Test – 50 Questions – AZ 900

Question 1 of 50
Which two attributes are characteristics of the private cloud deployment model?
Each correct answer presents a complete solution.
Correct Answer
 Hardware must be purchased.
 The company has complete control over physical resources and security.

In a private cloud, hardware must be purchased for start up and maintenance. In

a private cloud, organizations control resources and security. Quick provisioning
is a characteristic of the public cloud deployment model. Paying only for what is
used is a characteristic of the public cloud deployment model.
Describe cloud computing - Training | Microsoft Learn

Question 2 of 50
What are two basic services provided by all cloud providers? Each correct
answer presents a complete solution.
Correct Answer
 compute
 storage

All cloud providers provide compute and storage services. Colocation is when a
business rents space in a shared physical datacenter. Application development is
the responsibility of the customer and is typically done either in-house or
through a third party.
Describe cloud computing - Training | Microsoft Learn

Question 3 of 50
What are two characteristics of a consumption-based model? Each correct
answer presents a complete solution.
Correct Answer
 no upfront costs
 the ability to stop paying for resources that are no longer used

In a consumption-based model, you do not pay for anything until you start
using resources, and you only pay for what you use. If you stop using a
resource, you stop paying for it. High expenditures are usually associated with
the purchase of the physical infrastructure, which is not needed in a
consumption-based model.
Describe cloud computing - Training | Microsoft Learn

Question 4 of 50
Which two characteristics are common advantages of cloud computing? Each
correct answer presents a complete solution.
Correct Answer
 geo-distribution
 high availability

Cloud-based apps can provide a continuous user experience with no apparent

downtime, even when things go wrong. You can deploy apps and data to
regional datacenters around the globe, thereby ensuring that your customers
always have the best performance in their region. Apps in cloud computing can
scale vertically and horizontally. In a public cloud model, you do not get physical
access to servers, as they are managed by the cloud provider.
Describe cloud computing - Training | Microsoft Learn

Question 5 of 50
What is an advantage of cloud computing compared to on-premises
deployments?
Correct Answer
 You can scale more quickly.

Cloud computing allows you to scale more quickly. Owning your own CPUs and
having full access in the event of an internet outage are not features of cloud
computing. Working from multiple workstations is not specific to cloud
computing compared to an on-premises deployment.
Describe cloud computing - Training | Microsoft Learn

Question 6 of 50
Select the answer that correctly completes the sentence.
[Answer choice] refers to upfront costs incurred one time, such as hardware
purchases.
Correct Answer
 Capital expenditures

Capital expenditures are one-time expenses that can be deducted over time.
Operational expenditures are billed as you use services and a do not have
upfront costs.
Describe cloud computing - Training | Microsoft Learn

Question 7 of 50
Select the answer that correctly completes the sentence.
Deploying and configuring cloud-based resources quickly as business
requirements change is called [answer choice].
Correct Answer
 agility
Agility means that you can deploy and configure cloud-based resources quickly
as app requirements change. Scalability means that you can add RAM, CPU, or
entire virtual machines to a configuration. Elasticity means that you can
configure cloud-based apps to take advantage of autoscaling, so apps always
have the resources they need. High availability means that cloud-based apps
can provide a continuous user experience with no apparent downtime, even
when things go wrong.
Describe the benefits of using cloud services - Training | Microsoft Learn

Question 8 of 50
Select the answer that correctly completes the sentence.
Increasing compute capacity for an app by adding instances of resources such
as virtual machines is called [answer choice].

Correct Answer
 horizontal scaling

Scaling horizontally increases compute capacity by adding instances of

resources, such as adding virtual machines to the configuration. You scale
vertically by adding RAM or CPUs to a virtual machine. Disaster recovery keeps
data and other assets safe in the event of a disaster. High availability minimizes
downtime when things go wrong.
Describe the benefits of using cloud services - Training | Microsoft Learn

Question 9 of 50
Select the answer that correctly completes the sentence.
Increasing the capacity of an application by adding additional virtual machine is
called [answer choice].
Correct Answer
 horizontal scaling

Scaling horizontally increases compute capacity by adding instances of

resources, such as adding virtual machines to the configuration. You scale
vertically to increase compute capacity by adding RAM or CPUs to a virtual
machine. Agility refers to the ability to deploy new applications and services
quickly. High availability minimizes downtime when things go wrong.
Describe the benefits of using cloud services - Training | Microsoft Learn

