Microsoft AZ-900 Practice Questions with Explanations

Free Microsoft AZ-900 practice questions. 50 of them, each with the correct answer, a full explanation, and the reason every other option is wrong. These are real questions from the AZ-900 exam, not paraphrases, and every explanation is written out rather than just marking the right letter.

They are drawn from the same bank as the full AZ-900 pack, which has 474 questions in total.

Get the full AZ-900 question bank (474 questions) →

AZ-900 practice questions

Question 1

Your company has datacenters in Los Angeles and New York. The company has a Microsoft Azure subscription. You are configuring the two datacenters as geo-clustered sites for site resiliency. You need to recommend an Azure storage redundancy option. You have the following data storage requirements: • Data must be stored on multiple nodes. • Data must be stored on nodes in separate geographic locations. • Data can be read from the secondary location as well as from the primary location Which of the following Azure stored redundancy options should you recommend?

  • A. Geo-redundant storage
  • B. Read-only geo-redundant storage
  • C. Zone-redundant storage
  • D. Locally redundant storage
Show answer and explanation ▾

Correct answer: A

Geo-redundant storage (GRS) meets all three requirements: it replicates data across multiple nodes within the primary region and to a secondary region in a paired geographic location, ensuring data is stored in separate geographic locations. While GRS typically provides read-only access to the secondary region during an outage, the question asks which option stores data on nodes in separate geographic locations and can be read from secondary location. GRS satisfies these requirements. Read-only geo-redundant storage (RA-GRS) would allow reads from the secondary at any time, but GRS is the base redundancy option that meets the geographic separation requirement.

Why the other options are wrong:

  • B. RA-GRS provides read access to secondary, but it is more expensive than GRS when read access to secondary isn't always required.
  • C. Zone-redundant storage only replicates data across availability zones within a single region, not across separate geographic locations.
  • D. Locally redundant storage only replicates within a single location and does not provide geographic distribution across separate datacenters.

Question 2

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's Azure subscription includes a Basic support plan. They would like to request an assessment of an Azure environment's design from Microsoft. This is, however, not supported by the existing plan. You want to make sure that the company subscribes to a support plan that allows this functionality, while keeping expenses to a minimum. Solution: You recommend that the company subscribes to the Professional Direct support plan. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

The Professional Direct support plan is not a valid Azure support tier. Azure support plans include Basic (free), Developer, Standard, and Professional Direct. However, the requirement is to assess Azure environment design from Microsoft while minimizing costs. The appropriate plan would be Standard or Professional Direct. Since the question recommends Professional Direct (which does exist), but asks if this meets the goal of minimum expense, the Standard plan would be more cost-effective for design assessments. The answer is No because Professional Direct is the most expensive option, contradicting the cost minimization requirement.

Why the other options are wrong:

  • A. No is the correct answer; Professional Direct is the premium support plan and does not minimize expenses.

Question 3

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are tasked with deploying Azure virtual machines for your company. You need to make use of the appropriate cloud deployment solution. Solution: You should make use of Software as a Service (SaaS). Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

SaaS (Software as a Service) is not appropriate for deploying Azure virtual machines. SaaS provides fully managed applications accessed through a web browser, such as Microsoft 365 or Salesforce. Deploying virtual machines requires infrastructure-level control, which SaaS does not provide. Virtual machines are part of the IaaS (Infrastructure as a Service) cloud model, where you manage the VMs, operating systems, and applications while Azure manages the underlying infrastructure.

Why the other options are wrong:

  • A. Yes is incorrect; SaaS is not used for deploying virtual machines.

Question 4

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are tasked with deploying Azure virtual machines for your company. You need to make use of the appropriate cloud deployment solution. Solution: You should make use of Platform as a Service (PaaS). Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

PaaS (Platform as a Service) is not the appropriate solution for deploying Azure virtual machines. PaaS provides a managed platform for developing and running applications, such as Azure App Service or Azure SQL Database, without managing underlying compute resources. Deploying virtual machines requires direct infrastructure control at the IaaS level. With PaaS, you cannot deploy and manage virtual machines yourself; the platform abstracts away infrastructure management entirely.

Why the other options are wrong:

  • A. Yes is incorrect; PaaS does not allow direct VM deployment and management.

Question 5

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are tasked with deploying Azure virtual machines for your company. You need to make use of the appropriate cloud deployment solution. Solution: You should make use of Infrastructure as a Service (IaaS). Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: A

IaaS (Infrastructure as a Service) is the correct cloud deployment solution for deploying Azure virtual machines. IaaS provides virtualized computing resources over the internet, allowing you to provision, configure, and manage virtual machines, storage, and networking. Azure Virtual Machines is a core IaaS offering that gives you complete control over the VM lifecycle, operating system, and applications while Azure manages the underlying physical infrastructure.

Why the other options are wrong:

  • B. No is incorrect; IaaS is precisely the correct model for VM deployment.

Question 6

Your developers have created 10 web applications that must be host on Azure. You need to determine which Azure web tier plan to host the web apps. The web tier plan must meet the following requirements: • The web apps will use custom domains. • The web apps each require 10 GB of storage. • The web apps must each run in dedicated compute instances. • Load balancing between instances must be included. • Costs must be minimized. Which web tier plan should you use?

