AZ-900 - Microsoft Azure Fundamentals Sample Questions - Microsoft Docs
AZ-900 - Microsoft Azure Fundamentals Sample Questions - Microsoft Docs
Docs
/
In this article
User Guide
Questions
Questions and Answers
User Guide
These sample questions are intended to provide an overview of the style, wording, and
difficulty of the questions that you are likely to experience on this exam. These questions
are not the same as what you will see on the exam nor is this document illustrative of the
length of the exam or its complexity (e.g., you may see additional question types, multiple
case studies, and possibly labs). These questions are examples only to provide insight into
what to expect on the exam and help you determine if additional preparation is required.
In the first section, you will find the questions without answers so that you can test your
knowledge. In the second section, the answer, a rationale, and a URL that will link you to
additional information is provided immediately below each question.
Questions
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 1/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
C. administrative units
D. Conditional Access
Single sign-on (SSO) is __________ method that enables users to sign in the first time and
access various applications and resource by using same password.
A. a validation
B. an authentication
C. a configuration
D. an authorization
Question # 3 (Matching)
Match the services on the left to the correct descriptions on the right.
Services Descriptions
B. TCO 2. Estimates the cost savings by comparing datacenter costs to running the same
calculator workload on Azure
f
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 2/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
__________ is a repeatable set of governance tools that helps development teams quickly
build and create new environments while adhering to organizational compliance to speed
up development and deployment.
A. Azure DevOps
C. Azure Blueprints
D. Azure Policy
Question # 5 (Matching)
Match the services on the left to the correct descriptions on the right.
Services Descriptions
B. Platform as a 2. Provides a fully managed environment for developing, testing, delivering, and
service (PaaS) managing cloud-based applications
C. Software as a 3. Provides servers and virtual machines, storage, networks, and operating
service (SaaS) systems on a pay-as-you-go basis
A. Public cloud
B. Private cloud
C. Hybrid cloud
D. On-premises datacenter
__________ copies data to a secondary region from the primary region across multiple
datacenters that are located many miles apart.
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 3/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
A. Premium storage
A. ExpressRoute
C. Site-to-Site VPN
A. Azure regions
B. Resource groups
C. Management groups
D. Administrative units
B. Perimeter layer
C. Network layer
D. Application layer
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 4/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
A. Azure Functions
D. Azure DevOps
A. Azure portal
B. Azure PowerShell
B. An availability set
C. Azure Batch
D. An availability zone
Question # 14 (Matching)
Match the services on the left to the correct descriptions on the right.
Services Descriptions
A. Azure 1. Rapidly provisions and runs new environments with the knowledge that they are
Resource in line with the organization’s compliance requirements.
Locks
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 5/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
B. An availability set
__________in Azure enables you to deploy Azure resources close to the users.
A. Elasticity
B. Scalability
C. Geo-distribution
D. High availability
A. A Point-to-Site VPN
C. A Site-to-Site VPN
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 6/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
A. Resource groups
B. Management groups
__________ alerts you when service issues occur in an Azure environment, such as a regional
Azure outage that affects all Azure customers.
A. Azure Monitor
B. Azure Advisor
Question # 20 (Matching)
Match the services on the left to the correct descriptions on the right.
Services Descriptions
C. administrative units
D. Conditional Access
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 7/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
Answer: D
Rationale: Conditional Access is the tool used by Azure Active Directory to allow (or deny) access
to resources based on identity signals. Conditional access is a more refined MFA
(multifactor authentication) method.
URL: https://docs.microsoft.com/learn/modules/secure-access-azure-identity-services/4-
what-are-mfa-conditional-access
Single sign-on (SSO) is __________ method that enables users to sign in the first time and
access various applications and resource by using same password.
A. a validation
B. an authentication
C. a configuration
D. an authorization
Answer: B
Rationale: Single sign-on is an authentication method that allows users to sign in using one set of
credentials to login across applications. Single sign-on makes it easier to manage
passwords and increases security capabilities.
URL: https://docs.microsoft.com/learn/modules/secure-access-azure-identity-services/3-
what-is-azure-active-directory
Question # 3 (Matching)
Match the services on the left to the correct descriptions on the right.
