View Full Microsoft AZ-900 Exam Dumps and Practice Test Dumps.

 

Question 21

Which Azure service is designed to provide a globally distributed, NoSQL database with support for multiple data models?

1. Azure SQL Database
2. Azure Cosmos DB
3. Azure Database for PostgreSQL
4. Azure Blob Storage

Correct Answer: 2

Explanation

Azure Cosmos DB is a globally distributed database service designed for highly responsive applications that require flexible scaling and low-latency access. It supports NoSQL data models and can distribute data across multiple Azure regions. Cosmos DB is suitable for applications that need global availability, elastic scalability, and fast response times. Azure SQL Database is a relational database service, while Blob Storage is designed for unstructured object data. Choosing the appropriate database depends on workload requirements, data structure, scalability, and application architecture.

Question 22

Which Azure service provides a managed platform for hosting web applications without requiring customers to manage the underlying servers?

1. Azure App Service
2. Azure Virtual Machines
3. Azure ExpressRoute
4. Azure Disk Storage

Correct Answer: 1

Explanation

Azure App Service is a platform-as-a-service offering that allows organizations to host web applications, APIs, and other supported applications without managing the underlying physical servers or operating systems. Microsoft manages much of the infrastructure and platform, allowing developers to focus on application functionality. App Service supports features such as scaling, deployment options, authentication integration, and monitoring. Azure Virtual Machines provides greater infrastructure control, while ExpressRoute provides private connectivity and Disk Storage provides persistent storage for supported workloads.

Question 23

What is one of the primary benefits of using Azure Virtual Network?

1. It provides cloud-based email services
2. It manages application source code
3. It enables private network communication between Azure resources
4. It automatically creates database schemas

Correct Answer: 3

Explanation

Azure Virtual Network enables Azure resources to communicate with each other, the internet, and on-premises environments through a private networking framework. Organizations can configure subnets, routing, network security controls, and other networking components according to workload requirements. Virtual Network is commonly used to isolate and connect cloud resources securely. It does not provide email hosting or manage application source code. Network design is an important consideration when applications require controlled communication between virtual machines, databases, applications, and other Azure services.

Question 24

Which Azure service provides a dedicated private connection between an organization’s on-premises network and Azure?

1. Azure VPN Gateway
2. Azure DNS
3. Azure Load Balancer
4. ExpressRoute

Correct Answer: 4

Explanation

Azure ExpressRoute provides a private connection between an organization’s on-premises infrastructure and Microsoft cloud services, including Azure. Unlike typical internet-based connections, ExpressRoute uses connectivity provided by an ExpressRoute connectivity provider or network service provider. This can offer more predictable network performance, reliability, and privacy characteristics. Azure VPN Gateway can also connect networks, but it generally uses encrypted connections over the internet. ExpressRoute is especially useful for organizations with demanding hybrid networking, compliance, or connectivity requirements.

Question 25

Which Azure service can distribute incoming network traffic across multiple backend resources?

1. Azure Load Balancer
2. Azure Key Vault
3. Azure Policy
4. Azure Cost Management

Correct Answer: 1

Explanation

Azure Load Balancer distributes incoming network traffic across multiple backend resources, such as virtual machines, to help improve availability and scalability. It operates at the network transport layer and can distribute traffic according to configured rules and health probes. By spreading requests across healthy resources, Load Balancer can help prevent a single resource from becoming a bottleneck. Key Vault manages secrets, Azure Policy provides governance controls, and Cost Management helps analyze and control spending. Load balancing is therefore an important part of scalable application architectures.

Question 26

Which Azure pricing option is generally most suitable for workloads that run continuously and predictably for a long period?

1. Pay-as-you-go only
2. Azure reservations
3. Free Azure services
4. Temporary trial credits

Correct Answer: 2

Explanation

Azure reservations can provide discounted pricing when an organization commits to using eligible Azure resources for a specified term. This option can be beneficial for workloads with predictable and consistent resource requirements over an extended period. The exact savings and eligible services depend on the reservation selected. Pay-as-you-go pricing provides flexibility without the same commitment, making it more suitable for variable or uncertain workloads. Organizations should analyze usage patterns before choosing a reservation to ensure the commitment matches their actual requirements.

Question 27

What is the primary purpose of Azure subscriptions?

