AZ-900: Microsoft Azure Fundamentals Practice Exam
The AZ-900: Microsoft Azure Fundamentals exam is the ideal starting point for anyone looking to build a solid foundation in cloud computing with Microsoft Azure. Whether you’re new to cloud technologies or preparing for a role that involves cloud services, this entry-level certification validates your understanding of core Azure concepts, services, security, pricing, and support. Passing the AZ-900 exam demonstrates your ability to describe cloud concepts, core Azure services, and basic solutions, making it a valuable credential for IT professionals, students, and anyone eager to kickstart a cloud career.
What is the AZ-900 Exam?
The AZ-900 exam is designed for candidates who want to demonstrate foundational knowledge of Microsoft Azure cloud services. This exam does not require technical experience, making it accessible for beginners. It covers essential concepts like cloud computing principles, Azure architecture, security, privacy, compliance, and pricing models. Microsoft uses this certification as a stepping stone for more advanced Azure certifications, helping professionals build expertise progressively.
What Will You Learn?
Preparing for the AZ-900 exam equips you with a comprehensive understanding of:
Cloud concepts such as Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS)
Core Azure services including virtual machines, app services, databases, and storage options
Security, compliance, and identity basics with Azure Active Directory and Azure governance tools
Azure pricing, service-level agreements (SLAs), and lifecycle management
Azure solutions and management tools for monitoring and optimizing resources
This knowledge enables you to confidently explain Azure’s benefits and architectural components, helping you engage with technical teams and stakeholders effectively.
Exam Topics Covered
Our AZ-900 practice exam thoroughly covers the key domains tested by Microsoft, including:
Describe Cloud Concepts (20-25%)
Describe Core Azure Services (15-20%)
Describe Security, Privacy, Compliance, and Trust (25-30%)
Describe Azure Pricing, SLA, and Lifecycle (20-25%)
By mastering these topics through Exam Sage’s carefully crafted questions and detailed explanations, you can identify your strengths and address any knowledge gaps before the official exam.
Why Choose Exam Sage for Your AZ-900 Preparation?
ExamSage.com is a trusted platform dedicated to helping learners succeed with quality, up-to-date practice exams. Our AZ-900 practice test features realistic questions written by industry experts and aligned with the latest Microsoft exam objectives. Each question comes with clear explanations, ensuring you understand the reasoning behind every answer.
Additionally, Exam Sage offers a user-friendly interface, enabling flexible practice anytime and anywhere. Whether you’re studying at home or on the go, you can efficiently track your progress and build confidence through repeated practice.
Investing in the AZ-900 practice exam at Exam Sage is a smart step toward achieving your Microsoft Azure Fundamentals certification. Start your cloud journey today with reliable practice resources that prepare you thoroughly for exam day success.
Sample Questions and Answers
1. Which of the following is an example of an Infrastructure-as-a-Service (IaaS) offering in Azure?
A. Azure Virtual Machines
B. Azure SQL Database
C. Azure Functions
D. Microsoft 365
Answer: A. Azure Virtual Machines
Explanation: Azure Virtual Machines provide on-demand computing resources and are a classic example of IaaS, where the user manages the OS and applications, while Azure manages the infrastructure.
2. What is the primary benefit of using a Content Delivery Network (CDN)?
A. Encrypting web traffic
B. Reducing data transfer costs
C. Improving latency by caching content close to users
D. Hosting dynamic content
Answer: C. Improving latency by caching content close to users
Explanation: A CDN caches static content at edge locations globally, delivering content faster to users and reducing latency.
3. Which Azure service allows you to host a website without managing infrastructure?
A. Azure App Service
B. Azure Blob Storage
C. Azure DevOps
D. Azure Virtual Network
Answer: A. Azure App Service
Explanation: Azure App Service is a Platform-as-a-Service (PaaS) offering that enables hosting of web apps without server management.
4. What is the purpose of Azure Resource Groups?
A. To assign user permissions
B. To logically group related resources
C. To store user data
D. To manage billing
Answer: B. To logically group related resources
Explanation: Resource Groups help manage and organize Azure resources by grouping them based on lifecycle, permissions, or deployment.