  • A. Standard
  • B. Basic
  • C. Free
  • D. Shared
Show answer and explanation ▾

Correct answer: A

The Standard plan is required to meet all requirements. Standard supports custom domains, provides dedicated compute instances (eliminating shared resources), includes load balancing across instances, and offers sufficient storage (10 GB requirement). Basic does not support custom domains and lacks load balancing. Free and Shared plans do not support custom domains or dedicated instances. While Standard costs more than Basic, it is the minimum tier that satisfies all stated requirements including custom domains and load balancing.

Why the other options are wrong:

  • B. Basic does not support custom domains, which is a requirement.
  • C. Free tier does not support custom domains or dedicated instances.
  • D. Shared tier does not support custom domains or provide dedicated compute instances.

Question 7

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are planning to migrate a company to Azure. Each of the company's numerous divisions will have an administrator in place to manage the Azure resources used by their respective division. You want to make sure that the Azure deployment you employ allows for Azure to be segmented for the divisions, while keeping administrative effort to a minimum. Solution: You plan to make use of several Azure Active Directory (Azure AD) directories. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

Using multiple Azure Active Directory directories does not minimize administrative effort; it actually increases complexity. The recommended approach is to use a single Azure AD directory with multiple subscriptions organized by division, combined with management groups and role-based access control (RBAC) to segment resources and delegate administrative rights. Multiple directories would require managing separate tenants, increasing administrative overhead for identity management, licensing, and cross-directory collaboration.

Why the other options are wrong:

  • A. Yes is incorrect; multiple directories increase rather than decrease administrative effort.

Question 8

Your developers have created a portal web app for users in the Miami branch office. The web app will be publicly accessible and used by the Miami users to retrieve customer and product information. The web app is currently running in an on-premises test environment. You plan to host the web app on Azure. You need to determine which Azure web tier plan to host the web app. The web tier plan must meet the following requirements: • The website will use the miami.weyland.com URL. • The website will be deployed to two instances. • SSL support must be included. • The website requires 12 GB of storage. • Costs must be minimized. Which web tier plan should you use?

  • A. Standard
  • B. Basic
  • C. Free
  • D. Shared
Show answer and explanation ▾

Correct answer: A

The Standard plan is the minimum tier that meets all requirements. It supports custom domains (miami.weyland.com), allows deployment to multiple instances (two instances for load balancing), includes SSL/TLS support, and provides the required 12 GB of storage. Basic tier does not include custom domain support. Free and Shared tiers lack both custom domain and SSL support. Standard is the most cost-effective option that satisfies all stated requirements while meeting the deployment needs for a public-facing web application.

Why the other options are wrong:

  • B. Basic tier does not support custom domains, which is explicitly required.
  • C. Free tier does not support custom domains or SSL certificates.
  • D. Shared tier does not support custom domains or SSL/TLS encryption.

Question 9

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company is planning to migrate all their virtual machines to an Azure pay-as-you- go subscription. The virtual machines are currently hosted on the Hyper-V hosts in a data center. You are required make sure that the intended Azure solution uses the correct expenditure model. Solution: You should recommend the use of the elastic expenditure model. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

The question asks about the correct expenditure model for migrating VMs to Azure pay- as-you-go subscription. 'Elastic expenditure model' is not a recognized Azure expenditure model term. The company is migrating to pay-as-you-go, which is an operational expenditure (OpEx) model, not something called 'elastic expenditure model.' Therefore, the solution does not meet the goal.

Why the other options are wrong:

  • A. Elastic expenditure model is not a standard Azure expenditure model classification.

Question 10

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company is planning to migrate all their virtual machines to an Azure pay-as-you- go subscription. The virtual machines are currently hosted on the Hyper-V hosts in a data center. You are required make sure that the intended Azure solution uses the correct expenditure model. Solution: You should recommend the use of the scalable expenditure model. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

The question asks about the correct expenditure model for migrating VMs to Azure pay- as-you-go subscription. 'Scalable expenditure model' is not a recognized Azure expenditure model term. Azure distinguishes between CapEx (capital expenditure) and OpEx (operational expenditure). A pay-as-you-go subscription follows the operational expenditure model, not a 'scalable' one. Therefore, the solution does not meet the goal.

Why the other options are wrong:

  • A. Scalable expenditure model is not a standard Azure expenditure classification; the correct term is operational expenditure.

Question 11

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company is planning to migrate all their virtual machines to an Azure pay-as-you- go subscription. The virtual machines are currently hosted on the Hyper-V hosts in a data center. You are required make sure that the intended Azure solution uses the correct expenditure model. Solution: You should recommend the use of the operational expenditure model. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: A

The question asks about the correct expenditure model for migrating VMs to an Azure pay-as-you-go subscription. The operational expenditure (OpEx) model is exactly what pay-as-you-go subscriptions represent-you pay only for what you use without large upfront capital investments. This is the correct expenditure model for cloud migration scenarios where companies shift from owning infrastructure (CapEx) to renting it (OpEx). Therefore, the solution meets the goal.

Why the other options are wrong:

  • B. The operational expenditure model perfectly aligns with pay-as-you-go Azure subscriptions.

