Practice for the Microsoft Azure Fundamentals (AZ-900) exam with 15 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Fill in the blank: _______________ is a malicious attempt to disrupt or prevent a cloud service from functioning as inte. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the Microsoft Azure Fundamentals (AZ-900) practice test →
What you will practice
- Fill in the blank: _______________ is a malicious attempt to disrupt or prevent a cloud service from function…
- Which of the following is NOT an example of an Azure resource?
- Which device is required to be deployed into an Azure Virtual Network before you can connect to it using a VP…
- Which cloud model typically utilizes the consumption-based pricing model?
- How can Azure Reserved Instances help achieve cost predictability?
- What is the primary purpose of the AzCopy tool in Azure?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Fill in the blank: _______________ is a malicious attempt to disrupt or prevent a cloud service from functioning as intended by overwhelming it with excessive traffic or requests.
Answer: D. A Denial of Service attack
A Denial of Service attack overwhelms a service with excessive traffic or requests, causing disruption. This is a standard cloud security concept tested in Azure fundamentals.
Q2. Which of the following is NOT an example of an Azure resource?
Answer: C. An Azure subscription
An Azure subscription is a logical container used to provision resources and manage billing, not a resource itself. Remember that resources are the actual deployable items like databases or virtual networks.
Q3. Which device is required to be deployed into an Azure Virtual Network before you can connect to it using a VPN?
Answer: B. Azure VPN Gateway
Azure VPN Gateway provides the necessary secure connectivity bridge over the internet to an Azure Virtual Network. Virtual Network Peering, on the other hand, only connects two Azure networks directly.
Q4. Which cloud model typically utilizes the consumption-based pricing model?
Answer: B. Public Cloud
The Public Cloud typically leverages a consumption-based pricing model where users only pay for what they use. Private or on-premises models usually require upfront hardware investments, eliminating true consumption billing.
Q5. How can Azure Reserved Instances help achieve cost predictability?
Answer: D. By providing discounts for long-term commitments.
Azure Reserved Instances provide discounts for committing to a specific term length like one or three years, which guarantees cost predictability. Pay-as-you-go pricing fluctuates based on actual usage, preventing predictable billing.
Q6. What is the primary purpose of the AzCopy tool in Azure?
Answer: B. To transfer data to and from Azure storage
AzCopy is a command-line utility specifically designed to transfer data efficiently to and from Azure storage. It handles large datasets reliably, unlike general monitoring tools that track resource usage.
Q7. Which of the following is NOT a key feature of Microsoft Defender for Cloud?
Answer: D. Password management
Microsoft Defender for Cloud focuses heavily on threat detection, vulnerability assessment, and security posture management. Password management is handled by separate identity tools like Azure Active Directory or password managers.
Q8. How can Azure Cost Management help identify cost-saving opportunities?
Answer: B. By analyzing resource utilization and identifying underutilized resources
Azure Cost Management analyzes your resource utilization to pinpoint underutilized assets, enabling informed financial optimization. While it can provide forecasts, the core mechanism for finding immediate actionable savings is identifying and right-sizing idle resources.
Q9. A healthcare organization with a mix of sensitive patient data and non-sensitive administrative data would be best suited for which cloud model?
Answer: D. Hybrid Cloud
A hybrid cloud model seamlessly blends public and private environments, letting you keep sensitive patient records secure on-premises or in a private cloud. A purely public or private model lacks the necessary flexibility for these strict, mixed compliance requirements.
Q10. What is the primary purpose of Azure Virtual Desktop?
Answer: D. To deliver virtualized Windows desktops to users
Azure Virtual Desktop delivers remote, virtualized Windows desktops and applications directly to end users over the internet. It is distinct from simple virtual machine management or web app hosting, focusing entirely on end-user desktop-as-a-service scenarios.
Q11. Fill in the blank: An Azure __________ is a logical division of a virtual network.
Answer: C. subnet
A subnet logically divides a virtual network, allowing you to organize, isolate, and secure Azure resources efficiently. Network security groups or IP addresses are applied to these subnets to control traffic, but the division itself is the subnet.
Q12. Which Azure resource type allows you to centrally manage, configure, and update a large number of VMs?
Answer: C. Virtual Machine Scale Sets
Virtual Machine Scale Sets let you centrally manage, configure, and automatically scale a large fleet of identical virtual machines. Azure Kubernetes Service is for containers, not managing the base infrastructure of individual virtual machines.
Q13. Which of the following is the primary purpose of sovereign regions in Azure?
Answer: D. To ensure data residency compliance
Sovereign regions, like Azure Government, exist to enforce strict legal data residency and compliance boundaries for specific jurisdictions. They operate independently from standard public regions to meet specialized government or regional regulatory requirements.
Q14. You intend to deploy your application to a Virtual Machine Scale Set (VMSS), and allow it to automatically scale your app to multiple VMs based on demand. How is traffic distributed to machines inside a VMSS pool?
Answer: B. You must include an additional service such as Load Balancing or Application Gateway
A Virtual Machine Scale Set handles scaling compute resources but relies on integrated services like Azure Load Balancer or Application Gateway to distribute incoming traffic. The scale set itself provisions the instances, while the load balancer routes client requests.
Q15. Which feature of Azure Virtual Machines allows you to choose which data center to physically deploy a VM to?
Answer: A. Availability zones
Availability zones allow you to deploy virtual machines into distinct, physically separated data centers within an Azure region. While a region sets the geographic boundary, the zone pins the VM to a specific data center for resiliency.
More Microsoft Azure Fundamentals (AZ-900) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.