Azure Fundamentals (AZ-900) - Full Practice Exam 1

1. A branch office needs encrypted connectivity to an Azure virtual network across the public internet. Which Azure service is designed for this?
2. A business wants isolated cloud infrastructure dedicated to its organization and operated in its own datacenter. Which cloud model best matches this requirement?
3. A cloud team must prevent creation of resources in Azure regions outside an approved list. Which service is designed to enforce this resource configuration rule?
4. A company deploys an application across separate availability zones within one Azure region. What type of isolation does this primarily provide?
5. A company moves its application to Azure virtual machines. Microsoft operates the physical hosts. Which responsibility remains with the company?
6. A company must keep backup objects for seven years. They are rarely retrieved, and a delay of several hours before reading them is acceptable. Which Blob Storage access tier is designed for this pattern?
7. A company needs a private IP network for its Azure virtual machines and separate address segments for application tiers. Which two resources directly meet these requirements? Select TWO.
8. A company wants its application to remain accessible when an individual component fails. Which cloud benefit is it primarily seeking?
9. A company wants private connectivity from its datacenter to Microsoft cloud services through a connectivity provider rather than over the public internet. Which service best fits?
10. A company wants to require multifactor authentication when a user signs in under conditions defined by the security team. Which capability evaluates sign-in signals and enforces access requirements?
11. A company wants users to sign in to cloud applications with a centrally managed identity. Which service supplies the cloud identity and access management foundation?
12. A compliance team wants to organize several related Azure Policy definitions and assign them together. Which object should it use?
13. A contractor must view Azure resource settings in one resource group without modifying them. Which access assignment best follows least privilege?
14. A customer uses a provider-hosted SaaS application. Which two responsibilities still belong to the customer? Select TWO.
15. A department configures an Azure budget for $1,000. What should its administrator understand about the default effect when the threshold is reached?
16. A developer needs Azure CLI and PowerShell tools from a browser without installing them on a workstation. Which Azure feature provides this environment?
17. A development team wants to deploy a web application without patching its hosting operating system. It still needs to control application code and configuration. Which service model is the best fit?
18. A finance analyst wants to estimate the monthly Azure cost of a proposed set of services before deployment. Which tool should the analyst use first?
19. A finance team wants an alert when forecast Azure spending approaches its monthly budget. Which capability should it configure?
20. A function processes an uploaded file when an event occurs. The team wants the platform to manage server provisioning and scaling. Which computing approach matches this requirement?
21. A governance team wants to discover and understand business data across its data estate, including cataloging and lineage capabilities. Which Microsoft solution should it evaluate?
22. A legacy application requires administrator access to its operating system and a custom background driver. Which Azure hosting choice best preserves this control?
23. A manufacturer retains a factory application in its private datacenter while running a connected reporting service in Azure. Which deployment model does this describe?
24. A platform team wants recommendations about underused virtual machines and ways to improve the reliability and security of deployed Azure resources. Which service should it review?
25. A retailer has a short holiday sales peak and low demand for the rest of the year. It wants to avoid purchasing servers sized for the peak. Which cloud characteristic most directly meets this goal?
26. A site needs to move a very large dataset to Azure but has insufficient network bandwidth to complete the transfer on schedule. Which service offers a physical transfer-device approach?
27. A startup replaces a large upfront server purchase with monthly charges for the resources it consumes. Which financial change does this illustrate?
28. A storage account must be reached using a private IP address in a virtual network. Which feature directly provides the storage service with that private network endpoint?
29. A storage design must keep copies across availability zones in the primary region. Which redundancy option directly describes this arrangement?
30. A team assumes moving to the cloud means it never needs to configure security or plan for failures. Which explanation should an architect give?
31. A team has increased a single virtual machine's memory and processor count to support a larger workload. Which scaling approach did it use?
32. A team needs both infrastructure monitoring and an automatic notification when a metric crosses a configured threshold. Which two Azure Monitor capabilities support these needs? Select TWO.
33. A team wants repeatable deployments described in source-controlled files rather than recreating resources manually in the portal. Which approach best fits?
34. A team wants visibility into application response times, exceptions, and request dependencies. Which Azure Monitor capability is designed for application performance monitoring?
35. A user has Contributor access to a resource group. The organization also requires every new storage account to use an approved configuration. Which statement correctly distinguishes the two controls?
36. An administrator needs to copy a large set of files from a local workstation to Azure Blob Storage using a command-line tool. Which tool is purpose-built for this task?
37. An administrator wants to manage related Azure resources as a lifecycle collection and delete the collection when a test ends. Which Azure construct fits?
38. An administrator wants to query collected operational log records using Kusto Query Language. Which Azure Monitor interface is designed for this analysis?
39. An administrator wants to reduce accidental deletion of an important Azure resource while allowing authorized updates. Which resource lock best fits?
40. An application is affected by a Microsoft service incident in a region it uses. The team wants personalized incident and planned-maintenance information for its Azure services. Which service fits?
41. An application needs a managed SMB file share that Windows machines can mount. Which Azure Storage service should it use?
42. An application stores photographs and downloadable documents accessed through object URLs. Which Azure Storage service is the most direct fit?
43. An enterprise has several Azure subscriptions and wants to apply governance consistently above them. Which scope should it use?
44. An online service adds more application instances during a traffic surge. Which scaling approach is being used?
45. An operations team wants a consistent Azure management layer for supported servers located on-premises and in other clouds. Which service should it evaluate?
46. An organization adopts a security approach that explicitly verifies access, uses least privilege, and assumes compromise is possible. Which security model is this?
47. An organization subscribes to Microsoft 365 to let staff use email and collaboration applications. It does not deploy or maintain those applications' server software. Which service model is this?
48. An organization wants to assess on-premises servers before planning their migration to Azure. Which service provides a central migration assessment and migration hub?
49. An organization wants to group Azure spending reports by department without moving resources to different resource groups. Which metadata should it apply consistently?
50. Two Azure virtual networks need direct private-IP communication across the Microsoft backbone. Their address ranges do not overlap. Which capability should an administrator consider?

Comments — 0