Question 12

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are required to deploy an Artificial Intelligence (AI) solution in Azure. You want to make sure that you are able to build, test, and deploy predictive analytics for the solution. Solution: You should make use of Azure Cosmos DB. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

The question requires deploying an AI solution with the ability to build, test, and deploy predictive analytics. Azure Cosmos DB is a NoSQL database service designed for high- performance data storage and retrieval; it is not designed for building and deploying AI models or conducting predictive analytics. Azure Machine Learning is the appropriate service for this requirement. Therefore, the solution does not meet the goal.

Why the other options are wrong:

  • A. Azure Cosmos DB is a database service, not an AI/ML platform for building predictive analytics models.

Question 13

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's Active Directory forest includes thousands of user accounts. You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises data center will be retired. You are required to employ a strategy that reduces the effect on users, once the planned migration has been completed. Solution: You plan to sync all the Active Directory user accounts to Azure Active Directory (Azure AD). Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: A

The question requires reducing the effect on users when migrating all resources to Azure and retiring the on-premises data center. Syncing all Active Directory user accounts to Azure Active Directory using Azure AD Connect is the standard strategy that maintains user experience by allowing users to continue using familiar credentials and reducing disruption. This ensures users can authenticate to cloud resources seamlessly. Therefore, the solution meets the goal.

Why the other options are wrong:

  • B. Syncing AD accounts to Azure AD is the recommended best practice for hybrid identity and minimizes user disruption during migration.

Question 14

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are required to deploy an Artificial Intelligence (AI) solution in Azure. You want to make sure that you are able to build, test, and deploy predictive analytics for the solution. Solution: You should make use of Azure Machine Learning Studio. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: A

The question requires deploying an AI solution with the ability to build, test, and deploy predictive analytics. Azure Machine Learning Studio is the correct Azure service designed specifically for building, testing, and deploying machine learning models and predictive analytics solutions. It provides the necessary tools and environment for data scientists and developers to create AI solutions. Therefore, the solution meets the goal.

Why the other options are wrong:

  • B. Azure Machine Learning Studio is the appropriate service for building, testing, and deploying predictive analytics models.

Question 15

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's infrastructure includes a number of business units that each need a large number of various Azure resources for everyday operation. The resources required by each business unit are identical. You are required to sanction a strategy to create Azure resources automatically. Solution: You recommend that the Azure API Management service be included in the strategy. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

The question requires a strategy to create Azure resources automatically for multiple business units with identical resource needs. Azure API Management is a service for managing APIs and providing API gateway functionality; it does not automate resource provisioning or creation. The appropriate solutions would be Azure Resource Manager templates, Terraform, or Azure Blueprints. Therefore, the solution does not meet the goal.

Why the other options are wrong:

  • A. Azure API Management is for API governance and management, not for automating Azure resource provisioning.

Question 16

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's infrastructure includes a number of business units that each need a large number of various Azure resources for everyday operation. The resources required by each business unit are identical. You are required to sanction a strategy to create Azure resources automatically. Solution: You recommend that management groups be included in the strategy. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

The question requires a strategy to create Azure resources automatically for multiple business units with identical resource needs. Management groups are organizational and governance tools used for organizing subscriptions, applying policies, and managing access-they do not automate resource creation. Azure Resource Manager templates, Blueprints, or infrastructure-as-code solutions are the appropriate tools for automated resource creation. Therefore, the solution does not meet the goal.

Why the other options are wrong:

  • A. Management groups are for organizational hierarchy and governance, not for automating the creation of Azure resources themselves.

Question 17

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's infrastructure includes a number of business units that each need a large number of various Azure resources for everyday operation. The resources required by each business unit are identical. You are required to sanction a strategy to create Azure resources automatically. Solution: You recommend that the Azure Resource Manager templates be included in the strategy. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: A

Azure Resource Manager (ARM) templates are the ideal solution for automating the creation of identical Azure resources across multiple business units. ARM templates enable infrastructure-as-code, allowing you to define resources declaratively and deploy them repeatedly with consistency. This directly satisfies the requirement to create Azure resources automatically for business units with identical resource needs.

Why the other options are wrong:

  • B. ARM templates are specifically designed for automated resource creation and meet the stated goal.

Question 18

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are tasked with deploying a critical LOB application, which will be installed on a virtual machine, to Azure. You are informed that the application deployment strategy should allow for a guaranteed availability of 99.99 percent. You need to make sure that the strategy requires as little virtual machines and availability zones as possible. Solution: You include two virtual machines and one availability zone in your strategy. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

To achieve 99.99% availability with minimum resources, you need at least two virtual machines deployed across two availability zones. A single availability zone provides only 99.95% availability. Two VMs in one availability zone does not provide zone-level redundancy and cannot guarantee 99.99% availability, as an entire zone failure would take both VMs offline.

Why the other options are wrong:

  • A. Two VMs in a single availability zone only guarantees 99.95% availability, not the required 99.99%.

Question 19

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are tasked with deploying a critical LOB application, which will be installed on a virtual machine, to Azure. You are informed that the application deployment strategy should allow for a guaranteed availability of 99.99 percent. You need to make sure that the strategy requires as little virtual machines and availability zones as possible. Solution: You include one virtual machine and two availability zones in your strategy. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

A single virtual machine cannot achieve 99.99% availability regardless of how many availability zones are involved. While availability zones provide zone-level redundancy, you cannot span a single VM instance across multiple zones. You need at least two VMs deployed across two availability zones to provide both instance-level redundancy and zone-level redundancy for 99.99% uptime.