5. Which service would you use to manage and control user access to Azure resources?
A. Azure Monitor
B. Azure Active Directory
C. Azure DevOps
D. Azure Key Vault
Answer: B. Azure Active Directory
Explanation: Azure AD is Microsoft’s cloud-based identity and access management service, used to manage users and control access to resources.
6. What is the billing model for Azure services?
A. Flat rate monthly billing
B. Upfront annual billing
C. Pay-as-you-go
D. Subscription-based with fixed usage
Answer: C. Pay-as-you-go
Explanation: Azure follows a consumption-based billing model where you pay only for what you use.
7. What Azure feature helps you apply consistent policy across your organization?
A. Azure Monitor
B. Azure Policy
C. Azure Blueprint
D. Azure Advisor
Answer: B. Azure Policy
Explanation: Azure Policy allows organizations to create, assign, and manage policies to enforce rules and effects on resources.
8. Which service helps detect and respond to security threats in Azure?
A. Azure Security Center
B. Azure Advisor
C. Azure DevTest Labs
D. Azure Sentinel
Answer: A. Azure Security Center
Explanation: Azure Security Center provides unified security management and advanced threat protection across Azure resources.
9. What is the main benefit of high availability in the cloud?
A. Enhanced graphical performance
B. Automated source code deployment
C. Minimal downtime and uninterrupted access
D. Reduced data privacy
Answer: C. Minimal downtime and uninterrupted access
Explanation: High availability ensures that applications remain operational and accessible with minimal downtime.
10. Which Azure tool provides a personalized guide to Azure best practices?
A. Azure Monitor
B. Azure Cost Management
C. Azure Advisor
D. Azure CLI
Answer: C. Azure Advisor
Explanation: Azure Advisor offers personalized recommendations to help optimize performance, security, and cost of your resources.
11. Which Azure service provides scalable cloud-based data storage for unstructured data?
A. Azure Table Storage
B. Azure SQL
C. Azure Blob Storage
D. Azure Kubernetes Service
Answer: C. Azure Blob Storage
Explanation: Azure Blob Storage is optimized for storing large amounts of unstructured data such as images, videos, and documents.
12. Which option best describes Platform-as-a-Service (PaaS)?
A. Provides networking and storage only
B. Provides software applications on demand
C. Provides managed environment for app development
D. Provides virtual hardware
Answer: C. Provides managed environment for app development
Explanation: PaaS provides the runtime environment, development tools, and infrastructure needed to build and deploy applications.
13. What is Azure’s SLA for most of its services?
A. 95.00%
B. 98.99%
C. 99.90% or higher
D. 100.00%
Answer: C. 99.90% or higher
Explanation: Microsoft guarantees a financially backed SLA of at least 99.9% uptime for most core Azure services.
14. Which Azure tool allows you to interact with Azure services using command-line interface?
A. Azure PowerShell
B. Azure DevOps
C. Azure Monitor
D. Azure Advisor
Answer: A. Azure PowerShell
Explanation: Azure PowerShell is a set of modules that provide cmdlets to manage Azure resources directly from the command line.
15. What is the purpose of Azure Availability Zones?
A. Provide DNS failover
B. Isolate resources within a single data center
C. Protect applications from data center failures
D. Migrate applications between regions
Answer: C. Protect applications from data center failures
Explanation: Availability Zones are physically separate zones within a region designed for high availability and disaster recovery.
16. Which of these best represents a hybrid cloud model?
A. Only on-premises infrastructure
B. Only public cloud services
C. A mix of on-premises and cloud services
D. Multi-cloud deployment across different providers
Answer: C. A mix of on-premises and cloud services
Explanation: Hybrid cloud combines on-premises infrastructure with cloud-based services to provide flexibility.
17. What Azure service provides container orchestration?
A. Azure Functions
B. Azure Logic Apps
C. Azure Kubernetes Service (AKS)
D. Azure Web Apps
Answer: C. Azure Kubernetes Service (AKS)
Explanation: AKS is a managed Kubernetes container orchestration service used to deploy and manage containers at scale.
18. What is the main use of Azure DevTest Labs?
A. Automate data backups
B. Create CI/CD pipelines
C. Provide environments for development and testing
D. Host production websites
Answer: C. Provide environments for development and testing
Explanation: Azure DevTest Labs enables rapid provisioning of development and test environments.
