az-900 practice test Practice Exam 2025: Latest Questions

A company wants to deploy several Windows and Linux virtual machines, but does not want to manage the underlying physical hardware. Which cloud service model best fits this requirement?

An organization needs to ensure that if one Azure datacenter becomes unavailable, their application can continue running with minimal interruption. Which Azure concept provides this resiliency within a region?

A team wants to assign tags like "CostCenter" and "Environment" to Azure resources for tracking and reporting. Where are tags applied?

A developer wants to store unstructured data such as images and videos and access it over HTTP/HTTPS. Which Azure storage service should they use?

A company wants to enforce that all new Azure resources must be deployed only in a specific set of regions. Which Azure governance feature should they use?

A startup wants to run code in response to events (for example, when a file is uploaded) without provisioning or managing servers. Which Azure service should they choose?

A company wants to provide single sign-on (SSO) to Microsoft 365 and Azure portal using the same user identities. Which service should they use to manage identities?

A team wants a centralized dashboard to view metrics and logs for Azure resources and to configure alerts when thresholds are exceeded. Which service should they use?

A company is designing a solution for regulatory compliance. They need documentation that maps Azure services to common compliance standards and provides audit reports. Which Azure resource should they use?

A solution must support a multi-tier application where the web tier is publicly accessible, but the database tier must not be reachable from the internet. Which approach best meets this requirement in Azure?

You need to store a large number of images and make them available over HTTPS with high durability. The application should not require a traditional file server. Which Azure service should you use?

Which Azure feature provides a private connection from an on-premises network to Azure without traversing the public internet?

A company wants to ensure every new Azure resource includes tags for "CostCenter" and "Owner". Which Azure governance feature should they use to enforce this requirement?

A team wants to deploy the same set of Azure resources repeatedly across multiple environments (dev/test/prod) using declarative templates. Which approach best meets this requirement?

An application experiences unpredictable traffic spikes. You want Azure to automatically add or remove compute instances to match demand and reduce manual management. Which cloud concept does this describe?

You need to run a containerized web API without managing the underlying virtual machines. The solution should support automatic scaling and simplified operations. Which Azure service is the best fit?

You want a centralized place to view service health issues, planned maintenance, and advisories that might affect your Azure resources. Which service should you use?

A company wants to manage multiple Azure subscriptions while applying consistent access control and governance policies. Which Azure construct is designed for this purpose?

You have an Azure resource group with multiple virtual machines. A user must be able to restart the VMs but must not be able to delete them or modify networking. What is the best way to grant this access?

A critical application must remain available if an entire datacenter in a region fails. You want the simplest design within a single Azure region that provides datacenter-level redundancy. What should you use?

You need to ensure that a newly created Azure resource group cannot contain resources deployed outside the "West US" region. Which Azure governance feature should you use?

A company wants a private, dedicated network connection from its on-premises datacenter to Azure for consistent performance and to avoid using the public internet. Which Azure service should they use?

You need to deploy a web application that automatically scales based on demand and you want Azure to manage the underlying operating system patching. Which compute option best meets the requirement?

A team needs to create multiple Azure resources with consistent settings and repeatable deployments across environments (dev, test, prod). Which service should they use to define and deploy the infrastructure as code?

You are troubleshooting why a user cannot access the Azure portal. The user can sign in successfully, but they cannot create or delete resources in a subscription. You suspect the issue is related to permissions. Which Azure feature should you check first to verify what actions the user is allowed to perform?