Why the other options are wrong:

  • A. One VM cannot be distributed across multiple zones; you need multiple instances for redundancy.

Question 20

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are tasked with deploying a critical LOB application, which will be installed on a virtual machine, to Azure. You are informed that the application deployment strategy should allow for a guaranteed availability of 99.99 percent. You need to make sure that the strategy requires as little virtual machines and availability zones as possible. Solution: You include two virtual machines and two availability zones in your strategy. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: A

Two virtual machines deployed across two availability zones is the minimum configuration to achieve 99.99% availability for a critical LOB application. This setup provides both instance-level redundancy (two VMs) and zone-level redundancy (across two separate zones), ensuring that the application remains available even if one entire zone fails. This is the optimal balance between availability requirements and resource minimization.

Why the other options are wrong:

  • B. Two VMs across two availability zones is the minimum viable configuration that meets the 99.99% SLA requirement.

Question 21

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. Sixty percent of the virtual machines have Windows Server 2016 installed, while the other forty percent has Ubuntu Linux installed. You are required to make sure that the administrative effort, needed for this process, is reduced by employing a suitable Azure service. Solution: You recommend the use of Microsoft Managed Desktop. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

Microsoft Managed Desktop is designed for managing end-user devices and desktops, not for deploying and removing custom server virtual machines. It does not support the deployment workflow described (weekly creation and removal of VMs) nor does it support custom configurations with mixed Windows Server and Linux deployments. This service is inappropriate for the stated requirement.

Why the other options are wrong:

  • A. Microsoft Managed Desktop is not designed for rapid VM deployment and removal; it manages end-user devices only.

Question 22

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. Sixty percent of the virtual machines have Windows Server 2016 installed, while the other forty percent has Ubuntu Linux installed. You are required to make sure that the administrative effort, needed for this process, is reduced by employing a suitable Azure service. Solution: You recommend the use of Azure Reserved Virtual Machines (VM) Instances. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

Azure Reserved VM Instances are designed for long-term commitments and cost savings when workloads are predictable and stable. They are inappropriate for the stated scenario where VMs are deployed weekly and removed within the same week. Reserved instances require multi-year commitments and do not reduce administrative effort for temporary VM deployments. This solution addresses cost, not administrative automation.

Why the other options are wrong:

  • A. Reserved instances are for long-term commitments, not weekly temporary deployments, and do not reduce administrative effort.

Question 23

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. Sixty percent of the virtual machines have Windows Server 2016 installed, while the other forty percent has Ubuntu Linux installed. You are required to make sure that the administrative effort, needed for this process, is reduced by employing a suitable Azure service. Solution: You recommend the use of Azure DevTest Labs. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: A

Azure DevTest Labs is specifically designed for developers to quickly create and destroy temporary VMs with minimal administrative overhead. It supports both Windows and Linux systems, automates resource provisioning and deprovisioning, includes cost management features, and allows for custom VM configurations. This service directly addresses the requirement to reduce administrative effort for weekly VM deployment and removal cycles with mixed operating systems.

Why the other options are wrong:

  • B. Azure DevTest Labs is purpose-built for this exact scenario of rapid development VM provisioning and teardown.

Question 24

Your company has virtual machines (VMs) hosted in Microsoft Azure. The VMs are located in a single Azure virtual network named VNet1. The company has users that work remotely. The remote workers require access to the VMs on VNet1. You need to provide access for the remote workers. What should you do?

  • A. Configure a Site-to-Site (S2S) VPN.
  • B. Configure a VNet-toVNet VPN.
  • C. Configure a Point-to-Site (P2S) VPN.
  • D. Configure DirectAccess on a Windows Server 2012 server VM.
  • E. Configure a Multi-Site VPN
Show answer and explanation ▾

Correct answer: C

Point-to-Site (P2S) VPN is the correct solution for allowing individual remote workers to connect to resources in a single Azure virtual network. P2S VPN enables individual client machines to establish secure connections to the VNet without requiring complex site-to- site infrastructure. This is the standard approach for remote user access to Azure resources and is more appropriate than S2S VPN, which is designed for connecting entire networks or branch offices.

Why the other options are wrong:

  • A. Site-to-Site VPN is for connecting entire networks or branch offices, not individual remote workers.
  • B. VNet-to-VNet VPN connects multiple virtual networks, not remote individual users.
  • D. DirectAccess is a Windows on-premises solution and is not the primary Azure solution for remote access.
  • E. Multi-Site VPN is for connecting multiple branch offices, not individual remote workers to a single VNet.

Question 25

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You have been informed by your superiors of the company's intentions to automate server deployment to Azure. There is, however, some concern that administrative credentials could be uncovered during this process. You are required to make sure that during the deployment, the administrative credentials are encrypted using a suitable Azure solution. Solution: You recommend the use of Azure Information Protection. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

Azure Information Protection is designed for data classification and protection of sensitive documents and emails, not for encrypting administrative credentials during deployment processes. For securing credentials during automated server deployment, Azure Key Vault is the appropriate solution as it provides secure storage and management of secrets, keys, and certificates used in deployment automation.

