MICROSOFT AZURE FUNDAMENTALS (AZ-900) EXAM – EXAM-STYLE
QUESTIONS AND ANSWERS | VERIFIED AND WELL DETAILED ANSWERS | PLUS
RATIONALES | GUARANTEED PASS | 2026/27 LATEST UPDATE | EXAM PREP |
STUDY GUIDE | PRACTICE TEST
1. A company is migrating its on-premises virtual machines to Azure. The IT
team needs to ensure that the virtual machines remain accessible if an Azure
datacenter experiences a catastrophic failure. Which Azure feature should be
configured to provide this level of resilience?
A. Availability Set
B. Virtual Machine Scale Set
C. Availability Zone
D. Azure Site Recovery
Correct Answer: C. Availability Zone
Rationale: Availability Zones are physically separate datacenters within an Azure
region, each with independent power, cooling, and networking. Deploying VMs
across zones protects against a complete datacenter failure, offering a higher
Service Level Agreement (SLA) for VM connectivity. An Availability Set protects
against failures within a single datacenter, not a complete datacenter loss. A Virtual
Machine Scale Set is for scaling and load-balancing VMs, not primarily for disaster
recovery. Azure Site Recovery is a disaster recovery service for replicating workloads
to a secondary region, which is a more complex and costly solution than leveraging
Availability Zones for high availability.
,2. An administrator needs to grant a developer the ability to manage virtual
machines in a specific resource group, but the developer should not be able to
create or modify virtual networks. Which built-in Azure role should the
administrator assign?
A. Owner
B. Contributor
C. Reader
D. Virtual Machine Contributor
Correct Answer: D. Virtual Machine Contributor
Rationale: The Virtual Machine Contributor role grants permissions to manage
virtual machines, including starting, restarting, and deallocating them, but it does
not grant permission to manage the virtual network they are connected to. The
Owner role grants full access to all resources, including the ability to delegate
permissions. The Contributor role grants full access to manage all resources in the
resource group, including virtual networks. The Reader role only allows viewing
existing resources, not managing them.
3. A company is planning to deploy a web application that will experience
unpredictable spikes in traffic. They need a cost-effective solution that
automatically adjusts compute resources based on demand. Which Azure
service should they use?
A. Azure Virtual Machines in an Availability Set
B. Azure App Service with Manual Scaling
,C. Azure Functions with a Consumption Plan
D. Azure Virtual Machine Scale Sets
Correct Answer: D. Azure Virtual Machine Scale Sets
Rationale: Azure Virtual Machine Scale Sets allow you to create and manage a
group of identical, load-balanced VMs. They support autoscaling, which
automatically increases or decreases the number of VM instances based on metrics
like CPU usage, effectively handling unpredictable traffic spikes. Azure App Service
with manual scaling requires administrative intervention. Azure Functions on a
Consumption plan can scale automatically but are serverless and suited for event-
driven workloads, not stateful web applications. Azure VMs in an Availability Set do
not natively support autoscaling.
4. A business wants to ensure that its Azure resources and data are stored in
specific geographical locations to meet data residency requirements. What
Azure concept should be used to achieve this?
A. Azure Policy
B. Azure Regions
C. Resource Groups
D. Azure Active Directory
Correct Answer: B. Azure Regions
Rationale: A region is a set of datacenters deployed within a latency-defined
perimeter and connected through a dedicated regional low-latency network.
Customers choose a region to deploy resources, which determines the primary
, location where their data is stored. Azure Policy is used to enforce organizational
standards and assess compliance at scale, but does not inherently dictate where
resources are deployed. Resource Groups are containers for resources. Azure Active
Directory is Microsoft's cloud-based identity and access management service.
5. A development team needs to share code, track work, and build and deploy
applications in an integrated environment. Which Azure service provides this
complete DevOps solution?
A. Azure DevOps Services
B. GitHub
C. Azure Repos
D. Azure Artifacts
Correct Answer: A. Azure DevOps Services
Rationale: Azure DevOps Services provides a suite of integrated development tools,
including Azure Repos for source control, Azure Boards for work tracking, Azure
Pipelines for CI/CD, Azure Test Plans for testing, and Azure Artifacts for package
management. This makes it a comprehensive, end-to-end DevOps solution. GitHub
is a similar service but is not an Azure service. Azure Repos and Azure Artifacts are
individual components of the broader Azure DevOps offering, not the complete
suite.
