Microsoft AZ-900 · Azure Fundamentals · Updated 2026
Free AZ-900 Azure Fundamentals Practice Exam (2026)
Full-length AZ-900 mock exams with a realistic number of questions and the real exam time. Cloud concepts, Azure services and management and governance questions, answers explained, and your score by domain.
1. Choose a set
2. Choose a mode
50 questions · 45 min · same as the real exam
You have an unfinished attempt on this set.
Questions 1–10Page 1 of 5
🏆
Question 1Azure Architecture & Services
Contoso deploys an app in an Azure region that has a paired region. What is one benefit of region pairs?
Correct answer: C. Planned platform updates roll out to one region of the pair at a time
Azure rolls out planned updates to paired regions one at a time to reduce the risk of downtime, and it prioritizes one region of each pair during a broad outage. Resources are not copied automatically; you must configure replication, such as geo-redundant storage.
Azure rolls out planned updates to paired regions one at a time to reduce the risk of downtime, and it prioritizes one region of each pair during a broad outage. Resources are not copied automatically; you must configure replication, such as geo-redundant storage.
Question 2Management & Governance
Contoso hosts a video streaming site in Azure. Which network activity is most likely to add charges to its monthly bill?
Correct answer: B. Data sent from Azure to users on the internet
Azure generally does not charge for inbound data transfer, but outbound data transfer from Azure to the internet is billed. Creating virtual networks and resource groups is free.
Azure generally does not charge for inbound data transfer, but outbound data transfer from Azure to the internet is billed. Creating virtual networks and resource groups is free.
Question 3Cloud Concepts
Northwind Traders is new to Azure. A manager asks for the best description of cloud computing. Which statement should you give?
Correct answer: D. Delivery of computing services over the internet on a pay-as-you-go basis
Cloud computing is the delivery of compute, storage, networking and other services over the internet, typically billed by usage. Running servers in your own datacenter with fixed budgets describes a traditional on-premises model.
Cloud computing is the delivery of compute, storage, networking and other services over the internet, typically billed by usage. Running servers in your own datacenter with fixed budgets describes a traditional on-premises model.
Question 4Azure Architecture & Services
Fabrikam wants its VMs protected if an entire datacenter in a region loses power. The VMs must stay in the same region. What should Fabrikam use?
Correct answer: A. Availability zones
Availability zones are physically separate locations within one region, each with independent power, cooling and networking. Region pairs protect across two regions, which does not meet the requirement to stay in the same region.
Availability zones are physically separate locations within one region, each with independent power, cooling and networking. Region pairs protect across two regions, which does not meet the requirement to stay in the same region.
Question 5Management & Governance
Fabrikam notices that the same VM size has a different hourly price in two Azure regions. What explains this?
Correct answer: B. Prices for Azure resources can vary by region
Azure costs can vary between regions because of local factors such as power, labor and taxes. Resource groups and tags are organizational tools and do not change the price of a resource.
Azure costs can vary between regions because of local factors such as power, labor and taxes. Resource groups and tags are organizational tools and do not change the price of a resource.
Question 6Cloud Concepts
Contoso deploys Windows Server virtual machines in Azure. Who is responsible for installing security updates on the guest operating system?
Correct answer: A. Contoso
With IaaS, Microsoft manages the physical hosts, network and datacenter, but the customer manages the guest operating system, including patches. Microsoft only takes over operating system patching in PaaS and SaaS models.
With IaaS, Microsoft manages the physical hosts, network and datacenter, but the customer manages the guest operating system, including patches. Microsoft only takes over operating system patching in PaaS and SaaS models.
Question 7Azure Architecture & Services
A US federal agency wants to use Azure in physically isolated datacenters operated by screened US personnel. Which offering should it use?
Correct answer: D. Azure Government
Azure Government is a sovereign cloud for US government agencies and their partners, with isolated datacenters and screened US staff. Azure operated by 21Vianet is the sovereign cloud for China, not for US agencies.
Azure Government is a sovereign cloud for US government agencies and their partners, with isolated datacenters and screened US staff. Azure operated by 21Vianet is the sovereign cloud for China, not for US agencies.
