Test – 50 Questions – AZ 900

Question 1 of 50
Which two attributes are characteristics of the private cloud
deployment model? Each correct answer presents a complete
solution.
Correct Answer
 Hardware must be purchased.
 The company has complete control over physical resources and
security.

In a private cloud, hardware must be purchased for start up and

maintenance. In a private cloud, organizations control resources and
security. Quick provisioning is a characteristic of the public cloud
deployment model. Paying only for what is used is a characteristic of
the public cloud deployment model.
Describe cloud computing - Training | Microsoft Learn

Question 2 of 50
What are two basic services provided by all cloud providers? Each
correct answer presents a complete solution.
Correct Answer
 compute
 storage

All cloud providers provide compute and storage services. Colocation

is when a business rents space in a shared physical datacenter.
Application development is the responsibility of the customer and is
typically done either in-house or through a third party.
Describe cloud computing - Training | Microsoft Learn

Question 3 of 50
What are two characteristics of a consumption-based model? Each
correct answer presents a complete solution.
Correct Answer
 no upfront costs
 the ability to stop paying for resources that are no longer used

In a consumption-based model, you do not pay for anything until you

start using resources, and you only pay for what you use. If you stop
using a resource, you stop paying for it. High expenditures are usually
associated with the purchase of the physical infrastructure, which is
not needed in a consumption-based model.
Describe cloud computing - Training | Microsoft Learn

Question 4 of 50
Which two characteristics are common advantages of cloud
computing? Each correct answer presents a complete solution.
Correct Answer
 geo-distribution
 high availability
Cloud-based apps can provide a continuous user experience with no
apparent downtime, even when things go wrong. You can deploy apps
and data to regional datacenters around the globe, thereby ensuring
that your customers always have the best performance in their
region. Apps in cloud computing can scale vertically and horizontally.
In a public cloud model, you do not get physical access to servers, as
they are managed by the cloud provider.
Describe cloud computing - Training | Microsoft Learn

Question 5 of 50
What is an advantage of cloud computing compared to on-premises
deployments?
Correct Answer
 You can scale more quickly.

Cloud computing allows you to scale more quickly. Owning your own
CPUs and having full access in the event of an internet outage are not
features of cloud computing. Working from multiple workstations is
not specific to cloud computing compared to an on-premises
deployment.
Describe cloud computing - Training | Microsoft Learn

Question 6 of 50
Select the answer that correctly completes the sentence.
[Answer choice] refers to upfront costs incurred one time, such as
hardware purchases.
Correct Answer
 Capital expenditures

Capital expenditures are one-time expenses that can be deducted

over time. Operational expenditures are billed as you use services
and a do not have upfront costs.
Describe cloud computing - Training | Microsoft Learn

Question 7 of 50
Select the answer that correctly completes the sentence.
Deploying and configuring cloud-based resources quickly as business
requirements change is called [answer choice].
Correct Answer
 agility
Agility means that you can deploy and configure cloud-based
resources quickly as app requirements change. Scalability means that
you can add RAM, CPU, or entire virtual machines to a configuration.
Elasticity means that you can configure cloud-based apps to take
advantage of autoscaling, so apps always have the resources they
need. High availability means that cloud-based apps can provide a
continuous user experience with no apparent downtime, even when
things go wrong.
Describe the benefits of using cloud services - Training | Microsoft
Learn

Question 8 of 50
Select the answer that correctly completes the sentence.
Increasing compute capacity for an app by adding instances of
resources such as virtual machines is called [answer choice].
Correct Answer
 horizontal scaling

Scaling horizontally increases compute capacity by adding instances

of resources, such as adding virtual machines to the configuration.
You scale vertically by adding RAM or CPUs to a virtual machine.
Disaster recovery keeps data and other assets safe in the event of a
disaster. High availability minimizes downtime when things go wrong.
Describe the benefits of using cloud services - Training | Microsoft
Learn

Question 9 of 50
Select the answer that correctly completes the sentence.
Increasing the capacity of an application by adding additional virtual
machine is called [answer choice].
Correct Answer
 horizontal scaling

Scaling horizontally increases compute capacity by adding instances

of resources, such as adding virtual machines to the configuration.
You scale vertically to increase compute capacity by adding RAM or
CPUs to a virtual machine. Agility refers to the ability to deploy new
applications and services quickly. High availability minimizes
downtime when things go wrong.
Describe the benefits of using cloud services - Training | Microsoft
Learn