19. Which service helps you manage secrets, keys, and certificates?
A. Azure Vault
B. Azure Key Vault
C. Azure Safe
D. Azure Container Registry
Answer: B. Azure Key Vault
Explanation: Azure Key Vault securely stores secrets, encryption keys, and certificates.
20. What is the role of Azure Load Balancer?
A. Monitor traffic logs
B. Improve caching
C. Distribute incoming network traffic
D. Store data in blob format
Answer: C. Distribute incoming network traffic
Explanation: Azure Load Balancer evenly distributes traffic among healthy virtual machines to ensure application availability and performance.
21. Which of the following is NOT a benefit of cloud computing?
A. Scalability
B. High upfront capital costs
C. High availability
D. Disaster recovery
Answer: B. High upfront capital costs
Explanation: Cloud computing reduces upfront costs by offering pay-as-you-go pricing, thus eliminating capital expense.
22. What is the function of Azure Marketplace?
A. Manage billing and subscriptions
B. Store backups and logs
C. Discover, try, and deploy third-party apps
D. Manage security rules
Answer: C. Discover, try, and deploy third-party apps
Explanation: Azure Marketplace is a store for purchasing and deploying software and services built by Microsoft and third-party vendors.
23. What does Azure Cost Management allow you to do?
A. Encrypt your storage
B. Monitor resource metrics
C. Analyze and manage cloud spending
D. Deploy applications at scale
Answer: C. Analyze and manage cloud spending
Explanation: Azure Cost Management provides tools for tracking and optimizing cloud costs.
24. Which Azure compute option is best for event-driven code execution?
A. Azure VMs
B. Azure Batch
C. Azure Functions
D. Azure Kubernetes Service
Answer: C. Azure Functions
Explanation: Azure Functions allow you to run code in response to events without managing infrastructure.
25. Which Azure service provides a platform for big data analytics?
A. Azure SQL Database
B. Azure Data Lake
C. Azure Redis Cache
D. Azure Logic Apps
Answer: B. Azure Data Lake
Explanation: Azure Data Lake is a scalable data storage and analytics service designed for big data workloads.
26. What is the purpose of Azure Region Pairs?
A. Improve security compliance
B. Manage subscriptions
C. Ensure disaster recovery and data residency
D. Optimize pricing
Answer: C. Ensure disaster recovery and data residency
Explanation: Region Pairs are geographically separated to support disaster recovery and ensure data residency.
27. What is serverless computing in Azure?
A. Running physical servers in data centers
B. Hosting virtual machines
C. Running backend code without managing servers
D. Installing server OS manually
Answer: C. Running backend code without managing servers
Explanation: Serverless allows you to run functions on demand without provisioning or managing infrastructure.
28. What does Azure Compliance Manager help you do?
A. Schedule backups
B. Deploy functions
C. Assess compliance with regulations
D. Visualize monitoring data
Answer: C. Assess compliance with regulations
Explanation: Compliance Manager helps evaluate and manage your compliance posture with regulatory requirements.
29. What is Azure’s shared responsibility model?
A. Microsoft manages everything
B. Customer manages everything
C. Responsibility is split between Microsoft and customer
D. Partner handles everything
Answer: C. Responsibility is split between Microsoft and customer
Explanation: In the shared responsibility model, Microsoft manages the physical infrastructure, while customers manage their data and applications.
30. Which Azure feature helps automate the deployment of infrastructure using templates?
A. Azure Advisor
B. Azure CLI
C. Azure Resource Manager (ARM) templates
D. Azure Monitor
Answer: C. Azure Resource Manager (ARM) templates
Explanation: ARM templates allow declarative deployment and automation of Azure infrastructure resources.
31. Which of the following is a benefit of Azure Resource Manager (ARM)?
A. Encrypts data stored in Blob storage
B. Provides fine-grained access control to resources
C. Monitors physical servers
D. Automatically generates billing reports
Answer: B
Explanation: Azure Resource Manager enables fine-grained access control by allowing role-based access to resources, improving security and management in cloud deployments.