1. To provide physical datacenter access
2. To replace resource groups
3. To provide a billing and management boundary for Azure resources
4. To store application source code

Correct Answer: 3

Explanation

An Azure subscription provides an important boundary for resource management, billing, and access control. Azure resources are created within subscriptions, and organizations can use multiple subscriptions to separate environments, departments, projects, or billing responsibilities. Subscriptions can also be associated with management groups for broader organizational governance. A subscription is not a physical datacenter or source-code repository. Understanding subscription boundaries is important because permissions, policies, budgets, and resource organization can be designed around subscription structures.

Question 28

Which Azure service helps organizations estimate and analyze their cloud spending?

1. Azure Cost Management
2. Azure Virtual Network
3. Azure Functions
4. Azure DNS

Correct Answer: 1

Explanation

Azure Cost Management provides capabilities for analyzing, monitoring, and managing cloud spending. Organizations can review costs, identify spending trends, create budgets, and analyze usage across relevant scopes. These capabilities help businesses understand how Azure resources contribute to overall expenditure and identify opportunities for cost optimization. Cost Management does not provide networking, serverless compute, or DNS services. Effective cloud financial management combines cost visibility with appropriate resource sizing, governance policies, budgets, and monitoring practices.

Question 29

Which Azure service is commonly used to run event-driven code without managing virtual machines?

1. Azure Virtual Machines
2. Azure Functions
3. Azure Files
4. Azure Bastion

Correct Answer: 2

Explanation

Azure Functions is a serverless compute service designed to execute code in response to events or triggers. Developers can create functions that respond to events such as HTTP requests, messages, timers, or changes in supported data sources. Microsoft manages much of the underlying infrastructure, allowing developers to focus on application logic. Azure Functions can automatically scale depending on the hosting plan and workload. Virtual Machines require more infrastructure management, while Azure Files provides file storage and Azure Bastion provides secure administrative access to virtual machines.

Question 30

What is the purpose of Azure tags?

1. To physically separate Azure datacenters
2. To encrypt every Azure resource
3. To organize resources using metadata such as department, environment, or cost center
4. To replace role-based access control

Correct Answer: 3

Explanation

Azure tags are name-value pairs that can be attached to supported resources to help organize and identify them. Organizations commonly use tags such as department, environment, application, project, or cost center. Tags can support resource organization, reporting, cost analysis, and operational management. They do not physically separate resources, automatically encrypt resources, or replace role-based access control. A consistent tagging strategy can make large Azure environments easier to manage and can improve visibility into resource ownership and spending.

Question 31

Which Azure service provides secure browser-based access to virtual machines without requiring a public IP address on the virtual machine?

1. Azure Bastion
2. Azure Monitor
3. Azure Advisor
4. Azure Storage

Correct Answer: 1

Explanation

Azure Bastion provides secure management access to virtual machines through the Azure portal without requiring a public IP address directly on each virtual machine. It is deployed within an Azure Virtual Network and can provide browser-based RDP or SSH access depending on supported configurations. This can reduce the need to expose management ports directly to the internet. Azure Monitor focuses on monitoring, Advisor provides recommendations, and Azure Storage provides storage services. Bastion therefore helps improve the security of administrative access to virtual machines.

Question 32

Which cloud deployment model combines on-premises infrastructure with public cloud resources?

1. Public cloud
2. Private cloud
3. Community cloud
4. Hybrid cloud

Correct Answer: 4

Explanation

A hybrid cloud combines private or on-premises infrastructure with public cloud services. Organizations may use this model when they need to retain certain workloads locally while using Azure for scalable or modern cloud services. Hybrid environments can support scenarios such as gradual cloud migration, regulatory requirements, data residency considerations, and integration with existing infrastructure. A public cloud relies primarily on cloud-provider infrastructure, while a private cloud is dedicated to a particular organization. Hybrid cloud architecture requires appropriate networking, identity, security, and management strategies.

Question 33

Which Azure feature allows administrators to assign permissions to users based on their job responsibilities?

1. Azure Resource Locks
2. Azure Role-Based Access Control
3. Azure Monitor
4. Azure Service Health

Correct Answer: 2

Explanation

Azure Role-Based Access Control, or Azure RBAC, allows organizations to assign permissions based on defined roles. Administrators can grant users, groups, service principals, or managed identities only the access required for their responsibilities. RBAC supports the principle of least privilege by helping limit unnecessary permissions. Roles can be assigned at different scopes, including subscriptions, resource groups, and resources. Resource locks protect against certain changes, Monitor provides telemetry, and Service Health reports service-related information. RBAC is a core Azure authorization mechanism.

Question 34

What is the primary purpose of Azure Service Health?