Why the other options are wrong:

  • A. Azure Information Protection does not address credential encryption during deployment; it focuses on document and email data protection.

Question 26

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You have been informed by your superiors of the company's intentions to automate server deployment to Azure. There is, however, some concern that administrative credentials could be uncovered during this process. You are required to make sure that during the deployment, the administrative credentials are encrypted using a suitable Azure solution. Solution: You recommend the use of Azure Multi-Factor Authentication (MFA). Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

Azure Multi-Factor Authentication (MFA) is an identity verification mechanism that adds an extra layer of authentication security, not a solution for encrypting credentials during deployment. MFA requires an additional verification step after authentication but does not encrypt administrative credentials used in automated deployment processes. Azure Key Vault or Azure Automation credentials encryption would be appropriate solutions.

Why the other options are wrong:

  • A. MFA is for user authentication verification, not for encrypting credentials during deployment automation.

Question 27

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to Azure AD via the Internet. You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords. Solution: You configure the use of Azure AD Identity Protection. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: A

Azure AD Identity Protection is specifically designed to detect risky sign-in activities, including logins from unfamiliar locations and IP addresses. When it detects such risky behavior, it can automatically trigger remediation actions including requiring users to change their passwords through conditional access policies. This directly addresses the requirement to automatically encourage password changes when users connect from unidentified IP addresses.

Why the other options are wrong:

  • B. Azure AD Identity Protection is the correct tool for detecting risky sign-ins from unknown locations and triggering password change requirements.

Question 28

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has an Azure Active Directory (Azure AD) environment. Users occasionally connect to Azure AD via the Internet. You have been tasked with making sure that users who connect to Azure AD via the internet from an unidentified IP address, are automatically encouraged to change passwords. Solution: You configure the use of Azure AD Privileged Identity Management. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

Azure AD Privileged Identity Management (PIM) is designed to manage, control, and monitor access to privileged roles and resources, focusing on just-in-time access and role activation for administrators. It does not detect risky sign-ins from unfamiliar IP addresses or automatically trigger password changes based on sign-in location. Azure AD Identity Protection is the appropriate solution for this requirement.

Why the other options are wrong:

  • A. PIM manages privileged role access, not risky sign-in detection based on IP addresses or automatic password change enforcement.

Question 29

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are planning a strategy to deploy numerous web servers and database servers to Azure. This strategy should allow for connection types between the web servers and database servers to be controlled. Solution: You include network security groups (NSGs) in your strategy. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: A

Network Security Groups (NSGs) are specifically designed to filter network traffic and control connection types between resources. NSGs contain security rules that allow or deny inbound and outbound traffic based on source, destination, ports, and protocols. This is the perfect solution for controlling which connection types are allowed between web servers and database servers in Azure.

Why the other options are wrong:

  • B. NSGs are the correct Azure solution for controlling connection types and traffic between network resources.

Question 30

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You are planning a strategy to deploy numerous web servers and database servers to Azure. This strategy should allow for connection types between the web servers and database servers to be controlled. Solution: You include a local network gateway in your strategy. Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

A Local Network Gateway is used to represent an on-premises network location for hybrid connectivity scenarios, enabling VPN or ExpressRoute connections between Azure and on-premises environments. It does not control connection types between resources within Azure. For controlling connections between web servers and database servers deployed in Azure, Network Security Groups (NSGs) are the appropriate solution.

Why the other options are wrong:

  • A. A local network gateway is for on-premises network representation in hybrid scenarios, not for controlling inter-resource connections within Azure.

Question 31

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's Active Directory forest includes thousands of user accounts. You have been informed that all network resources will be migrated to Azure. Thereafter, the on-premises data center will be retired. You are required to employ a strategy that reduces the effect on users, once the planned migration has been completed. Solution: You plan to require Azure Multi-Factor Authentication (MFA). Does the solution meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

Requiring Azure Multi-Factor Authentication (MFA) would actually increase the burden on users and complexity during and after migration, not reduce impact. MFA adds an additional authentication step that users must complete for every login, which increases friction rather than reducing it. A strategy to reduce user impact during migration would focus on seamless authentication, single sign-on capabilities, or hybrid identity synchronization, not adding authentication requirements.

Why the other options are wrong:

  • A. MFA increases authentication complexity and user burden, which would increase rather than decrease the effect on users during migration.

Question 32

You have an on-premises network that contains several servers. You plan to migrate all the servers to Azure. You need to recommend a solution to ensure that some of the servers are available if a single Azure data center goes offline for an extended period. What should you include in the recommendation?

  • A. fault tolerance
  • B. elasticity
  • C. scalability
  • D. low latency
Show answer and explanation ▾

Correct answer: A

Fault tolerance is the ability of a system to continue operating and remain available even when one or more components fail. To ensure that servers remain available if a single Azure data center goes offline, the solution must include fault tolerance through mechanisms like redundancy across availability zones or multiple data centers. This guarantees continued service availability despite infrastructure failures.

