AZ-900 Practice Test

A. ✓ Correct: Operational expenditure is correct because regular payments for ongoing services in Azure are a characteristic of operational expenditure (OpEx).

B. × Incorrect: Capital expenditure is incorrect because (CapEx) involves upfront costs for acquiring assets rather than regular payments for ongoing services.

C. × Incorrect: Fixed cost budgeting is incorrect because it does not specifically relate to the recurring nature of cloud service payments; it refers more broadly to predictable financial planning.

D. × Incorrect: Reserved capacity is incorrect because it pertains to pre-purchasing resources at a discounted rate, which contrasts with regular payments for ongoing services.

A. × Incorrect: Azure Monitor is incorrect because it focuses on monitoring and logging activities rather than implementing multifactor authentication.

B. ✓ Correct: Microsoft Entra ID includes features such as multifactor authentication (MFA) to enhance security for user access.

C. × Incorrect: Azure Key Vault is incorrect because it is used for storing and managing cryptographic keys, secrets, and certificates, not for multifactor authentication.

D. × Incorrect: Azure Active Directory is incorrect because although Azure Active Directory offers multifactor authentication, the correct service in this context is Microsoft Entra ID.

A. × Incorrect: Azure Policy is incorrect because helps enforce governance rules but does not specifically align cloud adoption with the Cloud Adoption Framework.

B. × Incorrect: Resource Manager is incorrect because it provides a way to manage resources but it doesn't guide organizations in adopting the Cloud Adoption Framework.

C. ✓ Correct: Landing Zones are designed to help organizations align their cloud adoption and governance strategy with the Microsoft Cloud Adoption Framework.

D. × Incorrect: Virtual Network is incorrect because it focuses on network configuration within Azure, unrelated to guiding cloud adoption strategies.

A. × Incorrect: Public Cloud is incorrect because it is a public cloud model does not offer on-premises integration for cost optimization.

B. × Incorrect: Private Cloud is incorrect because it is a private cloud model operates independently of external resources and cannot leverage Azure to optimize costs.

C. ✓ Correct: Hybrid Cloud is correct because it is the hybrid cloud model allows organizations to integrate both on-premises and Azure resources, optimizing their overall cost structure.

D. × Incorrect: Multi-Cloud is incorrect because it is a multi-cloud strategy involves using multiple cloud providers but does not necessarily include on-premises integration for optimized cost management.

A. × Incorrect: Virtual Machine Scale Sets is incorrect because it is designed for deploying and managing a set of identical virtual machines, not orchestrating multi-container applications.

B. × Incorrect: Azure App Service is incorrect because it provides a platform to host web apps, mobile backends, and REST APIs without dealing with infrastructure or containers directly.

C. × Incorrect: Azure Container Instances is incorrect because they offer a way to run Docker containers on demand but do not provide Kubernetes control-plane features for orchestrating multi-container applications.

D. ✓ Correct: Azure Kubernetes Service (AKS) provides managed Kubernetes to deploy and manage containerized applications, including the necessary orchestration capabilities.

A. × Incorrect: Azure Data Box is incorrect because it is a service for transferring large amounts of data to and from Azure, but it does not enforce regional restrictions.

B. ✓ Correct: Azure Policy allows you to define and enforce policies that restrict resources from being created outside of specific regions, thereby ensuring data residency requirements are met.

C. × Incorrect: Azure SQL Database is incorrect because although Azure SQL Database can be deployed in different regions for compliance reasons, it does not provide the policy enforcement capabilities needed to ensure data residency.

D. × Incorrect: Azure Blob Storage is incorrect because while Azure Blob Storage allows you to store and retrieve unstructured data, it lacks the ability to enforce regional restrictions on where data must reside.

A. × Incorrect: SaaS is incorrect because it involves using software applications hosted on a cloud provider's infrastructure without managing virtual machines.

B. × Incorrect: PaaS is incorrect because it provides a platform for developing and deploying applications but does not allow management of individual virtual machines.

C. ✓ Correct: IaaS enables customers to manage their own virtual machines while the provider handles hardware maintenance.

D. × Incorrect: On-premises is incorrect because solutions are hosted within an organization's data center, not in a cloud environment.

A. × Incorrect: Azure Data Lake Storage is incorrect because it is designed for big data workloads but is not specifically mentioned as essential for processing data with Spark in Generative AI applications.

B. × Incorrect: Azure SQL Database is incorrect because although Azure SQL Database provides relational database services, it does not support the distributed computing framework required by Spark for large-scale data processing.

C. × Incorrect: Azure Cosmos DB is incorrect because it is a NoSQL database optimized for high scalability and global distribution but lacks the necessary storage capabilities for Spark to process big data efficiently in Generative AI applications.

