How many Hard Difficulty Questions questions are on this page?

This page has 20 Hard Difficulty Questions scenario questions for the AZ-900 exam, each with detailed explanations and wrong-answer analysis.

How should I approach AZ-900 scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to Microsoft Azure Fundamentals AZ-900 questions

Scenario-based practice

Hard Difficulty Questions

Practise Microsoft Azure Fundamentals AZ-900 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

AZ-900

exam code

Microsoft

vendor

Scenario guide

How to approach hard difficulty questions

These are the questions most candidates get wrong. They require connecting multiple concepts, reading tricky output, or knowing edge-case behaviour that isn't on most study cards. Practising them trains you to operate under uncertainty — a necessary skill on the real exam.

Quick answer

Hard Difficulty Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1hardmultiple choice

Full question →

A company uses Azure Blueprints to define a repeatable set of Azure resources and policies for new subscriptions. They want to ensure that when a new subscription is created, a specific role assignment is automatically applied. What should they include in the blueprint definition?

A
A role assignment artifact
Blueprint artifacts include role assignments that automatically grant permissions.
B
An Azure Policy assignment
Why wrong: Policy assignments enforce compliance rules, not RBAC role assignments.
C
An Azure Resource Manager template
Why wrong: ARM templates deploy resources, but role assignments in blueprints are better handled by the role assignment artifact.
D
A resource group
Why wrong: Resource groups are containers for resources, not artifacts that assign roles.

Hard Difficulty Questions

How to approach hard difficulty questions

Quick answer

Related AZ-900 topic practice pages

Describe cloud concepts practice questions

Describe Azure architecture and services practice questions

Describe Azure management and governance practice questions

AZ-900 Azure services practice questions

AZ-900 pricing and support practice questions

AZ-900 security and compliance practice questions

AZ-900 governance practice questions

Practice scenarios

A company uses Azure Blueprints to define a repeatable set of Azure resources and policies for new subscriptions. They want to ensure that when a new subscription is created, a specific role assignment is automatically applied. What should they include in the blueprint definition?

A company uses Azure SQL Database for a web application. They need to ensure that the database can automatically scale to handle sudden spikes in traffic without downtime. Which feature should they enable?

A global company wants to organize its Azure resources by department and project. They need to enforce cost allocation and apply governance policies consistently across all subscriptions. Which two Azure features should they use together? (Select two.)

A company wants to understand who is responsible for securing the operating system on an Azure virtual machine. According to the shared responsibility model, who is responsible?

A team uses Docker containers to run microservices. They need a service that automatically manages the cluster, scales containers based on demand, and provides load balancing without requiring them to manage the underlying VMs. Which Azure compute service should they choose?

A company has multiple on-premises sites that need to connect to Azure over high-throughput, low-latency private connections. They want a dedicated private connection that does not traverse the internet. Which Azure service should they use?

A company has a management group hierarchy: Root > Europe > Production. They assign a policy at the Root level that denies creation of resources without a tag. Later, they assign a different policy at the Europe level. What is the effective effect on the Production subscription?

A company runs a workload that requires predictable performance and dedicated physical servers. They also need to ensure no other tenant uses the same hardware. Which cloud deployment model meets these requirements?

A company is moving to the cloud to achieve economies of scale. Which of the following best describes how cloud computing enables economies of scale?

A company needs to connect their on-premises network to Azure with a dedicated, private, and high-bandwidth connection that does not traverse the public internet. They require an SLA for availability and performance. Which Azure service should they use?

A company wants to connect their on-premises data center to Azure with a dedicated, private connection that does not traverse the internet. They also need to ensure high availability by having two active connections. Which Azure service and configuration should they use?

According to Microsoft, which factor does NOT affect the SLA percentage for an Azure service?

A company uses a hybrid cloud model where some workloads run on-premises and some in Azure. They need a consistent identity management system across both environments, allowing single sign-on for users accessing resources in either location. What should they implement?