AZURE ADMINISTRATOR RENEWAL
COMPLETE QUESTIONS AND SOLUTIONS
2026 GRADED A+
● What is an Azure Subscription? Answer: Billing and security
boundary:
• This is a billing container for your resources.
• You can also apply permissions via RBAC.
• Organizations normally use multiple subscriptions - dev/test/prod.
• Every subscription trusts a Microsoft Entra ID tenant.
● What are Azure Resources? Answer: Is an item deployed onto
Azure. The resource is based on a service available on Azure.
Each resource has a resource ID, a location and properties and is a
part of a resource group.
● What is an Azure Resource Group Answer: This is a logical
container that holds resources that you want to manage together.
You can apply governance aspects like RBAC, tags and locks onto
resource groups.
● What are Azure regions? Answer: A specific Azure geography
with one or more datacenters.
Regions also comprise of Availability zones. You can increase the
overall redundancy of your infrastructure by spreading the virtual
machines across Availability zones
,● What are NSGs? Answer: Network Security Groups that are Rules
that allow/deny traffic
● Azure Disk Encryption Answer: Encrypts the disks inside the VM
using a a data-encryption key (DEK) stored in an Azure Key Vault.
Can target the OS Disk/data Disks and uses BitLocker on Windows
and DM-Crypt on Linux.
● Availability Sets Answer: Keeps two or more VMs apart on
different fault domains (different racks/power/network) and update
domains (host patching).
If one rack fails or one update domain reboots, at least one VM stays
up
There is no extra cost for the Availability set, you only pay for the
virtual machines.
● Max number of Availability Sets Answer: You can have a
maximum of 3 fault domains and 20 update domains
● Fault Doma in (FD) Answer: group sha ring power & network
Separate VMs to a void a single rack failure
● Update Domain (UD) Answer: group that reboots together during
planned host updates; only one updated at a time
● Availability Zones Answer: Physically separate data centers inside
a region. Protects from data center-level failures
Zones need to be assigned at machine creation.
, There is no extra cost for the Availability zone, but there is a data
transfer charge across zones
● Virtual Machine Scale Set Answer: Lets you manage a fleet of
VMs as a single unit.
• You set the model (image/size/network), and the set can autoscale
based on load (CPU, requests, queue length)
● Virtual Machine Scale Set Orchestration Modes Answer: Uniform
and flexible
● Virtual Machine Scale Set - Uniform Answer: Identical instances
Scale set API manages instances. Supports LB health probe or App
Health extension for health.
Great for stateless workloads, simple autoscale, lower variance
● Virtual Machine Scale Set - Flexible Answer: Manage instances
more like regular VMs; mixed sizes/spot/regular possible.
Better for mixed roles, custom availability needs
● Azure Web Apps Answer: Part of App Service—is Microsoft's
Platform as a Service (PaaS) for hosting web sites and APIs without
managing servers. • You pick a runtime—.NET, Node.js, Python,
Java, PHP—or bring your own container, and Azure handles the OS
patching, platform updates
● Azure App Service Plans Answer: Free/Shared (F1/D1)
Dev/test only; limited CPU; no SLA; no custom SSL; no slots.
COMPLETE QUESTIONS AND SOLUTIONS
2026 GRADED A+
● What is an Azure Subscription? Answer: Billing and security
boundary:
• This is a billing container for your resources.
• You can also apply permissions via RBAC.
• Organizations normally use multiple subscriptions - dev/test/prod.
• Every subscription trusts a Microsoft Entra ID tenant.
● What are Azure Resources? Answer: Is an item deployed onto
Azure. The resource is based on a service available on Azure.
Each resource has a resource ID, a location and properties and is a
part of a resource group.
● What is an Azure Resource Group Answer: This is a logical
container that holds resources that you want to manage together.
You can apply governance aspects like RBAC, tags and locks onto
resource groups.
● What are Azure regions? Answer: A specific Azure geography
with one or more datacenters.
Regions also comprise of Availability zones. You can increase the
overall redundancy of your infrastructure by spreading the virtual
machines across Availability zones
,● What are NSGs? Answer: Network Security Groups that are Rules
that allow/deny traffic
● Azure Disk Encryption Answer: Encrypts the disks inside the VM
using a a data-encryption key (DEK) stored in an Azure Key Vault.
Can target the OS Disk/data Disks and uses BitLocker on Windows
and DM-Crypt on Linux.
● Availability Sets Answer: Keeps two or more VMs apart on
different fault domains (different racks/power/network) and update
domains (host patching).
If one rack fails or one update domain reboots, at least one VM stays
up
There is no extra cost for the Availability set, you only pay for the
virtual machines.
● Max number of Availability Sets Answer: You can have a
maximum of 3 fault domains and 20 update domains
● Fault Doma in (FD) Answer: group sha ring power & network
Separate VMs to a void a single rack failure
● Update Domain (UD) Answer: group that reboots together during
planned host updates; only one updated at a time
● Availability Zones Answer: Physically separate data centers inside
a region. Protects from data center-level failures
Zones need to be assigned at machine creation.
, There is no extra cost for the Availability zone, but there is a data
transfer charge across zones
● Virtual Machine Scale Set Answer: Lets you manage a fleet of
VMs as a single unit.
• You set the model (image/size/network), and the set can autoscale
based on load (CPU, requests, queue length)
● Virtual Machine Scale Set Orchestration Modes Answer: Uniform
and flexible
● Virtual Machine Scale Set - Uniform Answer: Identical instances
Scale set API manages instances. Supports LB health probe or App
Health extension for health.
Great for stateless workloads, simple autoscale, lower variance
● Virtual Machine Scale Set - Flexible Answer: Manage instances
more like regular VMs; mixed sizes/spot/regular possible.
Better for mixed roles, custom availability needs
● Azure Web Apps Answer: Part of App Service—is Microsoft's
Platform as a Service (PaaS) for hosting web sites and APIs without
managing servers. • You pick a runtime—.NET, Node.js, Python,
Java, PHP—or bring your own container, and Azure handles the OS
patching, platform updates
● Azure App Service Plans Answer: Free/Shared (F1/D1)
Dev/test only; limited CPU; no SLA; no custom SSL; no slots.
