Microsoft Azure Fundamentals (AZ-900)

Correct answer: D. Pay-as-you-go pricing

The consumption-based model charges users based strictly on actual resource usage, known as pay-as-you-go pricing. This eliminates fixed monthly costs and upfront hardware purchases, providing flexible cost management for variable workloads.

Correct answer: A. To group related Azure resources together for management and deployment.

A resource group acts as a logical container holding related Azure resources for easier management and deployment. Subscriptions actually contain resource groups, not the other way around, helping administrators organize assets effectively.

Correct answer: D. Minimizes downtime and ensures continuous service

High availability minimizes downtime by utilizing redundant systems and failover mechanisms to ensure continuous service. This guarantees users seamless access during localized failures, directly supporting strict service level agreements.

Correct answer: D. To protect against single points of failure

An availability set protects virtual machines from local hardware failures by distributing them across multiple fault and update domains. Options mentioning data redundancy or application load balancing confuse availability sets with storage or load balancers.

Correct answer: B. To automatically scale virtual machines based on demand

Virtual machine scale sets automatically scale virtual machine instances based on demand to handle varying workloads efficiently. Grouping VMs for simple management or data redundancy describes other Azure features like availability sets or managed disks.

Correct answer: C. A resource group can contain resources from multiple Azure regions.

A resource group is a logical container that can hold resources from multiple different Azure regions. Remember that resources must belong to exactly one subscription, as a resource group cannot span across multiple subscriptions.

Correct answer: D. The ability to automatically scale resources up or down based on demand.

Elasticity allows cloud resources to automatically scale up or down based on current demand. This ensures optimal performance during peak loads while minimizing costs during quiet periods by removing the need for overprovisioning.

Correct answer: B. Verify explicitly and enforce least-privilege access for all users and devices.

Verifying explicitly and enforcing least-privilege access are core principles of the Zero Trust security model. Never trust based on network location; always authenticate and authorize explicitly, which rules out trusting users inside the perimeter.

Correct answer: B. pay-as-you-go

The pay-as-you-go model allows users to pay for the resources they consume on a flexible, as-needed basis. It eliminates long-term commitments or upfront capital expenses, distinguishing cloud computing from traditional hosting.

Correct answer: B. Governance

Governance establishes the integrated framework of policies and controls to keep cloud initiatives aligned with business rules and compliance. Manageability focuses purely on operational tasks, lacking the strategic oversight of governance.

Correct answer: C. Cool access tier

The Cool tier optimizes costs for infrequently accessed data with a minimum 30-day storage period. The Archive tier is cheaper but designed for long-term retention starting at 180 days, making Cool the best fit here.

Correct answer: A. B2B is for business-to-business collaboration, while B2C is for business-to-customer interactions.

B2B facilitates business-to-business collaboration by letting external partners use their own identities. B2C supports business-to-customer applications by letting consumers sign in using their preferred social or local accounts.

Correct answer: D. To manage user identities and access to applications and resources

Microsoft Entra ID manages user identities and secures access to applications and resources using authentication and authorization. While it offers domain services, its primary purpose remains identity management.

Correct answer: B. Ultra Disks

Azure Ultra Disks deliver the highest performance and are designed for data-intensive workloads like SAP HANA. Premium SSDs are also high performance, but Ultra Disks provide the lowest latency and highest throughput limits available.

Correct answer: B. To categorize and organize resources for better management

Tags are used to logically organize and categorize Azure resources for management and billing. Security permissions are managed using Azure role-based access control, while monitoring is handled by Azure Monitor.

Correct answer: D. Virtual Machine

Virtual machines provide the greatest administrative control because you manage the operating system and software. Serverless and container solutions abstract the underlying operating system, reducing your management overhead.

Correct answer: A. Automatic scaling based on demand

Serverless computing automatically scales resources up or down based on demand, charging you only for execution time. Traditional infrastructure requires manual scaling and often uses fixed pricing.

Correct answer: A. Lift-and-shift migration

Lift-and-shift migration is the most likely scenario for choosing IaaS. IaaS provides virtual machines and networking, allowing you to migrate existing on-premises workloads to the cloud with minimal application changes or redesign.

Correct answer: B. Managed operating system

A managed operating system is a characteristic of Platform as a Service, not IaaS. In the IaaS shared responsibility model, the cloud provider manages the physical hardware, but the customer remains fully responsible for managing the guest operating system.

Correct answer: C. Azure File Sync

Azure File Sync centralizes your file shares in Azure Files while maintaining the compatibility of a Windows file server. It caches frequently accessed files on-premises while syncing all data back to the cloud for smooth hybrid scenarios.

Correct answer: C. RA-GRS

Read-access geo-redundant storage provides a secondary endpoint for read-only access. Standard geo-redundant storage replicates to a secondary region but keeps it inactive until a failover occurs, so the read-access prefix is required for reads.

Correct answer: D. Archive storage

The Archive storage tier stores data offline and offers the lowest storage costs. It is designed for long-term retention of rarely accessed data, trading lower prices for higher retrieval times and access fees compared to the hot tier.

Correct answer: C. Reserved instances offer discounted rates for long-term commitments, while pay-as-you-go is billed based on usage.

Reserved instances provide discounted rates by committing to a specific resource for a one or three-year term. Pay-as-you-go operates without commitment, charging only for what you use, making it ideal for unpredictable workloads.

