CertBlaze

Microsoft

AZ-900 Free Practice Questions — Page 2

Question 11

HOTSPOT - Select the answer that correctly completes the sentence.

Illustration for AZ-900 question 11
Show Answer
Correct Answer: Azure Advisor
Explanation:
Azure Advisor analyzes resource usage and configurations to provide recommendations, including cost optimization suggestions.

Question 12

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for AZ-900 question 12
Show Answer
Correct Answer: Yes No Yes
Explanation:
Azure Blob Storage minimum storage durations: • Cold tier: optimized for ≥90 days. • Cool tier: optimized for ≥30 days, not 90. • Archive tier: optimized for ≥180 days.

Question 13

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for AZ-900 question 13
Show Answer
Correct Answer: Azure DNS only supports public DNS domain names: No Azure virtual machines can register names in Azure DNS automatically: Yes Azure DNS can host a custom DNS domain: Yes
Explanation:
Azure DNS includes both public and private DNS zones. Azure VMs can automatically register records in Azure DNS Private zones when auto-registration is enabled for the VNet. Azure DNS can host custom domain names by creating public or private DNS zones.

Question 15

DRAG DROP - Match the Azure compute services to the appropriate descriptions. To answer, drag the appropriate compute service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all. NOTE: Each correct match is worth one point.

Illustration for AZ-900 question 15
Show Answer
Correct Answer: Network security groups (NSGs) can contain multiple inbound and outbound security rules. Yes A VM that performs a particular function such as running a firewall is also called a Network virtual appliance. Yes A user-defined route (UDR) can only control network traffic between subnets of a single virtual network. No
Explanation:
NSGs support multiple inbound and outbound rules. A VM providing specialized network functions (e.g., firewall) is an NVA. UDRs can affect traffic beyond a single VNet, including to on-premises via gateways or peering.

Question 18

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for AZ-900 question 18
Show Answer
Correct Answer: No Yes Yes
Explanation:
PaaS abstracts infrastructure, so creating/configuring virtual networks is not a core customer task. In PaaS, the customer is responsible for application code, including updates. User access and identity configuration remain the customer’s responsibility in PaaS.

Question 21

HOTSPOT - You need to identify which blades in the Azure portal must be used to perform the following tasks: • View security recommendations. • Monitor the health of Azure services. Which blade should you identify for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for AZ-900 question 21
Show Answer
Correct Answer: Monitor the health of Azure services: Monitor View security recommendations: Advisor
Explanation:
Azure Monitor is used to track the health and performance of Azure services, while Azure Advisor provides security recommendations along with cost, reliability, and performance guidance.

Question 25

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for AZ-900 question 25
Show Answer
Correct Answer: No No Yes
Explanation:
Azure Cloud Shell runs in a web browser and requires no local installation. Azure CLI is not installed by default on Windows 11. Azure PowerShell is cross-platform and works on Windows, Linux, and macOS.

Question 26

HOTSPOT - Select the answer that correctly completes the sentence.

Illustration for AZ-900 question 26
Show Answer
Correct Answer: Conditional Access
Explanation:
Conditional Access evaluates sign-in signals (such as user, device, location, and risk) to allow or deny access to Azure AD (Microsoft Entra ID).

Question 27

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for AZ-900 question 27
Show Answer
Correct Answer: administrative units: No Azure policies: No Azure subscriptions: Yes user accounts: No
Explanation:
Azure resource locks (Read-only/Delete) can be applied at the subscription, resource group, or individual resource level. They do not apply to Azure AD administrative units, Azure Policy definitions, or user accounts.

Question 28

Microsoft 365 is an example of which cloud service model?

A. infrastructure as a service (IaaS)
B. platform as a service (PaaS)
C. software as a service (SaaS)
Show Answer
Correct Answer: C
Explanation:
Microsoft 365 delivers fully managed end‑user applications (e.g., Word, Excel, Outlook, Teams) over the internet, with Microsoft handling the infrastructure, platform, updates, and maintenance. Users simply consume the software, which defines Software as a Service (SaaS).

$19

Get all 428 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.

Full AZ-900 study guide →