D. ✓ Correct: Azure Blob Storage provides scalable object storage that can be used with Spark for large-scale data processing, making it suitable for handling the vast amounts of data required by LLMs.

A. × Incorrect: Auto-scaling is incorrect because adjusts resource capacity based on demand but does not provide recommendations for performance, security, and reliability.

B. ✓ Correct: Azure Advisor provides insights and recommendations to improve the performance, security, and reliability of your resources.

C. × Incorrect: Backup policies is incorrect because they are designed to protect data by creating backups, not to offer guidance on improving resource performance or security.

D. × Incorrect: Infrastructure as code is incorrect because it allows for defining and managing cloud infrastructure through code but does not provide specific recommendations for enhancing the performance, security, and reliability of Azure resources.

A. × Incorrect: Scalability is incorrect because it refers to the ability to adjust resources up or down but does not specifically address rapid response to market changes.

B. × Incorrect: Elasticity is incorrect because it involves automatically scaling resources based on demand, which is related but more about resource management than quick business adaptation.

C. × Incorrect: Fault tolerance is incorrect because ensures systems remain available during failures and does not directly relate to responding quickly to changing market conditions.

D. ✓ Correct: Agility refers to the ability to rapidly respond and adjust to changes in business requirements.

A. × Incorrect: Azure Portal is incorrect because it is the Azure Portal provides a graphical interface and is not suitable for creating detailed deployment scripts in non-interactive environments.

B. ✓ Correct: Azure CLI is correct because it is the Azure CLI allows users to automate tasks through scripting, making it ideal for creating detailed deployment scripts without requiring user interaction.

C. × Incorrect: Azure PowerShell is incorrect because it is Azure PowerShell, but it can be used for automation, it may require more setup and might not offer as streamlined a solution for script-based deployments in non-interactive environments compared to Azure CLI.

D. × Incorrect: Azure Resource Manager templates is incorrect because although Azure Resource Manager templates are powerful for defining infrastructure as code, they do not provide the same level of scripting capabilities or ease of use for detailed deployment scripts as Azure CLI.

A. × Incorrect: 99.9% is incorrect because it represents a lower level of service availability than what Azure guarantees for virtual machines.

B. ✓ Correct: 99.95% is correct because it accurately reflects the percentage of service availability guaranteed by the Azure Service Level Agreement (SLA) for virtual machines.

C. × Incorrect: 99.99% is incorrect because although high, this percentage does not match the specific guarantee provided in the SLA for virtual machine services.

D. × Incorrect: 100% is incorrect because achieving 100% service availability is unrealistic and not promised by any cloud provider's SLA.

A. ✓ Correct: Resource pooling is correct because it describes using shared physical resources to serve multiple customers while maintaining logical isolation for each customer.

B. × Incorrect: Elasticity is incorrect because it refers to the ability of a cloud system to scale up or down automatically based on demand, not resource sharing among customers.

C. × Incorrect: Shared responsibility model is incorrect because it is the shared responsibility model outlines how security responsibilities are divided between the cloud provider and the customer, unrelated to pooled resources.

D. × Incorrect: Consumption-based pricing is incorrect because it involves billing for only what is used in a pay-as-you-go model, which does not address resource pooling or isolation.

A. × Incorrect: Locally redundant storage (LRS) is incorrect because it only replicates data within a single region and does not provide redundancy across geographic locations.

B. ✓ Correct: Geo-redundant storage (GRS) is correct because it provides data durability by replicating your data to a secondary region, ensuring protection against regional failures.

C. × Incorrect: Zone-redundant storage (ZRS) is incorrect because it replicates data within the same Azure region but across different availability zones, not multiple geographic regions.

D. × Incorrect: Read-access geo-redundant storage (RA-GRS) is incorrect because while it also replicates data to a secondary region like GRS, it additionally allows read access from that secondary location, which does not directly address the core requirement of ensuring data durability through redundancy.

A. × Incorrect: Azure Log Analytics is incorrect because it stores and queries log data but does not directly create alerts based on that data.

B. × Incorrect: Application Insights is incorrect because it focuses on monitoring applications and their performance rather than creating alerts from log data.

C. ✓ Correct: Azure Monitor Alerts are specifically designed to set up alert rules based on conditions derived from log data in Azure.

D. × Incorrect: Azure Security Center is incorrect because it provides security management and threat protection but does not create alerts based on log data.

A. × Incorrect: CapEx, because it locks in costs with reserved capacity is incorrect because it locks in costs with reserved capacity, which contradicts the requirement for avoiding large upfront payments and flexible cost management.

