Microsoft Azure Fundamentals (AZ-900)

Correct answer: B. Azure Functions

Azure Functions is a serverless compute service that lets you run event-triggered code without explicitly provisioning infrastructure. Virtual Machines require operating system management, and App Service is a platform as a service, making neither truly serverless.

Correct answer: B. Hybrid Cloud

This scenario describes a hybrid cloud because it integrates on-premises infrastructure with public cloud resources. The temporary scaling into Azure specifically demonstrates the cloud bursting pattern commonly tested in fundamentals.

Correct answer: D. Asynchronous communication

Azure Queue Storage is designed for asynchronous communication, allowing decoupled applications to exchange messages without waiting for immediate responses. Synchronous options fail here because queues intentionally buffer messages until a receiver is ready.

Correct answer: C. To implement granular access controls based on specific conditions.

Conditional Access evaluates signals like user location and device state to enforce policy-based access rules. While multi-factor authentication can be required by these policies, it is merely a response rather than the core mechanism.

Correct answer: D. Its region pair, which is at least 300 miles away in the same geography

Azure pairs regions within the same geography to provide reliable failover during regional disasters. Choosing a region in another geography is wrong because Microsoft keeps paired regions close to maintain low replication latency.

Correct answer: B. Improved portability and consistency

Containers bundle applications and dependencies together, ensuring consistent deployments across diverse environments. While security can be a benefit, the primary exam focus is reliable portability rather than automatic network enhancements.

Correct answer: D. To allow guest users from external organizations to access your organization's resources.

Microsoft Entra B2B collaboration allows external partners to securely access your resources using their own identities. Do not confuse this with B2C, which manages customer identities for public-facing applications.

Correct answer: B. LRS

Locally Redundant Storage, or LRS, is the lowest-cost redundancy option because it replicates data three times within a single datacenter. Options like GRS or ZRS cost more because they provide protection against facility-wide outages.

Correct answer: D. By making it more difficult for attackers to breach multiple layers of security.

A defense-in-depth strategy uses multiple layers of security to protect data and assets. If an attacker breaches one layer, such as the network perimeter, additional internal controls like identity verification or data encryption remain active to slow down or stop the attack.

Correct answer: B. They automatically scale the number of VM instances based on demand or a schedule.

Azure Virtual Machine Scale Sets automatically adjust the number of running virtual machine instances based on demand or a predefined schedule. This ensures applications handle traffic spikes gracefully without requiring manual intervention to deploy individual machines.

Correct answer: A. By defining rules that govern resource configuration and usage

Azure Policy evaluates resources against predefined rules to enforce compliance and organizational standards. It focuses on configuration governance, whereas Microsoft Defender for Cloud handles real-time security threat alerts.

Correct answer: A. By aligning costs with actual usage

The consumption model aligns costs directly with actual resource usage, eliminating upfront investments. This pay as you go approach allows businesses to scale dynamically and avoid paying for idle infrastructure capacity.

Correct answer: C. GRS

Geo redundant storage copies your data asynchronously to a secondary region, maintaining six total copies. Locally redundant storage only keeps three copies within a single datacenter, providing less regional durability.

Correct answer: C. By ensuring uninterrupted revenue generation

High availability minimizes downtime to ensure uninterrupted revenue generation and continuous customer access. While preventing data loss is critical for disaster recovery, it is distinct from the continuous uptime availability provides.

Correct answer: B. Horizontal scaling

Horizontal scaling, or scaling out, adds more instances like virtual machines to a pool to handle increased load. Vertical scaling increases the capacity of a single resource by adding more CPU or memory.

Correct answer: B. TRUE

Virtual network peering seamlessly connects networks across different subscriptions or Microsoft Entra tenants. For the exam, remember that peering uses the Microsoft backbone network rather than the public internet.

Correct answer: B. Management Groups can be used to apply policies and access controls across multiple subscriptions within the same tenant.

Management groups manage policy and role-based access control across multiple subscriptions within a single tenant. A subscription can only belong to one management group, making the simultaneous membership distractor incorrect.

Correct answer: B. Azure App Service

Azure App Service is a Platform as a Service offering that handles infrastructure management, allowing developers to deploy web apps directly. Virtual machines are Infrastructure as a Service, requiring you to manage the operating system.

Correct answer: C. A physical grouping of servers within an Azure data center.

A fault domain represents a logical group of underlying hardware that share a power source and network switch. For the exam, associate update domains with planned maintenance and fault domains with hardware failures.

Correct answer: B. The customer, such as you

The customer is always responsible for securing and protecting their own data in the cloud. Remember the shared responsibility model: the provider secures the infrastructure, but you always manage your data and access.

Correct answer: B. To transfer large amounts of data to and from Azure

Azure Data Box is a physical device used to securely transfer massive amounts of data to and from Azure. Remember it as the offline migration tool when network bandwidth is limited or unavailable.

