AZ-900 practice questions

Q: Is this AZ-900 practice test free?

Yes. All 15 AZ-900 practice questions on this page are free, with instant scoring and a written explanation for each answer. You do not need an account and there is no time limit.

Q: How much does the real AZ-900 exam cost?

The official price is $99. Cyber VK sells the same official AZ-900 voucher for $44.99 — a saving of $54.01. The voucher is identical to one bought direct and is emailed within minutes of payment.

Q: Are these questions the same as the real AZ-900 exam?

No. These are original practice questions written to match the published exam objectives and difficulty. They are not real exam questions — sharing or reproducing live exam content breaches every certification body's candidate agreement and can void your certification.

Q: How should I use this practice test?

Use it as a readiness check rather than a study tool. Work through the questions without notes, read the explanation for every answer including the ones you got right, and treat any domain where you miss more than a third as the area to revise before booking your exam.

Question 1

Which cloud deployment model uses infrastructure that is owned and operated exclusively by a single organization, typically hosted in its own datacenter?

Accepted Answer

A private cloud dedicates all compute resources to one organization, which retains control of the hardware and its location, unlike a public cloud where resources are shared across many tenants.

Question 2

A company pays only for the virtual machine compute hours it actually consumes, with no upfront hardware purchase. Which cloud benefit does this best illustrate?

Accepted Answer

Consumption-based billing replaces large upfront hardware investments (CapEx) with ongoing usage-based charges (OpEx), which is a core economic benefit of cloud computing.

Question 3

In the shared responsibility model, which task remains the customer's responsibility across IaaS, PaaS, and SaaS?

Accepted Answer

Data, identities, and access management always stay with the customer regardless of service model, while physical, host, and virtualization layers are always Microsoft's responsibility.

Question 4

Which Azure compute service lets you run small pieces of code without managing any server infrastructure and bills you only while the code executes?

Accepted Answer

Azure Functions is a serverless, event-driven compute service that runs code on demand and charges only for execution time, removing all server management.

Question 5

You need to store 8 TB of application backup files that are rarely accessed but must remain available within milliseconds when needed. Which Azure Blob Storage access tier balances cost and this requirement best?

Accepted Answer

The Cool tier offers lower storage costs for infrequently accessed data while keeping it online with millisecond access, whereas Archive is offline and requires a rehydration period of hours.

Question 6

An organization must guarantee that data remains available if an entire Azure datacenter within a region fails, but the data must not leave that region. Which storage redundancy option meets this requirement at the lowest cost?

Accepted Answer

ZRS replicates data synchronously across three availability zones inside a single region, surviving a datacenter loss without copying data to a secondary region as GRS options do.

Question 7

Which Azure service provides centralized identity management and single sign-on for cloud applications such as Microsoft 365?

Accepted Answer

Microsoft Entra ID (formerly Azure Active Directory) is Azure's cloud identity and access management service, providing authentication and single sign-on for cloud apps.

Question 8

A security team wants to require a second verification method, such as an authenticator app, only when a sign-in comes from an unfamiliar location. Which capability should they configure?

Accepted Answer

Conditional Access evaluates signals such as location, device, and risk to decide when to enforce multifactor authentication, rather than applying it unconditionally to every sign-in.

Question 9

Which statement best describes the Zero Trust security model as applied in Azure?

Accepted Answer

Zero Trust assumes breach and verifies every request explicitly using identity, device health, and other signals, so being inside the network grants no implicit trust.

Question 10

Which Azure tool provides an estimate of the monthly cost of a proposed solution before any resources are deployed?

Accepted Answer

The Pricing Calculator estimates costs for a configuration of Azure services before deployment, while the TCO Calculator compares on-premises costs to Azure and Cost Management analyzes spending that has already occurred.

Question 11

A governance team must ensure that no one can create virtual machines outside of approved regions in any subscription. Which service enforces this requirement?

Accepted Answer

Azure Policy evaluates resource properties such as location at deployment time and denies non-compliant resources, whereas RBAC controls who can act and locks only prevent deletion or modification.

Question 12

A production storage account must never be accidentally deleted, but the operations team still needs to update its configuration settings. Which control should be applied?

Accepted Answer

A CanNotDelete lock blocks deletion while still permitting authorized users to read and modify the resource, whereas a ReadOnly lock would also block the configuration updates.

Question 13

Which Azure service collects and analyzes telemetry such as metrics and logs from Azure resources and on-premises environments?

Accepted Answer

Azure Monitor is the platform service that ingests metrics and logs from Azure and hybrid resources to support alerting, visualization, and analysis.

Question 14

An administrator needs to be notified when a planned maintenance event will affect the specific Azure SQL databases their company uses. Which service should they use?

Accepted Answer

Azure Service Health provides personalized alerts about service issues, planned maintenance, and health advisories affecting the subscriptions and resources you actually use, unlike the public Azure Status page.

Question 15

A team wants to define an entire environment — virtual network, virtual machines, and storage — in a declarative file that can be redeployed identically to multiple subscriptions. Which option should they use?

Accepted Answer

ARM templates are declarative infrastructure-as-code files that describe the desired end state, allowing identical, idempotent deployments across subscriptions and environments.

AZ-900 — AZ-900 Microsoft Azure Fundamentals Exam Voucher | Buy Online Practice Test

Free Practice Test

AZ-900 practice test — common questions