2025 Microsoft Certified: Azure Fundamentals –
Complete Study Guide with Practice Questions,
Exam Tips, and Certification Insights for AZ-900
Success
1. In a region pair, a region is paired with another region in the same:
A. Resource group
B. Azure subscription
C. Availability zone
D. Geography
✅ Correct Answer: D. Geography
Rationale: Azure region pairs are configured to ensure business continuity and disaster
recovery by pairing regions within the same geography (e.g., US, Europe, Asia), at least
300 miles apart when possible.
2. Which two components are created in an Azure subscription? (Select TWO)
A. Management groups
B. Virtual machines
C. Resources
D. Resource groups
E. Azure Active Directory tenants
✅ Correct Answers: C. Resources & D. Resource groups
Rationale: Within an Azure subscription, you can create and manage resources (like
VMs, storage, etc.) and organize them using resource groups. Management groups exist
above the subscription level.
3. Which Azure component allows you to replicate resources across a geography to
ensure business continuity during a natural disaster at the primary site?
A. Availability zones
B. Resource groups
C. Region pairs
D. Virtual networks
,✅ Correct Answer: C. Region pairs
Rationale: Azure region pairs provide high availability and disaster recovery by enabling
resource replication across geographically separated but related regions.
4. Which resource can you use to manage access, policies, and compliance across
multiple subscriptions?
A. Resource groups
B. Accounts
C. Administrative units
D. Management groups
✅ Correct Answer: D. Management groups
Rationale: Management groups allow centralized governance and policy application
across multiple Azure subscriptions, making them ideal for compliance and access
control.
5. Which Azure resource is a software emulation of a physical computer that
includes a virtual processor, memory, storage, and networking resources?
A. Azure Functions
B. Virtual machines
C. Resource groups
D. App Services
✅ Correct Answer: B. Virtual machines
Rationale: Azure Virtual Machines (VMs) emulate physical hardware and can run
operating systems, applications, and services just like a physical server.
6. Which scenario is a use case for a VPN gateway?
A. Hosting a public website
B. Connecting on-premises datacenters to Azure
C. Preventing DDoS attacks
D. Monitoring network traffic
✅ Correct Answer: B. Connecting on-premises datacenters to Azure
Rationale: A VPN gateway establishes secure Site-to-Site connections between on-
premises datacenters and Azure virtual networks.
, 7. You need to allow resources on two different Azure virtual networks to
communicate with each other. What should you configure?
A. Network Security Group
B. Virtual Network Peering
C. Application Gateway
D. Load Balancer
✅ Correct Answer: B. Virtual Network Peering
Rationale: Virtual Network Peering allows communication between Azure virtual
networks by enabling direct traffic flow without routing over the internet.
8. Which two services can you use to establish network connectivity between an
on-premises network and Azure resources? (Select TWO)
A. Azure Firewall
B. ExpressRoute
C. Azure Bastion
D. Azure VPN Gateway
E. Azure Monitor
✅ Correct Answers: B. ExpressRoute & D. Azure VPN Gateway
Rationale: Both ExpressRoute and Azure VPN Gateway are designed to securely
connect on-premises networks to Azure—ExpressRoute uses a private connection, and
VPN Gateway uses a public internet connection with encryption.
9. What is the main purpose of Azure Resource Groups?
A. To manage Azure billing
B. To physically group Azure datacenters
C. To organize and manage related Azure resources
D. To assign user roles and permissions
✅ Correct Answer: C. To organize and manage related Azure resources
Rationale: Resource groups in Azure are logical containers that allow you to manage
and organize related resources (such as virtual machines, databases, and web apps) as
a single unit.
10. What is the primary benefit of Azure Availability Zones?
Complete Study Guide with Practice Questions,
Exam Tips, and Certification Insights for AZ-900
Success
1. In a region pair, a region is paired with another region in the same:
A. Resource group
B. Azure subscription
C. Availability zone
D. Geography
✅ Correct Answer: D. Geography
Rationale: Azure region pairs are configured to ensure business continuity and disaster
recovery by pairing regions within the same geography (e.g., US, Europe, Asia), at least
300 miles apart when possible.
2. Which two components are created in an Azure subscription? (Select TWO)
A. Management groups
B. Virtual machines
C. Resources
D. Resource groups
E. Azure Active Directory tenants
✅ Correct Answers: C. Resources & D. Resource groups
Rationale: Within an Azure subscription, you can create and manage resources (like
VMs, storage, etc.) and organize them using resource groups. Management groups exist
above the subscription level.
3. Which Azure component allows you to replicate resources across a geography to
ensure business continuity during a natural disaster at the primary site?
A. Availability zones
B. Resource groups
C. Region pairs
D. Virtual networks
,✅ Correct Answer: C. Region pairs
Rationale: Azure region pairs provide high availability and disaster recovery by enabling
resource replication across geographically separated but related regions.
4. Which resource can you use to manage access, policies, and compliance across
multiple subscriptions?
A. Resource groups
B. Accounts
C. Administrative units
D. Management groups
✅ Correct Answer: D. Management groups
Rationale: Management groups allow centralized governance and policy application
across multiple Azure subscriptions, making them ideal for compliance and access
control.
5. Which Azure resource is a software emulation of a physical computer that
includes a virtual processor, memory, storage, and networking resources?
A. Azure Functions
B. Virtual machines
C. Resource groups
D. App Services
✅ Correct Answer: B. Virtual machines
Rationale: Azure Virtual Machines (VMs) emulate physical hardware and can run
operating systems, applications, and services just like a physical server.
6. Which scenario is a use case for a VPN gateway?
A. Hosting a public website
B. Connecting on-premises datacenters to Azure
C. Preventing DDoS attacks
D. Monitoring network traffic
✅ Correct Answer: B. Connecting on-premises datacenters to Azure
Rationale: A VPN gateway establishes secure Site-to-Site connections between on-
premises datacenters and Azure virtual networks.
, 7. You need to allow resources on two different Azure virtual networks to
communicate with each other. What should you configure?
A. Network Security Group
B. Virtual Network Peering
C. Application Gateway
D. Load Balancer
✅ Correct Answer: B. Virtual Network Peering
Rationale: Virtual Network Peering allows communication between Azure virtual
networks by enabling direct traffic flow without routing over the internet.
8. Which two services can you use to establish network connectivity between an
on-premises network and Azure resources? (Select TWO)
A. Azure Firewall
B. ExpressRoute
C. Azure Bastion
D. Azure VPN Gateway
E. Azure Monitor
✅ Correct Answers: B. ExpressRoute & D. Azure VPN Gateway
Rationale: Both ExpressRoute and Azure VPN Gateway are designed to securely
connect on-premises networks to Azure—ExpressRoute uses a private connection, and
VPN Gateway uses a public internet connection with encryption.
9. What is the main purpose of Azure Resource Groups?
A. To manage Azure billing
B. To physically group Azure datacenters
C. To organize and manage related Azure resources
D. To assign user roles and permissions
✅ Correct Answer: C. To organize and manage related Azure resources
Rationale: Resource groups in Azure are logical containers that allow you to manage
and organize related resources (such as virtual machines, databases, and web apps) as
a single unit.
10. What is the primary benefit of Azure Availability Zones?
