kwizza
Microsoft

Microsoft Azure Fundamentals (AZ-900) practice questions

8 sample questions from our 300-question Azure Fundamentals bank — one from each official domain, with the answer and a full explanation under each. Every question is original, written against the published exam objectives, and quality-checked before it reaches you.

AZ-900FundamentalsBeginner

Question 1 · Describe cloud concepts

Larkspur Dental Group runs its appointment-reminder service on servers it bought outright in 2021. The finance director wants future infrastructure spending to appear as a monthly operating charge tied to actual usage rather than a large upfront purchase that is written down over several years. Which characteristic of the public cloud consumption model addresses this?

  1. A.Licensing costs are removed entirely because software is bundled with the hardware
  2. B.Hardware depreciation schedules are shortened from five years to one year
  3. C.Capital expenditure is replaced by operational expenditure billed against measured consumption
  4. D.Server purchases are financed by the cloud provider and repaid over the contract term
Show answer & explanation

Answer: C

Cloud services shift spending from CapEx (buying assets upfront) to OpEx, where you pay only for the resources you consume during the billing period. Shortening a depreciation schedule is an accounting change to assets the company still owns, so it does not convert the spend into usage-based operating cost.

Question 2 · Describe Azure architecture and services

Halcyon Retail hosts a customer loyalty API on virtual machines in a single Azure region and must survive the loss of one datacenter building within that region while keeping the deployment inside the region. Which construct should the architect use to distribute the virtual machines?

  1. A.Availability zones
  2. B.Management groups
  3. C.Resource groups
  4. D.Region pairs
Show answer & explanation

Answer: A

Availability zones are physically separate datacenter facilities within a single region, each with independent power, cooling, and networking, so spreading instances across zones survives the loss of one facility. Region pairs protect against the loss of an entire region and would place resources outside the required region.

Question 3 · Describe Azure management and governance

Ferncliff Group has 14 subscriptions across four business units and wants a single policy requiring a specific set of regions to be applied so that all current and future subscriptions in the finance unit inherit it. Which scope should the policy be assigned at?

  1. A.Each subscription individually, repeated when new ones are added
  2. B.Each resource group individually
  3. C.A management group containing the finance unit's subscriptions
  4. D.The tenant root user account
Show answer & explanation

Answer: C

Management groups sit above subscriptions, and assignments made there are inherited by every subscription placed in the group, including ones added later. Assigning to each subscription individually works today but requires manual repetition whenever a new subscription appears.

Question 4 · Describe cloud concepts

Verdant Tea Imports sells a limited product drop every Friday at noon, when traffic to its storefront rises to roughly 12 times the weekday average for about 40 minutes and then falls back. The platform team wants the site to add web instances automatically as the surge begins and remove them once it passes, without anyone filing a ticket. Which cloud benefit are they relying on?

  1. A.Geo-distribution
  2. B.High availability
  3. C.Disaster recovery
  4. D.Elasticity
Show answer & explanation

Answer: D

Elasticity is the ability of a cloud workload to automatically add and release capacity in response to changing demand, which matches a short predictable spike followed by a return to baseline. High availability keeps a service reachable through component failures but does not by itself grow or shrink capacity with load.

Question 5 · Describe Azure architecture and services

An administrator at Fairmont Textiles wants to delete a test environment consisting of a virtual machine, its disk, a public IP address, and a network interface in one action once the pilot ends. Which Azure construct should the resources be placed in when they are created?

  1. A.A management group scoped to the test team
  2. B.An availability set spanning the four resources
  3. C.A dedicated subscription for each resource
  4. D.A single resource group containing all four resources
Show answer & explanation

Answer: D

A resource group is a logical container for resources that share a lifecycle, and deleting the group deletes everything inside it, which matches a short-lived test environment. A management group organizes subscriptions for policy and access inheritance and is not the unit used to delete individual resources.

Question 6 · Describe Azure management and governance

A governance lead at Portlea Mining must ensure that any storage account created in the company's subscriptions is refused at creation time unless it has secure transfer enabled. Which Azure service enforces this at deployment?

  1. A.Azure role-based access control
  2. B.A resource lock set to CanNotDelete
  3. C.Azure Policy with a deny effect
  4. D.Microsoft Defender for Cloud secure score
Show answer & explanation

Answer: C

Azure Policy evaluates resource properties during deployment and a deny effect blocks any request whose configuration violates the rule. Role-based access control governs who may perform an action but cannot inspect whether a specific setting on the resource is configured correctly.

Question 7 · Describe cloud concepts

A hospital network in Manitoba must keep patient imaging data on equipment it physically controls, while its public-facing wayfinding app and staff scheduling tools are better suited to a hosted platform. The architecture team wants both environments connected so identity and reporting are shared. Which cloud deployment model fits?

  1. A.Public cloud
  2. B.Private cloud
  3. C.Hybrid cloud
  4. D.Community cloud
Show answer & explanation

Answer: C

A hybrid model combines on-premises or private infrastructure with public cloud services and connects them so workloads and identity can span both, which is exactly the split described. A purely private cloud would leave no place for the hosted public-facing components the team wants to run.

Question 8 · Describe Azure architecture and services

Marlowe Bioscience needs to lift a Windows application with a custom kernel-level driver into Azure with minimal code changes, retaining full administrative control of the operating system. Which compute option should be selected?

  1. A.Azure App Service
  2. B.Azure Functions
  3. C.Azure Container Instances
  4. D.Azure Virtual Machines
Show answer & explanation

Answer: D

Virtual machines give full control of the guest operating system, which a custom kernel-level driver requires, and support lift-and-shift migration without rewriting the application. App Service and Functions are managed platform offerings that do not permit installing kernel-level drivers on the underlying OS.

292+ more questions, free

Full-length, timed or practice mode, weighted to the official blueprint — with per-domain scoring so you know exactly where you stand.

Start the full practice exam →

All questions are original — never reproduced from the real exam — and pass automated duplicate, citation and item-writing checks before publication. See how our exams are made.

Kwizza is an independent study tool and is not affiliated with, endorsed by, or sponsored by Microsoft. Microsoft names, logos and certification marks are the property of their respective owners and are used here only to identify the exam described. Practice questions are original, written against the publicly published exam objectives — no real exam content is reproduced.