Microsoft Azure Fundamentals (AZ-900) Exam Study Set
2026/2027 Verified Edition | Comprehensive Cloud Computing
Certification Preparation Material — 238 Questions
Section 1: Cloud Concepts (Questions 1-42)
1 A multinational corporation is migrating its on-premises data center to a public cloud. The security team
requires that the organization retains full control over the operating system, middleware, and runtime
environment, while the cloud provider manages only the physical hardware and virtualization layer. Which
cloud service model best meets this requirement?
A) Software as a Service (SaaS)
B) Platform as a Service (PaaS)
C) Infrastructure as a Service (IaaS)
D) Function as a Service (FaaS)
Answer: C
Rationale: IaaS provides the customer with control over the operating system, storage, and deployed applications,
while the cloud provider manages the physical infrastructure. PaaS abstracts the OS and runtime, and SaaS
provides a fully managed application. FaaS is a subset of PaaS for event-driven functions.
2 A hospital is required by law to store patient health records for a minimum of 7 years after the last visit. The
records are rarely accessed after the first year but must be immediately retrievable within 24 hours if requested.
Which cloud storage strategy minimizes cost while ensuring compliance?
A) Store all data in hot blob storage and use lifecycle management to move to archive storage after 1 year.
B) Store all data in cool blob storage and use lifecycle management to move to archive storage after 1 year.
C) Store all data in archive storage from the beginning and rehydrate to hot storage when needed.
D) Store all data in premium blob storage for fast retrieval and delete after 7 years.
Answer: B
Rationale: Cool storage is cheaper than hot but has higher retrieval costs; after the first year, data is rarely accessed,
so moving to archive (lowest cost) is optimal. Archive storage has high retrieval latency (hours), but the 24-hour
requirement allows rehydration. Option A uses more expensive hot storage initially; option C risks high
rehydration costs if data is accessed during the first year; option D is unnecessarily expensive.
3 A startup is designing a microservices architecture on Azure. Each microservice must scale independently based
on demand, and the company wants to minimize operational overhead for managing servers. Which
combination of Azure services best achieves this?
A) Azure Virtual Machines with autoscale sets
B) Azure App Service with manual scaling
C) Azure Kubernetes Service (AKS) with Horizontal Pod Autoscaler
D) Azure Functions with consumption plan
Answer: D
Rationale: Azure Functions with consumption plan automatically scales each function independently and requires
no server management, aligning with microservices and minimal overhead. AKS still requires cluster management.
App Service manual scaling does not scale independently per microservice. VMs have higher overhead.
,4 A financial services firm is evaluating a hybrid cloud model to comply with data sovereignty regulations.
Customer transaction data must remain within the country's borders, but the firm wants to use cloud-based
analytics tools that run in a different region. Which approach best addresses these constraints?
A) Use a public cloud region within the country for all workloads.
B) Use a private cloud on-premises for all workloads.
C) Use a public cloud region outside the country and rely on data encryption.
D) Use a private cloud for transaction data and a public cloud for analytics, with data anonymization before
transfer.
Answer: D
Rationale: Hybrid cloud allows keeping sensitive data on-premises (private cloud) while leveraging public cloud
analytics. Data sovereignty is maintained by not transferring raw data. Option A may not be feasible if no local
region exists; option B loses cloud benefits; option C violates regulations.
5 An e-commerce platform experiences unpredictable traffic spikes during flash sales. The platform must
maintain low latency and high availability without over-provisioning resources. Which cloud characteristic is
most critical to address this requirement?
A) Elasticity
B) Scalability
C) High availability
D) Disaster recovery
Answer: A
Rationale: Elasticity refers to the ability to automatically scale resources up and down in response to demand, which
is essential for handling unpredictable spikes without manual intervention. Scalability is the ability to handle
growth, but elasticity implies dynamic, automated adjustment. High availability ensures uptime but does not
address resource provisioning.
6 A company deploys a web application on Azure using a load balancer, two virtual machines in an availability
set, and a SQL database with geo-redundant backup. According to the shared responsibility model, which of the
following is the customer's responsibility?
A) Patching the physical network switches in the Azure data center
B) Configuring the firewall rules for the virtual machines
C) Ensuring the load balancer is powered by redundant power supplies
D) Replacing failed disks in the storage cluster
Answer: B
Rationale: Under the shared responsibility model, the customer is responsible for securing and configuring the
operating system, applications, and network controls (e.g., firewall rules) on IaaS. The cloud provider manages the
physical infrastructure, including network switches, power, and storage hardware.
7 A company wants to migrate its on-premises application to the cloud but must ensure that the total cost of
ownership (TCO) is lower than the current on-premises setup. Which of the following cloud cost factors should
be considered to accurately compare TCO?
