___________________________________________________________________
AZ-900 Azure Fundamentals Mock Exam
2026–2027 | Microsoft Azure
Certification Practice Test, Answers &
Detailed Rationales
1. A company wants to move an application to Azure without modifying its
source code or changing its application architecture. Which cloud migration
approach is most appropriate?
A. Refactor
B. Rearchitect
C. Rehost
D. Rebuild
Answer: Rehost
Rationale: Rehosting, often called “lift and shift,” moves an existing workload to
Azure with minimal changes to the application.
2. Which Azure service provides a globally distributed content delivery
network capability for caching static and dynamic content closer to users?
A. Azure DNS
B. Azure Front Door
,C. Azure Virtual Network
D. Azure ExpressRoute
Answer: Azure Front Door
Rationale: Azure Front Door provides global application delivery, including
acceleration, Layer 7 load balancing, routing, and caching capabilities.
3. An organization needs a private connection between its on-premises
datacenter and Azure that does not traverse the public internet. Which
Azure service should it use?
A. VPN Gateway
B. Azure Bastion
C. ExpressRoute
D. Azure Firewall
Answer: ExpressRoute
Rationale: ExpressRoute provides private connectivity between an
organization's network and Microsoft cloud services without using the public
internet as the connection path.
4. A company wants to deploy a web application without managing virtual
machines, operating systems, or web server infrastructure. Which Azure
service is most appropriate?
A. Azure Virtual Machines
B. Azure App Service
C. Azure Dedicated Host
D. Azure Virtual Desktop
Answer: Azure App Service
Rationale: Azure App Service is a platform-as-a-service offering that abstracts
infrastructure and operating-system management for supported web
applications and APIs.
, 5. Which Azure pricing concept allows organizations to receive discounts by
committing to a consistent amount of compute usage for a specified
period?
A. Consumption-based pricing
B. Azure Reservations
C. Spot pricing only
D. Pay-as-you-go only
Answer: Azure Reservations
Rationale: Azure Reservations provide discounted pricing in exchange for
committing to specific Azure resources for a defined term.
6. A workload can tolerate interruptions and is designed to use unused Azure
compute capacity. Which pricing option can provide significant savings?
A. Reserved Instances
B. Spot Virtual Machines
C. Dedicated Hosts
D. Pay-as-you-go
Answer: Spot Virtual Machines
Rationale: Azure Spot Virtual Machines use spare Azure capacity at substantially
reduced prices, but workloads can be evicted when Azure needs the capacity.
7. Which Azure service provides object storage for unstructured data such as
images, videos, backups, and documents?
A. Azure Files
B. Azure Blob Storage
C. Azure Queue Storage
D. Azure Table Storage
Answer: Azure Blob Storage
, Rationale: Azure Blob Storage is designed for massive amounts of unstructured
object data such as media files, documents, logs, and backups.
8. An application requires a shared file system that can be mounted by
multiple virtual machines using SMB. Which Azure service should be
selected?
A. Azure Blob Storage
B. Azure Queue Storage
C. Azure Files
D. Azure Table Storage
Answer: Azure Files
Rationale: Azure Files provides managed file shares that can be accessed
through protocols such as SMB and can be mounted by multiple systems.
9. Which Azure service is designed specifically for storing and retrieving
secrets, encryption keys, and certificates?
A. Azure Monitor
B. Microsoft Entra ID
C. Azure Key Vault
D. Azure Policy
Answer: Azure Key Vault
Rationale: Azure Key Vault securely stores and controls access to secrets,
cryptographic keys, and certificates.
10.A company needs centralized identity management for users accessing
Microsoft cloud resources. Which service provides this capability?
A. Azure Firewall
B. Microsoft Entra ID
C. Azure Monitor
D. Azure Advisor
AZ-900 Azure Fundamentals Mock Exam
2026–2027 | Microsoft Azure
Certification Practice Test, Answers &
Detailed Rationales
1. A company wants to move an application to Azure without modifying its
source code or changing its application architecture. Which cloud migration
approach is most appropriate?
A. Refactor
B. Rearchitect
C. Rehost
D. Rebuild
Answer: Rehost
Rationale: Rehosting, often called “lift and shift,” moves an existing workload to
Azure with minimal changes to the application.
2. Which Azure service provides a globally distributed content delivery
network capability for caching static and dynamic content closer to users?
A. Azure DNS
B. Azure Front Door
,C. Azure Virtual Network
D. Azure ExpressRoute
Answer: Azure Front Door
Rationale: Azure Front Door provides global application delivery, including
acceleration, Layer 7 load balancing, routing, and caching capabilities.
3. An organization needs a private connection between its on-premises
datacenter and Azure that does not traverse the public internet. Which
Azure service should it use?
A. VPN Gateway
B. Azure Bastion
C. ExpressRoute
D. Azure Firewall
Answer: ExpressRoute
Rationale: ExpressRoute provides private connectivity between an
organization's network and Microsoft cloud services without using the public
internet as the connection path.
4. A company wants to deploy a web application without managing virtual
machines, operating systems, or web server infrastructure. Which Azure
service is most appropriate?
A. Azure Virtual Machines
B. Azure App Service
C. Azure Dedicated Host
D. Azure Virtual Desktop
Answer: Azure App Service
Rationale: Azure App Service is a platform-as-a-service offering that abstracts
infrastructure and operating-system management for supported web
applications and APIs.
, 5. Which Azure pricing concept allows organizations to receive discounts by
committing to a consistent amount of compute usage for a specified
period?
A. Consumption-based pricing
B. Azure Reservations
C. Spot pricing only
D. Pay-as-you-go only
Answer: Azure Reservations
Rationale: Azure Reservations provide discounted pricing in exchange for
committing to specific Azure resources for a defined term.
6. A workload can tolerate interruptions and is designed to use unused Azure
compute capacity. Which pricing option can provide significant savings?
A. Reserved Instances
B. Spot Virtual Machines
C. Dedicated Hosts
D. Pay-as-you-go
Answer: Spot Virtual Machines
Rationale: Azure Spot Virtual Machines use spare Azure capacity at substantially
reduced prices, but workloads can be evicted when Azure needs the capacity.
7. Which Azure service provides object storage for unstructured data such as
images, videos, backups, and documents?
A. Azure Files
B. Azure Blob Storage
C. Azure Queue Storage
D. Azure Table Storage
Answer: Azure Blob Storage
, Rationale: Azure Blob Storage is designed for massive amounts of unstructured
object data such as media files, documents, logs, and backups.
8. An application requires a shared file system that can be mounted by
multiple virtual machines using SMB. Which Azure service should be
selected?
A. Azure Blob Storage
B. Azure Queue Storage
C. Azure Files
D. Azure Table Storage
Answer: Azure Files
Rationale: Azure Files provides managed file shares that can be accessed
through protocols such as SMB and can be mounted by multiple systems.
9. Which Azure service is designed specifically for storing and retrieving
secrets, encryption keys, and certificates?
A. Azure Monitor
B. Microsoft Entra ID
C. Azure Key Vault
D. Azure Policy
Answer: Azure Key Vault
Rationale: Azure Key Vault securely stores and controls access to secrets,
cryptographic keys, and certificates.
10.A company needs centralized identity management for users accessing
Microsoft cloud resources. Which service provides this capability?
A. Azure Firewall
B. Microsoft Entra ID
C. Azure Monitor
D. Azure Advisor