32. What is the purpose of Azure Availability Zones?
A. Improve development cycle
B. Provide high availability across data centers
C. Reduce monthly billing costs
D. Support code versioning
Answer: B
Explanation: Availability Zones are physically separate locations within an Azure region, designed to ensure resiliency and high availability in the event of data center failures.
33. Which Azure service is primarily used for serverless computing?
A. Azure Kubernetes Service
B. Azure Virtual Machines
C. Azure Functions
D. Azure App Configuration
Answer: C
Explanation: Azure Functions is a serverless compute service allowing users to run event-driven code without managing infrastructure.
34. Azure Logic Apps are best suited for:
A. Managing Azure Active Directory
B. Writing complex code
C. Automating workflows
D. Creating virtual networks
Answer: C
Explanation: Azure Logic Apps allows users to automate workflows and integrate apps, data, and services with minimal or no code.
35. A company wants to ensure only authorized users can access resources. What service should they use?
A. Azure Load Balancer
B. Azure App Service
C. Azure Active Directory
D. Azure Blob Storage
Answer: C
Explanation: Azure Active Directory is used for identity and access management, providing authentication and authorization features.
36. What tool would you use to estimate the cost of Azure services?
A. Azure CLI
B. Azure Advisor
C. Azure Pricing Calculator
D. Azure Monitor
Answer: C
Explanation: The Azure Pricing Calculator allows users to estimate and understand the cost of deploying Azure services.
37. Which statement is true about Platform as a Service (PaaS)?
A. Users manage the physical servers
B. Developers manage OS updates
C. The provider manages the infrastructure and runtime
D. Customers install the database software manually
Answer: C
Explanation: In PaaS, Azure handles the infrastructure and runtime environment, letting developers focus on app development.
38. What does Azure DevOps provide?
A. Container hosting services
B. High-performance computing
C. Development collaboration tools
D. Data warehouse analytics
Answer: C
Explanation: Azure DevOps offers tools for project planning, collaboration, CI/CD pipelines, and code versioning for development teams.
39. Which Azure service provides firewall protection?
A. Azure Virtual Desktop
B. Azure Firewall
C. Azure Policy
D. Azure Boards
Answer: B
Explanation: Azure Firewall is a managed, cloud-based network security service to protect Azure Virtual Network resources.
40. Which Azure feature allows multiple subscriptions to be managed under a single hierarchy?
A. Azure Tags
B. Azure Resource Locks
C. Management Groups
D. Availability Zones
Answer: C
Explanation: Management Groups help manage access, policy, and compliance across multiple subscriptions.
41. What is the benefit of Azure’s geographic distribution?
A. Reduced database size
B. Application availability and resiliency
C. Increased electricity costs
D. Higher latency
Answer: B
Explanation: Azure’s global presence helps ensure high availability and disaster recovery, reducing latency and improving resilience.
42. Which service is best suited for storing NoSQL data in Azure?
A. Azure SQL Database
B. Azure Synapse Analytics
C. Azure Cosmos DB
D. Azure Blob Storage
Answer: C
Explanation: Azure Cosmos DB is a globally distributed, multi-model NoSQL database service.
43. What is the function of Azure ExpressRoute?
A. Encrypts data at rest
B. Provides private connection to Azure
C. Hosts serverless functions
D. Offers web app development tools
Answer: B
Explanation: ExpressRoute provides a private, dedicated connection between your on-premises infrastructure and Azure, bypassing the public internet.
44. Azure Monitor helps with:
A. Estimating monthly costs
B. Diagnosing and monitoring performance
C. Developing mobile apps
D. Creating SQL databases
Answer: B
Explanation: Azure Monitor collects and analyzes telemetry data to ensure performance and availability of applications and resources.
45. What is a region in Azure?
A. A container for a virtual machine
B. A specific data center
C. A geographical area with one or more data centers
D. A virtual private network
Answer: C
Explanation: An Azure region is a set of data centers deployed within a specific geographical location, used for resource allocation.
46. What does Azure Policy help you do?
A. Create virtual machines
B. Monitor app performance
C. Enforce organizational standards and compliance
D. Host web applications
Answer: C
Explanation: Azure Policy is used to define and enforce rules and effects for resource properties to help ensure compliance.