Question 10 of 50
In a platform as a service (PaaS) model, which two components are the
responsibility of the cloud service provider? Each correct answer presents a
complete solution.
Correct Answer
 operating system
 physical network
In PaaS, the cloud provider is responsible for the operating system, physical
datacenter, physical hosts, and physical network. In PaaS, the customer is
responsible for accounts and identities.
Describe cloud service types - Training | Microsoft Learn

Question 11 of 50
Which cloud service model is used by Microsoft Office 365?.
Correct Answer
 software as a service (SaaS)
SaaS allows users to connect to and use cloud-based apps over the internet.
Common examples are email, calendaring, and Office tools, such as Office 365.
Describe cloud service types - Training | Microsoft Learn

Question 12 of 50
Which cloud service model is used by Azure SQL Database?
Correct Answer
 platform as a service (PaaS)
Azure SQL Database is a PaaS database engine.
Describe cloud service types - Training | Microsoft Learn

Question 13 of 50
What uses the infrastructure as a service (IaaS) cloud service model?
Correct Answer
 Azure virtual machines

Azure Virtual Machines is an IaaS offering. The customer is responsible for the
configuration of the virtual machine as well as all operating system
configurations. Azure App Services and Azure Cosmos DB are PaaS offerings.
Microsoft Office 365 is a SaaS offering.
Describe cloud service types - Training | Microsoft Learn

Question 14 of 50
Which type of cloud service are virtual networks?
Correct Answer
 infrastructure as a service (IaaS)

IaaS helps you reduce the cost and complexity of maintaining a physical server
and its datacenter infrastructure. Virtual networks are part of the IaaS cloud
service.
Describe cloud service types - Training | Microsoft Learn

Question 15 of 50
Select the answer that correctly completes the sentence.
[Answer choice] are physically separate datacenters within an Azure region.
Correct Answer
 Availability zones

Availability zones are physically separate datacenters within an Azure region.

Each availability zone is made up of one or more datacenters equipped with
independent power, cooling, and networking.
Describe the core architectural components of Azure - Training | Microsoft Learn

Question 16 of 50
What is an Azure Storage account named storage001 an example of?
 a resource
A resource is a manageable item that is available through Azure. Virtual
machines, storage accounts, web apps, databases, and virtual networks are
examples of resources.
Describe the core architectural components of Azure - Training | Microsoft Learn

Question 17 of 50
Which resource can you use to manage access, policies, and compliance across
multiple subscriptions?
Correct Answer
 management groups

Management groups can be used in environments that have multiple

subscriptions to streamline the application of governance conditions.
Resource groups can be used to organize Azure resources. Administrative units
are used to delegate the administration of Microsoft Entra resources, such as
users and groups.Accounts are used to provide access to resources.
Describe the core architectural components of Azure - Training | Microsoft Learn

Question 18 of 50
Which Azure resource is a software emulation of a physical computer that
includes a virtual processor, memory, storage, and networking resources?
Correct Answer
 a virtual machine

Virtual machines are software emulations of physical computers. They include a

virtual processor, memory, storage, and networking resources. Virtual machines
host an operating system, and you can install and run software just like on a
physical computer.
Describe Azure compute and networking services - Training | Microsoft Learn

Question 19 of 50
What can you use to execute code in a serverless environment?
Correct Answer
 Azure Functions
Azure Functions allows you to run code as a service without having to manage
the underlying platform or infrastructure. Azure Logic Apps is similar to Azure
Functions, but uses predefined workflows instead of developing your own code.
Describe Azure compute and networking services - Training | Microsoft Learn

Question 20 of 50
Which scenario is a use case for a VPN gateway?
Correct Answer
 connecting an on-premises datacenter to an Azure virtual network

A VPN gateway is a type of virtual network gateway. Azure VPN Gateway

instances are deployed to a dedicated subnet of a virtual network. You can use
them to connect on-premises datacenters to virtual networks through a Site-to-
Site (S2S) VPN connection.
Describe Azure compute and networking services - Training | Microsoft Learn

Question 21 of 50
What can you use to connect Azure resources, such as Azure SQL databases, to
an Azure virtual network?
Correct Answer
 service endpoints

Service endpoints are used to expose Azure services to a virtual network,

providing communication between the two. ExpressRoute is used to connect an
on-premises network to Azure. NSGs allow you to configure inbound and
outbound rules for virtual networks and virtual machines. Peering allows you to
connect virtual networks together.
Describe Azure compute and networking services - Training | Microsoft Learn