6. A company is evaluating Azure services for a new application. They require a
service that provides a dedicated, private network connection to Azure,
QUESTIONS AND ANSWERS | VERIFIED AND WELL DETAILED ANSWERS | PLUS
RATIONALES | GUARANTEED PASS | 2026/27 LATEST UPDATE | EXAM PREP |
STUDY GUIDE | PRACTICE TEST
1. A company is migrating its on-premises virtual machines to Azure. The IT
team needs to ensure that the virtual machines remain accessible if an Azure
datacenter experiences a catastrophic failure. Which Azure feature should be
configured to provide this level of resilience?
A. Availability Set
B. Virtual Machine Scale Set
C. Availability Zone
D. Azure Site Recovery
Correct Answer: C. Availability Zone
Rationale: Availability Zones are physically separate datacenters within an Azure
region, each with independent power, cooling, and networking. Deploying VMs
across zones protects against a complete datacenter failure, offering a higher
Service Level Agreement (SLA) for VM connectivity. An Availability Set protects
against failures within a single datacenter, not a complete datacenter loss. A Virtual
Machine Scale Set is for scaling and load-balancing VMs, not primarily for disaster
recovery. Azure Site Recovery is a disaster recovery service for replicating workloads
to a secondary region, which is a more complex and costly solution than leveraging
Availability Zones for high availability.
,2. An administrator needs to grant a developer the ability to manage virtual
machines in a specific resource group, but the developer should not be able to
create or modify virtual networks. Which built-in Azure role should the
administrator assign?
A. Owner
B. Contributor
C. Reader
D. Virtual Machine Contributor
Correct Answer: D. Virtual Machine Contributor
Rationale: The Virtual Machine Contributor role grants permissions to manage
virtual machines, including starting, restarting, and deallocating them, but it does
not grant permission to manage the virtual network they are connected to. The
Owner role grants full access to all resources, including the ability to delegate
permissions. The Contributor role grants full access to manage all resources in the
resource group, including virtual networks. The Reader role only allows viewing
existing resources, not managing them.
3. A company is planning to deploy a web application that will experience
unpredictable spikes in traffic. They need a cost-effective solution that
automatically adjusts compute resources based on demand. Which Azure
service should they use?
A. Azure Virtual Machines in an Availability Set
B. Azure App Service with Manual Scaling
,C. Azure Functions with a Consumption Plan
D. Azure Virtual Machine Scale Sets
Correct Answer: D. Azure Virtual Machine Scale Sets
Rationale: Azure Virtual Machine Scale Sets allow you to create and manage a
group of identical, load-balanced VMs. They support autoscaling, which
automatically increases or decreases the number of VM instances based on metrics
like CPU usage, effectively handling unpredictable traffic spikes. Azure App Service
with manual scaling requires administrative intervention. Azure Functions on a
Consumption plan can scale automatically but are serverless and suited for event-
driven workloads, not stateful web applications. Azure VMs in an Availability Set do
not natively support autoscaling.
4. A business wants to ensure that its Azure resources and data are stored in
specific geographical locations to meet data residency requirements. What
Azure concept should be used to achieve this?
A. Azure Policy
B. Azure Regions
C. Resource Groups
D. Azure Active Directory
Correct Answer: B. Azure Regions
Rationale: A region is a set of datacenters deployed within a latency-defined
perimeter and connected through a dedicated regional low-latency network.
Customers choose a region to deploy resources, which determines the primary
, location where their data is stored. Azure Policy is used to enforce organizational
standards and assess compliance at scale, but does not inherently dictate where
resources are deployed. Resource Groups are containers for resources. Azure Active
Directory is Microsoft's cloud-based identity and access management service.
5. A development team needs to share code, track work, and build and deploy
applications in an integrated environment. Which Azure service provides this
complete DevOps solution?
A. Azure DevOps Services
B. GitHub
C. Azure Repos
D. Azure Artifacts
Correct Answer: A. Azure DevOps Services
Rationale: Azure DevOps Services provides a suite of integrated development tools,
including Azure Repos for source control, Azure Boards for work tracking, Azure
Pipelines for CI/CD, Azure Test Plans for testing, and Azure Artifacts for package
management. This makes it a comprehensive, end-to-end DevOps solution. GitHub
is a similar service but is not an Azure service. Azure Repos and Azure Artifacts are
individual components of the broader Azure DevOps offering, not the complete
suite.
6. A company is evaluating Azure services for a new application. They require a
service that provides a dedicated, private network connection to Azure,