Why the other options are wrong:

  • B. Elasticity refers to scaling resources up or down based on demand, not to maintaining availability during data center outages.
  • C. Scalability refers to the ability to increase capacity to handle more load, not to maintaining availability during infrastructure failures.
  • D. Low latency refers to minimizing network delay, not to ensuring availability during data center failures.

Question 33

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company plans to migrate all its data and resources to Azure. The company's migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure. You need to deploy an Azure environment that meets the company migration plan. Solution: You create an Azure App Service and Azure SQL databases. Does this meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: A

Azure App Service and Azure SQL Database are both Platform as a Service (PaaS) offerings. App Service handles application hosting and management, while Azure SQL Database provides managed database services. Both abstract away infrastructure management, allowing the company to focus on applications and data, fully meeting the PaaS-only requirement.

Why the other options are wrong:

  • B. This solution meets the goal as both services are PaaS offerings.

Question 34

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company plans to migrate all its data and resources to Azure. The company's migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure. You need to deploy an Azure environment that meets the company migration plan. Solution: You create an Azure App Service and Azure virtual machines that have Microsoft SQL Server installed. Does this meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

While Azure App Service is PaaS, Azure Virtual Machines are Infrastructure as a Service (IaaS). Virtual machines require administrative management of the operating system, patches, and configurations. The requirement explicitly states only PaaS solutions must be used, so this mixed solution violates the migration plan by including an IaaS component.

Why the other options are wrong:

  • A. Virtual machines are IaaS, not PaaS, so this violates the PaaS-only requirement.

Question 35

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company plans to migrate all its data and resources to Azure. The company's migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure. You need to deploy an Azure environment that meets the company migration plan. Solution: You create an Azure App Service and Azure Storage accounts. Does this meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

While Azure App Service is PaaS, Azure Storage accounts are classified as Infrastructure as a Service (IaaS). Storage accounts provide raw storage resources that require manual management and configuration. The requirement mandates PaaS-only solutions, so including a storage account (IaaS) violates the migration plan.

Why the other options are wrong:

  • A. Azure Storage is IaaS, not PaaS, so this does not meet the PaaS-only requirement.

Question 36

Your company hosts an accounting application named App1 that is used by all the customers of the company. App1 has low usage during the first three weeks of each month and very high usage during the last week of each month. Which benefit of Azure Cloud Services supports cost management for this type of usage pattern?

  • A. high availability
  • B. high latency
  • C. elasticity
  • D. load balancing
Show answer and explanation ▾

Correct answer: C

Elasticity is the cloud's ability to automatically scale resources up or down based on demand. For an application with low usage during the first three weeks and high usage in the final week, elasticity allows automatic provisioning of additional resources during peak periods and scaling down during low-usage periods, directly optimizing costs by matching resource allocation to actual demand.

Why the other options are wrong:

  • A. High availability ensures uptime but does not specifically address cost management for variable usage patterns.
  • B. High latency is a performance problem, not a cost management benefit.
  • D. Load balancing distributes traffic across resources but does not automatically scale resources based on demand to manage costs.

Question 37

You plan to migrate a web application to Azure. The web application is accessed by external users. You need to recommend a cloud deployment solution to minimize the amount of administrative effort used to manage the web application. What should you include in the recommendation?

  • A. Software as a Service (SaaS)
  • B. Platform as a Service (PaaS)
  • C. Infrastructure as a Service (IaaS)
  • D. Database as a Service (DaaS)
Show answer and explanation ▾

Correct answer: B

Platform as a Service (PaaS) minimizes administrative effort for web applications by handling infrastructure management, patches, scaling, and deployment frameworks. The vendor manages the underlying platform, allowing developers to focus on application code rather than server management. This reduces operational overhead compared to IaaS while providing more control than SaaS.

Why the other options are wrong:

  • A. SaaS is pre-built software that may not meet custom web application requirements.
  • C. IaaS requires significant administrative effort for managing virtual machines, operating systems, and infrastructure.
  • D. DaaS (Database as a Service) is not a standard cloud model and addresses only database needs, not web application hosting.

Question 38

You have an on-premises network that contains 100 servers. You need to recommend a solution that provides additional resources to your users. The solution must minimize capital and operational expenditure costs. What should you include in the recommendation?

  • A. a complete migration to the public cloud
  • B. an additional data center
  • C. a private cloud
  • D. a hybrid cloud
Show answer and explanation ▾

Correct answer: D

A hybrid cloud combines on-premises infrastructure with public cloud resources, minimizing both capital and operational expenditure. It allows the company to keep existing on-premises servers while extending capacity with public cloud resources as needed, avoiding the high costs of building a new data center or complete migration, while managing costs more efficiently than a private cloud.

Why the other options are wrong:

  • A. Complete migration to public cloud eliminates capital expenditure but increases operational costs and may not be necessary.
  • B. Building an additional data center requires significant capital expenditure and ongoing operational costs.
  • C. A private cloud requires substantial capital investment in infrastructure and specialized staff for management.

Question 39

You plan to migrate several servers from an on-premises network to Azure. What is an advantage of using a public cloud service for the servers over an on- premises network?