Question 22 of 50
Which two services can you use to establish network connectivity between an
on-premises network and Azure resources? Each correct answer presents a
complete solution.
Correct Answer
 Azure VPN Gateway
 ExpressRoute

ExpressRoute connections and Azure VPN Gateway are two services that you
can use to connect an on-premises network to Azure. Bastion provides a web
interface to remotely administer Azure virtual machines by using SSH/RDP.
Azure Firewall is a stateful firewall service used to protect virtual networks.
Azure ExpressRoute: Connectivity models | Microsoft Learn
Describe Azure compute and networking services - Training | Microsoft Learn

Question 23 of 50
What can you use to provide Mac and Android users with access to a Windows
environment that will run Windows-based applications?
Correct Answer
 Azure Virtual Desktop

Azure Virtual Desktop is a desktop and application virtualization service that

runs in the cloud. It enables your users to use a cloud-hosted version of
Windows from any location. Azure Virtual Desktop works across devices such as
Windows, Mac, iOS, Android, and Linux. It works with apps that you can use to
access Remote Desktops and apps. You can also use most modern browsers to
access Azure Virtual Desktop-hosted experiences.
Describe Azure compute and networking services - Training | Microsoft Learn

Question 24 of 50
Which storage service should you use to store thousands of files containing text
and images?
Correct Answer
 Azure Blob storage

Azure Blob storage is an object storage solution that you can use to store
massive amounts of unstructured data, such as text or binary data.
Describe Azure storage services - Training | Microsoft Learn

Question 25 of 50
Which two scenarios are common use cases and offers the lowest storage costs and
the highest costs to access data?
Correct Answer
 Archive

The Archive storage tier stores data offline and offers the lowest storage costs,
but also the highest costs to rehydrate and access data. The Hot storage tier is
optimized for storing data that is accessed frequently. Data in the Cool access
tier can tolerate slightly lower availability, but still requires high durability,
retrieval latency, and throughput characteristics similar to hot data.
Describe Azure storage services - Training | Microsoft Learn

Question 26 of 50
Which storage service offers fully managed file shares in the cloud that are
accessible by using Server Message Block (SMB) protocol?
Correct Answer
 Azure Files

Azure Files offers fully managed file shares in the cloud with shares that are
accessible by using Server Message Block (SMB) protocol. Mounting Azure file
shares is just like connecting to shares on a local network.
Describe Azure storage services - Training | Microsoft Learn
Question 27 of 50
Which two scenarios are common use cases for Azure Blob storage? Each
correct answer presents a complete solution.
Correct Answer
 serving images or documents directly to a browser
 storing data for backup and restore
Low storage costs and unlimited file formats make blob storage a good location
to store backups and archives. Blob storage can be reached from anywhere by
using an internet connection. Azure Disk Storage provides disks for Azure virtual
machines. Azure Files supports mounting file storage shares.
Describe Azure storage services - Training | Microsoft Learn

Question 28 of 50
Which Azure Blob storage tier stores data offline service tier has the highest storage
costs and the fastest access times for reading and writing data?
Correct Answer
  Hot

The Hot tier is optimized for storing data that is accessed frequently. The Cool
access tier has a slightly lower availability SLA and higher access costs compared
to hot data, which are acceptable trade-offs for lower storage costs. Archive
storage stores data offline and offers the lowest storage costs, but also the
highest costs to rehydrate and access data.
Describe Azure storage services - Training | Microsoft Learn

Question 29 of 50
What enables a user to sign in one time and use that credential to access
multiple resources and applications from different providers?
Correct Answer
 single sign-on (SSO)

SSO enables a user to sign in one time and use that credential to access
multiple resources and applications from different providers. MFA is a process
whereby a user is prompted during the sign-in process for an additional form of
identification. Conditional Access is a tool that Microsoft Entra uses to allow or
deny access to resources based on identity signals. Microsoft Entra supports the
registration of devices.
Describe Azure identity, access, and security - Training | Microsoft Learn

Question 30 of 50
What can you use to allow a user to manage all the resources in a resource
group?
Correct Answer
 Azure role-based access control (RBAC)

Azure RBAC allows you to assign a set of permissions to a user or group.

