AZ-900 Microsoft Azure Fundamentals Exam

Sample Questions and Answers

Which Azure service enables you to automate workflows using prebuilt connectors?
A. Azure Logic Apps
B. Azure Functions
C. Azure Automation
D. Azure DevOps

Answer: A
Explanation: Logic Apps automate business processes visually.

Which tool allows you to centrally monitor and manage Azure subscriptions and resources?
A. Azure Portal
B. Azure PowerShell
C. Azure CLI
D. Azure Resource Manager

Answer: A
Explanation: The Azure Portal is a graphical web-based interface for management.

Which Azure service provides disaster recovery by replicating virtual machines across regions?
A. Azure Site Recovery
B. Azure Backup
C. Azure Blob Storage
D. Azure Virtual Network

Answer: A
Explanation: Site Recovery automates VM replication for DR scenarios.

What Azure service offers an API management platform to create consistent API gateways?
A. Azure API Management
B. Azure Logic Apps
C. Azure Functions
D. Azure Service Bus

Answer: A
Explanation: API Management provides centralized API publishing and security.

Which Azure service helps you estimate and control cloud costs?
A. Azure Cost Management and Billing
B. Azure Advisor
C. Azure Monitor
D. Azure Security Center

Answer: A
Explanation: Cost Management provides budgeting and cost analysis.

Which Azure feature enables multi-factor authentication and conditional access?
A. Azure Active Directory Premium
B. Azure Key Vault
C. Azure Sentinel
D. Azure Firewall

Answer: A
Explanation: Azure AD Premium supports advanced security features.

What type of Azure storage is optimized for large volumes of unstructured data?
A. Blob Storage
B. File Storage
C. Table Storage
D. Queue Storage

Answer: A
Explanation: Blob storage is ideal for unstructured data like images and videos.

Which Azure service can host containerized applications managed via Kubernetes?
A. Azure Kubernetes Service (AKS)
B. Azure Container Instances
C. Azure Functions
D. Azure App Service

Answer: A
Explanation: AKS provides managed Kubernetes clusters.

What is the purpose of Azure DevOps?
A. Provides CI/CD pipelines and project management tools
B. Manages identities
C. Monitors applications
D. Provides database hosting

Answer: A
Explanation: DevOps supports software development lifecycle automation.

Which Azure service provides a fully managed relational database compatible with MySQL?
A. Azure Database for MySQL
B. Azure SQL Database
C. Azure Cosmos DB
D. Azure Database for PostgreSQL

Answer: A
Explanation: Azure Database for MySQL offers managed MySQL databases.

What is Azure Synapse Analytics used for?
A. Integrates big data and data warehousing
B. Provides data integration workflows
C. Hosts containerized applications
D. Provides NoSQL storage

Answer: A
Explanation: Synapse combines enterprise data warehousing and big data analytics.

Which Azure service allows you to create scalable, managed Kubernetes clusters?
A. Azure Kubernetes Service (AKS)
B. Azure Container Instances
C. Azure App Service
D. Azure Functions

Answer: A
Explanation: AKS simplifies Kubernetes cluster management.

Which Azure service enables data migration to the cloud?
A. Azure Database Migration Service
B. Azure Data Factory
C. Azure Synapse Analytics
D. Azure Blob Storage

Answer: A
Explanation: Database Migration Service helps migrate on-prem databases to Azure.

Which Azure service provides a managed environment for running event-driven serverless applications?
A. Azure Functions
B. Azure App Service
C. Azure Logic Apps
D. Azure Container Instances

Answer: A
Explanation: Azure Functions allow event-driven code execution without infrastructure management.

Which Azure service provides insights into cloud cost and usage patterns?
A. Azure Cost Management
B. Azure Advisor
C. Azure Monitor
D. Azure Security Center

Answer: A
Explanation: Cost Management tracks and optimizes Azure spending.

Which Azure service allows you to automate cloud resource deployments using declarative JSON?
A. Azure Resource Manager Templates
B. Azure DevOps Pipelines
C. Azure Automation
D. Azure Logic Apps

Answer: A
Explanation: ARM templates define and deploy infrastructure as code.

