AZ-900 mock exam: 25 free practice questions

Q1 / 25

A team is deploying an HTTP-based application and wants Azure to maintain the hosting environment, scale the site, and integrate deployment. Which option fits?

1. AAzure App Service managed web hosting
2. BA customer-managed Azure virtual machine
3. CAn Azure Virtual Desktop session
4. DA virtual machine availability set

Q2 / 25

A company has predictable compute spending for the next three years, but its eligible compute services and virtual machine types may change. Which pricing choice best preserves that flexibility while reducing cost?

1. ACommit to an hourly spend with Azure savings plan for compute.
2. BUse pay-as-you-go with a three-year commitment.
3. CReserve one specific virtual machine resource for the full three-year term.
4. DRun every workload on Spot Virtual Machines and accept possible eviction.

Q3 / 25

Why can containers suit independently managed application components?

1. AEach component requires its own fully managed guest operating system
2. BEach component runs solely when a timer triggers a function
3. CEvery component becomes a centrally delivered Windows desktop
4. DEach isolated component can be scaled or updated separately

Q4 / 25

Which statement defines a public cloud?

1. AAn organization interconnects public and private cloud environments.
2. BA third-party cloud provider builds, controls, and maintains the environment.
3. CA single entity uses resources dedicated to that organization.
4. DAn organization maintains hardware in its dedicated on-site datacenter.

Q5 / 25

Which statement describes B2B direct connect?

1. AIt creates mutual tenant trust without representing users in the inviting directory
2. BIt creates guest users and removes their home-tenant access
3. CIt deploys managed domain controllers for external organizations
4. DIt synchronizes managed-domain resources back to Microsoft Entra ID

Q6 / 25

A nonproduction resource group has a monthly spending limit. The team needs an email at the threshold and an automatic shutdown so notification alone is not the final control. What should it configure?

1. AA resource-group-scoped budget with a budget alert and threshold automation.
2. BA Pricing calculator estimate with a regional comparison and no deployed-resource action.
3. CA department spending quota alert that automatically changes the resource group.
4. DAn Azure Prepayment credit alert generated at ninety and one hundred percent.

Q7 / 25

Which option adds read access to GZRS data in the secondary region before failover?

1. AZRS with replicas in a secondary region
2. BRA-GZRS with readable secondary replicas
3. CGZRS with unreadable secondary replicas
4. DRA-GRS with zone-redundant primary replicas

Q8 / 25

Which requirement best matches the documented SaaS use case?

1. AA custom guest operating system for an IoT server
2. BA physical host purchased for connected-device telemetry
3. CA simplified managed platform for an IoT solution
4. DA container upload with direct platform deployment control

Q9 / 25

Which information can Application Insights monitor for a web application?

1. ASubscription prices, resource locks, policies, and management groups
2. BAdvisor categories, dismissed recommendations, and cost opportunities
3. CRegional outages, planned maintenance, advisories, and support cases
4. DRequest rates, response times, failures, dependencies, and user trends

Q10 / 25

A company needs separate invoices and different access rules for production and development. Which Azure scope should separate the environments?

1. ATwo availability zones inside the same Azure region
2. BTwo nested resource groups inside one shared group
3. CTwo resources attached directly to the Tenant Root Group
4. DTwo Azure subscriptions, one for each environment

Q11 / 25

Which statement correctly distinguishes high availability from scalability?

1. AAvailability and scalability both require a fixed instance count
2. BAvailability limits disruption risk, while scalability changes capacity
3. CAvailability changes capacity, while scalability prevents maintenance
4. DAvailability predicts demand, while scalability removes hardware failures

Q12 / 25

A production resource group already holds thousands of resources created without the CostCenter tag, and new resources keep arriving without it. Tagging the resource group itself did not reach the resources inside. Which approach fixes both the existing estate and future deployments?

1. AAssign a policy that denies the creation of any resource without the tag, which also corrects the existing ones.
2. BTag the resource group again and wait for the resources inside it to pick up the value.
3. CAssign a policy that adds the tag from the parent resource group, then run a remediation task over the existing resources.
4. DPlace a ReadOnly lock on the resource group so untagged resources can no longer be changed.

Q13 / 25

A development team needs standards-based cloud identity and sign-in for a new application, with no requirement for LDAP or Kerberos. Which directory service fits?