Question 8Management & Governance
Adventure Works must apply about 20 related policy definitions that together cover a regulatory standard. It wants to assign and track them as a single unit. What should it use?
Correct answer: A. An Azure Policy initiative
An Azure Policy initiative is a collection of policy definitions grouped toward a goal, such as a compliance standard, and assigned as one unit. A management group is a scope where you assign policies or initiatives, not a way to group the definitions themselves.
An Azure Policy initiative is a collection of policy definitions grouped toward a goal, such as a compliance standard, and assigned as one unit. A management group is a scope where you assign policies or initiatives, not a way to group the definitions themselves.
Question 9Cloud Concepts
Fabrikam uses a SaaS application hosted in Azure. Under the shared responsibility model, which item remains Fabrikam's responsibility?
Correct answer: C. Managing user accounts and data
In every service model, the customer keeps responsibility for its information and data, devices, and accounts and identities. In SaaS, Microsoft handles the application, operating system and physical infrastructure.
In every service model, the customer keeps responsibility for its information and data, devices, and accounts and identities. In SaaS, Microsoft handles the application, operating system and physical infrastructure.
Question 10Azure Architecture & Services
Adatum created a resource group for a short test project. The project is finished. What happens if an administrator deletes the resource group?
Correct answer: A. All resources inside the resource group are deleted
A resource group is a lifecycle container, so deleting it deletes every resource it contains. Resources cannot exist outside a resource group, so they are never moved to the subscription level.
A resource group is a lifecycle container, so deleting it deletes every resource it contains. Resources cannot exist outside a resource group, so they are never moved to the subscription level.
Question 11Management & Governance
Adatum wants an email alert when its monthly Azure spending reaches 80 percent of a set amount. What should it create?
Correct answer: D. A budget in Microsoft Cost Management
Budgets in Microsoft Cost Management let you set a spending threshold and send alerts when actual or forecast costs reach a percentage of it. Advisor cost recommendations suggest savings but do not alert you at a spending threshold.
Budgets in Microsoft Cost Management let you set a spending threshold and send alerts when actual or forecast costs reach a percentage of it. Advisor cost recommendations suggest savings but do not alert you at a spending threshold.
Question 12Azure Architecture & Services
Tailwind Traders has 12 subscriptions. It wants to apply the same policies and access settings to all of them from one place. What should it create?
Correct answer: B. A management group
Management groups sit above subscriptions, and policies and role assignments applied to a management group are inherited by every subscription under it. A resource group sits inside a single subscription, so it cannot span all 12.
Management groups sit above subscriptions, and policies and role assignments applied to a management group are inherited by every subscription under it. A resource group sits inside a single subscription, so it cannot span all 12.
Question 13Cloud Concepts
Woodgrove Bank wants cloud-style self-service for its developers. All resources must run on hardware that is used only by the bank. Which cloud model meets this requirement?
Correct answer: C. Private cloud
A private cloud gives cloud capabilities such as self-service and automation on infrastructure dedicated to a single organization. A hybrid cloud would also place some workloads on shared public cloud hardware, which breaks the requirement.
A private cloud gives cloud capabilities such as self-service and automation on infrastructure dedicated to a single organization. A hybrid cloud would also place some workloads on shared public cloud hardware, which breaks the requirement.
Question 14Management & Governance
Tailwind Traders wants to group Azure costs by department. Resources from several departments share the same resource groups and subscriptions. What should it apply to its resources?
Correct answer: B. Tags
Tags are name-value pairs, such as Department:Finance, that you can use to filter and group costs in Cost Management. Management groups organize whole subscriptions, so they cannot separate departments whose resources share resource groups.
Tags are name-value pairs, such as Department:Finance, that you can use to filter and group costs in Cost Management. Management groups organize whole subscriptions, so they cannot separate departments whose resources share resource groups.
Question 15Azure Architecture & Services
Northwind Traders runs a web tier on identical VMs. It wants the number of VMs to increase and decrease automatically based on CPU load. What should it use?
