AZ-900 Describe Azure architecture and services Practice Question
A company deploys a critical application on Azure virtual machines across three different availability zones in the East US region. The application is designed to handle the failure of one zone by automatically failing over to the remaining healthy zones. Which type of failure does this architecture primarily protect against?
⚠ Common exam trap
It's easy for candidates to confuse availability zones with region pairs, mistakenly thinking that deploying across zones protects against a full regional disaster, when in fact zones only protect against a single data center failure within the same region.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A failure of an entire Azure data center
Deploying a critical application across multiple availability zones protects against the failure of an entire Azure data center. Each availability zone is a physically separate data center within an Azure region, with independent power, cooling, and networking. If one zone fails, the application automatically fails over to the remaining healthy zones, ensuring high availability at the data center level.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A regional disaster that affects the entire East US region
Why it's wrong here
Availability zones are located within the same region. A regional disaster would affect all zones in that region simultaneously. To protect against a regional disaster, you would need to deploy resources to multiple Azure regions (region pairs).
When this WOULD be correct
If the question asked about protecting against a disaster that affects the entire East US region, such as a natural disaster, then deploying across multiple Azure regions (e.g., East US and West US) would be the correct answer.
- ✗
A failure of a single physical server
Why it's wrong here
While availability zones do provide physical separation, protecting against a single server failure is typically achieved by using fault domains within an availability set or scale set, not by distributing across entire zones. A single server failure would only affect one zone, but the architecture is designed for a larger scope of failure.
When this WOULD be correct
If the question described an application deployed on two VMs in the same availability set within a single data center, and asked which failure this protects against, then 'failure of a single physical server' would be correct.
- ✓
A failure of an entire Azure data center
Why this is correct
An availability zone corresponds to one or more data centers with independent infrastructure. By deploying across multiple zones, the application remains available if one entire data center (zone) fails, because the other zones continue to operate.
- ✗
A failure of the Azure network backbone
Why it's wrong here
The Azure network backbone is the global network connecting all Azure regions and data centers. Availability zones do not provide specific protection against a backbone failure. Redundant networking paths exist across zones, but the primary purpose of zones is to isolate from physical data center failures, not backbone failures.
When this WOULD be correct
This option would be correct if the question described an application deployed across multiple Azure regions (e.g., East US and West US) using Azure Traffic Manager for global load balancing, and asked what failure the architecture protects against.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓A failure of an entire Azure data centerCorrect answer▾
Why this is correct
An availability zone corresponds to one or more data centers with independent infrastructure. By deploying across multiple zones, the application remains available if one entire data center (zone) fails, because the other zones continue to operate.
✗A regional disaster that affects the entire East US regionWrong answer — click to see why▾
Why this is wrong here
Availability zones protect against failures within a region, such as a data center outage, not against a disaster that affects the entire region. A regional disaster would require a multi-region architecture.
★ When this WOULD be the correct answer
If the question asked about protecting against a disaster that affects the entire East US region, such as a natural disaster, then deploying across multiple Azure regions (e.g., East US and West US) would be the correct answer.
Why candidates choose this
Candidates may confuse availability zones (which protect within a region) with region pairs (which protect across regions), leading them to think that zones guard against regional disasters.
✗A failure of a single physical serverWrong answer — click to see why▾
Why this is wrong here
The architecture uses availability zones, which protect against data center failures, not single server failures. A single physical server failure is mitigated by availability sets or fault domains, not zones.
★ When this WOULD be the correct answer
If the question described an application deployed on two VMs in the same availability set within a single data center, and asked which failure this protects against, then 'failure of a single physical server' would be correct.
Why candidates choose this
Candidates may confuse availability zones (data center failure) with availability sets (server failure) or think that any high-availability setup addresses server-level failures.
✗A failure of the Azure network backboneWrong answer — click to see why▾
Why this is wrong here
The architecture uses availability zones, which protect against data center failures within a region, not against a failure of the Azure network backbone, which is a separate global networking infrastructure issue.
★ When this WOULD be the correct answer
This option would be correct if the question described an application deployed across multiple Azure regions (e.g., East US and West US) using Azure Traffic Manager for global load balancing, and asked what failure the architecture protects against.
Why candidates choose this
Candidates may confuse network backbone failures with zone-level failures, or overestimate the scope of availability zones, thinking they protect against broader network issues.
Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Azure Regions and Geographies
Key term
Availability zone
An Availability Zone is a distinct, isolated location within a cloud region that contains its own power, cooling, and networking, designed to protect applications from single points of failure.
Key term
Region
A region is a distinct geographic location where a cloud provider operates multiple data centers that are connected by low-latency networks and provide cloud services.
About these practice questions
Courseiva writes every AZ-900 question from scratch — 981 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.