Practice for the Microsoft Azure Fundamentals (AZ-900) exam with 16 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Which Microsoft tool helps you assess and track your organization's compliance with international standards and governme. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the Microsoft Azure Fundamentals (AZ-900) practice test →
What you will practice
- Which Microsoft tool helps you assess and track your organization's compliance with international standards a…
- Your organization has specific compliance requirements that are not covered by Azure's built-in policy defini…
- When you sign up for a new Azure Free account, how much initial credit (USD) does Microsoft provide for use d…
- Your company wants employees to sign in once and then access multiple Microsoft 365 and Azure applications wi…
- Your company uses Microsoft Entra ID (tenant) to manage access to Azure resources. The IT department wants to…
- In the context of Azure cloud services, which statement best defines 'compute resources'?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which Microsoft tool helps you assess and track your organization's compliance with international standards and government regulations (for example, GDPR or ISO/IEC 27001)?
Answer: D. Purview Compliance Manager
Microsoft Purview Compliance Manager helps track compliance progress and complete corrective actions. The Service Trust Portal only provides compliance documentation, rather than interactive assessment and tracking capabilities.
Q2. Your organization has specific compliance requirements that are not covered by Azure's built-in policy definitions. What should you do to enforce your organization's own rules?
Answer: C. Create and assign a custom policy definition in Azure Policy.
Creating a custom Azure Policy definition lets you enforce specific organizational rules that built-in policies do not cover. Resource locks prevent accidental deletion but cannot evaluate resource properties for compliance.
Q3. When you sign up for a new Azure Free account, how much initial credit (USD) does Microsoft provide for use during the trial period?
Answer: A. The default is US$200
New Azure free accounts receive a two hundred USD credit to spend during the first thirty days. Microsoft also provides a year of popular free services, but the initial spending limit is specifically this credit amount.
Q4. Your company wants employees to sign in once and then access multiple Microsoft 365 and Azure applications without re-entering their credentials. Which Azure feature should the company implement?
Answer: C. Microsoft Entra ID Single Sign-On (SSO)
Microsoft Entra ID Single Sign On allows users to authenticate once and access multiple applications seamlessly. Policy enforces compliance rules, Key Vault manages secrets, and Defender for Cloud handles security postures.
Q5. Your company uses Microsoft Entra ID (tenant) to manage access to Azure resources. The IT department wants to separate billing, permissions, and resource limits for different business units within the same organization. What should they do?
Answer: A. Create multiple subscriptions under the same tenant.
Creating multiple subscriptions under the same tenant perfectly separates billing and access limits. Resource groups only organize resources logically within a subscription and do not provide separate billing boundaries.
Q6. In the context of Azure cloud services, which statement best defines 'compute resources'?
Answer: A. They are resources that execute tasks requiring CPU cycles.
Compute resources provide the processing power required to run applications and handle computational workloads, executing code and performing calculations. Virtual machines are one example, but the term compute also includes other services that provide CPU cycles.
Q7. Which Azure service provides a managed Apache Hadoop-based platform for big data analytics?
Answer: D. HDInsight
Azure HDInsight is the managed cloud service that provides open-source big data frameworks like Apache Hadoop, Spark, and Storm. Azure Data Factory is primarily a data integration service used for orchestration rather than hosting the analytics clusters.
Q8. Azure Logic Apps and Azure Functions are examples of which compute model in Azure? Correct answer
Answer: A. Serverless model
Azure Logic Apps and Azure Functions are both core examples of the serverless compute model in Azure. For the exam, associate serverless with automatic scaling and paying only for execution time rather than provisioning virtual machines.
Q9. An administrator prefers to manage Azure resources through a web-based graphical interface rather than using command-line tools. Which tool should they use? Correct answer
Answer: A. Azure Portal
The Azure Portal provides a graphical web interface for managing resources visually. If an exam scenario specifically asks for a web-based graphical interface, always choose the Portal over command-line tools like Azure CLI or Azure PowerShell.
Q10. Which Azure feature provides a basic, per-subnet method to protect an Azure Virtual Network subnet by controlling inbound and outbound network traffic?
Answer: D. Network Security Group
Network Security Groups provide basic traffic filtering by allowing or denying rules to a subnet. Azure Firewall offers advanced features, but NSG is the correct answer when the question specifies basic per-subnet traffic control.
Q11. Which Azure service is the primary identity and authentication platform?
Answer: C. Microsoft Entra ID (formerly Azure Active Directory)
Microsoft Entra ID, formerly known as Azure Active Directory, is the primary identity and authentication platform. A Network Security Group handles traffic filtering, not authentication, making it a distractor when evaluating identity questions.
Q12. Which statement best describes the primary benefit of a Content Delivery Network (CDN) in cloud computing? Correct answer
Answer: A. It mitigates server load for static, unchanging files like images, videos, and PDFs by distributing them across a network of servers.
A Content Delivery Network mitigates server load and improves performance by caching static files like images across globally distributed servers. Do not confuse this with caching session data, which describes Redis Cache instead.
Q13. A developer wants to deploy a custom web application without managing the underlying operating system or web server. Which Azure service model best meets this requirement?
Answer: A. Platform as a Service (PaaS)
Platform as a Service provides a managed hosting environment where the cloud provider maintains the underlying operating system and infrastructure. Software as a Service refers to using finished applications, not deploying custom code to a managed platform.
Q14. You plan to deploy a critical application on Azure and must design for high availability and reliability. Which of the following statements about Azure Service Level Agreements (SLAs) is correct and should be considered when designing your…
Answer: D. SLAs vary by service and can include guarantees for uptime, performance, and connectivity.
Azure Service Level Agreements define specific uptime and performance guarantees that vary across different Azure services. Architects must combine multiple services strategically to achieve their required composite availability. No single universal uptime percentage applies to every service.
Q15. Which of the following is a characteristic of the Azure Blob Storage cool access tier?
Answer: C. Much cheaper to store your files than the hot access tier
The cool access tier offers a lower storage price compared to the hot tier, making it ideal for infrequently accessed data. However, it incurs higher access and retrieval fees. The archive tier provides the longest retrieval delays, not the cool tier.
Q16. A company is moving from on-premises servers to Azure. They want to avoid large upfront hardware purchases and only pay for the resources they actually use. Which benefit of cloud computing does this describe?
Answer: B. Capital expenditure reduction (CapEx to OpEx)
Shifting from upfront capital expenses to ongoing operational expenses allows businesses to pay only for consumed resources over time. Elasticity refers to automatically scaling resources dynamically based on current demand, rather than changing financial models.
More Microsoft Azure Fundamentals (AZ-900) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.