Question 10 of 50
In a platform as a service (PaaS) model, which two components are
the responsibility of the cloud service provider? Each correct answer
presents a complete solution.
Correct Answer
 operating system
 physical network
In PaaS, the cloud provider is responsible for the operating system,
physical datacenter, physical hosts, and physical network. In PaaS,
the customer is responsible for accounts and identities.
Describe cloud service types - Training | Microsoft Learn

Question 11 of 50
Which cloud service model is used by Microsoft Office 365?.
Correct Answer
 software as a service (SaaS)

SaaS allows users to connect to and use cloud-based apps over the
internet. Common examples are email, calendaring, and Office tools,
such as Office 365.
Describe cloud service types - Training | Microsoft Learn

Question 12 of 50
Which cloud service model is used by Azure SQL Database?
Correct Answer
 platform as a service (PaaS)
Azure SQL Database is a PaaS database engine.
Describe cloud service types - Training | Microsoft Learn
Question 13 of 50
What uses the infrastructure as a service (IaaS) cloud service model?
Correct Answer
 Azure virtual machines

Azure Virtual Machines is an IaaS offering. The customer is

responsible for the configuration of the virtual machine as well as all
operating system configurations. Azure App Services and Azure
Cosmos DB are PaaS offerings. Microsoft Office 365 is a SaaS offering.
Describe cloud service types - Training | Microsoft Learn

Question 14 of 50
Which type of cloud service are virtual networks?
Correct Answer
 infrastructure as a service (IaaS)

IaaS helps you reduce the cost and complexity of maintaining a

physical server and its datacenter infrastructure. Virtual networks are
part of the IaaS cloud service.
Describe cloud service types - Training | Microsoft Learn

Question 15 of 50
Select the answer that correctly completes the sentence.
[Answer choice] are physically separate datacenters within an
Azure region.
Correct Answer
 Availability zones

Availability zones are physically separate datacenters within an Azure

region. Each availability zone is made up of one or more datacenters
equipped with independent power, cooling, and networking.
Describe the core architectural components of Azure - Training |
Microsoft Learn

Question 16 of 50
What is an Azure Storage account named storage001 an example of?
 a resource

A resource is a manageable item that is available through Azure.

Virtual machines, storage accounts, web apps, databases, and virtual
networks are examples of resources.
Describe the core architectural components of Azure - Training |
Microsoft Learn

Question 17 of 50
Which resource can you use to manage access, policies, and
compliance across multiple subscriptions?
Correct Answer
 management groups

Management groups can be used in environments that have multiple

subscriptions to streamline the application of governance conditions.
Resource groups can be used to organize Azure resources.
Administrative units are used to delegate the administration of
Microsoft Entra resources, such as users and [Link] are
used to provide access to resources.
Describe the core architectural components of Azure - Training |
Microsoft Learn

Question 18 of 50
Which Azure resource is a software emulation of a physical computer
that includes a virtual processor, memory, storage, and networking
resources?
Correct Answer
 a virtual machine

Virtual machines are software emulations of physical computers. They

include a virtual processor, memory, storage, and networking
resources. Virtual machines host an operating system, and you can
install and run software just like on a physical computer.
Describe Azure compute and networking services - Training |
Microsoft Learn

Question 19 of 50
What can you use to execute code in a serverless environment?
Correct Answer
 Azure Functions
Azure Functions allows you to run code as a service without having to
manage the underlying platform or infrastructure. Azure Logic Apps is
similar to Azure Functions, but uses predefined workflows instead of
developing your own code.
Describe Azure compute and networking services - Training |
Microsoft Learn

Question 20 of 50
Which scenario is a use case for a VPN gateway?
Correct Answer
 connecting an on-premises datacenter to an Azure virtual
network

A VPN gateway is a type of virtual network gateway. Azure VPN

Gateway instances are deployed to a dedicated subnet of a virtual
network. You can use them to connect on-premises datacenters to
virtual networks through a Site-to-Site (S2S) VPN connection.
Describe Azure compute and networking services - Training |
Microsoft Learn

Question 21 of 50
What can you use to connect Azure resources, such as Azure SQL
databases, to an Azure virtual network?
Correct Answer
 service endpoints

Service endpoints are used to expose Azure services to a virtual

network, providing communication between the two. ExpressRoute is
used to connect an on-premises network to Azure. NSGs allow you to
configure inbound and outbound rules for virtual networks and virtual
machines. Peering allows you to connect virtual networks together.
Describe Azure compute and networking services - Training |
Microsoft Learn

