AZ-900 Practice Test A - Results

Return to review
Attempt 3
All knowledge areas
All questions
Question 1: Correct
One of the benefits of the cloud is agility. What does that mean in the context of
the cloud?

The ability to spin up new resources within minutes

The ability to respond to and drive market change quickly

(Correct)

The ability of a system to grow it's capacity easily when it reaches full capacity

The ability to recover from a big region-wide failure in a short amount of time

Explanation
Agility - the ability to respond to change “rapidly” based on changes to market or
environment; ensuring fast time to market

See: https://docs.microsoft.com/en-us/azure/cloud-adoption-
framework/strategy/business-outcomes/agility-outcomes

Question 2: Correct
True or False: Azure is a public cloud, and has no private cloud offerings


 TRUE

FALSE

(Correct)

Explanation
Some aspects of Azure are not open to the public and require a private agreement with
Microsoft such as Azure Government and DoD services

See: https://azure.microsoft.com/en-us/overview/what-is-a-private-cloud/

And see: https://azure.microsoft.com/en-us/global-infrastructure/government/

And see: https://azure.microsoft.com/en-us/overview/azure-stack/

Question 3: Correct
Who is responsible for the security of your Azure Storage account access keys?

I am responsible for securing the access keys

(Correct)

Azure is responsible for securing the access keys

Explanation
Customers are responsible to secure the access keys they are given and regenerate
them if they are exposed.

See: https://docs.microsoft.com/en-us/azure/storage/common/storage-account-keys-
manage
 Question 4: Correct
What is a DDoS attack?

An attempt to read the contents of a web page from another website, thereby
stealing the user's private information

An attempt to send SQL commands to the server in a way that it will execute them
against the database

An attempt to guess a user's password through brute force methods

A denial of service attack that sends so much traffic to a network that it cannot
respond fast enough; legitimate users become unable to use the service

(Correct)

Explanation
Distributed Denial of Service attacks (DDoS) -a type of attack that originates from the
Internet that attempts to overwhelm a network with millions of packets of bad traffic
that aims to prevent legitimate traffic from getting through

See: https://docs.microsoft.com/en-us/azure/virtual-network/ddos-protection-overview

Question 5: Correct
What is the default amount of credits that you are given when you first create an
Azure Free account?

You can create 1 Linux VM, 1 Windows VM, and a number of other free services
for the first year.


You are given $50 per month, for one year towards Azure services

Azure does not give you any free credits when you create a free account

The default is US$200

(Correct)

Explanation
There are some other benefits to a free account, but you get US$200 to spend in the
first month.

See: https://azure.microsoft.com/free

Question 6: Correct
What benefit does a Content Delivery Network (CDN) provide its users?

For a small fee, Azure will take over management of your virtual machine, perform
OS updates and ensure it's running well

Allows you to store data that can be retrieved later in an extremely fast and
inexpensive manner

Allows you to reduce the traffic coming into a web server for static, unchanging
files such as images, videos and PDFs

(Correct)


Allows you to keep temporarily session information on the web visitor such as
their login ID or their name

Explanation
Content Delivery Network - allows you to improve performance by removing the burden
of serving static, unchanging files from the main server to a network of servers around
the globe; a CDN can reduce traffic to a server by 50% or more, which means you can
serve more users or serve the same users faster; SaaS

See: https://docs.microsoft.com/en-us/azure/cdn/cdn-overview

Question 7: Correct
True or false: Formal support is not included in private preview mode.

FALSE

TRUE

(Correct)

Explanation
True. Preview features are not fully ready and this phase does not include formal
support.

See: https://azure.microsoft.com/en-us/support/legal/preview-supplemental-terms/

Question 8: Correct
What type of container is used to collect log and metric data from various Azure
Resources?


 Append Blob Storage

Managed Storage

Log Analytics Workspace

(Correct)

Azure Monitor account

Explanation
Log Analytics Workspace is required to collect logs and metrics

See: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/manage-access

Question 9: Correct
What is the basic way of protecting an Azure Virtual Network subnet?