1. AB2B direct connect for internal application authentication
2. BExternal ID for customers for employee directory management
3. CMicrosoft Entra ID for modern cloud application access
4. DMicrosoft Entra Domain Services for modern app-only access

Q14 / 25

Where does software as a service sit on the responsibility spectrum?

1. AMost service responsibility belongs to the cloud consumer
2. BGuest operating-system patching becomes the consumer's defining task
3. CPhysical datacenter responsibility moves to the cloud consumer
4. DMost service responsibility belongs to the cloud provider

Q15 / 25

What can a user do with an individual Azure Advisor recommendation?

1. AConvert it into global status, maintenance, or advisories
2. BRewrite it as a metric, log, or availability test
3. CTake the suggested action, postpone it, or dismiss it
4. DAssign it to Azure Status, Service Health, or Resource Health

Q16 / 25

What does an Azure datacenter provide at the physical infrastructure layer?

1. ASubscriptions grouped under shared access policies and compliance rules
2. BGlobal services that never require a selected deployment location
3. CServers in racks supported by dedicated power, cooling, and networking
4. DPaired regions connected to guarantee automatic service replication

Q17 / 25

What reliability benefit do virtual machine availability sets provide within a region?

1. AThey commit eligible compute usage to an hourly spend
2. BThey report health for every Azure service worldwide
3. CThey reduce shared maintenance and hardware-failure exposure
4. DThey estimate monthly infrastructure costs before deployment

Q18 / 25

Which statement correctly describes Azure Prepayment credit alerts?

1. AThey notify department owners whenever a fixed spending quota reaches fifty percent.
2. BThey apply to every subscription at eighty percent of a monthly resource-group budget.
3. CThey compare estimated compute prices across regions before resources are deployed.
4. DThey apply to Enterprise Agreement organizations at ninety and one hundred percent consumption.

Q19 / 25

A team has one virtual network and needs a distinct address range for a protected application tier. Which component should it create?

1. AA DNS zone for that application tier's address range
2. BA peering for that application tier's address range
3. CA subnet for that application tier's address range
4. DAn ExpressRoute circuit for that application tier's address range

Q20 / 25

Which outcome is a benefit of high availability for a grouped virtual-machine workload?

1. AA guarantee that hardware maintenance cannot occur
2. BA requirement to run the workload on one virtual machine
3. CA lower chance that one event affects every virtual machine
4. DA fixed instance count during every demand change

Q21 / 25

A web application receives almost no traffic overnight, but the team must still verify that it responds. Which capability should it use?

1. AService Health alerts with planned maintenance notices
2. BAzure Monitor metric alerts with current CPU usage
3. CLog Analytics trend queries with historical user sessions
4. DApplication Insights availability tests with synthetic requests

Q22 / 25

What does Azure Virtual Network peering connect?

1. ATwo DNS records by registering a shared domain name
2. BTwo subnets by creating a new virtual network boundary
3. CTwo virtual networks for direct private communication
4. DTwo public endpoints by assigning one private IP address

Q23 / 25

A new application needs provider-operated resources that can be provisioned and removed quickly. The organization has no requirement for dedicated private resources and wants to scale without buying hardware. Which model should it select?

1. APrivate cloud, purchasing dedicated hardware to gain complete infrastructure control
2. BPublic cloud, using generally available resources without capital expenditure for scaling
3. CPrivate cloud, hosting dedicated resources on-site and maintaining the hardware
4. DHybrid cloud, retaining a private environment and connecting public resources to it

Q24 / 25

When is a Cost Management budget alert generated?

1. AWhen a resource is added to the Pricing calculator for an estimate.
2. BWhen a monthly estimate is compared across two deployment regions.
3. CWhen Azure Prepayment reaches exactly fifty percent of its balance.
4. DWhen spending reaches or exceeds a threshold defined for the budget.

Q25 / 25

A company must connect its corporate VPN device to an Azure virtual network through an IPsec site-to-site tunnel over the internet. Which service fits?

1. AAzure ExpressRoute for the site-to-site tunnel
2. BA private endpoint for the site-to-site tunnel
3. CAzure VPN Gateway for the site-to-site tunnel
4. DA public endpoint for the site-to-site tunnel