Question 22 of 50
Which two services can you use to establish network connectivity
between an on-premises network and Azure resources? Each correct
answer presents a complete solution.
Correct Answer
 Azure VPN Gateway
 ExpressRoute

ExpressRoute connections and Azure VPN Gateway are two services

that you can use to connect an on-premises network to Azure. Bastion
provides a web interface to remotely administer Azure virtual
machines by using SSH/RDP. Azure Firewall is a stateful firewall
service used to protect virtual networks.
Azure ExpressRoute: Connectivity models | Microsoft Learn
Describe Azure compute and networking services - Training |
Microsoft Learn

Question 23 of 50
What can you use to provide Mac and Android users with access to a
Windows environment that will run Windows-based applications?
Correct Answer
 Azure Virtual Desktop

Azure Virtual Desktop is a desktop and application virtualization

service that runs in the cloud. It enables your users to use a cloud-
hosted version of Windows from any location. Azure Virtual Desktop
works across devices such as Windows, Mac, iOS, Android, and Linux.
It works with apps that you can use to access Remote Desktops and
apps. You can also use most modern browsers to access Azure Virtual
Desktop-hosted experiences.
Describe Azure compute and networking services - Training |
Microsoft Learn

Question 24 of 50
Which storage service should you use to store thousands of files
containing text and images?
Correct Answer
 Azure Blob storage

Azure Blob storage is an object storage solution that you can use to
store massive amounts of unstructured data, such as text or binary
data.
Describe Azure storage services - Training | Microsoft Learn

Question 25 of 50
Which two scenarios are common use cases and offers the lowest storage
costs and the highest costs to access data?
Correct Answer
 Archive
The Archive storage tier stores data offline and offers the lowest
storage costs, but also the highest costs to rehydrate and access
data. The Hot storage tier is optimized for storing data that is
accessed frequently. Data in the Cool access tier can tolerate slightly
lower availability, but still requires high durability, retrieval latency,
and throughput characteristics similar to hot data.
Describe Azure storage services - Training | Microsoft Learn

Question 26 of 50
Which storage service offers fully managed file shares in the cloud
that are accessible by using Server Message Block (SMB) protocol?
Correct Answer
 Azure Files

Azure Files offers fully managed file shares in the cloud with shares
that are accessible by using Server Message Block (SMB) protocol.
Mounting Azure file shares is just like connecting to shares on a local
network.
Describe Azure storage services - Training | Microsoft Learn
Question 27 of 50
Which two scenarios are common use cases for Azure Blob storage?
Each correct answer presents a complete solution.
Correct Answer
 serving images or documents directly to a browser
 storing data for backup and restore
Low storage costs and unlimited file formats make blob storage a
good location to store backups and archives. Blob storage can be
reached from anywhere by using an internet connection. Azure Disk
Storage provides disks for Azure virtual machines. Azure Files
supports mounting file storage shares.
Describe Azure storage services - Training | Microsoft Learn

Question 28 of 50
Which Azure Blob storage tier stores data offline service tier has the
highest storage costs and the fastest access times for reading and
writing data?
Correct Answer
 Hot

The Hot tier is optimized for storing data that is accessed frequently.
The Cool access tier has a slightly lower availability SLA and higher
access costs compared to hot data, which are acceptable trade-offs
for lower storage costs. Archive storage stores data offline and offers
the lowest storage costs, but also the highest costs to rehydrate and
access data.
Describe Azure storage services - Training | Microsoft Learn

Question 29 of 50
What enables a user to sign in one time and use that credential to
access multiple resources and applications from different providers?
Correct Answer
 single sign-on (SSO)
SSO enables a user to sign in one time and use that credential to
access multiple resources and applications from different providers.
MFA is a process whereby a user is prompted during the sign-in
process for an additional form of identification. Conditional Access is a
tool that Microsoft Entra uses to allow or deny access to resources
based on identity signals. Microsoft Entra supports the registration of
devices.
Describe Azure identity, access, and security - Training | Microsoft
Learn

Question 30 of 50
What can you use to allow a user to manage all the resources in a
resource group?
Correct Answer
 Azure role-based access control (RBAC)

Azure RBAC allows you to assign a set of permissions to a user or

group. Resource tags are used to locate and act on resources
associated with specific workloads, environments, business units, and
owners. Resource locks prevent the accidental change or deletion of a
resource. Key Vault is a centralized cloud service for storing an
application secrets in a single, central location.
Describe Azure identity, access, and security - Training | Microsoft
Learn

