Skip to content
OpenExam.
HomeAll exams
  1. Home
  2. All exams
  3. AZ-900
  4. Room for pencil and paper.
OverviewLearnPracticeFlashcards42
Practice a setSample questionsPDF worksheetsPrint custom set
PRINT STUDIO

Room for pencil and paper.

Print a worksheet, or choose “Save as PDF” in your browser’s print dialog.

OpenExam.AZURE FUNDAMENTALS · FOUNDATION PRACTICE

Mixed skills

Name: __________________________Date: __________________

10 original practice questions · Untimed · Follow each question’s response instructions

1. A fictional Azure training project needs processing capacity for an irregular ten-week campaign. Its requirement is to avoid purchasing hardware sized for the busiest week and to adjust the resources it consumes as demand changes. Which approach directly matches that consumption objective?

A. Buy peak-sized servers before the campaign and retain them afterwardB. Keep a fixed average-demand resource quantity even through peaksC. Adjust rented resource quantities to the campaign’s actual demandD. Rent the maximum resource quantity for every campaign week
az900-q-001

2. A fictional records application is moving to Azure VMs. It cannot yet replace LDAP authentication and domain-join dependencies. The team wants managed domain services rather than operating domain-controller VMs. Which capability directly fits this transition?

A. Operate customer-managed domain-controller VMs for the applicationB. Rewrite the application to replace LDAP with modern token authenticationC. Use Microsoft Entra Domain Services for its supported legacy protocolsD. Use B2B guest invitations as the application’s LDAP endpoint
az900-q-045

3. A fictional team evaluates a training service under several specified failure cases. For each case it restores saved state, checks the restored output, and records whether the required processing resumes. Which cloud-benefit concept is most directly investigated by those recorded outcomes?

A. Performance scalabilityB. Cost predictabilityC. ReliabilityD. Performance predictability
az900-q-007

4. A design office wants an external research partner to access a shared application using the partner’s existing identity. The office must retain control over access to its own resources rather than create an ordinary employee account for the partner. Which feature directly supports this collaboration?

A. Invite the partner with B2B collaboration and grant the needed shared-app accessB. Provision a separate employee-style account and password for the partner in the office tenantC. Provide a managed-domain account for legacy LDAP access instead of sharing the modern applicationD. Set a device condition but leave the partner without a guest relationship or shared-app access
az900-q-046

5. In a fictional Azure exercise, a user’s active resource role permits creation. An applicable allowed-locations deny policy rejects the proposed resource’s location. Which interaction model explains why the permitted action can still be rejected?

A. Role authorization replaces applicable policy for an authorized userB. Applicable policy replaces every need for role authorizationC. Role authorization and applicable policy both affect this operationD. The newest assignment selects role or policy as the sole check
az900-q-035

6. A fictional team deploys its own code to Azure Functions so that uploaded files trigger a short processing task. It selects the managed serverless service instead of administering the guest operating system of a VM. Which TWO observations match this described service relationship? Select TWO.

Select all that apply.

A. The team consumes a finished collaboration application instead of deploying its codeB. The deployed code can execute in response to a configured file-upload triggerC. Guest operating-system administration remains the team’s chosen hosting taskD. The platform provides the underlying server infrastructure for the functionE. Application-code changes and code security move to the platform provider
az900-q-004

7. A fictional web service needs the number of VM instances to increase or decrease with demand. Which proposal directly supplies instance-group management and scaling rather than only distributing traffic to existing instances?

A. Deploy a load balancer but keep the VM count fixedB. Use an availability set but keep the VM count fixedC. Use Azure Virtual Machine Scale Sets with appropriate scaling configurationD. Increase only one VM’s size while keeping the group count fixed
az900-q-053

8. A fictional engineering lab must run a Linux application that loads its own guest-operating-system kernel module. The lab will patch and configure that guest OS itself. It wants Azure-hosted infrastructure while retaining this host-level control. Which option matches the stated service-layer requirement?

A. Azure App Service (PaaS)B. Azure Virtual Machines (IaaS)C. Azure Functions (PaaS)D. Microsoft 365 collaboration software (SaaS)
az900-q-009

9. A fictional team must run its own small processing routine whenever a blob is uploaded. It specifically wants a managed event-triggered execution service and does not want to administer a guest OS. Which listed Azure option directly fits that execution requirement?

A. An Azure virtual machine that the team patches and monitorsB. Azure Files used as a shared file storeC. Azure Blob Storage used only to retain the uploaded objectD. Azure Functions with a configured upload trigger
az900-q-017

10. A fictional Azure design note asks separately for a logically isolated network environment for resources and for domain names to resolve to endpoints. Which pairing matches those purposes?

