50 Microsoft Certified: Azure Fundamentals Practice Questions: Question Bank 2025

A startup wants to deploy a web app quickly without managing servers. They want the platform to automatically handle OS patching and scaling. Which cloud service model best fits this requirement?

A company needs to ensure that when demand increases, its application can automatically add resources, and when demand decreases, it can remove resources to reduce waste. Which cloud concept does this describe?

You need a service that provides a private, dedicated connection from your on-premises network to Azure, bypassing the public internet. Which Azure service should you use?

An organization wants to evaluate Azure features without a long-term commitment and with limited access granted to a small team. Which type of Azure subscription is most appropriate?

A company wants to run containerized applications without managing Kubernetes cluster nodes. They want Azure to handle the control plane and node management. Which service should they choose?

A company needs to organize Azure resources so that a single policy can be applied to all subscriptions in a hierarchy (for example, to restrict allowed regions). Which Azure feature helps accomplish this at scale?

A team wants to enforce that all deployed storage accounts must use secure transfer and must not allow public access. Which Azure governance tool is best suited to enforce these requirements automatically?

A company needs to provide users with a way to sign in to both Microsoft 365 and Azure applications using a single identity. Which Azure service should be used to manage authentication?

A company has multiple virtual networks in different Azure regions. They need to securely connect these VNets to each other so that virtual machines can communicate privately across regions. Which solution should they implement?

Your organization wants to ensure that developers cannot accidentally delete critical resources. You need a mechanism that blocks deletion even if a user has permissions, unless the protection is explicitly removed first. What should you use?

You are evaluating cloud models for a small business. The business wants to reduce hardware maintenance and quickly scale workloads, but still needs to manage the operating systems and installed applications. Which cloud service model best fits this requirement?

A team needs a managed DNS service in Azure to host public DNS records for their domain and integrate with Azure resources. Which Azure service should they use?

You need to deploy a set of Azure resources repeatedly in a consistent way across multiple environments. Which solution is best suited for defining the deployment as code?

A company wants to enforce that all new Azure Storage accounts must block public access to blobs. The company wants this enforced automatically at resource creation. What should they use?

A web application must automatically distribute incoming traffic across multiple instances to improve availability and responsiveness. The solution should operate at the application (HTTP/HTTPS) layer. Which Azure service should you choose?

A company wants a centralized way to view service outages, planned maintenance, and health advisories that may affect their Azure resources. Which Azure service provides this information?

A team needs to store secrets such as database connection strings and certificates securely, with access controlled by Azure Active Directory and the ability to rotate secrets. Which Azure service should they use?

You want to organize Azure subscriptions into a hierarchy so you can apply governance controls (such as Azure Policy and role assignments) across multiple subscriptions at once. What should you use?

A company wants to build a solution that can read documents, detect printed text in images, and extract the text for indexing. They want to use a prebuilt AI service without training a custom model. Which Azure service should they use?

A security engineer needs to ensure that only specific administrators can permanently delete items from a secrets store, and that accidental or malicious deletion can be recovered within a retention period. Which feature(s) should be used for this Azure service?

You need to quickly create and manage Azure resources by using a web-based graphical interface without installing any tools locally. Which option should you use?

A team wants to deploy an application in Azure and ensure that any changes to the environment can be reproduced consistently using templates. Which approach best meets this requirement?

You need to place a virtual machine and its managed disks in a way that helps protect against a single datacenter hardware failure within an Azure region. What should you use?

Your company must ensure that only compliant Azure resources (for example, specific SKU sizes and allowed regions) can be created. Which Azure service is designed to enforce these rules at scale?

A developer needs a managed platform to deploy code without managing virtual machines, and the solution should automatically scale based on demand. Which Azure service best fits this requirement?

You are troubleshooting a connectivity issue. A VM in subnet A cannot reach a VM in subnet B within the same virtual network. Both subnets have network security groups (NSGs) associated. What is the MOST likely cause?

Your organization wants a centralized way to view and manage multiple Azure subscriptions and apply governance consistently across them. Which Azure concept should you use?

A security team wants to give a user the ability to manage access assignments (grant permissions to others) for a specific resource group, but not change or delete resources. Which built-in role is most appropriate?

Your company needs to store highly sensitive secrets such as API keys and certificates and wants fine-grained access control and auditing. Which Azure service should you use?

You are designing resiliency for a business-critical application. The requirement is to remain available even if an entire Azure region becomes unavailable. What should you implement?

A startup wants a platform to run a web app without managing servers. The platform should automatically handle OS patching and scaling options. Which Azure service best meets this requirement?

You need to enforce that all Azure resources deployed by your team include a tag named "CostCenter". What is the best Azure governance feature to use?

A company wants to understand which employee is responsible for each Azure resource and to group costs by department. Which feature should they use?

Which cloud computing benefit describes the ability to quickly increase or decrease resources based on demand?

Your company needs to create two separate environments (Dev and Prod) and apply different policies to each. The environments must also have separate billing boundaries. What should you use?

A team wants to deploy resources using the same configuration repeatedly across multiple environments and ensure deployments are consistent. Which Azure feature should they use?

An application requires a managed relational database where Microsoft handles backups, patching, and high availability features. Which service should you choose?

You need to troubleshoot why users cannot connect to a web app. You want to view platform metrics (such as CPU and requests) and query application logs in one place. Which Azure service is most appropriate?

A security team wants a centralized way to assess and improve security posture across multiple Azure subscriptions, and to receive recommendations for hardening resources. Which service should they use?

A company must keep data private while accessing an Azure PaaS service (such as Storage) from a virtual network, ensuring traffic does not traverse the public internet. Which Azure capability best meets this requirement?

You need to deploy an application that must automatically increase or decrease the number of instances based on CPU usage. Which cloud concept does this describe?

A team wants to centralize sign-ins for Microsoft 365 and Azure, and apply conditional access policies. Which Azure service should they use?

You want to organize Azure resources and apply role-based access control (RBAC) to a set of related resources (for example, a web app, database, and storage account). Which Azure construct should you use?

A company wants to deploy multiple web apps quickly using consistent settings and repeatable deployments across environments (dev/test/prod). Which Azure feature best supports this requirement?

You need to provide private connectivity from your on-premises network to Azure VNets over the public internet using IPsec. Which solution should you implement?

You need to store and manage application secrets (connection strings, API keys) centrally and allow the application to retrieve them securely at runtime. Which Azure service is best suited?

A company wants to ensure that only approved VM sizes can be deployed in a subscription. Which Azure governance feature should they use?

You need to review who accessed a storage account and what operations they performed (for example, read, write, delete). Which Azure capability should you use?

You deploy a critical workload across two Azure regions. The application must remain available if an entire region becomes unavailable, and failover should be orchestrated by Azure. Which Azure service is designed for this scenario?

Your organization has multiple subscriptions for different business units. You need to apply a compliance requirement (for example, a policy initiative) across all subscriptions and manage access centrally at a scope above subscriptions. What should you use?