Question 31 of 50
Which type of strategy uses a series of mechanisms to slow the
advancement of an attack that aims to gain unauthorized access to
data?
Correct Answer
 defense in depth
A defense in depth strategy uses a series of mechanisms to slow the
advancement of an attack that aims to gain unauthorized access to
data. The principle of least privilege means restricting access to
information to only the level that users need to perform their work. A
DDoS attack attempts to overwhelm and exhaust an application's
resources. The perimeter layer is about protecting an organization's
resources from network-based attacks.
Describe Azure identity, access, and security - Training | Microsoft
Learn

Question 32 of 50
Which Microsoft Entra feature can you use to ensure that users can
only access Microsoft Office 365 applications from approved client
applications?
Correct Answer
 Conditional Access

Conditional Access allows administrators to control, allow, or deny

access to resources based on certain signals. You can require that
access to certain applications only be allowed if the users are using
an approved client application. MFA is a process whereby a user is
prompted during the sign-in process for an additional form of
identification. Examples include a code on their mobile phone or a
fingerprint scan.
Describe Azure identity, access, and security - Training | Microsoft
Learn

Question 33 of 50
What can you use to ensure that users authenticate by using multi-
factor authentication (MFA) when they attempt to sign in from a
specific location?
Correct Answer
 Conditional Access

Conditional Access can use signals to determine information about

authentication attempts, and then determine whether to block access
or require additional verifications, such as MFA.
Describe Azure identity, access, and security - Training | Microsoft
Learn

Question 34 of 50
Which two factors affect Azure costs? Each correct answer presents a
complete solution.
Correct Answer
 resource location
 resource usage

Usage meters, such as CPU time, disk size, and write operations, are
used to calculate your bill for an Azure resource. Deleting or
deallocating a resource means that you will no longer be billed for it.
Different regions can have different associated prices. Resources cost
the same no matter the time of day or the day of the week.
Describe cost management in Azure - Training | Microsoft Learn

Question 35 of 50
You need to compare the costs of running an application in an on-
premises datacenter with the costs of running the application in
Azure.
What should you use to assist you?
Correct Answer
 Total Cost of Ownership (TCO) Calculator

The TCO Calculator helps you estimate the cost savings over time of
operating a solution in Azure compared to operating in an on-
premises datacenter.
Describe cost management in Azure - Training | Microsoft Learn

Question 36 of 50
Which are two common scenarios for using resource tags? Each
correct answer presents a complete solution.
Correct Answer
 associating costs with different environments
 categorizing costs by Department

You can use tags to categorize costs by department, such as human

resources, marketing, or finance, or by environment, such as test or
production. Resizing underutilized virtual machines is a good cost
saving measure and provisioning resources in lower cost regions is a
good practice, but resource tags do not help with this.
Describe cost management in Azure - Training | Microsoft Learn

Question 37 of 50
Which two features are available by using Azure Cost Management +
Billing? Each correct answer presents a complete solution.
Correct Answer
 Create and manage budgets.
 Generate historical reports and forecast future usage.

Azure Cost Management allows you to create and manage cost and
usage budgets by monitoring resource demand trends, consumption
rates, and cost patterns. It also allows you to use historical data to
generate reports and forecast future usage and expenditures.
Describe cost management in Azure - Training | Microsoft Learn

Question 38 of 50
You have an Azure virtual machine that is accessed only between
9:00 and 17:00 each day.
What should you do to minimize costs but preserve the associated
hard disks and data?
Correct Answer
 Deallocate the virtual machine when it is not needed

If you have virtual machine workloads that are used only during
certain periods, but you run them every hour of every day, then you
are wasting money. These virtual machines are great candidates to
deallocate when not in use and start back when required to save
compute costs while the virtual machines are deallocated.
Describe cost management in Azure - Training | Microsoft Learn

Question 39 of 50
You need to associate the costs of resources to different groups within
an organization without changing the location of the resources.
What should you use?
Correct Answer
 resource tags

Resource tags can be used to group billing data and categorize costs
by runtime environment, such as billing usage for virtual machines
running in a production environment.
Tag resources, resource groups, and subscriptions for logical
organization - Azure Resource Manager | Microsoft Learn
Describe the purpose of tags - Training | Microsoft Learn
Question 40 of 50

You need to recommend a solution for Azure virtual machine

deployments. The solution must enforce company standards on the
virtual machines.
What should you include in the recommendation?
Correct Answer
 Azure Policy