1. To provide information about Azure service issues that may affect resources
2. To store customer application files
3. To manage virtual machine operating systems
4. To create database tables automatically

Correct Answer: 1

Explanation

Azure Service Health provides personalized information about Azure service incidents, planned maintenance, and health advisories that may affect an organization’s resources. It helps customers understand whether an Azure service issue could impact their workloads and provides relevant information for responding to incidents. Service Health differs from Azure Monitor, which focuses heavily on resource and application telemetry. Service Health is particularly useful because its information can be related to the customer’s Azure environment rather than simply providing general service status information.

Question 35

Which Azure storage service provides managed file shares that can be accessed using standard file protocols?

1. Azure Blob Storage
2. Azure Queue Storage
3. Azure Files
4. Azure Table Storage

Correct Answer: 3

Explanation

Azure Files provides managed cloud file shares that applications and users can access through supported standard file protocols. It is useful when workloads require shared file storage that can be accessed by multiple systems. Azure Files differs from Blob Storage, which is primarily object storage, and Queue Storage, which is designed for asynchronous messaging. Table Storage provides a NoSQL key-value storage model. Azure Files can support scenarios involving shared configuration files, application data, and workloads that depend on traditional file-share concepts.

Question 36

What is an Azure availability set primarily used for?

1. To organize subscriptions into departments
2. To help protect virtual machines from certain hardware or maintenance failures
3. To manage DNS records
4. To calculate monthly cloud costs

Correct Answer: 2

Explanation

Azure availability sets help improve the availability of virtual machines by distributing them across fault domains and update domains within an Azure datacenter. This arrangement can reduce the likelihood that a single hardware failure or planned maintenance event affects all virtual machines at the same time. Availability sets are different from availability zones, which provide physical separation across distinct locations within an Azure region. Availability sets are therefore useful for improving resilience when deploying multiple virtual machines that support the same application.

Question 37

Which Azure service provides a centralized platform for collecting logs and analyzing telemetry from cloud resources and applications?

1. Azure Monitor
2. Azure Policy
3. Azure Key Vault
4. Azure Resource Manager

Correct Answer: 1

Explanation

Azure Monitor collects and analyzes telemetry such as metrics, logs, and activity information from Azure resources and applications. It helps administrators identify performance issues, investigate failures, monitor resource behavior, and configure alerts. Azure Monitor includes capabilities that support both infrastructure and application monitoring. Azure Policy focuses on governance, Key Vault protects secrets and keys, and Resource Manager provides a management layer for Azure resources. Effective monitoring helps organizations maintain reliability and quickly identify conditions that require operational attention.

Question 38

Which Azure service provides a platform for building workflows that integrate applications, services, and data sources?

1. Azure Virtual Machines
2. Azure Logic Apps
3. Azure Disk Storage
4. Azure Load Balancer

Correct Answer: 2

Explanation

Azure Logic Apps provides a managed workflow platform for integrating applications, services, data sources, and processes. It can use connectors and triggers to automate workflows without requiring organizations to build and maintain all integration infrastructure themselves. Logic Apps is useful for scenarios such as sending notifications, processing events, moving data, and coordinating business processes. Virtual Machines provide compute resources, Disk Storage provides persistent storage, and Load Balancer distributes network traffic. Logic Apps is therefore well suited to workflow automation and application integration.

Question 39

Which Azure concept refers to a physically separate location inside an Azure region that has independent power, cooling, and networking?

1. Resource group
2. Subscription
3. Availability zone
4. Management group

Correct Answer: 3

Explanation

An availability zone is a physically separate location within an Azure region that has independent power, cooling, and networking infrastructure. Availability zones are designed to help protect applications from failures affecting a single physical datacenter location. Workloads that support zone redundancy can distribute resources across multiple zones to improve resilience. Resource groups and subscriptions are management boundaries, while management groups provide organization across subscriptions. Availability zones are therefore an important consideration when designing highly available Azure architectures.

Question 40

Which Azure service is designed to provide scalable message queues that help applications process work asynchronously?

1. Azure Queue Storage
2. Azure Key Vault
3. Azure DNS
4. Azure App Service

Correct Answer: 1

Explanation

Azure Queue Storage provides a scalable messaging mechanism that allows applications to store and process messages asynchronously. A producer can place messages into a queue while a consumer processes them later, helping separate application components and manage varying workloads. This pattern can improve application resilience and scalability because processing does not always need to occur immediately. Key Vault protects sensitive information, Azure DNS manages domain name resolution, and App Service hosts applications. Queue Storage is therefore useful for asynchronous communication between application components.