AZ-900 Describe Azure architecture and services Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Azure Container Instances

  Why it's wrong here

  Azure Container Instances executes individual containers or small container groups in a serverless fashion, with no Kubernetes orchestration layer. It is ideal for simple workloads, jobs, or test scenarios that do not require complex management, but it lacks advanced orchestration features such as service discovery, rolling deployments, cluster-wide autoscaling, and self-healing. For a containerized application that needs orchestration, ACI alone is insufficient and the wrong choice.

  When this WOULD be correct

  A company needs to run a single container or a simple containerized application without orchestration, and wants the fastest, simplest deployment without managing any infrastructure. The question would specify 'no need for Kubernetes' or 'run containers without orchestration'.

• ✓

  Azure Kubernetes Service (AKS)

  Why this is correct

  Azure Kubernetes Service (AKS) fully satisfies the requirement for orchestrating a containerized application because it is a managed Kubernetes offering in Azure. Microsoft operates the control plane, including the API server, etcd store, and scheduler, so customers only need to manage worker nodes and their application workloads. AKS delivers essential orchestration capabilities such as cluster-wide scaling, rolling updates, self-healing, and service discovery, making it the appropriate choice for production container deployments.

• ✗

  Azure Container Registry

  Why it's wrong here

  Azure Container Registry is a managed private registry for storing container images and artifacts, but it does not execute or orchestrate containers. It functions as a secure distribution layer, often used by AKS to pull images, yet it lacks any role in scheduling, scaling, or cluster-level management. Although ACR is a common companion to a container platform, it is not a substitute for Kubernetes orchestration because it cannot run or coordinate workloads.

  When this WOULD be correct

  A company needs to store, manage, and secure container images for deployment to Kubernetes or other container platforms. They require integration with Azure Active Directory for authentication and geo-replication for fast pulls across regions.

• ✗

  Azure App Service

  Why it's wrong here

  Azure App Service is a platform-as-a-service product intended for hosting web applications, REST APIs, and mobile backends, and while it can run containerized workloads via Web App for Containers, it is not a Kubernetes orchestration service. App Service abstracts away the infrastructure and provides load balancing and autoscaling for individual applications, but it does not expose a Kubernetes cluster or allow management of pods, services, or nodes. Therefore, it does not meet the need for Kubernetes-style orchestration required in the scenario.

  When this WOULD be correct

  A company wants to deploy a web application using a fully managed platform without managing the underlying infrastructure, and they need built-in auto-scaling, load balancing, and CI/CD integration. Azure App Service would be the correct choice for hosting a containerized web app without Kubernetes.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Go deeper

Related to this question