Correct answer: D. Virtual Machine Scale Sets
Virtual Machine Scale Sets manage a group of identical VMs and can scale them in or out automatically based on metrics such as CPU. An availability set improves resilience against hardware failures but does not add or remove VMs.
Virtual Machine Scale Sets manage a group of identical VMs and can scale them in or out automatically based on metrics such as CPU. An availability set improves resilience against hardware failures but does not add or remove VMs.
Question 16Cloud Concepts
Litware must keep its customer database on-premises for regulatory reasons. It wants to run its public website in Azure and connect it to that database. Which cloud model is this?
Correct answer: B. Hybrid cloud
A hybrid cloud combines on-premises or private cloud resources with public cloud resources that work together. A multicloud model uses two or more public cloud providers, which is not the case here.
A hybrid cloud combines on-premises or private cloud resources with public cloud resources that work together. A multicloud model uses two or more public cloud providers, which is not the case here.
Question 17Management & Governance
Relecloud must ensure that resources can be created only in the East US and West Europe regions. Any attempt to use another region must be blocked. What should it use?
Correct answer: C. Azure Policy
Azure Policy can enforce rules such as an allowed locations list and deny any deployment that does not comply. Azure RBAC controls who can perform actions, not which regions a resource can use.
Azure Policy can enforce rules such as an allowed locations list and deny any deployment that does not comply. Azure RBAC controls who can perform actions, not which regions a resource can use.
Question 18Azure Architecture & Services
Wingtip Toys wants remote employees to use a full Windows desktop and corporate apps from any device. The desktops must run in Azure. What should it use?
Correct answer: A. Azure Virtual Desktop
Azure Virtual Desktop delivers virtualized Windows desktops and apps from Azure to users on almost any device. App Service hosts web applications, not full desktop sessions for users.
Azure Virtual Desktop delivers virtualized Windows desktops and apps from Azure to users on almost any device. App Service hosts web applications, not full desktop sessions for users.
Question 19Management & Governance
Fourth Coffee wants to prevent anyone, including subscription owners, from accidentally deleting a production database. Users must still be able to change its settings. What should it apply?
Correct answer: D. A CanNotDelete resource lock
A CanNotDelete lock blocks deletion for all users, including owners, while still allowing reads and changes. A ReadOnly lock would also block configuration changes, which the requirement does not allow.
A CanNotDelete lock blocks deletion for all users, including owners, while still allowing reads and changes. A ReadOnly lock would also block configuration changes, which the requirement does not allow.
Question 20Cloud Concepts
Tailwind Traders sees heavy traffic only during the last week of each month. It wants its cloud bill to rise only during that week. Which cloud characteristic makes this possible?
Correct answer: A. The consumption-based model
With the consumption-based model you pay only for the resources you use, so costs rise during busy periods and fall when demand drops. Reserved capacity requires a one-year or three-year commitment regardless of monthly usage.
With the consumption-based model you pay only for the resources you use, so costs rise during busy periods and fall when demand drops. Reserved capacity requires a one-year or three-year commitment regardless of monthly usage.
Question 21Azure Architecture & Services
A developer at Litware needs to run a single container for a short batch job. She does not want to manage VMs or a container orchestrator. What is the simplest option?
Correct answer: C. Azure Container Instances
Azure Container Instances is the fastest and simplest way to run a container in Azure without managing servers or an orchestrator. Azure Kubernetes Service is built for orchestrating many containers and adds cluster management overhead.
Azure Container Instances is the fastest and simplest way to run a container in Azure without managing servers or an orchestrator. Azure Kubernetes Service is built for orchestrating many containers and adds cluster management overhead.
Question 22Management & Governance
An administrator at Northwind Traders uses a shared computer where she cannot install software. She needs to run Azure CLI commands. What should she use?
Correct answer: D. Azure Cloud Shell
Azure Cloud Shell is a browser-based shell that already includes Azure CLI and Azure PowerShell, so nothing needs to be installed. Installing PowerShell locally is not possible on this computer.
Azure Cloud Shell is a browser-based shell that already includes Azure CLI and Azure PowerShell, so nothing needs to be installed. Installing PowerShell locally is not possible on this computer.