A) Only the pay-as-you-go compute costs
B) Compute, storage, networking, and labor costs for cloud management, plus reduction in on-premises capital
expenditure
C) Only the cost of cloud storage and compute, ignoring labor
D) The upfront cost of cloud reserved instances only
,Answer: B
Rationale: TCO comparison must include all costs: cloud services (compute, storage, networking), operational
labor, and the avoided capital expenditure (hardware, power, cooling, real estate) from on-premises. Ignoring any
of these gives an incomplete picture. Options A, C, and D omit significant cost components.
8 A government agency requires that its cloud infrastructure be physically isolated from other tenants and located
within a specific geographic area. Which cloud deployment model best meets these requirements?
A) Public cloud
B) Community cloud
C) Private cloud
D) Hybrid cloud
Answer: C
Rationale: A private cloud provides dedicated, isolated infrastructure for a single organization, often on-premises or
hosted in a single-tenant data center. This ensures physical isolation and geographic control. Public cloud is
multi-tenant; community cloud is shared among several organizations; hybrid cloud mixes deployments but does
not guarantee isolation.
9 A company uses Azure DevOps to deploy a containerized application to Azure Kubernetes Service. The
development team wants to minimize the time between code commit and production deployment while ensuring
that the application is tested in an environment that mirrors production. Which practice best achieves this?
A) Deploy directly to production after each commit
B) Use a staging environment that is identical to production and promote after testing
C) Test only in the development environment and then deploy to production
D) Deploy to production once per month after manual testing
Answer: B
Rationale: Using a staging environment that mirrors production allows for automated testing and validation before
promotion, reducing time while maintaining quality. Direct deployment to production (A) risks failures; testing
only in dev (C) may miss environment-specific issues; monthly manual deployment (D) is slow.
10 A company is designing a cloud architecture that must remain available even if an entire Azure region goes
offline. Which approach provides the highest level of resilience?
A) Deploy resources in multiple availability zones within a single region
B) Deploy resources in multiple regions with active-active replication
C) Deploy resources in a single availability zone with auto-scaling
D) Deploy resources in a single region with a backup in a different zone
Answer: B
Rationale: An active-active multi-region deployment ensures that if one region fails, traffic is routed to another
region with no loss of service. Availability zones protect against data center failures but not entire region outages.
Single-zone or single-region deployments cannot withstand a full region failure.
11 A multinational corporation is migrating its on-premises infrastructure to Azure. The CTO wants to ensure that
the cloud deployment model minimizes upfront capital expenditure while allowing the highest degree of
control over security configurations and compliance. The company operates in a highly regulated industry and
must maintain strict data sovereignty. Which cloud deployment model best aligns with these requirements?
A) Public cloud
B) Private cloud
C) Hybrid cloud
, D) Community cloud
Answer: C
Rationale: Hybrid cloud combines public and private clouds, allowing the company to keep sensitive data
on-premises or in a private cloud for control and compliance, while using public cloud resources for scalability and
to minimize capital expenditure. Private cloud alone would still require significant upfront investment. Public cloud
lacks required control. Community cloud is shared by organizations with similar concerns but does not inherently
provide the same level of individual control.
12 An organization is evaluating the cost implications of moving its infrastructure to Azure. The CFO notes that
the company currently pays for electricity, cooling, physical security, and hardware maintenance for its
on-premises data center. Which cloud computing value proposition directly addresses the elimination of these
costs?
A) Elasticity
B) High availability
C) Consumption-based pricing
D) Economies of scale
Answer: D
Rationale: Economies of scale allow cloud providers to spread costs across many customers, reducing per-unit costs
and eliminating the need for individual organizations to bear the full burden of physical infrastructure expenses.
Elasticity relates to scaling resources on demand. High availability ensures uptime. Consumption-based pricing
means paying only for what you use, but the underlying cost reduction comes from economies of scale.
13 A software development team is designing a web application that experiences unpredictable spikes in traffic.
They want to ensure that the application automatically scales out during high demand and scales in during low
demand without manual intervention. Which characteristic of cloud computing is most essential for this
requirement?
A) Resource pooling
B) Measured service
C) Rapid elasticity
D) Broad network access
Answer: C
Rationale: Rapid elasticity enables automatic scaling of resources up or down based on demand, which is critical for
handling unpredictable traffic spikes. Resource pooling allows multi-tenancy but does not directly enable automatic
scaling. Measured service relates to metering and billing. Broad network access refers to accessibility over the
network.
14 A financial services company must comply with data residency regulations that require customer data to remain
within specific geographic boundaries. The company plans to use Azure services and needs to guarantee that
data does not leave a particular region. Which Azure concept should the company rely on to meet this
requirement?