  • A. The public cloud is owned by the public, NOT a private corporation
  • B. The public cloud is a crowd-sourcing solution that provides corporations with the ability to enhance the cloud
  • C. All public cloud resources can be freely accessed by every member of the public
  • D. The public cloud is a shared entity whereby multiple corporations each use a portion of the resources in the cloud
Show answer and explanation ▾

Correct answer: D

The public cloud is a shared multi-tenant environment where multiple organizations each utilize a portion of the same cloud infrastructure and resources. This shared model enables economies of scale, reduces per-customer costs, and provides flexibility compared to on-premises networks. The public cloud is managed by cloud providers, not by the public.

Why the other options are wrong:

  • A. Public clouds are owned and operated by corporations (like Microsoft, Amazon, Google), not by the public.
  • B. Public clouds are not crowd-sourcing solutions; they are professionally managed by vendors.
  • C. Public cloud resources are not freely accessible to the public; access requires subscriptions and authentication.

Question 40

In which type of cloud model are all the hardware resources owned by a third-party and shared between multiple tenants?

  • A. private
  • B. hybrid
  • C. public
Show answer and explanation ▾

Correct answer: C

Public cloud is the model where all hardware resources are owned and managed by a third-party cloud provider and shared among multiple tenants. In public cloud, customers access shared infrastructure on a pay-as-you-go basis without owning the underlying hardware.

Why the other options are wrong:

  • A. Private cloud means the infrastructure is dedicated to a single organization, not shared among multiple tenants.
  • B. Hybrid cloud is a combination of private and public cloud resources, not purely third- party owned and shared.

Question 41

You have 1,000 virtual machines hosted on the Hyper-V hosts in a data center. You plan to migrate all the virtual machines to an Azure pay-as-you-go subscription. You need to identify which expenditure model to use for the planned Azure solution. Which expenditure model should you identify?

  • A. operational
  • B. elastic
  • C. capital
  • D. scalable
Show answer and explanation ▾

Correct answer: A

Migrating the virtual machines to an Azure pay-as-you-go subscription converts hardware ownership into a metered, consumption-based service that is billed as an ongoing running cost. Costs that recur for the day-to-day operation of a service, with no up-front purchase of assets, are operational expenditure (OpEx). Because Azure charges only for the compute, storage, and networking consumed each month, the planned solution follows the operational expenditure model.

Why the other options are wrong:

  • B. Elasticity describes the ability to add or remove capacity on demand, not a way of accounting for spending.
  • C. Capital expenditure applies to buying and depreciating physical assets such as the on-premises Hyper-V hosts being retired.
  • D. Scalability is a technical characteristic of a cloud platform rather than an expenditure model.

Question 42

You plan to provision Infrastructure as a Service (IaaS) resources in Azure. Which resource is an example of IaaS?

  • A. an Azure web app
  • B. an Azure virtual machine
  • C. an Azure logic app
  • D. an Azure SQL database
Show answer and explanation ▾

Correct answer: B

An Azure virtual machine is a classic example of Infrastructure as a Service (IaaS). IaaS provides virtualized computing resources over the internet where customers manage the OS, applications, and data while the cloud provider manages the infrastructure.

Why the other options are wrong:

  • A. An Azure web app is a Platform as a Service (PaaS) offering where the platform handles infrastructure and OS management.
  • C. An Azure logic app is a Platform as a Service (PaaS) offering for workflow automation.
  • D. An Azure SQL database is a Platform as a Service (PaaS) offering where the service manages database infrastructure and maintenance.

Question 43

To which cloud models can you deploy physical servers?

  • A. private cloud and hybrid cloud only
  • B. private cloud only
  • C. private cloud, hybrid cloud and public cloud
  • D. hybrid cloud only
Show answer and explanation ▾

Correct answer: A

Physical servers can only be deployed in private cloud and hybrid cloud models. Private cloud allows an organization to deploy physical servers in its own data center, and hybrid cloud allows mixing on-premises physical servers with cloud resources. Public cloud providers do not allow customers to deploy their own physical servers.

Why the other options are wrong:

  • B. Physical servers can be deployed in both private and hybrid cloud models, not just private cloud alone.
  • C. Public cloud does not allow deployment of customer-owned physical servers; it only provides shared virtualized resources.
  • D. Physical servers can be deployed in private cloud as well, not only in hybrid cloud.

Question 44

You have 50 virtual machines hosted on-premises and 50 virtual machines hosted in Azure. The on-premises virtual machines and the Azure virtual machines connect to each other. Which type of cloud model is this?

  • A. hybrid
  • B. private
  • C. public
Show answer and explanation ▾

Correct answer: A

A hybrid cloud model combines both on-premises infrastructure and public cloud resources that work together. Having 50 virtual machines on-premises and 50 in Azure that connect to each other represents a hybrid cloud deployment where both private (on- premises) and public (Azure) resources are integrated.

Why the other options are wrong:

  • B. Private cloud refers only to on-premises or dedicated infrastructure, not a combination with public cloud.
  • C. Public cloud refers only to shared cloud resources, not a combination with on- premises infrastructure.

Question 45

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company plans to migrate all its data and resources to Azure. The company's migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure. You need to deploy an Azure environment that meets the company migration plan. Solution: You create Azure virtual machines, Azure SQL databases, and Azure Storage accounts. Does this meet the goal?

