Microsoft Azure Fundamentals (AZ-900) Exam Prep: Azure compute, networking and storage

1. Question 1 of 20

   With Azure Virtual Machines, who installs updates and patches inside the VM's operating system?

   • AThe company's internet service provider
   • BNobody, because Azure VMs never need patches
   • CMicrosoft, because a VM is a SaaS product
   • DYou, the customer
   Show answer

   Answer: D. You, the customer

   Azure VMs are IaaS. You control the operating system and still manage patching, updates and configuration inside the VM.

2. Question 2 of 20

   Which Azure service creates and manages a group of identical, load-balanced VMs that can scale automatically?

   • AVirtual Machine Scale Sets
   • BAzure Container Instances
   • CAzure Virtual Desktop
   • DAvailability sets
   Show answer

   Answer: A. Virtual Machine Scale Sets

   Virtual Machine Scale Sets manage groups of identical, load-balanced VMs and can scale out or in based on demand or a schedule.

3. Question 3 of 20

   In a VM availability set, what is a fault domain?

   • AVMs that share a power or network failure point
   • BA region that is paired with another region in the same geography
   • CA subnet that blocks incoming traffic from the internet
   • DA group of VMs that can be rebooted together during planned maintenance
   Show answer

   Answer: A. VMs that share a power or network failure point

   A fault domain groups VMs that share a potential power or network failure point. An update domain groups VMs that can be rebooted together during maintenance.

4. Question 4 of 20

   A company wants staff to use Windows desktops and apps that run in Azure, so company data stays off their own devices. Which service fits?

   • AAzure Virtual Desktop
   • BAzure Data Box
   • CAzure DNS
   • DAzure Queue Storage
   Show answer

   Answer: A. Azure Virtual Desktop

   Azure Virtual Desktop keeps desktops and apps in Azure, which helps reduce data exposure on local devices.

5. Question 5 of 20

   Which Azure service orchestrates and manages the life cycle of a large fleet of containers?

   • AAzure Storage Explorer
   • BAzure Kubernetes Service (AKS)
   • CAzure Functions
   • DAzure Container Instances
   Show answer

   Answer: B. Azure Kubernetes Service (AKS)

   AKS is a container orchestration service. Azure Container Instances is the simplest way to run a single container without managing VMs.

6. Question 6 of 20

   Which service hosts web apps, REST APIs and mobile back ends without you managing the infrastructure?

   • AAzure ExpressRoute
   • BAzure App Service
   • CAzure File Sync
   • DAzure Virtual Machines
   Show answer

   Answer: B. Azure App Service

   App Service lets you build and host web apps, background jobs, mobile back ends and REST APIs without managing infrastructure, with automatic scaling and high availability.

7. Question 7 of 20

   In an Azure virtual network, what are subnets used for?

   • AEncrypting all of the data written to managed VM disks
   • BSplitting the IP address space into smaller parts
   • CRegistering new domain names for websites
   • DStoring large files such as video and backups
   Show answer

   Answer: B. Splitting the IP address space into smaller parts

   You define a private IP address space for a virtual network and divide it into subnets.

8. Question 8 of 20

   How does traffic travel between two peered Azure virtual networks?

   • AThrough each user's home internet router
   • BOn a physical Data Box device shipped by courier
   • CPrivately, on the Microsoft backbone network
   • DOver the public internet through a VPN gateway
   Show answer

   Answer: C. Privately, on the Microsoft backbone network

   Traffic between peered virtual networks is private and travels on the Microsoft backbone network, never entering the public internet.

9. Question 9 of 20

   One remote employee needs an encrypted connection from a laptop to an Azure virtual network. Which connection type fits?

   • AVirtual network peering
   • BPoint-to-site VPN
   • CSite-to-site VPN
   • DExpressRoute Global Reach
   Show answer

   Answer: B. Point-to-site VPN

   A point-to-site connection links an individual device to a virtual network. Site-to-site links a whole on-premises datacentre.

10. Question 10 of 20

    What makes Azure ExpressRoute different from a site-to-site VPN?

    • AIt connects only one laptop at a time to Azure
    • BIt encrypts traffic that travels across the public internet
    • CIt is a private connection that skips the public internet
    • DIt is the service used to register new domain names
    Show answer

    Answer: C. It is a private connection that skips the public internet

    ExpressRoute uses a private connection through a connectivity provider and doesn't go over the public internet. A VPN sends encrypted traffic over the internet.