Services Descriptions
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 8/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
Services Descriptions
B. TCO 2. Estimates the cost savings by comparing datacenter costs to running the same
calculator workload on Azure
URL: https://docs.microsoft.com/learn/modules/plan-manage-azure-costs/
__________ is a repeatable set of governance tools that helps development teams quickly
build and create new environments while adhering to organizational compliance to speed
up development and deployment.
A. Azure DevOps
C. Azure Blueprints
D. Azure Policy
Answer: C
Objective: 3.2 Describe features and tools in Azure for governance and compliance
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 9/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
Rationale: Sometimes Cloud environment grow beyond just one subscription, in that case Azure
Blueprints help to scale the configuration. Azure Blueprints help with repeatable tasks
so that development teams rapidly build and deploy new environments and speed the
overall development and deployment phases.
URL: https://docs.microsoft.com/learn/modules/build-cloud-governance-strategy-azure/8-
govern-subscriptions-azure-blueprints
Question # 5 (Matching)
Match the services on the left to the correct descriptions on the right.
Services Descriptions
B. Platform as a 2. Provides a fully managed environment for developing, testing, delivering, and
service (PaaS) managing cloud-based applications
C. Software as a 3. Provides servers and virtual machines, storage, networks, and operating
service (SaaS) systems on a pay-as-you-go basis
Rationale: Infrastructure as a service (IaaS) -Offers necessary compute, storage, and networking
assets on demand, on a pay-as-you-go basis.
Software as a service (SaaS) -Host and manage the software application and underlying
infrastructure.
URL: https://docs.microsoft.com/learn/modules/fundamental-azure-concepts/categories-of-
cloud-services
f
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true f 10/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
A. public cloud
B. private cloud
C. hybrid cloud
D. on-premises datacenter
Answer: C
Rationale: Public clouds (For example Microsoft Azure) owned and operated by third-party cloud
service providers, to deliver their computing resources such as servers and storage over
the Internet. Cloud Provider manage all hardware, software, and other supporting
infrastructure.
URL: https://docs.microsoft.com/learn/modules/fundamental-azure-concepts/types-of-
cloud-computing
__________ copies data to a secondary region from the primary region across multiple
datacenters that are located many miles apart.
A. Premium storage
Answer: C
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 11/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
Rationale: Geo-redundant storage (GRS) -Replicates your data to a secondary region that is in
different geographic locations from the primary region.
URL: https://docs.microsoft.com/learn/modules/azure-architecture-fundamentals/regions-
availability-zones
A. ExpressRoute
C. Site-to-Site VPN
Answer: C
Rationale: Site-to-site VPN: Established between on-premises VPN device and an Azure VPN
Gateway that is deployed in a virtual network. This connection type allow
communication between any on-premises authorize resource to access a virtual
network through an encrypted tunnel.
URL: https://docs.microsoft.com/learn/modules/azure-architecture-fundamentals/regions-
availability-zones
A. Azure regions
B. Resource groups
C. Management groups
D. Administrative units
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 12/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
Answer: B
Rationale: Azure resources are combined into resource groups, which act as logical containers into
which Azure resources like web apps, databases, and storage accounts are deployed
and managed.
URL: https://docs.microsoft.com/learn/modules/azure-architecture-fundamentals/overview
B. Perimeter layer
C. Network layer
D. Application layer
Answer: B
Rationale: The perimeter layer uses distributed denial of service (DDoS) protection to filter large-
scale attacks before they can cause a denial of service for users.
URL: https://docs.microsoft.com/learn/modules/secure-network-connectivity-azure/2-what-
is-defense-in-depth
A. Azure Functions
D. Azure DevOps
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 13/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
Answer: B
Rationale: Azure Logic Apps are designed in a web-based designer and can execute logic
triggered by Azure services without writing any code.
URL: https://docs.microsoft.com/learn/modules/azure-compute-fundamentals/azure-
functions
A. Azure portal
B. Azure PowerShell
Answer: A
Objective: 3.3 Describe features and tools for managing and deploying Azure resources
• Azure portal: Select the Cloud Shell icon on the Azure portal.
