Try 10 Real Questions From Microsoft Azure Fundamentals (AZ-900) - 800 Questions & Answers with Full Rationale
These are unedited questions from the full 800-question set, pulled from across every exam domain. Click a question to reveal the answer and the full rationale for every option, exactly as it appears in the PDF.
A test website needs to run for just two weeks and then be shut down, with no servers worth buying for such a short project. What best explains why cloud computing fits this need?
Show answer & full rationale
A: This describes on-premises ownership — in the cloud the provider manages hardware and cooling — so it is not why cloud fits a short-term project.
B (Correct): Cloud provisions resources on demand and releases them when you're done, so a two-week test site can spin up instantly and be torn down with no hardware to buy or maintain — exactly what a short-lived project needs.
C: Cloud is not always cheaper than every on-premises setup; cost comparison depends on usage patterns, not a blanket guarantee.
D: Cloud consumption models are typically pay-as-you-go, not locked into long-term contracts, which is the opposite of what this option claims.
Which statement best fits an organization that wants to avoid large upfront purchases and treat cloud spend as monthly operating costs?
Show answer & full rationale
A (Correct): Treating cloud spend as monthly operating cost rather than large up-front purchases aligns with an OpEx spending pattern.
B: Cloud bills vary with consumption and are not inherently fixed or predictable month to month.
C: Shifting to OpEx still requires budget planning; it changes the spending model, not the need to plan.
D: This describes CapEx (large upfront purchases), the opposite of the OpEx pattern the organization wants.
Which statement BEST describes the shared responsibility model in cloud computing?
Show answer & full rationale
A: Security responsibility does not disappear in the cloud; it shifts and is shared according to the service model.
B: The provider is not responsible for all security in every case; customers retain responsibilities such as data and identity protection.
C: The customer is never responsible for physical data center security in the cloud; the provider always retains that responsibility.
D (Correct): The shared responsibility model divides security duties between the provider and customer, with the exact split depending on the service model used.
A company hears “region pair” and assumes it means two datacenters in the same building. What is the best correction?
Show answer & full rationale
A: A storage account tier is an unrelated concept about how data is stored and billed, not about pairing regions.
B (Correct): A region pair is two separate regions paired within the same geography — not two datacenters in one building.
C: An availability zone is a physically separate location within a single region, a different concept from a region pair.
D: A region pair has nothing to do with subscription types, which govern billing and access, not geography.
Which is a key difference between VMs and App Service?
Show answer & full rationale
A (Correct): The key difference: VMs require more OS maintenance by the customer than App Service does.
B: VMs can run Windows just as easily as Linux; this is not a real limitation.
C: Hosting web applications is App Service's core purpose, not something it's incapable of.
D: App Service actually gives less OS-level control than a VM, since the platform manages the underlying OS for you.
A company needs a cloud storage option that supports shared files and can be accessed like a traditional file share by multiple VMs. Which Azure storage service best fits?
Show answer & full rationale
A: Blob Storage is object storage for unstructured data like images, videos, and backups, not a mountable file share.
B (Correct): A cloud file share accessible like a traditional share by multiple VMs is Azure Files.
C: Queue Storage is a message queue for decoupling application components, not a file share.
D: Table Storage is NoSQL key-value storage for structured/semi-structured data, not a file share.
Which Azure identity service provides cloud-based identity and access management, including user authentication for Azure resources?
Show answer & full rationale
A (Correct): Microsoft Entra ID provides cloud-based identity and access management, including authenticating users for Azure resources.
B: Azure DNS resolves domain names to IP addresses, unrelated to identity and access management.
C: Azure CDN caches and delivers content from edge locations, unrelated to identity and access management.
D: Azure Data Box is a physical data transfer appliance, unrelated to identity and access management.
Which Azure access control model assigns permissions to users based on their role, such as Contributor or Reader, scoped to a specific resource, resource group, or subscription?
Show answer & full rationale
A: Azure DNS resolves domain names to IP addresses, unrelated to assigning role-based permissions.
B: Azure CDN caches and delivers content from edge locations, unrelated to assigning role-based permissions.
C: Azure Data Box is a physical data transfer appliance, unrelated to assigning role-based permissions.
D (Correct): Azure RBAC assigns permissions based on a user's role, such as Contributor or Reader, scoped to a specific resource, group, or subscription.
Which Azure governance tool enforces organizational rules, such as requiring all resources to be tagged with a cost center, and can audit non-compliant resources?
Show answer & full rationale
A: Azure CDN caches and delivers content geographically, unrelated to enforcing organizational governance rules.
B: Azure Data Box is a physical data transfer appliance, unrelated to enforcing organizational governance rules.
C: Azure DNS resolves domain names to IP addresses, unrelated to enforcing organizational governance rules.
D (Correct): Azure Policy enforces organizational rules, such as required tagging, and can audit resources that are not compliant.
Which Azure Cost Management capability helps a company set a maximum spending threshold and receive alerts as costs approach that limit?
Show answer & full rationale
A: Azure Policy enforces governance rules about resource configuration, not specifically spending threshold alerts.
B (Correct): Budgets in Azure Cost Management let a company set spending thresholds and receive alerts as actual costs approach that limit.
C: Resource locks prevent accidental deletion or modification of resources, unrelated to setting spending thresholds.
D: Azure Advisor recommendations suggest cost optimizations but do not themselves set a spending threshold with alerts.
Microsoft Azure Fundamentals (AZ-900) - 800 Questions & Answers with Full Rationale — $19.99, instant PDF download with full rationale on every answer.
View the practice questions →