AZ-900: Microsoft Azure Fundamentals – Core Azure Services – Practice Test

Azure Compute Services

1. Question: What is Azure Compute?

   • Answer: Azure Compute provides resources for running applications and services, including virtual machines, containers, and serverless computing.

2. Question: What is Azure Virtual Machines (VMs)?

   • Answer: Virtual Machines are scalable computing resources that run on Azure’s virtualization platform.

3. Question: What is Azure App Service?

   • Answer: Azure App Service is a fully managed platform for building and hosting web apps, APIs, and mobile backends.

4. Question: What is Azure Functions?

   • Answer: Azure Functions is a serverless compute service that runs event-driven code without managing infrastructure.

5. Question: What is Azure Kubernetes Service (AKS)?

   • Answer: AKS is a managed Kubernetes service that simplifies deploying, managing, and scaling containerized applications using Kubernetes.

6. Question: What is Azure Container Instances (ACI)?

   • Answer: ACI provides serverless containers that run without needing to manage the underlying infrastructure.

7. Question: What is Azure Virtual Machine Scale Sets (VMSS)?

   • Answer: VMSS allows you to deploy and manage a set of identical, load-balanced virtual machines.

8. Question: What is Azure Service Fabric?

   • Answer: A distributed systems platform used to build scalable and reliable microservices applications.

9. Question: What is Azure Logic Apps?

   • Answer: A service for automating workflows and integrating apps, data, and services across cloud and on-premises environments.

10. Question: What is Azure Cloud Services?

    • Answer: An older platform-as-a-service (PaaS) offering for deploying cloud applications.

11. Question: What is Azure Batch?

    • Answer: A service that runs large-scale parallel and high-performance computing (HPC) applications.

12. Question: What is Azure Resource Manager (ARM)?

    • Answer: ARM is the management layer that allows users to create, update, and delete Azure resources.

13. Question: What is Azure Service Principal?

    • Answer: A security identity used by applications or services to access Azure resources.

14. Question: What is Azure Web Apps?

    • Answer: A fully managed platform for building and hosting web applications on Azure.

15. Question: What is Azure Functions’ event-driven architecture?

    • Answer: Azure Functions runs code in response to events such as HTTP requests, timer-based triggers, or messages from a queue.

---

Azure Networking

16. Question: What is Azure Virtual Network (VNet)?

    • Answer: A VNet is a private network that allows Azure resources to communicate with each other securely.

17. Question: What is Azure VPN Gateway?

    • Answer: It provides a secure connection between on-premises networks and Azure Virtual Networks.

18. Question: What is Azure ExpressRoute?

    • Answer: A private, dedicated connection between on-premises data centers and Azure datacenters.

19. Question: What is Azure Load Balancer?

    • Answer: A service that distributes incoming traffic across multiple resources to improve availability.

20. Question: What is Azure Application Gateway?

    • Answer: A web traffic load balancer that enables you to manage traffic to your web applications.

21. Question: What is Azure Firewall?

    • Answer: A managed, cloud-based network security service that protects Azure Virtual Network resources.

22. Question: What is the purpose of Azure Network Security Groups (NSGs)?

    • Answer: NSGs control inbound and outbound traffic to Azure resources within a virtual network.

23. Question: What is Azure Traffic Manager?

    • Answer: A traffic routing service that directs user requests to the most appropriate endpoint.

24. Question: What is Azure Bastion?

    • Answer: A fully managed RDP/SSH jump host for securely connecting to Azure Virtual Machines.

25. Question: What is Azure Network Watcher?

    • Answer: A network monitoring, diagnostic, and visualization service for Azure resources.

26. Question: What is Azure ExpressRoute Direct?

    • Answer: It provides high-throughput, low-latency connectivity using dedicated fiber connections.

27. Question: What is the Azure Virtual WAN?

    • Answer: A networking service that provides optimized and automated branch connectivity to Azure.

28. Question: What is the function of Azure Subnet?

    • Answer: It is a range of IP addresses within an Azure Virtual Network used to organize resources.