Azure policies will allow you to enforce company standards on new

virtual machines when combined with Azure VM Image Builder and
Azure Compute Gallery. By using Azure Policy and role-based access
control (RBAC) assignments, enterprises can enforce standards on
Azure resources. But on virtual machines, these mechanisms only
affect the control plane or the route to the virtual machine.
Describe features and tools in Azure for governance and compliance -
Training | Microsoft Learn

Question 41 of 50
What can you use to ensure that a development team can only create
virtual machines of a certain size?
Correct Answer
 Azure Policy

Azure Policy enables you to define both individual policies and groups
of related policies called initiatives. Azure Policy evaluates your
resources and highlights resources that are not compliant with the
policies you created. Azure Policy can also prevent noncompliant
resources from being created.
Describe features and tools in Azure for governance and compliance -
Training | Microsoft Learn

Question 42 of 50
Which two actions can be performed by using Azure portal? Each
correct answer presents a complete solution.
Correct Answer
 Create new resources.
 Create Microsoft Entra user

The Azure portal provides a GUI to view all the services you are using,
create new services, configure your services, and view reports.
Describe features and tools for managing and deploying Azure
resources - Training | Microsoft Learn

Question 43 of 50
Which two tools are accessible via Azure Cloud Shell to manage an
Azure environment?
Correct Answer
 Azure CLI
 Azure PowerShell

Azure CLI is an executable program with which a user can execute

commands in Bash that call the Azure REST API. Azure Cloud Shell
also supports Azure PowerShell as an executable program.
Describe features and tools for managing and deploying Azure
resources - Training | Microsoft Learn

Question 44 of 50
What should you use to access Azure Cloud Shell?
Correct Answer
 a web browser

Cloud Shell is an interactive, browser-accessible shell for managing

Azure resources.
Describe features and tools for managing and deploying Azure
resources - Training | Microsoft Learn

Question 45 of 50
Which two tools can you use to create a new Azure virtual machine
from a mobile device that runs Android? Each correct answer presents
complete solution.
Correct Answer
 PowerShell in Azure Cloud Shell
 the Azure portal

The Azure portal can run on devices that have the Android operating
system installed. The browser can be any type, such as Internet
Explorer 11, Chrome, Firefox, or Safari (all the latest versions). When
you visit the portal, you will see Cloud Shell. Users can then access
Bash and PowerShell from within Cloud Shell. You can use Bash and
PowerShell to create Azure virtual machines.
Connect to Azure Virtual Desktop with the Remote Desktop client for
Android and Chrome OS - Azure Virtual Desktop | Microsoft Learn
Describe features and tools for managing and deploying Azure
resources - Training | Microsoft Learn

Question 46 of 50
What provides recommendations to reduce the cost of Azure
resources?
Correct Answer
 Azure Advisor

Azure Advisor analyzes the account usage and makes

recommendations based on its set and configured rules.
Describe monitoring tools in Azure - Training | Microsoft Learn

Question 47 of 50
Which Azure service evaluates Azure resources and makes
recommendations to help improve reliability, security, performance,
and cost reduction?
Correct Answer
 Azure Advisor

Azure Advisor evaluates Azure resources and makes

recommendations to help improve reliability, security, and
performance, achieve operational excellence, and reduce costs.
Describe monitoring tools in Azure - Training | Microsoft Learn

Question 48 of 50
What should you proactively review and act on to avoid service
interruptions, such as service retirements and breaking changes?
Correct Answer
 health advisories

Health advisories are issues that require that you take proactive
action to avoid service interruptions, such as service retirements and
breaking changes. Service issues are problems such as outages that
require immediate actions.
Describe monitoring tools in Azure - Training | Microsoft Learn
Question 49 of 50
What can you use to find information about planned maintenance for
Azure services that are critical to your organization?
Correct Answer
 Azure Service Health

You can drill down to the affected services, regions, and details to
show how an event will affect you and what you must do. Most of
these events occur without any impact to you and will not be shown.
In a rare case that a reboot is required, Service Health allows you to
choose when to perform the maintenance to minimize the downtime
Describe monitoring tools in Azure - Training | Microsoft Learn

Question 50 of 50
Which feature in the Microsoft Purview governance portal should you
use to manage access to data sources and datasets?
Correct Answer
 Data Policy

Incorrect: Data Catalog –– This enables data discovery.

Incorrect: Data Sharing –– This shares data within and between
organizations.
Incorrect: Data Estate Insights –– This accesses data estate health.
Correct: Data Policy –– This governs access to data.
Introduction to Microsoft Purview governance solutions - Microsoft
Purview | Microsoft Learn
Describe features and tools in Azure for governance and compliance -
Training | Microsoft Learn