What is the benefit of Azure Availability Zones?
A. Provide physically separate locations for higher availability and disaster recovery
B. Reduce storage costs
C. Increase compute capacity in a single data center
D. Provide automatic backups

Answer: A
Explanation: Availability Zones protect against datacenter failures by spreading resources.

 

Which Azure service can you use to protect your web applications from common threats like SQL injection and cross-site scripting?
A. Azure Web Application Firewall (WAF)
B. Azure Firewall
C. Azure DDoS Protection
D. Azure Security Center

Answer: A
Explanation: Azure WAF is designed to protect web apps from common exploits.

What is the main purpose of Azure Blueprints?
A. To define repeatable sets of Azure resources and policies for deployment
B. To monitor resource health
C. To provide identity management
D. To automate virtual machine scaling

Answer: A
Explanation: Blueprints enable consistent environment setup with compliance.

Which Azure service enables you to manage encryption keys and secrets securely?
A. Azure Key Vault
B. Azure Security Center
C. Azure AD Privileged Identity Management
D. Azure Policy

Answer: A
Explanation: Key Vault securely stores and manages cryptographic keys and secrets.

What is the maximum size of a single Azure Blob Storage block?
A. 4000 MB
B. 100 MB
C. 256 MB
D. 1 GB

Answer: A
Explanation: Block blobs support up to 4000 MB per block.

What Azure service allows you to create a private connection between your on-premises network and Azure?
A. Azure ExpressRoute
B. Azure VPN Gateway
C. Azure Firewall
D. Azure Bastion

Answer: A
Explanation: ExpressRoute provides a private, dedicated connection.

What is the Azure SLA (Service Level Agreement) for Azure Virtual Machines in a single availability zone?
A. 99.9%
B. 99.99%
C. 99.5%
D. 99.0%

Answer: A
Explanation: Single zone VM SLA is 99.9%, multi-zone availability increases SLA.

Which service can you use to create, deploy, and manage containers in Azure without managing servers?
A. Azure Container Instances
B. Azure Kubernetes Service
C. Azure App Service
D. Azure Functions

Answer: A
Explanation: Container Instances allow running containers serverlessly.

What Azure feature allows you to restrict access to resources based on IP address ranges?
A. Network Security Groups (NSGs)
B. Azure Firewall
C. Azure AD Conditional Access
D. Azure Policy

Answer: A
Explanation: NSGs control inbound and outbound traffic at the subnet or NIC level.

What does Azure Advisor provide?
A. Personalized best practice recommendations to optimize Azure deployments
B. Real-time threat detection
C. Automated patch management
D. Cost forecasting

Answer: A
Explanation: Advisor helps improve performance, security, and cost efficiency.

Which Azure service is designed to provide end-to-end security monitoring and threat detection?
A. Azure Sentinel
B. Azure Security Center
C. Azure Defender
D. Azure Firewall

Answer: A
Explanation: Sentinel is a cloud-native SIEM and SOAR solution.

What is the purpose of Azure Availability Sets?
A. To ensure VMs are deployed across multiple fault domains to avoid single points of failure
B. To provide backup services
C. To monitor application health
D. To encrypt VM data

Answer: A
Explanation: Availability Sets spread VMs across fault and update domains.

Which Azure storage option is best for storing logs and telemetry data?
A. Azure Blob Storage
B. Azure File Storage
C. Azure Table Storage
D. Azure Queue Storage

Answer: C
Explanation: Table Storage is a NoSQL key-value store optimized for structured data.

What is the primary use case for Azure Cognitive Services?
A. Adding AI capabilities like vision, speech, and language understanding to applications
B. Managing databases
C. Hosting virtual machines
D. Monitoring network performance

Answer: A
Explanation: Cognitive Services provide prebuilt AI APIs for developers.

Which Azure feature supports automatic scaling of resources based on demand?
A. Azure Autoscale
B. Azure Monitor
C. Azure Security Center
D. Azure Advisor

Answer: A
Explanation: Autoscale adjusts resources dynamically to meet demand.