A. Azure DNS for network isolation; a virtual network for name resolutionB. A virtual network for both the isolated network and hosting public DNS domain recordsC. A virtual network for the network environment; Azure DNS for name resolutionD. A private endpoint for the isolated network environment; Azure DNS for name resolution
az900-q-019
OpenExam.ANSWER KEY · KEEP SEPARATE

Answers & reasoning

1. Adjust rented resource quantities to the campaign’s actual demand · Choice C

The requirement concerns how capacity and spending exposure follow demand, not a promised lower lifetime bill. A consumption model permits changing the resources used rather than purchasing all peak capacity up front. A fixed average quantity does not follow peaks; a fixed maximum quantity retains idle-capacity exposure when demand is lower.

az900-q-001

2. Use Microsoft Entra Domain Services for its supported legacy protocols · Choice C

The application explicitly depends on traditional managed-domain protocols and domain join. Microsoft Entra Domain Services supplies these compatible domain capabilities without the team operating the domain controllers itself. This is a bridge for the stated legacy dependency, not a claim that all applications should use legacy protocols.

az900-q-045

3. Reliability · Choice C

Identify the event and outcome: a failure is introduced and continued function after recovery is checked. Reliability concerns a system’s ability to recover from failures and continue functioning. Scaling and cost/performance forecasting are legitimate concerns but are not the stated purpose of this recovery exercise.

az900-q-007

4. Invite the partner with B2B collaboration and grant the needed shared-app access · Choice A

The user belongs to another organization, while the shared application belongs to the design office. B2B collaboration supports inviting external guests who use their own identities while the resource organization retains control. The invitation is not blanket permission to every resource; the office must still manage the access it grants.

az900-q-046

5. Role authorization and applicable policy both affect this operation · Choice C

The case supplies both an allowed role action and a resource proposal that fails an applicable deny rule. Role permission does not make the resource property compliant with that rule; both relevant checks affect the operation. Neither role-versus-policy replacement nor recency of an assignment establishes the supplied interaction. This addresses the stated rule and does not reduce all Policy effects to one universal behavior.

az900-q-035

6. The deployed code can execute in response to a configured file-upload trigger; The platform provides the underlying server infrastructure for the function

The case describes customer code responding to an event on a managed Functions platform. Functions supplies event-driven triggers and managed infrastructure, so trigger execution and platform-provided infrastructure match the relationship. Consuming finished SaaS, administering a VM guest OS and transferring customer application-code work are different service/control relationships from the one described.

az900-q-004

7. Use Azure Virtual Machine Scale Sets with appropriate scaling configuration · Choice C

The requested change is the number of VM instances, so traffic distribution or a fixed-count placement decision does not itself satisfy it. VM Scale Sets manage groups of instances and can increase or decrease their count with demand or a schedule. A complete design may also need load balancing and reliability decisions. The correct capability is selected for the stated group-scaling job, not as a claim that instance count alone solves application performance or availability.

az900-q-053

8. Azure Virtual Machines (IaaS) · Choice B

The decisive condition is control over the guest operating system, including its kernel modules, not merely the ability to upload application code. Azure Virtual Machines is an IaaS option: Microsoft maintains the underlying cloud infrastructure while the customer manages its guest OS and application. App Service and Functions are PaaS examples in which the provider maintains the underlying OS/platform. That management boundary does not match this custom guest-kernel requirement. A finished collaboration application is SaaS; it is not an environment for administering this Linux guest OS.

az900-q-009

9. Azure Functions with a configured upload trigger · Choice D

The task requires execution of customer code in response to an event, not just storage of the uploaded content. Azure Functions provides event-driven triggers and managed function execution, matching the explicitly requested service model. A customer-administered VM retains the excluded guest-OS work. Blob and file storage provide data interfaces, not this configured custom-code execution service by themselves.

az900-q-017

10. A virtual network for the network environment; Azure DNS for name resolution · Choice C

The first requirement concerns a logical networking environment; the second concerns translating names to the intended endpoint information. Azure virtual networks and Azure DNS address those respective purposes. A private endpoint connects a service through an interface in a virtual network; it does not replace that network. The network boundary also does not itself host the public DNS domain records.

az900-q-019

Original source-grounded practice. Content and reasoning checks are separate from professional educator review, which remains pending. Not an official exam paper.

OpenExam · Independent Azure Fundamentals practiceFoundation pilot · No official score predictionAbout & editorial approachSources & content notes