Application Gateway with WAF

Network Security Group

(Correct)

Azure Firewall


 Azure DDos Standard protection

Explanation
Network Security Group (NSG) - a fairly basic set of rules that you can apply to both
inbound traffic and outbound traffic that lets you specify what sources, destinations, and
ports are allowed to travel through from outside the virtual network to inside the virtual
network

See: https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

Question 10: Correct

True or false: there are no service level guarantees (SLA) when a service is in General
Availability (GA)

FALSE

(Correct)

TRUE

Explanation
False, most Azure GA services do have service level agreements

See: https://azure.microsoft.com/en-ca/support/legal/sla/

Question 11: Correct

What is Single Sign-On?

The ability to use an existing user id and password to sign in other applications,
and not have to create/memorize a new one.

(Correct)


When you sign in to an application, it remembers who you are the next time you
go there.

When an application outsources (federates) it's identity service to a third-party

platform

Explanation
Single Sign-On - the ability to use the same user id and password to log into every
application that your company has; enabled by Azure AD

See: https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/what-is-
single-sign-on

Question 12: Correct

Which of the following Azure features is most likely to deliver the most immediate
savings when it comes to reducing Azure costs?

Auto shutdown of development and QA servers over night and on weekends

Changing your storage accounts from globally redundant (GRS) to locally

redundant (LRS)

Using Azure Reserved Instances for most of your virtual machines

(Correct)

Using Azure Policy to restrict the user of expensive VM SKUs

 Explanation
Reserved Instances often offer 40% or more savings off of the price of pay-as-you-go
virtual machines

See: https://docs.microsoft.com/en-us/azure/cost-management-
billing/reservations/save-compute-costs-reservations

Question 13: Correct

Which Azure service is meant to be a security dashboard that contains all the security
and threat protection in one place?

Azure Key Vault

Azure Monitor

Azure Portal Dashboard

Azure Security Center

(Correct)

Explanation
Azure Security Center - unified security management and threat protection; a security
dashboard inside Azure Portal

See: https://azure.microsoft.com/en-us/services/security-center/

Question 14: Correct

Which major cloud provider offers the most international locations for customers
to provision virtual machines and other servers?


Microsoft Azure

(Correct)

Amazon AWS

Google Cloud Platform

Explanation
Azure has the most regions of any major cloud provider - 60+ global regions.

See: https://azure.microsoft.com/en-us/global-infrastructure/regions/

Question 15: Correct

Which feature within Azure collects all of the logs from various resources into a
central dashboard, where you can run queries, view graphs, and create alerts on
certain events?

Azure Security Center

Azure Portal Dashboard

Storage Account or Event Hub

Azure Monitor
 (Correct)

Explanation
Azure Monitor - a centralized dashboard that collects all the logs, metrics and events
from your resources

See: https://docs.microsoft.com/en-us/azure/azure-monitor/overview

Question 16: Correct

What is the most number of virtual machines that can me managed under a single
Virtual Machine Scale Set?

100

10

1000

(Correct)

Explanation
Up to 1000 virtual machines can be managed under a single VMSS

See: https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/overview

Question 17: Correct

 Which Azure website tool is available for you to estimate the future costs of your
Azure products and services by adding products to a shopping basket and helping
you calculate the costs?

Azure Advisor

Microsoft Docs

Azure Pricing Calculator

(Correct)

Explanation
Azure Pricing Calculator lets you attempt to calculate your future bill based on resources
you select and your estimates of usage

See: https://azure.microsoft.com/en-us/pricing/calculator/

Question 18: Correct

What Azure tool gives you the ability to manage multiple subscriptions into
nested hierarchies?

Azure Active Directory

Resource Groups

Management Groups
 (Correct)

RBAC

Explanation
Management Groups - a hierarchy of subscriptions; can have many subscriptions, and
group them, and put those groups into other groups

See: https://docs.microsoft.com/en-us/azure/governance/management-
groups/overview

Question 19: Correct

Logic apps, functions, and service fabric are all examples of what model of
compute within Azure?

IaaS model

SaaS model

Serverless model

(Correct)

App Services Model

Explanation
The serverless model of compute removes all responsibility to selecting or even
managing the server and makes Azure responsible for running your code including
scaling
 See: https://azure.microsoft.com/en-us/solutions/serverless/

Question 20: Correct

Which Azure Service contains pre-built machine learning models that you can use in
your own code, using an API?