29. Question: What is the Azure DDoS Protection service?

    • Answer: A service that protects Azure resources from distributed denial-of-service (DDoS) attacks.

30. Question: What is the role of Azure Private Link?

    • Answer: It provides secure private access to Azure services without exposure to the public internet.

---

Azure Storage

31. Question: What is Azure Storage Account?

    • Answer: A storage account provides a unique namespace for storing data in Azure, including blobs, files, and queues.

32. Question: What is Azure Blob Storage?

    • Answer: Blob storage is used to store unstructured data such as text, images, and videos.

33. Question: What is Azure File Storage?

    • Answer: File storage provides shared file systems using the SMB protocol for accessing file data from virtual machines or on-premises systems.

34. Question: What is Azure Disk Storage?

    • Answer: A service for providing persistent block-level storage for Azure Virtual Machines.

35. Question: What is Azure Queue Storage?

    • Answer: A service for storing and managing large numbers of messages to be processed asynchronously.

36. Question: What is the difference between hot and cool blob storage?

    • Answer: Hot storage is for frequently accessed data, while cool storage is for infrequently accessed data with lower costs.

37. Question: What is Azure Archive Storage?

    • Answer: A low-cost storage tier for rarely accessed data, ideal for long-term retention.

38. Question: What is Azure Managed Disks?

    • Answer: A service that provides durable, highly available block-level storage for Azure VMs.

39. Question: What is the use of Azure File Sync?

    • Answer: It synchronizes on-premises file servers with Azure File Storage, enabling hybrid cloud storage solutions.

40. Question: What is the purpose of Azure Blob Storage Lifecycle Management?

    • Answer: It automates the movement of data between storage tiers (Hot, Cool, Archive) based on specified policies.

41. Question: What is Azure Data Lake Storage Gen2?

    • Answer: A high-performance, secure data lake solution built for big data analytics.

42. Question: What is the Azure Data Box?

    • Answer: A physical device for transferring large volumes of data to and from Azure.

43. Question: What is the function of Azure Storage Explorer?

    • Answer: It allows users to manage and access Azure Storage data resources such as blobs, files, and queues.

44. Question: What is Azure Data Share?

    • Answer: A service for sharing data securely between organizations or departments within Azure.

45. Question: What is the purpose of Azure Blob Indexer?

    • Answer: It enables indexing and searching of data stored in Azure Blob Storage.

46. Question: What is Azure Storage Queues used for?

    • Answer: It stores messages that can be processed asynchronously by other applications or services.

47. Question: What is the role of Azure Disk Encryption?

    • Answer: It protects Azure Virtual Machine disks by encrypting them using Azure Key Vault.

48. Question: What is Azure Backup?

    • Answer: A cloud-based backup solution for protecting Azure resources and on-premises systems.

49. Question: What does Azure File Storage support SMB for?

    • Answer: SMB is used to enable file sharing between clients and Azure File Storage.

50. Question: What is Azure Blob Storage’s Archive Tier?

    • Answer: Archive tier is a low-cost, highly durable storage option for data that is rarely accessed.

---

Azure Databases

51. Question: What is Azure SQL Database?

    • Answer: A fully managed relational database service built for the cloud with high availability and scalability.

52. Question: What is Azure Cosmos DB?

    • Answer: A globally distributed NoSQL database service that provides high availability, low latency, and scalability.

53. Question: What is the difference between Azure SQL Database and Azure SQL Managed Instance?

    • Answer: SQL Database is for individual databases, while Managed Instance provides a fully managed SQL Server instance with near 100% compatibility.

54. Question: What is the Azure SQL Database Hyperscale tier?

    • Answer: A high-performance tier designed to scale beyond traditional limits for large and resource-intensive databases.

55. Question: What is the function of Azure Database for MySQL?

    • Answer: It is a fully managed MySQL database service that provides high availability and security.

56. Question: What is the role of Azure Database for PostgreSQL?

    • Answer: A fully managed database service for PostgreSQL that offers built-in high availability and scaling.

57. Question: What is Azure Redis Cache?

    • Answer: A fully managed, in-memory data store that improves application performance by caching frequently accessed data.

