Practice for the Microsoft Azure Fundamentals (AZ-900) exam with 16 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Your company manages access to several Software-as-a-Service (SaaS) applications like Salesforce and ServiceNow. They wa. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the Microsoft Azure Fundamentals (AZ-900) practice test →
What you will practice
- Your company manages access to several Software-as-a-Service (SaaS) applications like Salesforce and ServiceN…
- A company wants to run seasonal workloads in Azure where capacity can automatically expand during peak demand…
- Which of the following is NOT an example of Infrastructure as a Service (IaaS) in Azure?
- A company hosts a web application on Azure App Service. They're unsure which security tasks are their respons…
- Which Azure pricing option provides significant discounts for committing to a specific amount of resource usa…
- Which Azure Storage service is best suited for storing unstructured data such as text or binary data?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Your company manages access to several Software-as-a-Service (SaaS) applications like Salesforce and ServiceNow. They want employees to sign in once and then access all apps without re-entering passwords. Which Microsoft Entra ID feature s…
Answer: B. Single Sign-On (SSO)
Single Sign-On allows users to authenticate once and access multiple applications without re-entering their credentials. Conditional Access evaluates conditions like user risk before granting access, but it does not eliminate the need to sign into each application separately.
Q2. A company wants to run seasonal workloads in Azure where capacity can automatically expand during peak demand and shrink afterward. Which benefit of cloud computing provides this capability?
Answer: D. Elasticity
Elasticity is the ability to automatically add or remove resources based on current demand, making it ideal for seasonal workloads. High availability keeps services running during outages, while elasticity handles the scaling of compute capacity.
Q3. Which of the following is NOT an example of Infrastructure as a Service (IaaS) in Azure?
Answer: E. Azure SQL Database
Azure SQL Database is a Platform as a Service offering, meaning Microsoft manages the underlying infrastructure. Virtual machines, networks, and SQL hosted on VMs are IaaS. For the exam, remember that PaaS abstracts OS management away from you.
Q4. A company hosts a web application on Azure App Service. They're unsure which security tasks are their responsibility and which are Microsoft's. Which action is the company responsible for?
Answer: A. Securing the application code from vulnerabilities
Securing application code remains solely the customer's responsibility, even when utilizing Platform as a Service models. Microsoft actively manages physical datacenters, network isolation, and underlying operating system patching for shared Azure infrastructure.
Q5. Which Azure pricing option provides significant discounts for committing to a specific amount of resource usage for a 1-year or 3-year term?
Answer: C. Reserved Instances
Azure Reserved Instances provide deep discounts when you commit to a one or three-year term for specific resources. Spot pricing offers unused capacity discounts but lacks guarantees, while Pay-As-You-Go requires no upfront commitment.
Q6. Which Azure Storage service is best suited for storing unstructured data such as text or binary data?
Answer: D. Azure Blob Storage
Azure Blob Storage is optimized for storing massive amounts of unstructured data, such as text and binary files. Table Storage handles structured data, while Queue and File Storage serve message queues and shared file mounts respectively.
Q7. Which Azure database service is specifically designed to provide extremely low-latency responses for small, frequent read/write requests?
Answer: D. Cosmos DB
Azure Cosmos DB is correct because it is a globally distributed database optimized for single-digit millisecond latency on fast operations. SQL Database is a strong distractor for relational needs, but Cosmos DB is the definitive exam answer for extreme low latency and high throughput.
Q8. In what way does Multi-Factor Authentication (MFA) increase the security of a user account?
Answer: D. It requires the user to possess something like their phone to read an SMS, use a mobile app, or biometric identification.
Multi-Factor Authentication increases account security by requiring an additional verification factor, such as a phone or biometric scan. Single sign-on improves the login experience but does not inherently provide the extra layer of identity proofing that multi-factor authentication does.
Q9. Which Azure pricing model allows you to pay for compute resources by the second, with no long-term commitment?
Answer: B. Pay-As-You-Go
The Pay-As-You-Go model lets you pay for compute resources by the second without any upfront or long-term commitment. Reserved Instances require a one or three-year commitment to receive a discount, making them less flexible than pay-as-you-go pricing.
Q10. Which of the following scenarios would Azure Policy be a recommended method for enforcement?
Answer: C. Prevent certain Azure Virtual Machine instance types from being used in a resource group
Azure Policy evaluates resources before they are created, allowing you to block specific virtual machine sizes in a resource group. Role-based access control handles user permissions, while Azure Policy focuses on resource configuration and compliance.
Q11. Which of the following is a disadvantage of using capital expenditures (CapEx) instead of operating expenditures (OpEx)?
Answer: B. You must wait over a period of years to depreciate that investment on your taxes
Capital expenditures require large upfront investments that must be depreciated over several years on your taxes. Operating expenses are deducted in the same year they occur, making them much more flexible for businesses to manage.
Q12. A startup is experimenting with Azure but wants to avoid unexpected costs while testing services. They plan to deploy and delete resources frequently. Which statement best describes how Azure charges for resource usage?
Answer: C. Azure charges only for the resources that are provisioned and running.
Azure charges you only for the resources you have provisioned and are actively running. Once you stop or delete a virtual machine, you stop incurring compute charges, which helps teams avoid unnecessary costs during testing.
Q13. In the Azure portal, where do you browse and acquire third-party virtual machine images and other third-party offers?
Answer: C. Azure Marketplace
The Azure Marketplace is the designated portal for finding, trying, and purchasing third-party applications and virtual machine images. While you pick an image during creation, the marketplace is the actual catalog where you browse and acquire these offers.
Q14. A company runs two web servers in Azure across different Availability Zones in the same region. Which benefit does this configuration primarily provide?
Answer: B. Fault tolerance against datacenter failure
Deploying resources across different Availability Zones provides fault tolerance by protecting your architecture from a single datacenter failure. Availability zones are distinct physical datacenters within the same Azure region, ensuring high availability.
Q15. Your company requires a disaster recovery strategy ensuring that if one Azure region becomes unavailable, resources and data remain accessible. How does Azure help meet this requirement?
Answer: B. By replicating data automatically to a paired region within the same geography
Azure pairs regions within the same geography and provides automatic data replication to ensure business continuity if a primary region fails. This regional pairing ensures data residency and compliance while providing a reliable disaster recovery solution.
Q16. Your organization needs to ensure that all Azure resources comply with internal naming conventions and can only be deployed in approved regions. Which Azure service should you use?
Answer: B. Azure Policy
Azure Policy evaluates resources during creation to enforce rules like region limits and naming conventions. Resource Manager handles the actual deployment but lacks built-in governance controls, making Policy the correct exam choice.
More Microsoft Azure Fundamentals (AZ-900) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.