AZ 900: Azure Fundamentals Exam
Questions and Answers 100% Pass
What types of attacks can a Web Application Firewall (WAF) protect from? -
✔✔Cross Site Scripting (XSS) attacks
Not DDoS (DDoS protection is offered separately, not part of the firewall)
Scenario: You have an application in the cloud that has 10 servers with various
roles. Six servers are D2S machines, two servers are D4S, and two are D8S
instance types. This application is expected to run for years, but the business
has concerns about the cost. What is the one thing you can do almost
immediately to reduce the cost of this solution by at least 50%? - ✔✔Use Azure
Reserved Instances with Hybrid Benefit
You can get 80% savings without a single change to your application
Which tool within the Azure Portal will make specific recommendations based
on your actual usage for how you can improve your use of Azure? - ✔✔Azure
Advisor
Which Azure AD licenses (select two) are made available through Azure? -
✔✔Free
Office 365
Page 1 of 37
COPYRIGHT©PROFFKERRYMARTIN 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION
NUMBER: 619652435. TERMS OF USE. PRIVACY STATEMENT.ALL RIGHTS RESERVED
,Premium 1
Premium 2
Which of the following scenarios would Azure Policy be a recommended
method for enforcement? - ✔✔Prevent certain azure VM instance types from
being used in a resource group
What are the two features that Azure AD provides? Choose two. -
✔✔Authentication and Application Management
What is the basic way of protecting an Azure Virtual Network subnet? -
✔✔Network Security Group
Which of the following elements is considered part of the "network" layer of
network security? - ✔✔Separate servers into distinct subnets by role
Which feature within Azure collects all of the logs from various resources into a
central dashboard, where you can run queries, view graphs, and create alerts on
certain events? - ✔✔Azure Monitor
Azure Advisor - ✔✔a tool that will analyze your use of Azure and make you
specific recommendations based on your usage across availability, security,
performance and cost categories
Page 2 of 37
COPYRIGHT©PROFFKERRYMARTIN 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION
NUMBER: 619652435. TERMS OF USE. PRIVACY STATEMENT.ALL RIGHTS RESERVED
,Azure Service Health - ✔✔feature that alerts you to service issues that happen
in Azure itself, not specifically related to your own resources
Azure Policy - ✔✔a service to create policies
the policies allow you to enforce and control the properties of a resource
can add restrictions on storage account SKUs, virtual machine instance types,
and rules relating to tagging of resources and groups, it cannot prompt a user to
ask them if they are sure
Network Security Group (NSG) - ✔✔**a virtual firewall at the subnet level
a virtual firewall for subnets instead of vnets
a fairly basic set of rules that you can apply to both inbound traffic and
outbound traffic that lets you specify what sources, destinations and ports are
allowed to travel through from outside the virtual network to inside the virtual
network
Azure Monitor - ✔✔a centralized dashboard that collects all the logs, metrics
and events from your resources for telemetry
Page 3 of 37
COPYRIGHT©PROFFKERRYMARTIN 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION
NUMBER: 619652435. TERMS OF USE. PRIVACY STATEMENT.ALL RIGHTS RESERVED
, An IT needs to create a VM in Azure. Currently, the IT Engineer has an Android
OS based workstation. Which of the following can the IT Engineer use to create
the desired VM in Azure
Microsoft PowerApps
Azure Cloud Shell
Azure Powershell
Azure CLI - ✔✔Azure Cloud Shell
Azure Powershell
Azure CLI
Microsoft PowerApps - ✔✔is not used to create VMs
it allows you to build mobile apps from selectable templates
Does the Azure Free Account allow you to host production-based resources? -
✔✔Yes
Does Azure AD have capabilities to implement authorization using Azure RBAC
to secure resources? - ✔✔Yes
Does the Azure AD Premium P2 tier come with an SLA of 99.9%? - ✔✔Yes
Page 4 of 37
COPYRIGHT©PROFFKERRYMARTIN 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION
NUMBER: 619652435. TERMS OF USE. PRIVACY STATEMENT.ALL RIGHTS RESERVED