Question 23Azure Architecture & Services
Margie's Travel wants employees to sign in once with their Microsoft Entra ID account and then open many cloud apps without signing in again. Which feature provides this?
Correct answer: D. Single sign-on
Single sign-on lets users authenticate once and then access multiple applications with the same identity. Multifactor authentication adds verification steps to a sign-in but does not remove the need to sign in to each app.
Single sign-on lets users authenticate once and then access multiple applications with the same identity. Multifactor authentication adds verification steps to a sign-in but does not remove the need to sign in to each app.
Question 24Cloud Concepts
Developers at Adatum want to run code in response to events without provisioning or managing any servers. Which cloud approach should they use?
Correct answer: B. Serverless computing
Serverless computing lets developers run code while the provider handles server provisioning, scaling and maintenance, and it is commonly event-driven. With IaaS, the customer still manages virtual machines and their operating systems.
Serverless computing lets developers run code while the provider handles server provisioning, scaling and maintenance, and it is commonly event-driven. With IaaS, the customer still manages virtual machines and their operating systems.
Question 25Management & Governance
Wide World Importers runs servers on-premises and in another cloud provider. It wants to manage them and apply Azure Policy from Azure. What should it use?
Correct answer: C. Azure Arc
Azure Arc projects servers, Kubernetes clusters and data services outside Azure into Azure Resource Manager, so you can manage and govern them with tools like Azure Policy. Azure Migrate assesses and moves workloads to Azure, rather than managing them where they run.
Azure Arc projects servers, Kubernetes clusters and data services outside Azure into Azure Resource Manager, so you can manage and govern them with tools like Azure Policy. Azure Migrate assesses and moves workloads to Azure, rather than managing them where they run.
Question 26Azure Architecture & Services
Contoso has two virtual networks in Azure. Resources in both networks must communicate privately over the Microsoft backbone network. What should Contoso configure?
Correct answer: D. Virtual network peering
Virtual network peering connects two Azure virtual networks so traffic flows privately over the Microsoft backbone. Public IP addresses would expose the resources to the internet instead of keeping traffic private.
Virtual network peering connects two Azure virtual networks so traffic flows privately over the Microsoft backbone. Public IP addresses would expose the resources to the internet instead of keeping traffic private.
Question 27Cloud Concepts
Relecloud's online store gets sudden traffic spikes during flash sales. It wants resources added automatically during a spike and removed when traffic drops. Which cloud benefit does this describe?
Correct answer: C. Elasticity
Elasticity is the ability to automatically add or remove resources as demand changes. High availability is about keeping a service running with minimal downtime, not about matching capacity to load.
Elasticity is the ability to automatically add or remove resources as demand changes. High availability is about keeping a service running with minimal downtime, not about matching capacity to load.
Question 28Azure Architecture & Services
Woodgrove Bank needs a private, dedicated connection from its datacenter to Azure that does not travel over the public internet. What should it use?
Correct answer: B. Azure ExpressRoute
ExpressRoute provides a private connection to Microsoft cloud services through a connectivity provider, so traffic does not cross the public internet. A site-to-site VPN is encrypted but still travels over the public internet.
ExpressRoute provides a private connection to Microsoft cloud services through a connectivity provider, so traffic does not cross the public internet. A site-to-site VPN is encrypted but still travels over the public internet.
Question 29Management & Governance
Contoso's team finds ARM template JSON hard to read and maintain. It wants a language with simpler syntax that still deploys through Azure Resource Manager. What should it use?
Correct answer: C. Bicep
Bicep is an Azure-native language with simpler syntax than JSON, and Bicep files compile to ARM templates for deployment. Azure CLI scripts run imperative commands step by step rather than declaring the desired state like a template.
Bicep is an Azure-native language with simpler syntax than JSON, and Bicep files compile to ARM templates for deployment. Azure CLI scripts run imperative commands step by step rather than declaring the desired state like a template.
Question 30Cloud Concepts
Fourth Coffee needs its ordering app to stay accessible even when an individual server or component fails. Which cloud benefit addresses this need?
Correct answer: A. High availability
High availability means a service stays accessible with minimal downtime, even when some components fail. Elasticity adjusts capacity to demand but does not by itself keep the service running through failures.