App Services

Azure Blueprints

Azure Functions

Cognitive Services

(Correct)

Explanation
Cognitive Services is an API that Azure provides, that gives access to a set of pre-built
machine learning models including vision services, speech services, knowledge
management and chat bots.
Question 21: Correct
Which ways does the Azure Resource Manager model provide to deploy resources?

CLI

(Correct)

Azure Portal
 (Correct)

Powershell

(Correct)

REST API / SDK

(Correct)

Explanation
All of those ways can be used to deploy or manage resources using ARM

See: https://docs.microsoft.com/en-us/azure/azure-resource-
manager/management/overview

Question 22: Correct

True or false: You cannot have more than one Azure subscription per company

FALSE

(Correct)

TRUE

Explanation
You can have multiple subscriptions, as a way to separate out resources between billing
units, business groups, or for any reason you wish.
 See: https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/decision-
guides/subscriptions/

Question 23: Correct

What is the name of Azure's hosted SQL database service?

Table Storage

Azure SQL Database

(Correct)

SQL Server in a VM

Cosmos DB

Explanation
SQL Database is a SQL Server compatible option in Azure, a database as a service

See: https://docs.microsoft.com/en-us/azure/sql-database/sql-database-technical-
overview

Question 24: Correct

Which of the following is something that Azure Cognitive Services API can
currently do?

Translate text from one language to another


 All of these! Azure can do it all!

(Correct)

Speak text in an extremely realistic way

Create text from audio

Recognize text in an image

Recognize faces in a picture

Explanation
Azure can do all of them, of course.

See: https://docs.microsoft.com/en-us/azure/cognitive-services/welcome

Question 25: Incorrect

Which of the following methods of deploying a virtual machine provides the
highest availability SLA?

Two or more virtual machines in a data center

(Incorrect)

A single VM


 Two or more virtual machines in an availability set

Two or more virtual machines across availability zones in the same region

(Correct)

Explanation
Availability Zones offer 99.99% availability when configured correctly.

See: https://azure.microsoft.com/en-us/support/legal/sla/virtual-machines/v1_9/

Question 26: Correct

What hardware device is required to exist or be installed on your company
network in order to set up a site-to-site VPN?

Virtual Network

Application Gateway

Virtual machine

VPN Gateway

(Correct)

Explanation
A VPN Gateway needs to be configured to connect to Azure for a private network to be
established
 See: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-
site-resource-manager-portal

Question 27: Correct

Which tool within Azure helps you to track your compliance with various
international standards and government laws?

Compliance Manager

(Correct)

Service Trust Portal

Microsoft Privacy Statement

Azure Government Services

Explanation
Compliance Manager will track your own compliance with various standards and laws.

See: https://techcommunity.microsoft.com/t5/security-privacy-and-
compliance/announcing-compliance-manager-general-availability/ba-p/161922

Question 28: Correct

Your organization has implemented an Azure Policy that restricts the type of Virtual
Machine instances you can use. How can you create a VM that is blocked by the policy?

The only way is to remove the policy, create the resource and add the policy back

(Correct)


Use an account that has Contributor or above permissions to the resource group

Subscription Owners (Administrators) can create resources regardless of what the

policy restricts

Explanation
You cannot perform a task that violates policy, so you have to remove the policy in
order to perform the task.

See: https://docs.microsoft.com/en-us/azure/governance/policy/overview

Question 29: Correct

An IT administrator has the requirement to control access to a specific app resource
using multi-factor authentication. What Azure service satisfies this requirement?

Azure AD

(Correct)

Azure Authorization

Azure Authentication

Azure Function
Explanation
You can use Azure AD to control access to your apps and your app resources, based on
your business requirements. In addition, you can use Azure AD to require multi-factor
authentication when accessing important organizational resources.
 See: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-
directory-whatis#which-features-work-in-azure-ad

Question 30: Correct

What is the MAIN management tool used for managing Azure resources with a
graphical user interface?

