Practice for the Microsoft Azure Fundamentals (AZ-900) exam with 16 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: For the highest SLA/availability for Azure virtual machines, which deployment strategy is best?. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the Microsoft Azure Fundamentals (AZ-900) practice test →
What you will practice
- For the highest SLA/availability for Azure virtual machines, which deployment strategy is best?
- Which three stages are commonly used in the Azure service lifecycle?
- Which Azure service provides personalized recommendations to help you reduce costs on your subscription?
- Which cloud service model is a virtual machine (VM) most directly an example of?
- Which Azure feature lets you organize multiple subscriptions into a hierarchy for centralized governance, pol…
- Which Microsoft service provides 'Pipelines' to automate building, running tests, and deploying code from a r…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. For the highest SLA/availability for Azure virtual machines, which deployment strategy is best?
Answer: D. Deploying two or more virtual machines across different availability zones within the same region.
Deploying two or more virtual machines across different availability zones provides the highest SLA because zones are physically separated locations with independent power and cooling. Availability sets only protect against local hardware failures within a single datacenter.
Q2. Which three stages are commonly used in the Azure service lifecycle?
Answer: B. Private Preview, Public Preview, and General Availability
The standard Azure product lifecycle progresses from private preview to public preview and finally general availability. During preview phases, services lack formal support and service level agreements until they reach general availability.
Q3. Which Azure service provides personalized recommendations to help you reduce costs on your subscription?
Answer: C. Azure Advisor
Azure Advisor evaluates your deployed resources and offers personalized recommendations across cost, security, and reliability. Service Health tracks outages, whereas Defender focuses entirely on security threats.
Q4. Which cloud service model is a virtual machine (VM) most directly an example of?
Answer: A. Infrastructure as a Service (IaaS)
Virtual machines are the classic example of infrastructure as a service because you manage the operating system and applications. Platform as a service abstracts the operating system layer entirely away from you.
Q5. Which Azure feature lets you organize multiple subscriptions into a hierarchy for centralized governance, policy enforcement, and access management?
Answer: B. Management Groups
Management groups provide a level of scope above subscriptions, allowing you to efficiently manage access, policies, and compliance across multiple subscriptions. Resource groups are used to group resources within a single subscription, rather than managing multiple subscriptions.
Q6. Which Microsoft service provides 'Pipelines' to automate building, running tests, and deploying code from a repository to Azure?
Answer: A. Azure DevOps
Azure DevOps is a Microsoft service that provides pipelines for continuous integration and continuous deployment to automate building, testing, and deploying code. While GitHub offers similar actions, Azure Pipelines is the specific feature highlighted here.
Q7. Which Microsoft Entra ID feature provides an additional sign-in factor – often using a mobile phone (for example, the Microsoft Authenticator app) – to verify a user's identity when they sign in?
Answer: C. Multi-Factor Authentication
Multi-Factor Authentication adds a crucial layer of security by requiring users to provide two or more verification methods during sign-in. Microsoft Defender for Cloud focuses on infrastructure security rather than individual identity verification.
Q8. A company is migrating its workloads to Azure to reduce the risk of downtime caused by hardware failures. Which benefit of cloud computing does this scenario demonstrate?
Answer: D. High availability and fault tolerance
The correct answer works because migrating to cloud services provides high availability and fault tolerance through redundant architectures. Elasticity involves scaling resources up or down to meet demand, which does not directly address hardware failure resiliency.
Q9. Which type of container does Azure Monitor use to collect and store log (telemetry) data from multiple Azure resources?
Answer: B. Log Analytics Workspace
Azure Monitor uses a Log Analytics workspace as the primary container to ingest and store log data from various resources. Append Blob Storage is typically used for append operations like logging, but it is not the integrated container for Azure Monitor telemetry.
Q10. Which cloud service model best describes Microsoft Outlook as delivered through Microsoft 365 (web and desktop clients)?
Answer: B. Software as a Service (SaaS)
Microsoft Outlook via Microsoft 365 is a fully managed application hosted by a provider and accessed over the internet, defining Software as a Service. Infrastructure and Platform as a Service require the customer to manage the operating system or application development.
Q11. Which of the following best describes a Distributed Denial of Service (DDoS) attack? Correct answer
Answer: A. A denial of service attack that sends so much traffic to a network that it cannot respond fast enough; legitimate users become unable to use the service
A Distributed Denial of Service attack floods a network with malicious traffic, exhausting resources so legitimate users cannot access the service. Exam questions about overwhelming traffic point to DDoS, unlike brute force password guessing.
Q12. Which cloud deployment model describes using Azure as an extension of your on-premises data center to provide additional storage or services while most resources remain on-premises?
Answer: C. Hybrid cloud
A hybrid cloud seamlessly integrates on-premises private infrastructure with public cloud resources. This model allows organizations to retain sensitive data locally while leveraging public cloud scalability. Public or private models alone do not provide this combined flexibility.
Q13. Which Azure service should an IT administrator use to enforce multi-factor authentication (MFA) and control access to an application?
Answer: D. Microsoft Entra ID
Microsoft Entra ID is the core identity and access management service used to secure applications and enforce multi-factor authentication. The other listed options are either distractors or compute services that lack native enterprise identity management features.
Q14. When creating a Site-to-Site VPN between Azure and your on-premises network, what type of device must be present in your on-premises infrastructure to terminate the VPN connection?
Answer: D. A compatible VPN Gateway device
A site-to-site VPN requires a compatible VPN device on-premises to establish the encrypted IPsec tunnel. The other choices are either purely Azure-based resources or do not handle routing and encrypted traffic termination.
Q15. Which Azure service centralizes telemetry and log data from multiple resources so you can run queries, visualize results, and create alerts on events?
Answer: D. Azure Monitor
Azure Monitor acts as the central pipeline for collecting logs and metrics across your subscriptions. Defender for Cloud is strictly for security posture management, while the portal dashboard just displays visual widgets.
Q16. Which of the following is the primary graphical user interface for managing Azure resources?
Answer: A. Azure Portal
The Azure Portal serves as the primary web-based graphical interface for deploying and managing resources. PowerShell and the CLI are text-based alternatives, while Storage Explorer handles only storage data.
More Microsoft Azure Fundamentals (AZ-900) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.