a managed Kubernetes offering in which Azure operates the control plane—the API server, etcd, and scheduler—while providing automated upgrades, health monitoring, and scaling. You still configure a node pool of VMs, but the raw virtual machines are pooled into a managed cluster rather than existing as standalone infrastructure you provision and track individually. For running containerized applications, AKS gives you native orchestration with pods, auto-scaling, load balancing, and rolling deployments, making it the appropriate abstraction when you want to avoid managing the Kubernetes control plane yourself.
- ✗
C) Azure App Service
Why it's wrong here
Azure App Service is a platform-as-a-service (PaaS) designed for web apps, REST APIs, and background jobs. It can deploy container images using App Service for Containers, but it hosts each app in a single web sandbox or a group of containers defined with Docker Compose; it does not expose Kubernetes-native constructs such as pods, services, replica sets, or horizontal pod autoscaling. If you choose App Service to run a containerized application, you are adopting a web hosting platform, not a generalized container orchestrator, and you lose the orchestration capabilities that AKS provides.
When this WOULD be correct
A company wants to host a web application built with ASP.NET or Node.js without managing the underlying infrastructure, and they do not require container orchestration or multi-container management. In that case, Azure App Service would be the correct answer.
- ✗
D) Azure Functions
Why it's wrong here
Azure Functions is a serverless compute service built around event-driven triggers—HTTP, timers, queues, and blob events—and it executes code inside an isolated managed runtime rather than letting you run an arbitrary container image. Although Functions supports custom handlers and can run containers under certain models, it is not a container-runtime service for general applications; you would have to re-architect your containerized workload as a function to fit the trigger model. For an existing containerized application, Functions would require decomposition into discrete, event-driven functions rather than simply hosting the container.
When this WOULD be correct
A company wants to run event-driven code that responds to triggers (e.g., HTTP requests, queue messages) without managing servers. They should use Azure Functions when the workload is stateless, short-lived, and does not require full container orchestration.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓B) Azure Kubernetes Service (AKS)Correct answer▾
Why this is correct
Azure Kubernetes Service (AKS) is a managed Kubernetes offering in which Azure operates the control plane—the API server, etcd, and scheduler—while providing automated upgrades, health monitoring, and scaling. You still configure a node pool of VMs, but the raw virtual machines are pooled into a managed cluster rather than existing as standalone infrastructure you provision and track individually. For running containerized applications, AKS gives you native orchestration with pods, auto-scaling, load balancing, and rolling deployments, making it the appropriate abstraction when you want to avoid managing the Kubernetes control plane yourself.
✗A) Azure Virtual MachinesWrong answer — click to see why▾
Why this is wrong here
Azure Virtual Machines require managing the underlying VMs, including OS updates and scaling, which contradicts the requirement to avoid managing virtual machines.
★ When this WOULD be the correct answer
If the question asked for a service to run a custom application with full control over the OS and software stack, and managing VMs is acceptable, then Azure Virtual Machines would be correct.
Why candidates choose this
Candidates may think VMs can run containers, but they overlook the 'without managing the underlying virtual machines' constraint, focusing only on container support.
✗C) Azure App ServiceWrong answer — click to see why▾
Why this is wrong here
Azure App Service is a platform-as-a-service (PaaS) for hosting web applications, APIs, and mobile backends, but it does not natively run arbitrary containerized applications with full orchestration. It supports containers only via Web App for Containers, which lacks the advanced orchestration features of AKS.
★ When this WOULD be the correct answer
A company wants to host a web application built with ASP.NET or Node.js without managing the underlying infrastructure, and they do not require container orchestration or multi-container management. In that case, Azure App Service would be the correct answer.
Why candidates choose this
Candidates may confuse App Service's container support with full container orchestration, or they may think that any service that can run containers is equivalent to a managed Kubernetes service.
✗D) Azure FunctionsWrong answer — click to see why▾
Why this is wrong here
Azure Functions is a serverless compute service for event-driven code, not designed for running containerized applications. It does not provide native container orchestration or management of container lifecycles.
★ When this WOULD be the correct answer
A company wants to run event-driven code that responds to triggers (e.g., HTTP requests, queue messages) without managing servers. They should use Azure Functions when the workload is stateless, short-lived, and does not require full container orchestration.
Why candidates choose this
Candidates may confuse serverless computing with container management, thinking that Azure Functions can run containers because it supports custom containers, but it lacks the orchestration and scaling features needed for containerized applications.
Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Azure Regions and Geographies
Key term
Azure Kubernetes Service
Azure Kubernetes Service is a managed container orchestration service that simplifies deploying, managing, and scaling containerized applications using Kubernetes on Microsoft Azure.
Key term
AKS
Azure Kubernetes Service (AKS) is a managed container orchestration service on Microsoft Azure that simplifies deploying, managing, and scaling containerized applications using Kubernetes.
About these practice questions
Courseiva writes every AZ-900 question from scratch — 981 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.