PowerShell

Azure Storage Explorer

Remote Desktop Protocol (RDP)

Azure Portal

(Correct)

Explanation
Azure Portal is the website used to manage your resources in Azure

See: https://docs.microsoft.com/en-us/azure/azure-portal/azure-portal-overview

Question 31: Correct

A virtual machine is called what type of hosting model?

PaaS


 SaaS

IaaS

(Correct)

Explanation
Virtual Machines are Infrastructure as a Service (IaaS)

See: https://azure.microsoft.com/en-us/overview/what-is-iaas/

Question 32: Correct

Which Azure feature is specifically designed to help companies get their in-house
developed code from the code repository, through automated unit testing, and onto
Azure using a service called Pipelines?

Azure DevOps

(Correct)

Azure Monitor

GitHub

Virtual Machines
Explanation
Azure DevOps contains many services, one of which is Pipelines. Pipelines allows you to
build an automation that moves code (and all related dependencies) through various
stages from the development environment into deployment.
Question 33: Correct
 Outlook 365 is what type of hosting model?

PaaS

IaaS

SaaS

(Correct)

Explanation
Outlook 365 is Software as a Service (SaaS).

See: https://azure.microsoft.com/en-us/overview/what-is-saas/

Question 34: Correct

Azure Services can go through several phases in a Service Lifecycle. What are the
three phases called?

Announced, Coming Soon, and Live

Private Preview, Public Preview, and General Availability

(Correct)

Preview Phase, General Availability Phase, and Unpublished


 Development phase, QA phase, and Live phase

Explanation
Private Preview, Public Preview, and General Availability
Question 35: Correct
Which feature of Azure Active Directory will require users to have their mobile
phone in order to be able to log in?

Azure Information Protection (AIP)

Advanced Threat Protection (ATP)

Multi-Factor Authentication

(Correct)

Azure Security Center

Explanation
Multi-Factor Authentication (MFA) - the concept of having something additional to a
“password” that is required to log in; passwords are find-able or guessable; but having
your mobile phone on you to receive a phone call, text or run an app to get a code is
harder for an unknown hacker to get

See: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-
mfa-howitworks

Question 36: Correct

Who is responsible for the security of the physical servers in an Azure data center?


 I am responsible for securing the physical data centers

Azure is responsible for securing the physical data centers

(Correct)

Explanation
Azure is responsible for physical security

See: https://docs.microsoft.com/en-us/azure/security/fundamentals/physical-security

Question 37: Correct

Why would someone prefer a Consumption-based pricing model as opposed to a
Time-based pricing model?

You can easily predict the cost of the service into the future

It is always cheaper to pay for consumption than to pay by the hour

The pricing model is simpler and easier to understand

You can save a lot of money if you don't use the resource often as opposed to
having it available for use 24/7

(Correct)

Explanation
Consumption-Based Model - paying for something based on how much you used, as
opposed to paying for something no matter if you use it or not.
 See: https://docs.microsoft.com/en-us/azure/azure-functions/functions-consumption-
costs

Question 38: Correct

What feature of a system makes it elastic?

The ability to stay up (available) while updates are being made to the system

The ability to increase and reduce capacity based on actual demand

(Correct)

The ability to withstand denial of service attacks

The ability to heal itself after a crash

Explanation
Elasticity - The ability of a system to automatically grow when maximum capacity is
reached, and automatically shrink to minimize waste.

See: https://azure.microsoft.com/en-us/overview/what-is-elastic-computing/

Question 39: Correct

Can you give someone else access to your Azure subscription without giving them
your user name and password?

YES

(Correct)


NO

Explanation
Yes, anyone can create their own Azure account and you can give them access to your
subscription with granular control as to permissions

See: https://docs.microsoft.com/en-us/azure/role-based-access-control/overview

Question 40: Correct

What is the name of the group of services inside Azure that hosts the Apache Hadoop
big data analysis tools?

HDInsight

(Correct)

Azure Kubernetes Services

Azure Hadoop Services

Azure Data Factory

Explanation
HDInsight is a collection of open-source Apache Hadoop tools

See: https://azure.microsoft.com/en-us/services/hdinsight/

Question 41: Correct

 If you wanted to simply use Azure as an extension of your own datacenter, not
primarily hosting anything there but using it for extra storage or taking advantage
of some services, what hosting model is that called?