Questions and Answers 100% Pass
What types of attacks can a Web Application Firewall (WAF) protect from? -
✔✔Cross Site Scripting (XSS) attacks
Not DDoS (DDoS protection is offered separately, not part of the firewall)
Scenario: You have an application in the cloud that has 10 servers with various
roles. Six servers are D2S machines, two servers are D4S, and two are D8S
instance types. This application is expected to run for years, but the business
has concerns about the cost. What is the one thing you can do almost
immediately to reduce the cost of this solution by at least 50%? - ✔✔Use Azure
Reserved Instances with Hybrid Benefit
You can get 80% savings without a single change to your application
Which tool within the Azure Portal will make specific recommendations based
on your actual usage for how you can improve your use of Azure? - ✔✔Azure
Advisor
Which Azure AD licenses (select two) are made available through Azure? -
✔✔Free
Office 365
Page 1 of 37
COPYRIGHT©PROFFKERRYMARTIN 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION
NUMBER: 619652435. TERMS OF USE. PRIVACY STATEMENT.ALL RIGHTS RESERVED
,Premium 1
Premium 2
Which of the following scenarios would Azure Policy be a recommended
method for enforcement? - ✔✔Prevent certain azure VM instance types from
being used in a resource group
What are the two features that Azure AD provides? Choose two. -
✔✔Authentication and Application Management
What is the basic way of protecting an Azure Virtual Network subnet? -
✔✔Network Security Group
Which of the following elements is considered part of the "network" layer of
network security? - ✔✔Separate servers into distinct subnets by role
Which feature within Azure collects all of the logs from various resources into a
central dashboard, where you can run queries, view graphs, and create alerts on
certain events? - ✔✔Azure Monitor
Azure Advisor - ✔✔a tool that will analyze your use of Azure and make you
specific recommendations based on your usage across availability, security,
performance and cost categories
Page 2 of 37
COPYRIGHT©PROFFKERRYMARTIN 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION
NUMBER: 619652435. TERMS OF USE. PRIVACY STATEMENT.ALL RIGHTS RESERVED
,Azure Service Health - ✔✔feature that alerts you to service issues that happen
in Azure itself, not specifically related to your own resources
Azure Policy - ✔✔a service to create policies
the policies allow you to enforce and control the properties of a resource
can add restrictions on storage account SKUs, virtual machine instance types,
and rules relating to tagging of resources and groups, it cannot prompt a user to
ask them if they are sure
Network Security Group (NSG) - ✔✔**a virtual firewall at the subnet level
a virtual firewall for subnets instead of vnets
a fairly basic set of rules that you can apply to both inbound traffic and
outbound traffic that lets you specify what sources, destinations and ports are
allowed to travel through from outside the virtual network to inside the virtual
network
Azure Monitor - ✔✔a centralized dashboard that collects all the logs, metrics
and events from your resources for telemetry
Page 3 of 37
COPYRIGHT©PROFFKERRYMARTIN 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION
NUMBER: 619652435. TERMS OF USE. PRIVACY STATEMENT.ALL RIGHTS RESERVED
, An IT needs to create a VM in Azure. Currently, the IT Engineer has an Android
OS based workstation. Which of the following can the IT Engineer use to create
the desired VM in Azure
Microsoft PowerApps
Azure Cloud Shell
Azure Powershell
Azure CLI - ✔✔Azure Cloud Shell
Azure Powershell
Azure CLI
Microsoft PowerApps - ✔✔is not used to create VMs
it allows you to build mobile apps from selectable templates
Does the Azure Free Account allow you to host production-based resources? -
✔✔Yes
Does Azure AD have capabilities to implement authorization using Azure RBAC
to secure resources? - ✔✔Yes
Does the Azure AD Premium P2 tier come with an SLA of 99.9%? - ✔✔Yes
Page 4 of 37
COPYRIGHT©PROFFKERRYMARTIN 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION
NUMBER: 619652435. TERMS OF USE. PRIVACY STATEMENT.ALL RIGHTS RESERVED