What does the Azure Free Account provide?
A. Free access to popular services for 12 months and limited free tiers afterward
B. Unlimited free usage of all services
C. Free Azure support for one year
D. Free training and certification exams

Answer: A
Explanation: Azure Free Account offers limited free usage on select services.

Which Azure tool is used for managing infrastructure as code using JSON files?
A. Azure Resource Manager (ARM)
B. Azure CLI
C. Azure DevOps
D. Azure PowerShell

Answer: A
Explanation: ARM templates define infrastructure declaratively for deployment.

What Azure service is best for migrating large volumes of data offline?
A. Azure Data Box
B. Azure Data Factory
C. Azure Database Migration Service
D. Azure Blob Storage

Answer: A
Explanation: Data Box is a physical device for offline bulk data transfer.

Which Azure feature allows tagging of resources for cost management and organization?
A. Resource Tags
B. Azure Policy
C. Azure Blueprints
D. Azure Monitor

Answer: A
Explanation: Tags help organize and track resource usage and billing.

Which service helps automate configuration and management of Azure resources?
A. Azure Automation
B. Azure DevOps
C. Azure Logic Apps
D. Azure Functions

Answer: A
Explanation: Azure Automation runs runbooks to manage cloud resources.

Which Azure tool helps in querying logs and metrics across multiple Azure resources?
A. Azure Monitor Logs (Log Analytics)
B. Azure Advisor
C. Azure Security Center
D. Azure Sentinel

Answer: A
Explanation: Log Analytics aggregates telemetry data for advanced queries.

What is a benefit of Azure Hybrid Benefit?
A. Allows you to use existing on-prem Windows Server and SQL Server licenses in Azure
B. Free Azure credits for hybrid clouds
C. Automatic backup for hybrid environments
D. Free migration services

Answer: A
Explanation: Hybrid Benefit reduces costs by leveraging existing licenses.

What is Azure Service Health used for?
A. To provide personalized alerts and guidance for Azure service issues
B. To monitor virtual machine health
C. To track network traffic
D. To manage user identities

Answer: A
Explanation: Service Health informs users about Azure outages and maintenance.

Which Azure service offers managed relational databases for PostgreSQL?
A. Azure Database for PostgreSQL
B. Azure SQL Database
C. Azure Cosmos DB
D. Azure Database Migration Service

Answer: A
Explanation: Provides managed PostgreSQL databases.

What is the primary function of Azure Firewall?
A. To provide network traffic filtering and protection at the network layer
B. To encrypt data
C. To monitor user activities
D. To manage access control policies

Answer: A
Explanation: Azure Firewall inspects and filters traffic to protect resources.

Which Azure service enables you to run code triggered by events without provisioning servers?
A. Azure Functions
B. Azure Logic Apps
C. Azure App Service
D. Azure Virtual Machines

Answer: A
Explanation: Functions run event-driven serverless code.

What type of cloud model is Microsoft Azure considered?
A. Public Cloud
B. Private Cloud
C. Hybrid Cloud
D. Community Cloud

Answer: A
Explanation: Azure is a public cloud provider.

Which Azure service supports managing multi-cloud and hybrid environments?
A. Azure Arc
B. Azure Sentinel
C. Azure Security Center
D. Azure Monitor

Answer: A
Explanation: Azure Arc extends Azure management to any infrastructure.

Which service helps protect Azure resources from Distributed Denial of Service (DDoS) attacks?
A. Azure DDoS Protection
B. Azure Firewall
C. Azure Security Center
D. Azure Sentinel

Answer: A
Explanation: DDoS Protection safeguards against volumetric attacks.

What is the main benefit of Azure SQL Database?
A. Fully managed relational database service with high availability and scalability
B. NoSQL document database
C. Storage for unstructured blobs
D. Virtual machine hosting

Answer: A
Explanation: Azure SQL Database handles database management automatically.

What Azure service offers a serverless event ingestion and streaming platform?
A. Azure Event Hubs
B. Azure Service Bus
C. Azure Queue Storage
D. Azure Notification Hubs

Answer: A
Explanation: Event Hubs supports real-time data streaming at scale.