Public cloud

Hybrid Cloud

(Correct)

Private cloud

Explanation
The hybrid cloud is a mixture between private services (like your self-hosted
applications) and public ones (like extra storage)

See: https://azure.microsoft.com/en-us/overview/what-is-hybrid-cloud-computing/

Question 42: Correct

What service does Azure provide as an optional upgrade to protect against DDoS
attacks?

Azure DDoS Protection Standard

(Correct)

Advanced Threat Protection (ATP)


 Azure protects against DDoS as part of it's basic offering and there is no service
you can upgrade to

Azure DDoS Protection Basic

Explanation
Azure DDoS Protection Standard

See: https://docs.microsoft.com/en-us/azure/virtual-network/ddos-protection-overview

Question 43: Correct

True or false: you can create your own policies if built-in Azure Policy is not
sufficient to your needs

TRUE

(Correct)

FALSE

Explanation
True, you can create custom policies using JSON

See: https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-
custom-policy-definition

Question 44: Incorrect

What types of resources are defined as "compute resources"?

Only Virtual Machines



All resources that are listed in the Azure Marketplace

(Incorrect)

Resources that perform some type of task that requires CPU cycles to perform the
work

(Correct)

Explanation
Compute Services - a category of services in Azure that provides CPU cycles for rent.
Virtual Machines are only one type of compute resource. The Marketplace contains
many types of resources, not just compute.

See: https://azure.microsoft.com/en-us/product-categories/compute/

Question 45: Correct

What are Azure Availability Zones?

This is the same as a region

Within each individual data center, certain racks of servers have been architected
by Azure to have higher uptime than the others. If you place your apps onto this
rack, you'll get higher uptime than if you let Azure do it.

A folder structure in Azure in which you organize resources like databases, virtual
machines, virtual networks, or almost any resource


 A feature of Azure that allows you to manually specify into which data center your
virtual machines are placed, which allows you to achieve higher availability than
any other option.

(Correct)

Explanation
Availability Zones - Unique physical locations within an Azure region, made up of one or
more datacenters; there is a minimum of three zones in each region; you can manually
place your resources in an availability zone for highest availability

See: https://docs.microsoft.com/en-us/azure/availability-zones/az-overview

Question 46: Correct

What makes a system highly available?

It's not possible to make a highly available system

If it maintains 100% availability

A system specifically designed to be resilient, with no single point of failures

(Correct)

Must have a minimum of two VMs

Explanation
High Availability - a system specifically designed to be resilient when some component
of the system fails

See: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/availability

Question 47: Correct

What is Azure's preferred Identity/authentication service?


Azure Active Directory

(Correct)

Network Security Group

Facebook Connect

Live Connect

Explanation
Azure Active Directory (Azure AD) - Microsoft’s preferred Identity as a Service solution

See: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-
directory-whatis

Question 48: Correct

True or False: Azure has the responsibility to manage the hardware in the Infrastructure
as a Service model

FALSE

TRUE

(Correct)

Explanation
 Yes, Azure still manages the hardware itself, the hypervisor and all of the physical
elements behind the scenes

See: https://azure.microsoft.com/en-us/overview/what-is-iaas/

Question 49: Correct

Which of the following is a feature of the cool access tier for Azure Storage?

Most expensive option when it comes to bandwidth cost to access your files

Significant delays in accessing your data, up to several hours

Much cheaper to store your files than the hot access tier

(Correct)

Cheapest option when it comes to bandwidth costs to access your files

Explanation
Cool access tier offers cost savings when you expect to store your files and not need to
access them often

See: https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-
tiers?tabs=azure-portal

Question 50: Correct

What feature within Azure will make recommendations to you about reducing cost
on your account?


 Azure Service Health

Azure Dashboard

Azure Advisor

(Correct)

Azure Security Center

Explanation
Azure Advisor analyzes your account usage and makes recommendations for you based
on its set rules

See: https://docs.microsoft.com/en-us/azure/advisor/advisor-overview