B. × Incorrect: OpEx, since regular payments are required for ongoing services is incorrect because it offers regular payments for ongoing services, aligning with the preference for flexibility and avoiding upfront commitments.

C. × Incorrect: CapEx, due to its fixed cost pattern regardless of usage is incorrect because its fixed cost pattern regardless of usage does not match the need for pay-as-you-go pricing and flexible cost management.

D. ✓ Correct: OpEx, as it offers the flexibility of pay-as-you-go pricing is correct because it offers the flexibility of pay-as-you-go pricing, which allows businesses to avoid large upfront payments and manage costs based on actual usage.

A. × Incorrect: Azure SQL Database is incorrect because it focuses on relational database management and does not support multiple APIs for globally distributed data storage.

B. ✓ Correct: Azure Cosmos DB supports multiple APIs and provides low-latency access to data from anywhere in the world, making it ideal for high-performance, globally distributed data storage needs.

C. × Incorrect: Azure Database for PostgreSQL is incorrect because it is a managed service that runs PostgreSQL databases but does not offer built-in support for multiple APIs or global distribution features like Cosmos DB.

D. × Incorrect: Azure Synapse Analytics is incorrect because it is designed for big data analytics and data warehousing rather than providing globally distributed, multi-API database storage.

A. ✓ Correct: Microsoft Defender for Cloud specifically monitors and protects your Azure environment by identifying security risks and offering remediation steps.

B. × Incorrect: Azure Monitor is incorrect because although Azure Monitor provides monitoring capabilities, it does not specialize in security risk identification or protection like Microsoft Defender for Cloud.

C. × Incorrect: Microsoft Sentinel is incorrect because it focuses on threat detection and response using advanced analytics and automation but does not provide the same level of continuous security monitoring and risk remediation as Microsoft Defender for Cloud.

D. × Incorrect: Key Vault is incorrect because it is designed to manage cryptographic keys, secrets, and certificates securely rather than providing cloud environment protection or security risk identification.

A. ✓ Correct: Hybrid Cloud is correct because it allows an organization to integrate its on-premises infrastructure with Azure while keeping control over sensitive data.

B. × Incorrect: Private Cloud is incorrect because it is a Private Cloud model does not necessarily connect with public cloud services like Azure, and thus doesn't offer the flexibility of integrating both environments.

C. × Incorrect: Public Cloud is incorrect because solutions do not provide the option for organizations to maintain on-premises infrastructure or keep sensitive data within their own control.

D. × Incorrect: Multi-Cloud is incorrect because it refers to using multiple cloud providers without necessarily connecting them with an organization's on-premises environment.

A. ✓ Correct: Region pairs are used to establish cross-region redundancy for disaster recovery purposes is correct because region pairs are designed to establish cross-region redundancy for disaster recovery purposes.

B. × Incorrect: Region pairs provide a set of datacenters within a single geographic location is incorrect because it confuses region pairs with a single geographic location's datacenters; region pairs span multiple regions.

C. × Incorrect: Region pairs ensure that all resources in one region can be replicated to another region automatically is incorrect because automatic replication of all resources from one region to another is not the primary purpose of region pairs, which focus on redundancy and failover capabilities.

D. × Incorrect: Region pairs designate specific regions as primary and secondary for load balancing is incorrect because region pairs do not designate specific regions as primary or secondary for load balancing purposes but rather for disaster recovery and high availability.

A. × Incorrect: Azure Backup is incorrect because it focuses on protecting and restoring data rather than routing traffic to healthy endpoints.

B. × Incorrect: Azure Site Recovery is incorrect because it is designed for disaster recovery scenarios, moving workloads between sites but not managing endpoint health or traffic routing.

C. ✓ Correct: Azure Traffic Manager routes users to a healthy endpoint when another endpoint is unavailable, ensuring high availability and reliability.

D. × Incorrect: Azure Load Balancer is incorrect because it is the Azure Load Balancer distributes network traffic among multiple virtual machines in a cloud service but does not route based on endpoint health status.

A. × Incorrect: Cost efficiency is incorrect because it focuses on reducing costs rather than handling sudden increases in demand.

B. × Incorrect: Fault tolerance is incorrect because it pertains to maintaining system availability during failures, not managing user demand spikes.

C. × Incorrect: Agility is incorrect because while agility helps organizations adapt quickly, it does not specifically address the ability to scale resources based on load.

D. ✓ Correct: Scalability is correct because it directly enables an organization to adjust its resource allocation in response to sudden increases in user demand.

A. × Incorrect: To define routing tables is incorrect because defining routing tables is a function of route tables within Azure, not subnets themselves.