A) Availability zones
B) Azure region pairs
C) Azure geographies
D) Resource groups
Answer: C
Rationale: Azure geographies define boundaries for data residency and compliance, ensuring that data stays within a
specific geographic area. Availability zones provide high availability within a region. Region pairs are for disaster
2026/2027 Verified Edition | Comprehensive Cloud Computing
Certification Preparation Material — 238 Questions
Section 1: Cloud Concepts (Questions 1-42)
1 A multinational corporation is migrating its on-premises data center to a public cloud. The security team
requires that the organization retains full control over the operating system, middleware, and runtime
environment, while the cloud provider manages only the physical hardware and virtualization layer. Which
cloud service model best meets this requirement?
A) Software as a Service (SaaS)
B) Platform as a Service (PaaS)
C) Infrastructure as a Service (IaaS)
D) Function as a Service (FaaS)
Answer: C
Rationale: IaaS provides the customer with control over the operating system, storage, and deployed applications,
while the cloud provider manages the physical infrastructure. PaaS abstracts the OS and runtime, and SaaS
provides a fully managed application. FaaS is a subset of PaaS for event-driven functions.
2 A hospital is required by law to store patient health records for a minimum of 7 years after the last visit. The
records are rarely accessed after the first year but must be immediately retrievable within 24 hours if requested.
Which cloud storage strategy minimizes cost while ensuring compliance?
A) Store all data in hot blob storage and use lifecycle management to move to archive storage after 1 year.
B) Store all data in cool blob storage and use lifecycle management to move to archive storage after 1 year.
C) Store all data in archive storage from the beginning and rehydrate to hot storage when needed.
D) Store all data in premium blob storage for fast retrieval and delete after 7 years.
Answer: B
Rationale: Cool storage is cheaper than hot but has higher retrieval costs; after the first year, data is rarely accessed,
so moving to archive (lowest cost) is optimal. Archive storage has high retrieval latency (hours), but the 24-hour
requirement allows rehydration. Option A uses more expensive hot storage initially; option C risks high
rehydration costs if data is accessed during the first year; option D is unnecessarily expensive.
3 A startup is designing a microservices architecture on Azure. Each microservice must scale independently based
on demand, and the company wants to minimize operational overhead for managing servers. Which
combination of Azure services best achieves this?
A) Azure Virtual Machines with autoscale sets
B) Azure App Service with manual scaling
C) Azure Kubernetes Service (AKS) with Horizontal Pod Autoscaler
D) Azure Functions with consumption plan
Answer: D
Rationale: Azure Functions with consumption plan automatically scales each function independently and requires
no server management, aligning with microservices and minimal overhead. AKS still requires cluster management.
App Service manual scaling does not scale independently per microservice. VMs have higher overhead.
,4 A financial services firm is evaluating a hybrid cloud model to comply with data sovereignty regulations.
Customer transaction data must remain within the country's borders, but the firm wants to use cloud-based
analytics tools that run in a different region. Which approach best addresses these constraints?
A) Use a public cloud region within the country for all workloads.
B) Use a private cloud on-premises for all workloads.
C) Use a public cloud region outside the country and rely on data encryption.
D) Use a private cloud for transaction data and a public cloud for analytics, with data anonymization before
transfer.
Answer: D
Rationale: Hybrid cloud allows keeping sensitive data on-premises (private cloud) while leveraging public cloud
analytics. Data sovereignty is maintained by not transferring raw data. Option A may not be feasible if no local
region exists; option B loses cloud benefits; option C violates regulations.
5 An e-commerce platform experiences unpredictable traffic spikes during flash sales. The platform must
maintain low latency and high availability without over-provisioning resources. Which cloud characteristic is
most critical to address this requirement?
A) Elasticity
B) Scalability
C) High availability
D) Disaster recovery
Answer: A
Rationale: Elasticity refers to the ability to automatically scale resources up and down in response to demand, which
is essential for handling unpredictable spikes without manual intervention. Scalability is the ability to handle
growth, but elasticity implies dynamic, automated adjustment. High availability ensures uptime but does not
address resource provisioning.
6 A company deploys a web application on Azure using a load balancer, two virtual machines in an availability
set, and a SQL database with geo-redundant backup. According to the shared responsibility model, which of the
following is the customer's responsibility?
A) Patching the physical network switches in the Azure data center
B) Configuring the firewall rules for the virtual machines
C) Ensuring the load balancer is powered by redundant power supplies
D) Replacing failed disks in the storage cluster
Answer: B
Rationale: Under the shared responsibility model, the customer is responsible for securing and configuring the
operating system, applications, and network controls (e.g., firewall rules) on IaaS. The cloud provider manages the
physical infrastructure, including network switches, power, and storage hardware.
7 A company wants to migrate its on-premises application to the cloud but must ensure that the total cost of
ownership (TCO) is lower than the current on-premises setup. Which of the following cloud cost factors should
be considered to accurately compare TCO?