Correct answer: C. IaaS

Infrastructure as a Service provides full operating system access, allowing you to modify the Windows Registry. Platform and Serverless abstract the operating system, preventing the deep system access required here.

Correct answer: A. Azure ExpressRoute

Azure ExpressRoute creates a private, dedicated connection between your local network and Azure. If the question specifies avoiding the public Internet, always select ExpressRoute over virtual private network options.

Correct answer: D. Azure File Storage

Azure File Storage provides fully managed file shares in the cloud accessible via standard SMB or NFS protocols. For the exam, associate file shares with lift-and-shift migrations and replacing traditional on-premises file servers.

Correct answer: D. Reserved instances

Reserved instances provide significant discounts by committing to a one- or three-year term for predictable workloads. Pay-as-you-go remains flexible for variable workloads but costs more long-term than reserved capacity.

Correct answer: C. Private Cloud

A private cloud is dedicated entirely to one organization, offering maximum control and security for strict compliance. While a hybrid cloud offers flexibility, private cloud specifically addresses the need for absolute data isolation.

Correct answer: C. Having multiple copies of a resource to ensure availability.

Redundancy simply means maintaining multiple copies of a resource to ensure continuous availability if one component fails. While disaster recovery involves broader failover strategies, redundancy focuses on system reliability through replication.

Correct answer: D. Granting users the minimum amount of access necessary to perform their job duties.

The principle of least privilege means granting users only the minimum access required to complete their tasks. Assigning broad roles like Owner violates this security baseline by creating unnecessary exposure and risk.

Correct answer: D. To allow users to log in to multiple applications with a single set of credentials.

Single sign-on allows users to authenticate once and access multiple applications using a single set of credentials. This streamlines user access and reduces password fatigue, while multi-factor authentication handles extra security layers.

Correct answer: C. Container

Containers package an application and its dependencies together to ensure consistent execution across any environment. Virtual machines include a full operating system, making them much heavier than lightweight containers.

Correct answer: C. To simplify management and deployment.

Resource groups act as logical containers that simplify the management, deployment, and monitoring of related resources as a group. While role assignments can apply to resource groups, grouping itself is primarily for lifecycle organization.

Correct answer: A. Setting spending limits and alerts

Setting spending limits and alerts is a core feature of Azure Budgets, allowing organizations to proactively monitor cloud costs. While Azure Policy can enforce specific configurations, budgets focus entirely on sending notifications when spending thresholds are approached or exceeded.

Correct answer: D. Scalability

Scalability refers to the system's ability to handle increased loads by automatically adding resources during a traffic spike. High availability focuses on maximizing uptime and minimizing disruptions, whereas scalability ensures performance remains stable when demand fluctuates.

Correct answer: A. The ability to accurately forecast future costs.

Cost predictability is the ability to accurately forecast future expenses for running cloud workloads. Tools like the Azure Pricing Calculator help estimate these costs before deployment, while cost management features assist in avoiding unexpected billing surprises later.

Correct answer: A. It provides a managed domain service in the cloud without the need to manage on-premises domain controllers

Microsoft Entra Domain Services provides managed domain services like domain join and group policy without maintaining domain controllers. It complements Entra ID rather than replacing it, extending identity services to legacy applications.

Correct answer: A. Azure Virtual Machines

Azure Virtual Machines is an Infrastructure as a Service offering because you manage the operating system and applications. Functions and App Service are PaaS, removing OS management from your responsibilities.

Correct answer: B. No

Azure subscriptions cannot be nested inside one another. You organize subscriptions into management groups to create a hierarchical structure for governance and policy management across your organization.

Correct answer: D. Governance

Auditing resources for compliance with corporate standards is a classic example of cloud governance. On the exam, look for keywords like compliance, regulations, or auditing to point you toward governance instead of general scalability.

Correct answer: B. Archive access

The Archive tier is the cheapest option for long-term storage of rarely accessed data. The Cool tier is a strong distractor, but its minimum stay requirement is only thirty days, not one hundred eighty.

Correct answer: B. By categorizing resources based on their cost and usage

Tags categorize resources by department or project, letting you accurately track and allocate cloud spend. Tags do not automatically shut down resources or apply discounts; they provide visibility for reporting.

Correct answer: A. To provide redundancy and fault tolerance

Availability Zones protect applications and data from datacenter failures by providing physically separate locations within a single Azure region. Regions, rather than individual zones, dictate general geographic data residency and service availability.

Correct answer: C. A logical entity that represents a cloud resource.

An Azure resource is a manageable item representing a cloud asset, such as a virtual machine or storage account. Physical datacenter hardware is managed invisibly by Microsoft, while resources are the logical components deployed by customers into their subscriptions.

Correct answer: A. The vendor such as Microsoft Azure or Amazon AWS

In cloud computing, the hardware and physical infrastructure are owned by the cloud vendor. This is a core concept of shared responsibility, where the provider handles the physical layer while you manage your data.