High availability means a service stays accessible with minimal downtime, even when some components fail. Elasticity adjusts capacity to demand but does not by itself keep the service running through failures.
Question 31Azure Architecture & Services
Fabrikam stores data in an Azure storage account. Data must remain available if one availability zone fails, and copies must never leave the primary region. Which redundancy option should it choose?
Correct answer: B. Zone-redundant storage (ZRS)
ZRS copies data synchronously across three availability zones in the primary region, so it survives a zone outage without leaving that region. GRS and GZRS replicate to a secondary region, and LRS keeps all copies in a single datacenter.
ZRS copies data synchronously across three availability zones in the primary region, so it survives a zone outage without leaving that region. GRS and GZRS replicate to a secondary region, and LRS keeps all copies in a single datacenter.
Question 32Management & Governance
Fabrikam wants personalized recommendations to cut costs, such as resizing underused VMs, and to improve reliability. Which free service should it use?
Correct answer: A. Azure Advisor
Azure Advisor analyzes your resource configuration and usage and gives personalized recommendations for cost, reliability, security, performance and operational excellence. Azure Monitor collects metrics and logs but is not a best-practice recommendation engine.
Azure Advisor analyzes your resource configuration and usage and gives personalized recommendations for cost, reliability, security, performance and operational excellence. Azure Monitor collects metrics and logs but is not a best-practice recommendation engine.
Question 33Azure Architecture & Services
Lucerne Publishing must keep scanned contracts for 10 years. The files are almost never read, and a retrieval delay of several hours is acceptable. Which blob access tier is the cheapest option?
Correct answer: C. Archive
The archive tier has the lowest storage cost and is meant for rarely accessed data that can wait hours while it is rehydrated. The cold tier is online and returns data immediately, but it costs more to store than archive.
The archive tier has the lowest storage cost and is meant for rarely accessed data that can wait hours while it is rehydrated. The cold tier is online and returns data immediately, but it costs more to store than archive.
Question 34Management & Governance
Lamna Healthcare wants to be notified about Azure service incidents and planned maintenance that affect the services and regions it uses. What should it configure?
Correct answer: D. Azure Service Health alerts
Azure Service Health gives a personalized view of service issues, planned maintenance and health advisories for the services and regions you use, and it can send alerts. Azure Advisor gives best-practice recommendations, not incident notifications.
Azure Service Health gives a personalized view of service issues, planned maintenance and health advisories for the services and regions you use, and it can send alerts. Azure Advisor gives best-practice recommendations, not incident notifications.
Question 35Cloud Concepts
Alpine Ski House must migrate a legacy app that needs custom operating system settings and third-party drivers. The team needs full control of the operating system. Which service model should it choose?
Correct answer: D. IaaS
IaaS gives the most control, because the customer manages the operating system and everything installed on it. PaaS hides the operating system, so custom drivers and OS-level settings are not possible.
IaaS gives the most control, because the customer manages the operating system and everything installed on it. PaaS hides the operating system, so custom drivers and OS-level settings are not possible.
Question 36Azure Architecture & Services
Graphic Design Institute wants a fully managed file share that several Windows and Linux VMs can mount at the same time by using the SMB protocol. Which service should it use?
Correct answer: A. Azure Files
Azure Files offers fully managed file shares that can be mounted concurrently over SMB or NFS. Blob Storage stores unstructured objects and is accessed through REST APIs or tools, not as a traditional SMB share.
Azure Files offers fully managed file shares that can be mounted concurrently over SMB or NFS. Blob Storage stores unstructured objects and is accessed through REST APIs or tools, not as a traditional SMB share.
Question 37Management & Governance
An operations team at Litware wants to write queries that search and analyze log data collected by Azure Monitor. Which tool should they use?
Correct answer: B. Log Analytics
Log Analytics is the Azure portal tool for writing Kusto Query Language queries against data in Azure Monitor Logs. Service Health reports Azure platform issues and does not let you query your own log data.
Log Analytics is the Azure portal tool for writing Kusto Query Language queries against data in Azure Monitor Logs. Service Health reports Azure platform issues and does not let you query your own log data.