B. ✓ Correct: To isolate resources with security rules is correct because isolating resources with security rules allows for granular control over network traffic and access to specific segments of the virtual network.

C. × Incorrect: To manage DNS records is incorrect because managing DNS records is typically handled by DNS zones or name servers in Azure, rather than through subnet configurations.

D. × Incorrect: To distribute traffic across multiple VMs is incorrect because distributing traffic across multiple VMs is a function of load balancers or other traffic management tools, not subnets.

A. × Incorrect: To enforce consistent resource configurations across multiple subscriptions is incorrect because it describes a feature of Azure Policy rather than Resource Locks.

B. × Incorrect: To organize and scope management operations is incorrect because organizing and scoping management operations are functions of Management Groups in Azure, not Resource Locks.

C. × Incorrect: To manage access control policies for users and groups is incorrect because access control policies for users and groups are managed through Role-Based Access Control (RBAC), not Resource Locks.

D. ✓ Correct: To prevent changes to resources within a subscription or resource group is correct because it accurately describes the primary purpose of Resource Locks: to prevent changes to resources within a subscription or resource group.

A. × Incorrect: Serverless computing is incorrect because it focuses on executing code in response to events without managing infrastructure or operating systems.

B. × Incorrect: PaaS is incorrect because platform as a Service (PaaS) provides development tools and environments but requires the provider to manage both applications and operating systems, not just hardware maintenance.

C. × Incorrect: SaaS is incorrect because software as a Service (SaaS) delivers software applications over the internet with no control over infrastructure or operating system management for users.

D. ✓ Correct: IaaS is correct because infrastructure as a Service (IaaS) allows companies to manage their own operating systems and applications while relying on the provider for hardware maintenance.

A. × Incorrect: Azure Data Box is incorrect because it is used for transferring large amounts of data to Azure rather than migrating servers and virtual machines.

B. × Incorrect: Azure Site Recovery is incorrect because it provides disaster recovery solutions by replicating workloads to Azure, not specifically for migration purposes.

C. ✓ Correct: Azure Migrate helps in discovering, assessing, and planning the migration of on-premises servers, VMs, and databases to Azure.

D. × Incorrect: Azure Arc is incorrect because it enables hybrid cloud scenarios where you can manage your on-premises resources like they are in Azure, but it does not focus on migrating them.

A. × Incorrect: Azure Cost Management is incorrect because it helps manage and analyze existing costs rather than estimate them before deployment.

B. × Incorrect: Azure Advisor is incorrect because it provides recommendations for improving performance and cost efficiency but does not offer cost estimation tools.

C. × Incorrect: Azure Monitor is incorrect because it monitors the health and performance of applications but does not provide cost estimation capabilities.

D. ✓ Correct: Azure Pricing calculator is correct because it allows you to input your workload requirements and estimate costs before deploying resources in Azure.

A. × Incorrect: Public Cloud is incorrect because it is a public cloud deployment does not integrate with on-premises environments.

B. × Incorrect: Private Cloud is incorrect because it is a private cloud deployment operates independently of external clouds like Azure and does not offer the flexibility to connect with them.

C. ✓ Correct: Hybrid Cloud is correct because it allows an organization to integrate its on-premises environment with Azure, providing tailored solutions that meet specific needs.

D. × Incorrect: Multi-Cloud is incorrect because it refers to using multiple cloud providers rather than connecting an on-premises environment specifically with Azure.

A. × Incorrect: Azure Functions is incorrect because they can process events but are designed for executing code in response to them rather than routing and processing events across multiple services.

B. ✓ Correct: Event Grid allows you to process events in real-time and route them to other Azure services or external endpoints, making it ideal for cross-service event handling.

C. × Incorrect: Logic Apps is incorrect because it can handle workflows involving events but are more focused on orchestrating complex processes rather than real-time event routing across multiple cloud services.

D. × Incorrect: Service Bus is incorrect because it supports messaging scenarios including event processing but does not specialize in the real-time, cross-cloud service event routing that Event Grid provides.

A. × Incorrect: Custom role assignments is incorrect because it is a feature of Azure Active Directory and require licensing for advanced capabilities.

B. × Incorrect: Azure Policy enforcement is incorrect because although Azure Policy can be enforced across various Azure services including Arc-enabled servers, it requires an additional license or subscription to use fully.

C. × Incorrect: Network security groups is incorrect because (NSGs) are part of the Virtual Network service in Azure and need to be configured separately from Arc-enabled server features.

D. ✓ Correct: Resource health monitoring provides visibility into the operational status of your on-premises servers and cloud VMs at no additional cost.