58. Question: What is Azure SQL Data Warehouse (Synapse Analytics)?

    • Answer: A fully managed cloud data warehouse solution designed for running complex queries over large datasets.

59. Question: What is the role of Azure Database Migration Service?

    • Answer: It facilitates the migration of databases from on-premises systems or other clouds to Azure.

60. Question: What is Azure Synapse Analytics (formerly Azure SQL Data Warehouse)?

    • Answer: A unified analytics platform that combines big data and data warehousing for analytics workloads.

---

Azure Identity and Access Management

61. Question: What is Azure Active Directory (AD)?

    • Answer: Azure AD is a cloud-based identity and access management service that helps employees sign in and access resources.

62. Question: What is the function of Azure AD Connect?

    • Answer: It synchronizes on-premises Active Directory with Azure Active Directory for hybrid identity solutions.

63. Question: What is the purpose of Azure AD B2B?

    • Answer: Azure AD B2B allows external users to securely access corporate resources using their own credentials.

64. Question: What is Azure AD Join?

    • Answer: It allows devices to be joined to Azure Active Directory for secure access to organizational resources.

65. Question: What is Azure AD B2C?

    • Answer: Azure AD B2C provides identity management for external customers, allowing them to sign in to applications.

66. Question: What is Azure Multi-Factor Authentication (MFA)?

    • Answer: MFA is a security feature that requires users to provide two or more verification methods to authenticate.

67. Question: What is the role of Azure AD Premium P1?

    • Answer: It provides enhanced identity management capabilities, such as self-service password reset and conditional access.

68. Question: What is the function of Azure AD Identity Protection?

    • Answer: It detects and responds to potential threats to user identities in real time.

69. Question: What is the Azure AD Premium P2 plan?

    • Answer: It provides advanced features like identity governance and privileged identity management.

70. Question: What is Azure AD Access Reviews used for?

    • Answer: It allows organizations to review and manage user access permissions regularly.

71. Question: What is the purpose of Azure AD Self-Service Password Reset?

    • Answer: It allows users to reset their passwords without administrator assistance.

72. Question: What is Azure AD Privileged Identity Management (PIM)?

    • Answer: PIM provides just-in-time privileged access and oversight of Azure AD resources to reduce the risk of over-privileged users.

73. Question: What is the Azure AD Conditional Access policy?

    • Answer: It defines access rules based on user location, device, and risk level to protect organizational resources.

74. Question: What is the role of Azure AD Access Control?

    • Answer: Azure AD Access Control determines who has access to what resources within an organization.

75. Question: What is Azure AD Domain Services (Azure AD DS)?

    • Answer: A managed domain service that supports domain join, LDAP, and group policy without the need for on-premises Active Directory.

---

Additional Questions and Answers

76. Question: What is Azure AD Conditional Access?

    • Answer: Conditional Access allows administrators to enforce access control policies based on user conditions.

77. Question: What is Azure AD Identity Governance?

    • Answer: It provides capabilities to manage the lifecycle of identities and access to resources.

78. Question: What is Azure AD’s User Risk Policy?

    • Answer: It helps identify and mitigate risky user behaviors by enforcing security policies based on risk.

79. Question: What is the purpose of Azure AD Conditional Access policies?

    • Answer: Conditional Access policies grant or block access to resources based on factors like user risk, location, and device state.

80. Question: What does the Azure AD role “Global Administrator” provide?

    • Answer: A global administrator has full access to all Azure AD resources and can manage directory-level settings.

81. Question: What is Azure AD Privileged Identity Management (PIM)?

• Answer: PIM allows just-in-time privileged access and oversight for managing roles in Azure AD and Azure resources.

82. Question: What is the purpose of Azure AD Self-Service Group Management?

• Answer: It allows users to create and manage their own groups in Azure AD without needing administrative assistance.

83. Question: What does Azure AD Access Reviews do?

• Answer: It allows organizations to regularly review and manage user access to applications and resources.

84. Question: What is Azure AD’s Identity Protection used for?

• Answer: It provides risk-based conditional access to protect user identities by detecting threats and automating responses.