47. Which Azure tool can you use to execute PowerShell or CLI scripts in the portal?
A. Azure App Service
B. Azure Cloud Shell
C. Azure DevTest Labs
D. Azure Sentinel
Answer: B
Explanation: Azure Cloud Shell provides a browser-based shell experience using PowerShell or Bash for managing Azure resources.
48. Which type of cloud deployment model includes both on-premises and cloud resources?
A. Private Cloud
B. Public Cloud
C. Community Cloud
D. Hybrid Cloud
Answer: D
Explanation: A Hybrid Cloud combines on-premises infrastructure with cloud services, allowing data and applications to be shared.
49. Azure Site Recovery helps businesses with:
A. Creating virtual networks
B. Disaster recovery and business continuity
C. Encrypting virtual disks
D. Monitoring user behavior
Answer: B
Explanation: Azure Site Recovery replicates workloads to another region, enabling disaster recovery and reducing downtime.
50. Azure Key Vault is designed to:
A. Store firewall rules
B. Create resource groups
C. Securely manage secrets and encryption keys
D. Monitor web apps
Answer: C
Explanation: Azure Key Vault safeguards cryptographic keys, secrets, and certificates, centralizing secure access control.
51. What is the primary purpose of Azure Blueprints?
A. To draw UI mockups
B. To define repeatable environments
C. To visualize network traffic
D. To automate database backups
Answer: B
Explanation: Azure Blueprints allow you to define repeatable sets of Azure resources and policies for consistent environment deployments.
52. What is a Resource Group in Azure?
A. A region that holds availability zones
B. A container that holds related resources
C. A physical data center
D. A collection of virtual machines only
Answer: B
Explanation: Resource Groups are containers that hold related resources for Azure solutions, helping with organization and access control.
53. What Azure service helps detect and respond to threats?
A. Azure Sentinel
B. Azure App Gateway
C. Azure Content Delivery Network
D. Azure Load Balancer
Answer: A
Explanation: Azure Sentinel is a cloud-native SIEM (Security Information and Event Management) and SOAR solution that provides intelligent security analytics and threat detection.
54. What is the purpose of Azure Tagging?
A. Encrypt files
B. Visualize cloud spending
C. Organize resources for management and billing
D. Prevent resource deletion
Answer: C
Explanation: Tags are used in Azure to categorize resources, making it easier to manage and allocate costs.
55. Which of the following can help optimize cloud costs in Azure?
A. Azure Logic Apps
B. Azure Advisor
C. Azure Resource Manager
D. Azure Sentinel
Answer: B
Explanation: Azure Advisor provides personalized recommendations to optimize your Azure resources for high availability, performance, and cost.
56. Which deployment model gives the user the most control over the environment?
A. SaaS
B. PaaS
C. IaaS
D. FaaS
Answer: C
Explanation: Infrastructure as a Service (IaaS) gives users control over VMs, networking, and storage, offering the most flexibility and customization.
57. What feature allows Azure VMs to be distributed evenly to avoid downtime?
A. Resource Groups
B. Scale Sets
C. Availability Sets
D. Tags
Answer: C
Explanation: Availability Sets protect against hardware failures by distributing VMs across multiple physical servers, compute racks, and storage units.
58. Which service is best suited for streaming telemetry data from IoT devices?
A. Azure DevOps
B. Azure Stream Analytics
C. Azure Logic Apps
D. Azure App Service
Answer: B
Explanation: Azure Stream Analytics is an event-processing engine for analyzing and streaming data from devices, sensors, and applications.
59. What is the function of Azure SLA?
A. Provides cost estimation
B. Describes service features
C. Guarantees service uptime and availability
D. Offers training resources
Answer: C
Explanation: A Service Level Agreement (SLA) guarantees a certain level of uptime or availability for a service, giving customers assurance about reliability.
60. What Azure service helps you synchronize on-premises directories with Azure AD?
A. Azure Policy
B. Azure AD Connect
C. Azure Lighthouse
D. Azure App Gateway
Answer: B
Explanation: Azure AD Connect synchronizes on-premises Active Directory with Azure AD to enable a unified identity for users across environments.