  • A. Yes
  • B. No
Show answer and explanation ▾

Correct answer: B

The solution does not meet the goal because it includes Azure virtual machines and Azure Storage accounts, which are Infrastructure as a Service (IaaS), not Platform as a Service (PaaS). Only Azure SQL databases in this list qualifies as PaaS. A PaaS-only solution would require services like Azure App Service, Azure SQL Database, Azure Cosmos DB, and similar managed services.

Why the other options are wrong:

  • A. This solution fails to meet the goal because it includes IaaS services (VMs and storage accounts) mixed with PaaS (SQL databases).

Question 46

Your company plans to deploy several custom applications to Azure. The applications will provide invoicing services to the customers of the company. Each application will have several prerequisite applications and services installed. You need to recommend a cloud deployment solution for all the applications. What should you recommend?

  • A. Software as a Service (SaaS)
  • B. Platform as a Service (PaaS)
  • C. Infrastructure as a Service (laaS)
Show answer and explanation ▾

Correct answer: C

Infrastructure as a Service (IaaS) is the appropriate recommendation. Since the applications require multiple prerequisite applications and services to be installed and configured, the company needs full control over the operating system and infrastructure. IaaS provides virtual machines where they can install and manage all required components, whereas PaaS and SaaS provide more abstraction and less control.

Why the other options are wrong:

  • A. Software as a Service (SaaS) provides complete applications to end-users and does not allow installation of custom prerequisite applications.
  • B. Platform as a Service (PaaS) provides a managed platform but may not offer sufficient flexibility to install diverse prerequisite applications and services needed for these custom applications.

Question 47

Your company plans to migrate all its data and resources to Azure. The company's migration plan states that only Platform as a Service (PaaS) solutions must be used in Azure. You need to deploy an Azure environment that meets the company's migration plan. What should you create?

  • A. Azure virtual machines, Azure SQL databases, and Azure Storage accounts.
  • B. an Azure App Service and Azure virtual machines that have Microsoft SQL Server installed.
  • C. an Azure App Service and Azure SQL databases.
  • D. Azure storage accounts and web server in Azure virtual machines.
Show answer and explanation ▾

Correct answer: C

Azure App Service is a PaaS solution for hosting web and mobile applications, while Azure SQL Database is a PaaS managed database service. Both are fully managed platform services where Microsoft handles infrastructure, patching, and maintenance. This matches the company's requirement for PaaS-only solutions.

Why the other options are wrong:

  • A. Azure Virtual Machines are IaaS, not PaaS, as they require management of the operating system and software.
  • B. Azure Virtual Machines are IaaS, and installing Microsoft SQL Server yourself makes it IaaS rather than using a managed PaaS database service.
  • D. Azure Virtual Machines are IaaS, and deploying web servers on them requires infrastructure management rather than using managed PaaS services.

Question 48

What does a customer provide in a software as a service (SaaS) model?

  • A. application data
  • B. data storage
  • C. compute resources
  • D. application software
Show answer and explanation ▾

Correct answer: A

In a SaaS model, the customer provides only the application data. The cloud provider manages the application software, infrastructure, compute resources, storage, and all underlying systems. The customer simply uses the application and manages their own data.

Why the other options are wrong:

  • B. Data storage is provided and managed by the SaaS provider, not the customer.
  • C. Compute resources are provided and managed by the SaaS provider as part of the service.
  • D. Application software is provided by the SaaS vendor; the customer does not develop or provide it.

Question 49

What is the first stage in the Microsoft Cloud Adoption Framework for Azure?

  • A. Adopt the cloud.
  • B. Make a plan.
  • C. Ready your organization.
  • D. Define your strategy.
Show answer and explanation ▾

Correct answer: D

The Microsoft Cloud Adoption Framework for Azure begins with 'Define your strategy' as the first stage. This stage involves understanding business objectives, defining cloud strategy, and establishing governance models before any implementation begins. The five stages follow in order: Strategy, Plan, Ready, Adopt, and Govern/Manage.

Why the other options are wrong:

  • A. Adopt the cloud is the fourth stage, coming after strategy, planning, and readiness.
  • B. Make a plan is the second stage, following the strategy definition phase.
  • C. Ready your organization is the third stage, after strategy and planning are established.

Question 50

You have an accounting application named App1 that uses a legacy database. You plan to move App1 to the cloud. Which service model should you use?

  • A. platform as a service (PaaS)
  • B. infrastructure as a service (IaaS)
  • C. software as a service (SaaS)
Show answer and explanation ▾

Correct answer: B

For moving a legacy accounting application with an existing database to the cloud, IaaS (Infrastructure as a Service) is most appropriate. IaaS provides virtual machines and infrastructure where you can install and run legacy applications and databases with minimal refactoring, maintaining compatibility with existing systems.

Why the other options are wrong:

  • A. PaaS requires refactoring the application to work with managed services, which may not be compatible with legacy database structures.
  • C. SaaS is not suitable because it provides pre-built applications that cannot be customized for legacy systems or databases.

Get the complete AZ-900 bank

These 50 questions are roughly 27% of the bank. The full pack has 474 real AZ-900 questions, each with the same depth of explanation, plus a questions-only PDF for timed practice and free updates forever.

View the full Microsoft AZ-900 question bank →

Related exams

Browse free practice questions for every exam →

Back to blog