Correct answer: C. Copying data to and from Azure Storage efficiently.

AzCopy is a command-line utility designed for high-performance data transfer to and from Azure Storage. It optimizes moving blobs and files, whereas other tools handle deployments or identity management.

Correct answer: B. To grant users the appropriate level of access to Azure resources.

Azure Role-Based Access Control grants users precise access to Azure resources by assigning specific roles. Multi-factor authentication and network security are separate security features that operate independently of resource role assignments.

Correct answer: B. Public IP Address

A Public IP Address is required to expose a virtual machine directly to the Internet. While an Azure Firewall or VPN Gateway handles network traffic routing and security, they do not provide the direct public endpoint allocation needed for inbound connectivity.

Correct answer: A. Redundancy

Redundancy in Azure Storage ensures data is replicated across multiple nodes or data centers to provide high durability. This replication protects against data loss during hardware failures, whereas scalability only handles changing workloads.

Correct answer: C. Vertical scaling

Vertical scaling, or scaling up, increases the capacity of a single machine by adding resources like CPU or memory. Horizontal scaling, in contrast, adds more instances to handle increased load.

Correct answer: C. It's charged based on the amount of data transferred and the distance

Data transfer between Azure regions is metered based on the amount of data leaving a region and its destination. Inbound data is free, but outbound inter-region traffic incurs bandwidth charges.

Correct answer: A. Public Cloud

The public cloud provides cost-effective, on-demand resources ideal for startups lacking capital for hardware. A private cloud requires significant infrastructure investment, contradicting the limited IT resources described.

Correct answer: B. 2

A minimum of two Availability Zones is required to build a highly available architecture. Distributing virtual machines across at least two zones ensures your application remains online if a single datacenter fails.

Correct answer: A. Enhanced security by limiting access to authorized users and devices.

Microsoft Entra Conditional Access enhances security by enforcing access policies based on user signals and device state. While it can simplify sign-ins, its main purpose is restricting access to authorized users under specific conditions.

Correct answer: A. Reduced compliance risks

Sovereign regions provide strict compliance and regulatory controls for specific government or geographic needs. They prioritize legal data sovereignty over raw performance or lowering deployment costs.

Correct answer: A. Biometric authentication and security keys

Microsoft Entra ID supports passwordless authentication using biometrics and FIDO2 security keys. A four-digit PIN is typically paired with Windows Hello but does not encompass the full range of passwordless options.

Correct answer: A. Data migration and integration

Data migration and integration are handled by services like Azure Data Factory, not Microsoft Purview. Microsoft Purview focuses on data governance, discovery, and classification, making the migration option the correct exception to choose.

Correct answer: B. The customer, such as you

The customer is responsible for keeping the guest operating system updated on an Azure Virtual Machine. The shared responsibility model dictates that while Microsoft manages the physical hosts, you handle everything inside the virtual machine.

Correct answer: D. A cloud infrastructure dedicated to a single organization, managed either by the organization itself or by a third-party provider.

A private cloud provides exclusive infrastructure dedicated entirely to a single organization. While public clouds offer shared multi-tenant environments, the isolated nature of private clouds ensures strict control over the underlying hardware.

Correct answer: C. Virtual network peering

Virtual network peering seamlessly connects two Azure virtual networks so resources communicate with private IP addresses. ExpressRoute is incorrect because it connects your on-premises network directly to the Microsoft cloud.

Correct answer: D. The ability to increase or decrease resources based on demand

Scalability refers to the ability to increase or decrease resources like CPU or memory to match demand. While often confused with elasticity, scalability broadly focuses on adjusting capacity rather than strictly automatic scaling actions.

Correct answer: D. Azure Container Instances

Azure Container Instances allows you to deploy containers without provisioning or managing underlying virtual machines. While Azure Kubernetes Service also handles containers, it is designed for complex orchestration rather than simple serverless deployments.

Correct answer: D. Fault tolerance

Azure organizes predictability into performance predictability and cost predictability. The question is technically ambiguous because autoscaling for predictability overlaps heavily with reliability concepts like fault tolerance.

Correct answer: B. Performance

Azure's reliability strategy relies heavily on fault tolerance, redundancy, and availability. Performance is a separate operational pillar, though its wording makes this a tricky negative question on the exam.

Correct answer: A. App Service Environment

App Service Environment provides a fully isolated and dedicated environment for running App Service apps securely. While standard App Service Plans offer shared tiers, the isolated tier deploys your applications into a private virtual network.

Correct answer: B. Reduced development time

Reduced development time is a primary benefit of using Platform as a Service. PaaS removes the burden of managing underlying servers and networking, letting developers focus entirely on application code. Lower overall costs can also be a valid advantage.

Correct answer: A. region

An Azure region is a geographical area containing multiple nearby datacenters connected by a low latency network. Do not confuse a region with an availability zone, which represents distinct physical locations within a single region.

Correct answer: A. All answers are correct

Azure Virtual Desktop provides lower costs, increased security, and improved scalability compared to traditional virtual desktop infrastructure. Including an all of the above option is a poor testing practice that makes the specific benefits impossible to evaluate independently.

Correct answer: D. All answers are correct.

Azure regions exist worldwide to reduce latency for end users, comply with local data regulations, and provide redundancy. Remember that using an all of the above option is generally avoided on official Microsoft exams, though all these reasons are factually true.