Resource tags are used to locate and act on resources associated with specific
workloads, environments, business units, and owners. Resource locks prevent
the accidental change or deletion of a resource. Key Vault is a centralized cloud
service for storing an application secrets in a single, central location.
Describe Azure identity, access, and security - Training | Microsoft Learn

Question 31 of 50
Which type of strategy uses a series of mechanisms to slow the advancement of
an attack that aims to gain unauthorized access to data?
Correct Answer
 defense in depth
A defense in depth strategy uses a series of mechanisms to slow the
advancement of an attack that aims to gain unauthorized access to data. The
principle of least privilege means restricting access to information to only the
level that users need to perform their work. A DDoS attack attempts to
overwhelm and exhaust an application's resources. The perimeter layer is about
protecting an organization's resources from network-based attacks.
Describe Azure identity, access, and security - Training | Microsoft Learn
Question 32 of 50
Which Microsoft Entra feature can you use to ensure that users can only access
Microsoft Office 365 applications from approved client applications?
Correct Answer
 Conditional Access

Conditional Access allows administrators to control, allow, or deny access to

resources based on certain signals. You can require that access to certain
applications only be allowed if the users are using an approved client
application. MFA is a process whereby a user is prompted during the sign-in
process for an additional form of identification. Examples include a code on
their mobile phone or a fingerprint scan.
Describe Azure identity, access, and security - Training | Microsoft Learn

Question 33 of 50
What can you use to ensure that users authenticate by using multi-factor
authentication (MFA) when they attempt to sign in from a specific location?
Correct Answer
 Conditional Access

Conditional Access can use signals to determine information about

authentication attempts, and then determine whether to block access or require
additional verifications, such as MFA.
Describe Azure identity, access, and security - Training | Microsoft Learn

Question 34 of 50
Which two factors affect Azure costs? Each correct answer presents a complete
solution.
Correct Answer
 resource location
 resource usage

Usage meters, such as CPU time, disk size, and write operations, are used to
calculate your bill for an Azure resource. Deleting or deallocating a resource
means that you will no longer be billed for it. Different regions can have
different associated prices. Resources cost the same no matter the time of day
or the day of the week.
Describe cost management in Azure - Training | Microsoft Learn

Question 35 of 50
You need to compare the costs of running an application in an on-premises
datacenter with the costs of running the application in Azure.
What should you use to assist you?
Correct Answer
 Total Cost of Ownership (TCO) Calculator

The TCO Calculator helps you estimate the cost savings over time of operating a
solution in Azure compared to operating in an on-premises datacenter.
Describe cost management in Azure - Training | Microsoft Learn

Question 36 of 50
Which are two common scenarios for using resource tags? Each correct answer
presents a complete solution.
Correct Answer
 associating costs with different environments
 categorizing costs by Department

You can use tags to categorize costs by department, such as human resources,
marketing, or finance, or by environment, such as test or production. Resizing
underutilized virtual machines is a good cost saving measure and provisioning
resources in lower cost regions is a good practice, but resource tags do not help
with this.
Describe cost management in Azure - Training | Microsoft Learn

Question 37 of 50
Which two features are available by using Azure Cost Management + Billing?
Each correct answer presents a complete solution.
Correct Answer
 Create and manage budgets.
 Generate historical reports and forecast future usage.

Azure Cost Management allows you to create and manage cost and usage
budgets by monitoring resource demand trends, consumption rates, and cost
patterns. It also allows you to use historical data to generate reports and
forecast future usage and expenditures.
Describe cost management in Azure - Training | Microsoft Learn

Question 38 of 50
You have an Azure virtual machine that is accessed only between 9:00 and 17:00
each day.
What should you do to minimize costs but preserve the associated hard disks
and data?
Correct Answer
 Deallocate the virtual machine when it is not needed

If you have virtual machine workloads that are used only during certain periods,
but you run them every hour of every day, then you are wasting money. These
virtual machines are great candidates to deallocate when not in use and start
back when required to save compute costs while the virtual machines are
deallocated.
Describe cost management in Azure - Training | Microsoft Learn

Question 39 of 50
You need to associate the costs of resources to different groups within an
organization without changing the location of the resources.
What should you use?
Correct Answer
  resource tags

Resource tags can be used to group billing data and categorize costs by
runtime environment, such as billing usage for virtual machines running in a
production environment.
Tag resources, resource groups, and subscriptions for logical organization -
Azure Resource Manager | Microsoft Learn
Describe the purpose of tags - Training | Microsoft Learn
Question 40 of 50

You need to recommend a solution for Azure virtual machine deployments. The
solution must enforce company standards on the virtual machines.
What should you include in the recommendation?
Correct Answer
 Azure Policy