85. Question: What is Azure AD Conditional Access policy’s “Sign-in risk”?

• Answer: It assesses the risk of a sign-in event based on factors like location, device, and authentication strength.

86. Question: What is the Azure AD Access Panel?

• Answer: A web-based portal where users can access their cloud-based applications.

87. Question: What is Azure AD Password Protection?

• Answer: It prevents the use of weak or compromised passwords in Azure AD.

88. Question: What are the different roles in Azure Active Directory?

• Answer: Roles include Global Administrator, User Administrator, and Security Administrator, each with specific permissions.

89. Question: What is the role of Azure AD External Identities?

• Answer: It enables organizations to manage access for external users and third-party collaborators securely.

90. Question: What is Azure AD Seamless Single Sign-On (SSO)?

• Answer: SSO allows users to access cloud apps without having to re-enter their credentials after logging in.

Azure Security and Compliance

91. Question: What is Azure Security Center?

• Answer: A unified security management system that provides advanced threat protection across Azure services.

92. Question: What is Azure Key Vault?

• Answer: It is a cloud service for securely storing and managing sensitive information such as API keys, passwords, and certificates.

93. Question: What is Azure Sentinel?

• Answer: A cloud-native Security Information and Event Management (SIEM) solution that helps detect and respond to security threats.

94. Question: What does Azure DDoS Protection provide?

• Answer: It safeguards Azure resources from Distributed Denial of Service (DDoS) attacks.

95. Question: What is Azure Security Posture Management?

• Answer: It provides tools to evaluate and improve the security posture of Azure resources through continuous monitoring.

96. Question: What is the purpose of Azure Firewall?

• Answer: It provides network security to control inbound and outbound traffic to and from Azure Virtual Networks.

97. Question: What is Azure Network Watcher?

• Answer: A network diagnostic and monitoring tool for troubleshooting and visualizing network traffic and health.

98. Question: What is Azure Compliance Manager?

• Answer: It is a governance tool that helps organizations manage their compliance with regulatory standards in Azure.

99. Question: What is Azure Information Protection?

• Answer: A cloud-based solution that helps protect and classify documents and emails by applying labels.

100. Question: What is Azure Advanced Threat Protection (ATP)?

• Answer: It is a security solution that helps detect, investigate, and respond to advanced cyber threats in your network.

---

Azure Cost Management and Billing

101. Question: What is Azure Cost Management?

• Answer: A suite of tools for managing and optimizing Azure spending, including budgeting, cost analysis, and recommendations.

102. Question: What is Azure Pricing Calculator used for?

• Answer: It helps estimate the cost of using Azure services based on your usage.

103. Question: What is Azure Reserved Instances?

• Answer: A pricing model where you reserve resources like Virtual Machines for one or three years to save on costs.

104. Question: What is the Azure Cost Analysis tool?

• Answer: It helps track and analyze the costs of resources in Azure, providing detailed breakdowns and insights.

105. Question: What is the purpose of Azure Advisor?

• Answer: It is a personalized cloud consultant that helps follow best practices to optimize Azure resources for performance, security, and cost.

106. Question: What is Azure Budgets used for?

• Answer: It allows you to set budgets for your Azure subscriptions and receive alerts when costs approach the budgeted amount.

107. Question: What is Azure Consumption Insights?

• Answer: A tool that provides detailed insights and recommendations for reducing resource consumption and costs in Azure.

108. Question: What does the Azure Billing API do?

• Answer: It allows organizations to integrate Azure billing data into their custom applications or systems for analysis and reporting.

109. Question: What is the purpose of the Azure Cost Management + Billing dashboard?

• Answer: It provides a centralized view of your Azure subscription’s billing and cost management data.

110. Question: What is Azure Hybrid Benefit?

• Answer: It allows organizations to use existing on-premises licenses (e.g., Windows Server or SQL Server) to reduce costs on Azure VMs.

---

Azure Solutions and Architecture

111. Question: What is an Azure Resource Group?

• Answer: A resource group is a container that holds related resources for an Azure solution.