Question 38Cloud Concepts
Lamna Healthcare wants email and office productivity apps that the provider fully maintains. Staff should only need to sign in and use them. Which service model fits best?
Correct answer: D. SaaS
SaaS delivers complete applications, such as Microsoft 365, that the provider hosts and maintains. PaaS is a platform for building and running your own apps, so Lamna Healthcare would still have to develop and manage the application.
SaaS delivers complete applications, such as Microsoft 365, that the provider hosts and maintains. PaaS is a platform for building and running your own apps, so Lamna Healthcare would still have to develop and manage the application.
Question 39Azure Architecture & Services
Southridge Video needs to move 60 TB of video files to Azure. Its internet connection is slow, and the transfer must finish in under two weeks. What should it use?
Correct answer: C. Azure Data Box
Azure Data Box is a physical device that Microsoft ships to you, which you fill with data and return for upload, avoiding slow network links. AzCopy copies data over the network, so a slow connection would make a 60 TB transfer take too long.
Azure Data Box is a physical device that Microsoft ships to you, which you fill with data and return for upload, avoiding slow network links. AzCopy copies data over the network, so a slow connection would make a 60 TB transfer take too long.
Question 40Management & Governance
Proseware's developers want to track page load times, failed requests and exceptions for their web application. Which feature of Azure Monitor should they use?
Correct answer: B. Application Insights
Application Insights is the application performance monitoring feature of Azure Monitor, tracking response times, request failures and exceptions. Service Health tracks the health of Azure services, not the behavior of your own application code.
Application Insights is the application performance monitoring feature of Azure Monitor, tracking response times, request failures and exceptions. Service Health tracks the health of Azure services, not the behavior of your own application code.
Question 41Azure Architecture & Services
Humongous Insurance wants users to prove their identity with a password plus a second factor, such as a phone call or an app notification. What should it enable?
Correct answer: C. Multifactor authentication
Multifactor authentication requires two or more forms of verification, such as something you know and something you have. Single sign-on reduces the number of sign-ins but does not add a second verification factor.
Multifactor authentication requires two or more forms of verification, such as something you know and something you have. Single sign-on reduces the number of sign-ins but does not add a second verification factor.
Question 42Cloud Concepts
Coho Winery buys new servers and storage arrays for its datacenter and depreciates them over five years. How is this spending classified?
Correct answer: A. Capital expenditure (CapEx)
CapEx is an up-front investment in physical assets whose value is depreciated over time. OpEx is spending on services or products as they are used, such as a monthly cloud bill.
CapEx is an up-front investment in physical assets whose value is depreciated over time. OpEx is spending on services or products as they are used, such as a monthly cloud bill.
Question 43Management & Governance
Wingtip Toys runs a web app on Azure VMs. Which change increases the SLA that Microsoft offers for VM connectivity?
Correct answer: B. Deploy two or more VMs across availability zones
Microsoft offers a higher SLA when two or more VMs are deployed across availability zones in the same region than for a single VM. Resource groups and tags only organize resources and do not change the SLA.
Microsoft offers a higher SLA when two or more VMs are deployed across availability zones in the same region than for a single VM. Resource groups and tags only organize resources and do not change the SLA.
Question 44Azure Architecture & Services
Contoso wants to block sign-ins to its Microsoft Entra ID tenant from countries where it has no offices, while allowing sign-ins from everywhere else. What should it configure?
Correct answer: A. Conditional Access policies
Conditional Access evaluates signals such as location, device and risk at sign-in, then allows, blocks or requires extra verification. Azure RBAC controls what an authenticated user can do with Azure resources, not whether a sign-in from a location is allowed.
Conditional Access evaluates signals such as location, device and risk at sign-in, then allows, blocks or requires extra verification. Azure RBAC controls what an authenticated user can do with Azure resources, not whether a sign-in from a location is allowed.
Question 45Cloud Concepts
The finance team at Proseware wants to forecast next quarter's Azure spending with confidence and track it against plans. Which cloud benefit supports this goal?
