Practice for the Microsoft Azure Fundamentals (AZ-900) exam with 16 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: An administrator wants to manage Azure resources from a browser without installing any tools locally. They prefer using . Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the Microsoft Azure Fundamentals (AZ-900) practice test →
What you will practice
- An administrator wants to manage Azure resources from a browser without installing any tools locally. They pr…
- Your company operates in the European Union and must ensure that customer data stored in Azure meets strict p…
- What is the primary purpose of Microsoft Purview in Azure?
- You're using the Azure CLI from a command prompt to manage Azure resources. Which command do you run to sign…
- Why is Azure App Services considered Platform as a Service?
- How do you get access to services in Private Preview mode?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. An administrator wants to manage Azure resources from a browser without installing any tools locally. They prefer using command-line interfaces like Bash or PowerShell. Which Azure tool should they use?
Answer: B. Azure Cloud Shell
Azure Cloud Shell provides an accessible browser-based shell for managing resources with Bash or PowerShell without local installations. The Azure CLI and PowerShell module require direct installation, making them incorrect for this specific browser scenario.
Q2. Your company operates in the European Union and must ensure that customer data stored in Azure meets strict privacy and data protection requirements. Which Azure tool or resource helps you understand how Microsoft services comply with glob…
Answer: C. Microsoft Purview Compliance Manager
Microsoft Purview Compliance Manager is correct because it tracks compliance status and provides assessments for regulatory standards like GDPR and ISO 27001. Expect Azure Policy as a common distractor, which enforces resource rules but does not generate compliance assessments.
Q3. What is the primary purpose of Microsoft Purview in Azure?
Answer: C. To offer a unified data governance solution for managing on-premises, multi-cloud, and SaaS data.
Microsoft Purview is correct because it provides a unified data governance service to discover and manage data across on-premises, multi-cloud, and SaaS environments. Do not confuse this with operational performance monitoring or infrastructure deployment, which handle separate infrastructure tasks.
Q4. You're using the Azure CLI from a command prompt to manage Azure resources. Which command do you run to sign in interactively to your Azure account using the Azure CLI?
Answer: C. az login
Running az login is correct because this specific command triggers an interactive browser-based authentication prompt for the Azure CLI. A common exam mistake is guessing variations like az connect, which is an invalid command that the CLI will not recognize.
Q5. Why is Azure App Services considered Platform as a Service?
Answer: B. You give Azure the code and configuration, and you have no access to the underlying hardware
Providing code and configuration without hardware access is correct because PaaS abstracts the underlying infrastructure completely, leaving Microsoft to manage it. Options suggesting you patch the OS or select specific VM series contradict the managed nature of PaaS offerings.
Q6. How do you get access to services in Private Preview mode?
Answer: C. You must apply to use them.
Private previews require users to apply for access, as Microsoft grants entry selectively to gather feedback. Public previews are open to all, while a service in general availability is fully supported and ready for production use.
Q7. What is a primary benefit of using a command-line tool (PowerShell or the Azure CLI) instead of the Azure portal?
Answer: B. Automation
Automation is the primary advantage of command-line tools because they allow repetitive deployment tasks to be scripted. The Azure portal provides a visual interface, but manual clicking is slower and prone to human error.
Q8. An analytics team needs to process and visualize petabytes of structured and unstructured data from IoT devices in near real time. Which Azure service is most appropriate for this scenario?
Answer: A. Azure Synapse Analytics
Azure Synapse Analytics unifies data ingestion and processing for petabytes of data. Azure SQL Database handles traditional relational workloads, while Power BI primarily provides visualization rather than big data processing.
Q9. Which Azure service should they use to confirm whether Microsoft is aware of an outage in that region and receive alerts automatically if similar incidents occur in the future?
Answer: A. Azure Service Health
Azure Service Health provides personalized alerts and details about regional outages affecting your specific subscriptions. Azure Monitor tracks your individual resource metrics, but it does not confirm Microsoft's underlying infrastructure incidents.
Q10. Which concept describes the ability to run your applications and access data in another environment quickly after an outage or failure?
Answer: C. Business Continuity / Disaster Recovery (BC/DR)
Business Continuity and Disaster Recovery focuses on keeping applications running and data accessible during regional outages or failures. Reproducible deployments simply standardize infrastructure creation but do not inherently provide rapid failover during unexpected downtime.
Q11. Administrators use Remote Desktop Protocol (RDP) to access Windows VMs and SSH to access Linux VMs. What is the recommended approach to secure these management protocols in Azure?
Answer: D. Do not allow public Internet access over the RDP and SSH ports directly to the server. Instead use a secure server like Bastion to control access to the servers behind.
Using Azure Bastion is correct because it provides secure RDP and SSH access directly from the Azure portal without exposing VMs to the public internet. While strong passwords are helpful, preventing direct public internet access via a managed jumpbox is the primary security best practice.
Q12. What is the service level agreement for two or more Azure Virtual Machines that have been manually placed into different Availability Zones in the same region?
Answer: A. 99.99%
The 99.99 percent option is correct because placing VMs across different Availability Zones protects against entire datacenter failures and yields the highest standard VM uptime. Memorize this exact figure, as a single VM with premium storage only provides a 99.9 percent uptime guarantee.
Q13. If you are a US federal, state, local, or tribal government entity or their solution providers, which Azure option should you be looking to register for?
Answer: C. Azure Government
Azure Government is correct because it is a dedicated cloud environment built to meet strict US government compliance requirements like FedRAMP and CJIS. The standard Azure Public Portal lacks the necessary regulatory certifications and physical isolation required for these entities.
Q14. What would be a good reason to have multiple Azure subscriptions?
Answer: B. There is one person/credit card paying for resources, but many people who have accounts in Azure, and you need to separate out resources between clients so that there is absolutely no chance of resources being exposed between them.
Using multiple subscriptions provides strict isolation for environments when multiple users need access. Resource groups only organize logically, but subscriptions act as boundaries for management and security.
Q15. Which of the following is a good example of a Hybrid cloud?
Answer: A. A server runs in your own environment, but places files in the cloud so that it can extend the amount of storage it has access to.
A hybrid cloud explicitly combines public cloud resources with on-premises private infrastructure. A mobile app using a cloud database simply represents a public cloud consumption model rather than a true integrated hybrid environment.
Q16. Besides Azure Service Health, where else can you find information about issues affecting the Azure global network that affect you?
Answer: B. Each Virtual Machine has a Resource Health blade
The Resource Health blade inside individual virtual machines displays personalized status updates regarding underlying platform issues. Unlike general blogs, it specifically confirms if your current resource is impacted by global networking problems.
More Microsoft Azure Fundamentals (AZ-900) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.