AZ-900 Practice Questions & Answers

Cloud consumption and deployment models

A fictional Azure training project needs processing capacity for an irregular ten-week campaign. Its requirement is to avoid purchasing hardware sized for the busiest week and to adjust the resources it consumes as demand changes. Which approach directly matches that consumption objective?

1. Buy peak-sized servers before the campaign and retain them afterward
2. Keep a fixed average-demand resource quantity even through peaks
3. Adjust rented resource quantities to the campaign’s actual demand
4. Rent the maximum resource quantity for every campaign week

Reference basis: Describe the consumption-based model. These are original learning questions, not questions reproduced from the references.

Placement and resource-organization scope

A fictional Azure organizer needs one management scope above several subscriptions and, within one subscription, a grouping for resources that share a deployment lifecycle. Which TWO choices match these administrative purposes? Select TWO.

Select all answers that apply.

1. An availability zone as the parent governance scope for subscriptions
2. A management group above the subscriptions
3. A region as a substitute for the lifecycle resource grouping
4. A resource group for the lifecycle-related resources
5. A physical datacenter as the subscription’s administrative child container

Reference basis: Organize your Azure resources effectively; What is Azure Resource Manager?; What are availability zones?. These are original learning questions, not questions reproduced from the references.

Hypothetical estimates and recorded spending

For a fictional Azure planning exercise, use this toy cost model only: 50 VM-hours at $0.18 per VM-hour, one fixed storage charge of $4.00, and 2 GB of outbound data at $0.50 per GB. All rates are invented teaching inputs, not Azure prices or a quote. Assume there are no other charges in this toy model. What is the total?

1. $10.00
2. $14.00
3. $23.00
4. $9.32

Reference basis: What is Microsoft Cost Management. These are original learning questions, not questions reproduced from the references.

Cloud economics, governance and managing supported hybrid resources

A fictional finance team distinguishes an up-front purchase of peak-sized physical servers from ongoing payment for adjustable cloud resources. Select TWO statements that accurately retain that spending-model distinction; no workload measurements or price schedule is supplied.

Select all answers that apply.

1. The server purchase commits capital before the project consumes the full peak capacity
2. The ongoing consumption relationship is an operating expense that still requires usage management
3. The operating-expense label alone establishes a lower total cost than the server purchase
4. A resource that remains allocated should be treated as released merely because the workload is quiet
5. Buying the physical servers becomes consumption billing as soon as the team installs virtualization

Reference basis: rd-az-cloud-pricing. These are original learning questions, not questions reproduced from the references.

Benefits, scaling and reliability boundaries

For a fictional Azure-hosted service, assume two running application copies both stop whenever their shared dependency F is unavailable. Requests can already be routed to either healthy copy. The specific requirement is to keep one copy available when F alone fails. Which proposed change addresses that shared failure boundary in the supplied model?

1. Give both copies more memory while keeping dependency F
2. Put one copy behind an independent dependency that does not fail with F
3. Add a third copy that also requires F
4. Increase backup frequency while leaving both running copies dependent on F

Reference basis: Describe the benefits of high availability and scalability in the cloud; Describe the benefits of reliability and predictability in the cloud. These are original learning questions, not questions reproduced from the references.

Compute fit and network reachability

A fictional application needs to reach a supported Azure service through a private IP in its virtual network and access the service’s data. Neither the connection nor the required data access is configured yet. For this exercise, a management-reader role permits reading resource configuration, not service data. Which TWO measures directly address the two missing requirements? Select TWO.

Select all answers that apply.

1. Configure a supported private endpoint for the target service
2. Use the public service endpoint with a new friendly DNS alias
3. Move the service resource into the application’s resource group
4. Provide the application’s required service-data authentication/authorization
5. Assign the management-reader role to the application identity

Reference basis: What is a private endpoint?; What is Azure Virtual Network?; Authentication vs. authorization; What is Azure Resource Manager?. These are original learning questions, not questions reproduced from the references.

Resource rules, access, and accidental-change protection

Fictional Azure deployers already have permission to create resources in a subscription. They must retain the ability to create compliant resources, but any new resource whose proposed location is outside an approved list must be rejected during creation, regardless of which authorized deployer submits it. Which change directly enforces that resource-property rule?

1. Add another Contributor role assignment for each deployer
2. Apply a CanNotDelete resource lock to existing resources
3. Create a budget threshold notification for the subscription
4. Assign an allowed-locations deny policy at the deployment scope

Reference basis: What is Azure Policy?; What is Azure role-based access control (Azure RBAC)?; Lock your Azure resources to protect your infrastructure; Tutorial: Create and manage budgets. These are original learning questions, not questions reproduced from the references.

Choose the service layer before assigning responsibility

A fictional workshop moves its own application from an on-premises server to a standard Azure PaaS application runtime. The workshop still owns its application code, customer records, and user-access decisions. Which TWO tasks are on Microsoft’s side of this PaaS infrastructure/platform boundary? Select TWO.

Select all answers that apply.

1. Maintaining the physical servers that host the platform
2. Choosing which staff identities may access the application
3. Deciding which customer records the business may disclose
4. Maintaining the operating system beneath the managed runtime
5. Implementing the business validation rules in the team’s application code

Reference basis: Shared responsibility in the cloud. These are original learning questions, not questions reproduced from the references.

Storage interface and resilience choices

A fictional media service stores independent unstructured images and retrieves them by object name through the service’s object API. Which Azure storage category matches this access interface?

1. Azure Files managed file shares
2. Azure managed disks
3. Azure Queue Storage messages
4. Azure Blob Storage objects

Reference basis: Introduction to Azure Storage. These are original learning questions, not questions reproduced from the references.

Repeatable management and deployment

A fictional version-controlled template contains only the described worker-resource declarations at a fixed resource-group deployment scope. Its workerCount parameter changes from 2 to 3 and its location parameter changes from invented region label Elm to Pine. Which TWO conclusions are supported by those declaration changes? Select TWO.

Select all answers that apply.

1. The intended worker count becomes three
2. Deployment permission is granted to the file’s author
3. The deployment scope becomes a management group
4. The intended worker location becomes Pine
5. The edited file proves that the workers have already been provisioned

Reference basis: What are ARM templates?; What is Azure Resource Manager?; What is Azure role-based access control (Azure RBAC)?. These are original learning questions, not questions reproduced from the references.