Correct answer: C. Predictability
Predictability in the cloud covers both performance and cost, and cost predictability lets you forecast spending with tools like the Pricing calculator and Cost Management. Reliability is about recovering from failures, not about forecasting costs.
Predictability in the cloud covers both performance and cost, and cost predictability lets you forecast spending with tools like the Pricing calculator and Cost Management. Reliability is about recovering from failures, not about forecasting costs.
Question 46Management & Governance
Coho Winery wants to use a new Azure service that is currently in public preview for a production workload. What should Coho Winery know about the SLA?
Correct answer: B. Preview services are not covered by an SLA
Public preview features are provided as-is and are not covered by service level agreements. Customers should wait for general availability before relying on a service for production workloads that need an SLA.
Public preview features are provided as-is and are not covered by service level agreements. Customers should wait for general availability before relying on a service for production workloads that need an SLA.
Question 47Azure Architecture & Services
An auditor at Adatum must view all resources in one resource group but must not change anything. Following least privilege, what should you do?
Correct answer: D. Assign the Reader role at the resource group scope
Azure RBAC lets you grant the built-in Reader role at a specific scope, giving view-only access to that resource group and nothing more. A ReadOnly lock blocks changes for everyone, but it does not grant the auditor any access.
Azure RBAC lets you grant the built-in Reader role at a specific scope, giving view-only access to that resource group and nothing more. A ReadOnly lock blocks changes for everyone, but it does not grant the auditor any access.
Question 48Cloud Concepts
Bellows College wants every new Azure resource to follow its standards. It also wants the platform to flag resources that drift out of compliance. Which cloud benefit does this describe?
Correct answer: A. Governance
Governance in the cloud means using templates and policies to deploy resources that meet company standards, and auditing to flag anything that becomes noncompliant. Scalability is about adjusting capacity, not enforcing standards.
Governance in the cloud means using templates and policies to deploy resources that meet company standards, and auditing to flag anything that becomes noncompliant. Scalability is about adjusting capacity, not enforcing standards.
Question 49Management & Governance
Adatum wants an administrator to receive a text message when a VM's CPU usage stays above 90 percent for 10 minutes. What should it configure?
Correct answer: B. An Azure Monitor alert rule with an action group
Azure Monitor alert rules check a metric condition, such as CPU above 90 percent, and an action group defines who is notified and how, such as by SMS. Service Health alerts cover Azure platform incidents, not the CPU usage of your own VMs.
Azure Monitor alert rules check a metric condition, such as CPU above 90 percent, and an action group defines who is notified and how, such as by SMS. Service Health alerts cover Azure platform incidents, not the CPU usage of your own VMs.
Question 50Azure Architecture & Services
Fabrikam wants a secure score and recommendations to improve the security posture of its Azure, on-premises and other cloud workloads. Which service should it use?
Correct answer: D. Microsoft Defender for Cloud
Microsoft Defender for Cloud provides a secure score, security recommendations and threat protection across Azure, hybrid and multicloud workloads. Azure Advisor shows some security recommendations, but it pulls them from Defender for Cloud and does not provide a secure score.
Microsoft Defender for Cloud provides a secure score, security recommendations and threat protection across Azure, hybrid and multicloud workloads. Azure Advisor shows some security recommendations, but it pulls them from Defender for Cloud and does not provide a secure score.
The real AZ-900 exam at a glance
50questions
45mtime limit
MCQmultiple choice
80%+aim for here
Score 80% or more on two different sets before you book the real exam. Need a plan for your weak topics? See how we help you pass, or get a full refund.
More free Microsoft Azure & Power BI practice tests
AZ-104 Practice Test50 questions · Azure AdministratorAZ-305 Practice Test50 questions · Azure Solutions ArchitectAZ-400 Practice Test50 questions · Azure DevOps EngineerPL-300 Practice Test50 questions · Power BI Data Analyst
See all 36 free practice tests →
Original practice questions written by CertOcean in the style of the AZ-900 exam. They are not real exam questions. AZ-900 and Microsoft are trademarks of their owners. Real exam format: usually 40-60 questions · 45 minutes · passing score 700 on a 1-1000 scale.