A) Only the pay-as-you-go compute costs
B) Compute, storage, networking, and labor costs for cloud management, plus reduction in on-premises capital
expenditure
C) Only the cost of cloud storage and compute, ignoring labor
D) The upfront cost of cloud reserved instances only
,Answer: B
Rationale: TCO comparison must include all costs: cloud services (compute, storage, networking), operational
labor, and the avoided capital expenditure (hardware, power, cooling, real estate) from on-premises. Ignoring any
of these gives an incomplete picture. Options A, C, and D omit significant cost components.
8 A government agency requires that its cloud infrastructure be physically isolated from other tenants and located
within a specific geographic area. Which cloud deployment model best meets these requirements?
A) Public cloud
B) Community cloud
C) Private cloud
D) Hybrid cloud
Answer: C
Rationale: A private cloud provides dedicated, isolated infrastructure for a single organization, often on-premises or
hosted in a single-tenant data center. This ensures physical isolation and geographic control. Public cloud is
multi-tenant; community cloud is shared among several organizations; hybrid cloud mixes deployments but does
not guarantee isolation.
9 A company uses Azure DevOps to deploy a containerized application to Azure Kubernetes Service. The
development team wants to minimize the time between code commit and production deployment while ensuring
that the application is tested in an environment that mirrors production. Which practice best achieves this?
A) Deploy directly to production after each commit
B) Use a staging environment that is identical to production and promote after testing
C) Test only in the development environment and then deploy to production
D) Deploy to production once per month after manual testing
Answer: B
Rationale: Using a staging environment that mirrors production allows for automated testing and validation before
promotion, reducing time while maintaining quality. Direct deployment to production (A) risks failures; testing
only in dev (C) may miss environment-specific issues; monthly manual deployment (D) is slow.
10 A company is designing a cloud architecture that must remain available even if an entire Azure region goes
offline. Which approach provides the highest level of resilience?
A) Deploy resources in multiple availability zones within a single region
B) Deploy resources in multiple regions with active-active replication
C) Deploy resources in a single availability zone with auto-scaling
D) Deploy resources in a single region with a backup in a different zone
Answer: B
Rationale: An active-active multi-region deployment ensures that if one region fails, traffic is routed to another
region with no loss of service. Availability zones protect against data center failures but not entire region outages.
Single-zone or single-region deployments cannot withstand a full region failure.
11 A multinational corporation is migrating its on-premises infrastructure to Azure. The CTO wants to ensure that
the cloud deployment model minimizes upfront capital expenditure while allowing the highest degree of
control over security configurations and compliance. The company operates in a highly regulated industry and
must maintain strict data sovereignty. Which cloud deployment model best aligns with these requirements?
A) Public cloud
B) Private cloud
C) Hybrid cloud
, D) Community cloud
Answer: C
Rationale: Hybrid cloud combines public and private clouds, allowing the company to keep sensitive data
on-premises or in a private cloud for control and compliance, while using public cloud resources for scalability and
to minimize capital expenditure. Private cloud alone would still require significant upfront investment. Public cloud
lacks required control. Community cloud is shared by organizations with similar concerns but does not inherently
provide the same level of individual control.
12 An organization is evaluating the cost implications of moving its infrastructure to Azure. The CFO notes that
the company currently pays for electricity, cooling, physical security, and hardware maintenance for its
on-premises data center. Which cloud computing value proposition directly addresses the elimination of these
costs?
A) Elasticity
B) High availability
C) Consumption-based pricing
D) Economies of scale
Answer: D
Rationale: Economies of scale allow cloud providers to spread costs across many customers, reducing per-unit costs
and eliminating the need for individual organizations to bear the full burden of physical infrastructure expenses.
Elasticity relates to scaling resources on demand. High availability ensures uptime. Consumption-based pricing
means paying only for what you use, but the underlying cost reduction comes from economies of scale.
13 A software development team is designing a web application that experiences unpredictable spikes in traffic.
They want to ensure that the application automatically scales out during high demand and scales in during low
demand without manual intervention. Which characteristic of cloud computing is most essential for this
requirement?
A) Resource pooling
B) Measured service
C) Rapid elasticity
D) Broad network access
Answer: C
Rationale: Rapid elasticity enables automatic scaling of resources up or down based on demand, which is critical for
handling unpredictable traffic spikes. Resource pooling allows multi-tenancy but does not directly enable automatic
scaling. Measured service relates to metering and billing. Broad network access refers to accessibility over the
network.
14 A financial services company must comply with data residency regulations that require customer data to remain
within specific geographic boundaries. The company plans to use Azure services and needs to guarantee that
data does not leave a particular region. Which Azure concept should the company rely on to meet this
requirement?
A) Availability zones
B) Azure region pairs
C) Azure geographies
D) Resource groups
Answer: C
Rationale: Azure geographies define boundaries for data residency and compliance, ensuring that data stays within a
specific geographic area. Availability zones provide high availability within a region. Region pairs are for disaster