112. Question: What is Azure Resource Manager (ARM)?

• Answer: ARM provides a management framework for creating, deploying, and managing resources in Azure.

113. Question: What is Azure Availability Zones?

• Answer: Availability Zones are physically separated locations within an Azure region that provide high availability and fault tolerance.

114. Question: What is the role of Azure Load Balancer?

• Answer: It distributes incoming traffic across multiple resources to ensure high availability and scalability.

115. Question: What is an Azure Virtual Network?

• Answer: It is a logically isolated network within Azure where resources can securely communicate with each other.

116. Question: What is the purpose of Azure Key Vault?

• Answer: It stores and manages sensitive information, such as secrets, certificates, and encryption keys, for Azure applications.

117. Question: What are Azure Availability Sets?

• Answer: Availability sets ensure that VMs are distributed across physical servers to protect against localized hardware failures.

118. Question: What is Azure Site Recovery?

• Answer: It helps organizations replicate on-premises workloads to Azure for disaster recovery.

119. Question: What is Azure DevOps used for?

• Answer: It is a set of development tools and services for automating and managing the software development lifecycle.

120. Question: What is Azure Automation?

• Answer: A service that provides automation of management tasks such as provisioning and configuration management.

---

Azure Governance and Compliance

121. Question: What is Azure Policy?

• Answer: Azure Policy helps enforce compliance with corporate standards and service-level agreements (SLAs) across resources.

122. Question: What is Azure Blueprints?

• Answer: A service that allows you to define, deploy, and monitor a set of policies, resource templates, and security standards across your organization.

123. Question: What is the purpose of Azure Resource Locking?

• Answer: It helps prevent accidental deletion or modification of Azure resources by applying a lock.

124. Question: What is the Azure Compliance Manager?

• Answer: It is a governance tool that helps ensure compliance with standards and regulations across your Azure resources.

125. Question: What is the Azure Management Group?

• Answer: A management group allows you to manage access, policies, and compliance across multiple Azure subscriptions.

126. Question: What is Azure Resource Graph?

• Answer: It enables you to explore and query Azure resources for insights into large-scale resource deployments.

127. Question: What is the role of Azure Activity Log?

• Answer: It provides a record of all activities performed on Azure resources to support auditing and troubleshooting.

128. Question: What is the purpose of Azure Monitor?

• Answer: Azure Monitor collects, analyzes, and acts on telemetry data to improve performance and availability of Azure resources.

129. Question: What is the Azure Service Health Dashboard?

• Answer: It provides a personalized view of Azure service issues and health, including planned maintenance and incidents.

130. Question: What is Azure Resource Manager Template?

• Answer: A declarative JSON-based template that defines the infrastructure and configuration of Azure resources.

---

Additional Azure Services

131. Question: What is Azure IoT Hub?

• Answer: A platform for connecting, monitoring, and managing Internet of Things (IoT) devices.

132. Question: What is Azure Event Grid?

• Answer: A fully managed event routing service that allows for the integration of event-based applications.

133. Question: What is Azure Logic Apps used for?

• Answer: It automates workflows and integrates services between cloud and on-premises applications.

134. Question: What is the purpose of Azure Cognitive Services?

• Answer: It provides a set of APIs for adding intelligent features like computer vision, speech recognition, and language processing to applications.

135. Question: What is Azure Databricks?

• Answer: An Apache Spark-based analytics platform optimized for Microsoft Azure that simplifies big data and AI workloads.

136. Question: What is Azure Synapse Analytics?

• Answer: A unified analytics platform that integrates big data and data warehousing for analytics workloads.

137. Question: What is Azure Machine Learning?

• Answer: A cloud-based service that provides tools to build, train, and deploy machine learning models.

138. Question: What is Azure Media Services?

• Answer: A platform for streaming and managing video content, including live video, on-demand streaming, and transcoding.

139. Question: What is Azure Blockchain Service?

• Answer: A fully managed blockchain service that simplifies the development, governance, and management of consortium blockchain networks.

140. Question: What is Azure Virtual Desktop?

• Answer: A virtual desktop infrastructure (VDI) service that allows users to access a fully virtualized Windows desktop from any device.