11. Question 11 of 20

    A company wants to buy a brand-new domain name for its website. Can it do this with Azure DNS?

    • ANo, because Azure DNS works only in private networks
    • BNo; buy it from a registrar, then host it in Azure DNS
    • CYes, but only names that end in .azure
    • DYes, Azure DNS sells every type of domain name
    Show answer

    Answer: B. No; buy it from a registrar, then host it in Azure DNS

    You can't use Azure DNS to buy a domain name. You buy it through App Service domains or a third-party registrar, then host its records in Azure DNS.

12. Question 12 of 20

    What is a private endpoint?

    • AA password that only one administrator knows
    • BA storage tier for data that is rarely read
    • CAn endpoint with a private IP address in a virtual network
    • DAn endpoint with a public IP address that anyone can reach
    Show answer

    Answer: C. An endpoint with a private IP address in a virtual network

    Private endpoints exist within a virtual network and use a private IP address from that network's address space. Public endpoints have a public IP address.

13. Question 13 of 20

    Which Azure Storage service is best for large amounts of unstructured data, such as images and video files?

    • ADisk Storage
    • BTable Storage
    • CBlob Storage
    • DQueue Storage
    Show answer

    Answer: C. Blob Storage

    Blob Storage is object storage for large volumes of unstructured text or binary data, such as images, video and backups.

14. Question 14 of 20

    Which storage account type does Microsoft recommend for most scenarios?

    • APremium file shares
    • BPremium block blobs
    • CStandard general-purpose v2
    • DPremium page blobs
    Show answer

    Answer: C. Standard general-purpose v2

    Standard general-purpose v2 supports blobs, files, queues and tables and is recommended for most Azure Storage scenarios.

15. Question 15 of 20

    Which blob access tier fits data that is rarely read, kept at least 180 days, and can wait a long time to be read?

    • ACold
    • BCool
    • CHot
    • DArchive
    Show answer

    Answer: D. Archive

    Archive is for rarely accessed data kept at least 180 days with flexible latency. It has the lowest storage cost but the highest cost and delay to read.

16. Question 16 of 20

    Which redundancy option keeps three copies of your data across three availability zones in the primary region only?

    • AGeo-redundant storage (GRS)
    • BLocally redundant storage (LRS)
    • CGeo-zone-redundant storage (GZRS)
    • DZone-redundant storage (ZRS)
    Show answer

    Answer: D. Zone-redundant storage (ZRS)

    ZRS copies data across three availability zones in the primary region. LRS keeps three copies in one datacentre, and GRS and GZRS also copy to a secondary region.

17. Question 17 of 20

    Your app must read data from the secondary region even before a failover happens. Which option should you choose?

    • AZone-redundant storage (ZRS)
    • BGeo-redundant storage (GRS) without read access
    • CLocally redundant storage (LRS)
    • DRead-access geo-redundant storage (RA-GRS)
    Show answer

    Answer: D. Read-access geo-redundant storage (RA-GRS)

    By default, secondary-region data can't be read until a failover. RA-GRS and RA-GZRS let you read it before failover.

18. Question 18 of 20

    A branch office wants its Windows file server kept in sync with Azure Files in both directions, with only frequently used files stored locally. Which tool fits?

    • AAzure File Sync
    • BAzure Data Box
    • CAzCopy
    • DAzure Storage Explorer
    Show answer

    Answer: A. Azure File Sync

    Azure File Sync keeps a Windows server and Azure Files in sync in both directions, and cloud tiering keeps frequently used files local. AzCopy syncs in one direction only.

19. Question 19 of 20

    A company must move 70 TB of data to Azure, but its internet connection is slow. Which option fits best?

    • AAzure Storage Explorer
    • BAzure Virtual Desktop
    • CAzure Data Box
    • DAzCopy over the slow connection
    Show answer

    Answer: C. Azure Data Box

    Azure Data Box is a rugged physical device with up to 80 TB of usable storage, made for moving very large data sets when network bandwidth is limited.

20. Question 20 of 20

    Which Azure service is a hub for discovering, assessing and migrating on-premises servers, databases and web apps to Azure?

    • AAzure Advisor
    • BAzure Migrate
    • CAzure Arc
    • DAzure Data Box
    Show answer

    Answer: B. Azure Migrate

    Azure Migrate is a single place to start, run and track a migration, with tools for discovery and assessment, server migration, database migration and web app migration.

Keyboard: 1–4 to answer, Enter for the next question.

The real test: 700 or greater (scale of 1 to 1,000)