AZ-300 Cheat Sheet 2026
The 30 highest-yield AZ-300 facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.
50 questions
180 min time limit
70.00% to pass
- Which Azure load balancing option provides health probing and distributes traffic at Layer 4 within a region with support for HA Ports? → Azure Standard Load Balancer
- Which Azure Storage feature enables storing multiple versions of a blob, protecting against accidental overwrites? → Blob Versioning
- Which VM extension is used to automatically join an Azure VM to an Active Directory domain at provisioning time? → JsonADDomainExtension
- Which Azure Traffic Manager routing method directs users to the endpoint with the lowest latency? → Performance
- Which Azure routing feature allows you to override default system routes and direct traffic through a network virtual appliance (NVA)? → User-Defined Routes (UDR)
- Which App Service plan tier is required to use VNet Integration for outbound traffic from an Azure Web App? → Standard or higher
- An organization requires RPO of 15 minutes for an Azure SQL Database. Which replication feature meets this requirement? → Active geo-replication with continuous asynchronous replication
- Which Azure feature prevents accidental deletion or modification of critical resources by applying a lock? → Resource Locks (CanNotDelete / ReadOnly)
- Which Azure Monitor feature allows you to define an alert when a metric crosses a threshold, such as CPU > 90% for 5 minutes? → Metric Alerts
- What is the purpose of a Network Security Group (NSG) in Azure? → Filters inbound and outbound traffic with allow/deny rules based on 5-tuple
- Which Azure App Service feature enables automatic scaling of app instances based on HTTP request queue length or CPU percentage? → Autoscale
- Which Azure container service provides a fully managed Kubernetes environment without requiring cluster infrastructure management? → Azure Kubernetes Service (AKS)
- Which Azure service provides application performance monitoring (APM) with distributed tracing, dependency mapping, and availability testing? → Application Insights
- What does enabling 'secure transfer required' on an Azure Storage account enforce? → All connections to the storage account must use HTTPS or SMB with encryption
- In the e-commerce web app, you must access user claims. What should you start with? → Make a Microsoft Graph API call from the ecommerce web app using custom code.
- Which Azure Storage redundancy option replicates data synchronously across three availability zones within the same region? → ZRS
- Which feature of Azure Virtual WAN simplifies hub-and-spoke networking at global scale? → Managed virtual hubs with automated routing
- Which Azure feature allows you to enforce that all subscriptions in a management group comply with organizational policies and RBAC assignments by default? → Azure Blueprints
- What is the benefit of enabling 'Accelerated Networking' on an Azure VM? → Bypasses the host vSwitch for lower latency and higher throughput
- What is the purpose of AKS 'node pools' with different VM sizes? → Allow different workloads to run on hardware optimized for their requirements
- Which Azure Container Registry feature replicates images to multiple Azure regions for low-latency pulls by geographically distributed clusters? → Geo-Replication
- Which Azure networking service performs DNS-based global traffic distribution and supports geographic, weighted, and priority routing methods? → Azure Traffic Manager
- