{"id":12018,"date":"2026-09-15T05:35:31","date_gmt":"2026-09-15T05:35:31","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=12018"},"modified":"2026-09-15T05:35:31","modified_gmt":"2026-09-15T05:35:31","slug":"microsoft-az-900-practice-test-questions-and-exam-dumps-part7-q121-140","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/microsoft-az-900-practice-test-questions-and-exam-dumps-part7-q121-140\/","title":{"rendered":"Microsoft AZ-900 Practice Test Questions and Exam Dumps Part7 Q121-140"},"content":{"rendered":"

View Full Microsoft AZ-900 Exam Dumps<\/a> and Practice Test Dumps.<\/b><\/h2>\n

 <\/p>\n

Question 121<\/b><\/h3>\n

Which Azure service is designed to provide scalable object storage for files such as images, videos, and documents?<\/b><\/p>\n

    \n
  1. Azure Functions<\/span><\/li>\n
  2. Azure Blob Storage<\/span><\/li>\n
  3. Azure SQL Database<\/span><\/li>\n
  4. Azure Virtual Network<\/span><\/li>\n<\/ol>\n

    Correct Answer: 2<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    Azure Blob Storage is an object storage service designed to store large amounts of unstructured data. It can store files such as images, videos, documents, backups, logs, and other binary data. Blob Storage provides scalable and durable storage and can be accessed by applications through supported interfaces. Azure Functions provides serverless compute, SQL Database provides relational database capabilities, and Virtual Network provides networking. Blob Storage is therefore an appropriate choice when an application needs scalable storage for files and other unstructured objects.<\/span><\/p>\n

    Question 122<\/b><\/h3>\n

    Which Azure service helps organizations manage identities and provide authentication for cloud applications?<\/b><\/p>\n

      \n
    1. Microsoft Entra ID<\/span><\/li>\n
    2. Azure Monitor<\/span><\/li>\n
    3. Azure Files<\/span><\/li>\n
    4. Azure Load Balancer<\/span><\/li>\n<\/ol>\n

      Correct Answer: 1<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      Microsoft Entra ID is a cloud-based identity and access management service that provides authentication and identity capabilities for users, applications, and services. It supports features such as single sign-on, multifactor authentication, and application identity management. Organizations can use Entra ID to control access to applications and cloud resources. Azure Monitor focuses on telemetry, Azure Files provides shared file storage, and Load Balancer distributes network traffic. Entra ID is therefore a foundational Azure service for managing identities and securing access to cloud resources.<\/span><\/p>\n

      Question 123<\/b><\/h3>\n

      Which Azure service is primarily used to monitor resource performance, collect logs, and create alerts?<\/b><\/p>\n

        \n
      1. Azure Policy<\/span><\/li>\n
      2. Azure Advisor<\/span><\/li>\n
      3. Azure Monitor<\/span><\/li>\n
      4. Azure DNS<\/span><\/li>\n<\/ol>\n

        Correct Answer: 3<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        Azure Monitor collects and analyzes telemetry from Azure resources, applications, and supported environments. It can provide metrics, logs, diagnostic information, and alerts that help organizations identify performance problems and operational issues. Administrators can use monitoring data to understand resource behavior and respond to conditions that require attention. Azure Policy focuses on governance, Advisor provides recommendations, and DNS handles name resolution. Azure Monitor is therefore the appropriate service when an organization needs centralized visibility into resource performance and operational health.<\/span><\/p>\n

        Question 124<\/b><\/h3>\n

        Which cloud service model provides a managed application platform while allowing customers to deploy their own applications?<\/b><\/p>\n

          \n
        1. SaaS<\/span><\/li>\n
        2. IaaS<\/span><\/li>\n
        3. PaaS<\/span><\/li>\n
        4. Private cloud<\/span><\/li>\n<\/ol>\n

          Correct Answer: 3<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          Platform as a Service, or PaaS, provides a managed platform on which customers can develop and deploy applications without managing many underlying infrastructure components. The cloud provider generally manages the operating system, physical infrastructure, and platform components, while customers focus on application code and data. Azure App Service is an example of a PaaS offering. IaaS provides greater infrastructure control, while SaaS provides a complete application. PaaS is useful when organizations want to reduce infrastructure administration while retaining control over application development.<\/span><\/p>\n

          Question 125<\/b><\/h3>\n

          Which Azure feature allows administrators to group multiple Azure subscriptions for centralized governance?<\/b><\/p>\n

            \n
          1. Resource groups<\/span><\/li>\n
          2. Management groups<\/span><\/li>\n
          3. Availability zones<\/span><\/li>\n
          4. Azure regions<\/span><\/li>\n<\/ol>\n

            Correct Answer: 2<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            Azure management groups provide a hierarchical way to organize multiple subscriptions. Organizations can use them to apply governance policies, access controls, and other management settings across groups of subscriptions. This is especially useful in large environments where multiple subscriptions are used for departments, projects, or business units. Resource groups organize resources within subscriptions, while regions and availability zones represent geographic or physical deployment concepts. Management groups therefore provide an organizational layer above subscriptions and help maintain consistent governance across larger Azure environments.<\/span><\/p>\n

            Question 126<\/b><\/h3>\n

            Which Azure service provides recommendations for improving resource cost, performance, reliability, and security?<\/b><\/p>\n

              \n
            1. Azure Advisor<\/span><\/li>\n
            2. Azure Bastion<\/span><\/li>\n
            3. Azure DNS<\/span><\/li>\n
            4. Azure Queue Storage<\/span><\/li>\n<\/ol>\n

              Correct Answer: 1<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              Azure Advisor analyzes Azure resource configurations and usage information to provide personalized recommendations. Recommendations can cover cost optimization, performance, reliability, and security. Organizations can use these suggestions to identify underutilized resources, improve configurations, and address potential issues. Advisor does not replace specialized monitoring or security services, but it provides useful guidance based on the Azure environment. Bastion provides virtual machine access, DNS manages name resolution, and Queue Storage provides messaging. Advisor is therefore the appropriate service for broad optimization recommendations.<\/span><\/p>\n

              Question 127<\/b><\/h3>\n

              What is the primary purpose of an Azure resource group?<\/b><\/p>\n

                \n
              1. To represent a physical Azure datacenter<\/span><\/li>\n
              2. To provide identity authentication<\/span><\/li>\n
              3. To logically organize related Azure resources<\/span><\/li>\n
              4. To replace Azure subscriptions<\/span><\/li>\n<\/ol>\n

                Correct Answer: 3<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                An Azure resource group is a logical container used to organize related resources. Resources supporting the same application, project, environment, or workload can be placed within a resource group to simplify management. Resource groups can also provide a useful scope for access control, deployments, monitoring, and lifecycle operations. They do not represent physical datacenters and do not replace subscriptions or identity services. A well-designed resource group structure can make administration easier and help organizations apply governance consistently across related Azure resources.<\/span><\/p>\n

                Question 128<\/b><\/h3>\n

                Which Azure service provides a managed relational database based on Microsoft SQL Server technology?<\/b><\/p>\n

                  \n
                1. Azure Cosmos DB<\/span><\/li>\n
                2. Azure SQL Database<\/span><\/li>\n
                3. Azure Blob Storage<\/span><\/li>\n
                4. Azure Queue Storage<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 2<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  Azure SQL Database is a fully managed relational database service based on Microsoft SQL technologies. It provides database capabilities without requiring customers to manage the underlying physical infrastructure and many platform maintenance tasks. Organizations can use Azure SQL Database for applications that require structured relational data, SQL queries, and transactional capabilities. Cosmos DB is designed for NoSQL workloads, Blob Storage provides object storage, and Queue Storage supports asynchronous messaging. Azure SQL Database is therefore suitable for cloud applications that need managed relational database functionality.<\/span><\/p>\n

                  Question 129<\/b><\/h3>\n

                  Which Azure service provides secure storage for secrets, keys, and certificates used by applications?<\/b><\/p>\n

                    \n
                  1. Azure Key Vault<\/span><\/li>\n
                  2. Azure Monitor<\/span><\/li>\n
                  3. Azure Service Health<\/span><\/li>\n
                  4. Azure Load Balancer<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 1<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    Azure Key Vault is designed to securely store and manage sensitive information such as secrets, cryptographic keys, and certificates. Applications can retrieve required secrets from Key Vault rather than storing credentials directly in application source code or configuration files. Access to Key Vault can be controlled through Azure identity and authorization mechanisms. Azure Monitor handles telemetry, Service Health provides information about Azure platform events, and Load Balancer distributes traffic. Key Vault is therefore an important service for protecting and centrally managing sensitive application information.<\/span><\/p>\n

                    Question 130<\/b><\/h3>\n

                    Which Azure service provides a private dedicated connection between an organization’s network and Azure?<\/b><\/p>\n

                      \n
                    1. Azure VPN Gateway<\/span><\/li>\n
                    2. Azure DNS<\/span><\/li>\n
                    3. Azure ExpressRoute<\/span><\/li>\n
                    4. Azure Bastion<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 3<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      Azure ExpressRoute provides private connectivity between an organization’s on-premises network and Microsoft cloud services through an ExpressRoute connectivity provider. It does not rely on a typical public internet VPN path and can provide more predictable network performance and connectivity characteristics. VPN Gateway can provide encrypted connections over the internet, while DNS handles name resolution and Bastion provides secure administrative access to virtual machines. ExpressRoute is useful for organizations that require private hybrid connectivity for performance, security, compliance, or operational reasons.<\/span><\/p>\n

                      Question 131<\/b><\/h3>\n

                      Which cloud pricing approach charges customers according to the resources they actually consume?<\/b><\/p>\n

                        \n
                      1. Consumption-based pricing<\/span><\/li>\n
                      2. Fixed hardware ownership<\/span><\/li>\n
                      3. Permanent licensing<\/span><\/li>\n
                      4. Physical capacity pricing only<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 1<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        Consumption-based pricing charges customers according to their actual usage of eligible cloud resources and services. This approach allows organizations to avoid purchasing physical infrastructure upfront and can provide flexibility as workload requirements change. Costs may depend on factors such as compute time, storage capacity, transactions, data transfer, or other service-specific measurements. Consumption-based pricing does not mean cloud resources are free or automatically inexpensive. Organizations should monitor usage and apply cost-management practices to prevent unexpected spending.<\/span><\/p>\n

                        Question 132<\/b><\/h3>\n

                        Which Azure service can distribute incoming network traffic across multiple backend resources?<\/b><\/p>\n

                          \n
                        1. Azure Key Vault<\/span><\/li>\n
                        2. Azure Load Balancer<\/span><\/li>\n
                        3. Azure Policy<\/span><\/li>\n
                        4. Azure Cost Management<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 2<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          Azure Load Balancer distributes incoming network traffic across backend resources such as virtual machines. It can use health probes to determine whether backend instances are available before directing traffic to them. This helps improve application availability and supports scalable architectures by reducing dependence on a single resource. Key Vault manages sensitive information, Azure Policy provides governance, and Cost Management handles financial analysis. Load Balancer is therefore appropriate when an application needs network traffic distribution across multiple healthy backend resources.<\/span><\/p>\n

                          Question 133<\/b><\/h3>\n

                          Which Azure service provides information about planned maintenance and Azure service incidents that may affect customers?<\/b><\/p>\n

                            \n
                          1. Azure Service Health<\/span><\/li>\n
                          2. Azure Blob Storage<\/span><\/li>\n
                          3. Azure Functions<\/span><\/li>\n
                          4. Azure Files<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            Azure Service Health provides information about Azure service incidents, planned maintenance, and health advisories that may affect an organization’s resources. It helps customers understand relevant Azure platform events and determine whether action may be necessary. This differs from Azure Monitor, which focuses on telemetry from resources and applications. Blob Storage and Azure Files provide storage services, while Functions provides serverless compute. Service Health is particularly valuable during Azure platform events because it provides information relevant to the customer’s environment.<\/span><\/p>\n

                            Question 134<\/b><\/h3>\n

                            Which cloud deployment model uses cloud infrastructure that is dedicated to a single organization?<\/b><\/p>\n

                              \n
                            1. Public cloud<\/span><\/li>\n
                            2. Hybrid cloud<\/span><\/li>\n
                            3. Private cloud<\/span><\/li>\n
                            4. Multicloud<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 3<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              A private cloud is a cloud environment dedicated to a single organization. It can be operated by the organization itself or managed by a third party, depending on the deployment arrangement. Private cloud environments can provide greater control over infrastructure, configurations, and security requirements. A public cloud uses provider infrastructure shared among multiple customers, while a hybrid cloud combines public cloud resources with private or on-premises environments. Organizations select deployment models based on requirements such as control, compliance, security, cost, and operational needs.<\/span><\/p>\n

                              Question 135<\/b><\/h3>\n

                              Which Azure service is designed to run applications using containers without requiring management of virtual machines?<\/b><\/p>\n

                                \n
                              1. Azure Container Instances<\/span><\/li>\n
                              2. Azure DNS<\/span><\/li>\n
                              3. Azure Key Vault<\/span><\/li>\n
                              4. Azure Cost Management<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 1<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                Azure Container Instances provides a way to run containers in Azure without requiring customers to manage virtual machines or a full container orchestration platform. It is suitable for simple container workloads, short-lived tasks, batch processing, and scenarios where rapid container deployment is required. Azure DNS manages domain name resolution, Key Vault protects secrets and keys, and Cost Management analyzes spending. Container Instances is therefore a convenient option when an organization needs to run containerized workloads while minimizing infrastructure management.<\/span><\/p>\n

                                Question 136<\/b><\/h3>\n

                                Which Azure service can automate workflows between applications, services, and data sources?<\/b><\/p>\n

                                  \n
                                1. Azure Logic Apps<\/span><\/li>\n
                                2. Azure Virtual Network<\/span><\/li>\n
                                3. Azure Managed Disks<\/span><\/li>\n
                                4. Azure Monitor<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 1<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  Azure Logic Apps is a workflow automation service that connects applications, services, and data sources using triggers, actions, and connectors. It can automate processes such as notifications, approvals, data movement, and application integration. Organizations can build workflows without managing all of the underlying integration infrastructure themselves. Virtual Network provides networking, Managed Disks provides persistent storage, and Monitor collects telemetry. Logic Apps is therefore particularly useful when organizations need to automate business processes or coordinate activities across multiple applications and services.<\/span><\/p>\n

                                  Question 137<\/b><\/h3>\n

                                  Which Azure service can help protect web applications from common attacks at the application layer?<\/b><\/p>\n

                                    \n
                                  1. Azure Load Balancer<\/span><\/li>\n
                                  2. Azure Web Application Firewall<\/span><\/li>\n
                                  3. Azure Files<\/span><\/li>\n
                                  4. Azure Queue Storage<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 2<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    Azure Web Application Firewall, or WAF, helps protect web applications from common application-layer attacks. It can inspect web traffic and use configured rules to identify and block malicious requests, including patterns associated with attacks such as SQL injection and cross-site scripting. WAF capabilities can be integrated with supported Azure networking services. Load Balancer distributes network traffic, Azure Files provides file shares, and Queue Storage supports messaging. WAF is therefore a security control specifically focused on protecting web applications from malicious HTTP or HTTPS traffic.<\/span><\/p>\n

                                    Question 138<\/b><\/h3>\n

                                    Which Azure tool is commonly used to estimate the expected cost of an Azure solution before deployment?<\/b><\/p>\n

                                      \n
                                    1. Azure Monitor<\/span><\/li>\n
                                    2. Azure Pricing Calculator<\/span><\/li>\n
                                    3. Azure Service Health<\/span><\/li>\n
                                    4. Azure Policy<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 2<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      The Azure Pricing Calculator helps organizations estimate the potential cost of Azure services before deploying them. Users can select services, configurations, quantities, regions, and other applicable options to build an estimated pricing scenario. This can help compare architecture choices and identify potentially expensive components during planning. The calculator provides an estimate rather than a guaranteed final invoice. Azure Monitor focuses on telemetry, Service Health provides information about Azure platform events, and Policy manages governance. Cost estimation is an important part of cloud planning.<\/span><\/p>\n

                                      Question 139<\/b><\/h3>\n

                                      Which Azure service provides a managed platform for hosting web applications without requiring customers to manage the underlying operating system?<\/b><\/p>\n

                                        \n
                                      1. Azure Virtual Machines<\/span><\/li>\n
                                      2. Azure App Service<\/span><\/li>\n
                                      3. Azure Managed Disks<\/span><\/li>\n
                                      4. Azure Virtual Network<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 2<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        Azure App Service is a platform-as-a-service offering that provides managed hosting for web applications and APIs. Microsoft manages much of the underlying infrastructure and operating system, allowing customers to focus on application code and configuration. App Service supports capabilities such as deployment, scaling, authentication, and integration with other Azure services. Virtual Machines provide greater infrastructure-level control, Managed Disks provide storage, and Virtual Network provides networking. App Service is therefore useful when organizations want managed application hosting with reduced operational overhead.<\/span><\/p>\n

                                        Question 140<\/b><\/h3>\n

                                        Which principle requires that users receive only the permissions necessary to perform their tasks?<\/b><\/p>\n

                                          \n
                                        1. Defense in depth<\/span><\/li>\n
                                        2. Least privilege<\/span><\/li>\n
                                        3. Elasticity<\/span><\/li>\n
                                        4. High availability<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 2<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          The principle of least privilege requires users, applications, and services to receive only the permissions necessary to perform their assigned tasks. Limiting permissions reduces the potential impact of compromised accounts or applications and helps prevent unauthorized actions. Azure RBAC can support this principle by assigning appropriate roles at suitable scopes. Defense in depth uses multiple security layers, elasticity concerns resource scaling, and high availability focuses on maintaining service accessibility. Least privilege is therefore an important security principle for controlling authorization in Azure environments.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full Microsoft AZ-900 Exam Dumps and Practice Test Dumps.   Question 121 Which Azure service is designed to provide scalable object storage for files such as images, videos, and documents? Azure Functions Azure Blob Storage Azure SQL Database Azure Virtual Network Correct Answer: 2 Explanation Azure Blob Storage is an object storage service designed […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12018"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=12018"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12018\/revisions"}],"predecessor-version":[{"id":12038,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12018\/revisions\/12038"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=12018"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=12018"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=12018"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}