• Code snippets: On docs.microsoft.com and Microsoft Learn, select the Try It button
URL: https://docs.microsoft.com/azure/cloud-shell/overview
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 14/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
A. An Azure virtual machine scale set
B. An availability set
C. Azure Batch
D. An availability zone
Answer: C
Rationale: Azure Batch allows you to scale to thousands of virtual machines for high-performance
computing (HPC) and large-scale parallel jobs. Other Azure functionalities allow you to
scale multiple VMs, but only Azure Batch will allow for thousands of VMs for HPC.
URL: https://docs.microsoft.com/learn/modules/azure-compute-fundamentals/azure-virtual-
machines
Question # 14 (Matching)
Match the services on the left to the correct descriptions on the right.
Services Descriptions
A. Azure 1. Rapidly provisions and runs new environments with the knowledge that they are
Resource in line with the organization’s compliance requirements
Locks
Objective: 3.2 Describe features and tools in Azure for governance and compliance
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 15/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
Rationale: Resource locks can be used to prevent resources from being accidentally deleted or
changed. Even with role-based access control policies in place there is still a risk that
people with the right level of access could delete a critical resource. Azure Resource
Manager locks prevent users from accidentally deleting or modifying a critical resource,
and can be applied to a subscription, a resource group, or a resource.
Azure Blueprints provide a way to define a repeatable set of Azure resources. Azure
Blueprints enable development teams to rapidly provision and run new environments,
with the knowledge that they're in line with the organization’s compliance
requirements. Teams can also provide Azure resources across several subscriptions
simultaneously, meaning they can achieve shorter development times and quicker
delivery.
Azure Policy is designed to help enforce standards and assess compliance across your
organization. Through its compliance dashboard, you can access an aggregated view to
help evaluate the overall state of the environment. You can drill down to a per-resource,
or per-policy level granularity. You can also use capabilities like bulk remediation for
existing resources and automatic remediation for new resources, to resolve issues
rapidly and effectively
URL: https://docs.microsoft.com/learn/modules/build-cloud-governance-strategy-azure/
B. An availability set
Answer: C
Rationale: Virtual machine scale enables you to provision a group of matching and load-balanced
virtual machines in Azure.
Imagine you are running a website that enables scientists to upload astronomy images
that need to be processed. If you duplicated the VM, you would normally need to
configure an additional service to route requests between multiple instances of the
website. Virtual machine scale sets could do that work for you.
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 16/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
URL: https://docs.microsoft.com/learn/modules/azure-compute-fundamentals/azure-virtual-
machines
_________in Azure enables you to deploy Azure resources close to the users.
A. Elasticity
B. Scalability
C. Geo-distribution
D. High availability
Answer: C
Rationale: Because of geo-distribution you can deploy apps and data to regional datacenters
around the globe, thereby ensuring that your customers always have the best
performance in their region.
URL: https://docs.microsoft.com/learn/modules/fundamental-azure-concepts/benefits-of-
cloud-computing
A. A Point-to-Site VPN
C. A Site-to-Site VPN
Answer: B
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 17/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
• CloudExchange colocation
• Any-to-any-connection
URL: https://docs.microsoft.com/learn/modules/azure-networking-fundamentals/express-
route-fundamentals
A. Resource groups
B. Management groups
Answer: B
Rationale: Management groups help you manage access, policy, and compliance for multiple
subscriptions. All subscriptions in a management group automatically inherit the
conditions applied to the management group.
URL: https://docs.microsoft.com/learn/modules/azure-architecture-fundamentals/overview
__________ alerts you when service issues occur in an Azure environment, such as a regional
Azure outage that affects all Azure customers.
A. Azure Monitor
B. Azure Advisor
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 18/20
6/24/22, 5:02 PM AZ-900: Microsoft Azure Fundamentals Sample Questions | Microsoft Docs
C. Azure Service Health
D. Azure Application Insights
Answer: C
Rationale: Azure Service Health alerts you about service issues that happen in Azure itself, such as
a regional Azure outage
URL: https://docs.microsoft.com/learn/modules/monitoring-fundamentals/2-identify-
product-options
Question # 20 (Matching)
Match the services on the left to the correct descriptions on the right.
Services Descriptions
Answer: A2, B1
URL: https://docs.microsoft.com/learn/modules/secure-access-azure-identity-services/2-
compare-authentication-authorization
Recommended content
Show more S
https://docs.microsoft.com/en-us/learn/certifications/resources/az-900-sample-questions?azure-portal=true 20/20