Azure policies will allow you to enforce company standards on new virtual
machines when combined with Azure VM Image Builder and Azure Compute
Gallery. By using Azure Policy and role-based access control (RBAC)
assignments, enterprises can enforce standards on Azure resources. But on
virtual machines, these mechanisms only affect the control plane or the route to
the virtual machine.
Describe features and tools in Azure for governance and compliance - Training |
Microsoft Learn

Question 41 of 50
What can you use to ensure that a development team can only create virtual
machines of a certain size?
Correct Answer
 Azure Policy

Azure Policy enables you to define both individual policies and groups of
related policies called initiatives. Azure Policy evaluates your resources and
highlights resources that are not compliant with the policies you created. Azure
Policy can also prevent noncompliant resources from being created.
Describe features and tools in Azure for governance and compliance - Training |
Microsoft Learn

Question 42 of 50
Which two actions can be performed by using Azure portal? Each correct answer
presents a complete solution.
Correct Answer
 Create new resources.
 Create Microsoft Entra user

The Azure portal provides a GUI to view all the services you are using, create
new services, configure your services, and view reports.
Describe features and tools for managing and deploying Azure resources -
Training | Microsoft Learn

Question 43 of 50
Which two tools are accessible via Azure Cloud Shell to manage an Azure
environment?
Correct Answer
 Azure CLI
 Azure PowerShell

Azure CLI is an executable program with which a user can execute commands in
Bash that call the Azure REST API. Azure Cloud Shell also supports Azure
PowerShell as an executable program.
Describe features and tools for managing and deploying Azure resources -
Training | Microsoft Learn

Question 44 of 50
What should you use to access Azure Cloud Shell?
Correct Answer
 a web browser

Cloud Shell is an interactive, browser-accessible shell for managing Azure

resources.
Describe features and tools for managing and deploying Azure resources -
Training | Microsoft Learn

Question 45 of 50
Which two tools can you use to create a new Azure virtual machine from a
mobile device that runs Android? Each correct answer presents complete
solution.
Correct Answer
 PowerShell in Azure Cloud Shell
 the Azure portal

The Azure portal can run on devices that have the Android operating system
installed. The browser can be any type, such as Internet Explorer 11, Chrome,
Firefox, or Safari (all the latest versions). When you visit the portal, you will see
Cloud Shell. Users can then access Bash and PowerShell from within Cloud Shell.
You can use Bash and PowerShell to create Azure virtual machines.
Connect to Azure Virtual Desktop with the Remote Desktop client for Android
and Chrome OS - Azure Virtual Desktop | Microsoft Learn
Describe features and tools for managing and deploying Azure resources -
Training | Microsoft Learn
Question 46 of 50
What provides recommendations to reduce the cost of Azure resources?
Correct Answer
 Azure Advisor

Azure Advisor analyzes the account usage and makes recommendations based
on its set and configured rules.
Describe monitoring tools in Azure - Training | Microsoft Learn

Question 47 of 50
Which Azure service evaluates Azure resources and makes recommendations to
help improve reliability, security, performance, and cost reduction?
Correct Answer
 Azure Advisor

Azure Advisor evaluates Azure resources and makes recommendations to help

improve reliability, security, and performance, achieve operational excellence,
and reduce costs.
Describe monitoring tools in Azure - Training | Microsoft Learn

Question 48 of 50
What should you proactively review and act on to avoid service interruptions,
such as service retirements and breaking changes?
Correct Answer
 health advisories

Health advisories are issues that require that you take proactive action to avoid
service interruptions, such as service retirements and breaking changes. Service
issues are problems such as outages that require immediate actions.
Describe monitoring tools in Azure - Training | Microsoft Learn

Question 49 of 50
What can you use to find information about planned maintenance for Azure
services that are critical to your organization?
Correct Answer
 Azure Service Health

You can drill down to the affected services, regions, and details to show how an
event will affect you and what you must do. Most of these events occur without
any impact to you and will not be shown. In a rare case that a reboot is required,
Service Health allows you to choose when to perform the maintenance to
minimize the downtime
Describe monitoring tools in Azure - Training | Microsoft Learn
Question 50 of 50
Which feature in the Microsoft Purview governance portal should you use to
manage access to data sources and datasets?
Correct Answer
 Data Policy

Incorrect: Data Catalog –– This enables data discovery.

Incorrect: Data Sharing –– This shares data within and between organizations.
Incorrect: Data Estate Insights –– This accesses data estate health.
Correct: Data Policy –– This governs access to data.
Introduction to Microsoft Purview governance solutions - Microsoft Purview |
Microsoft Learn
Describe features and tools in Azure for governance and compliance - Training |
Microsoft Learn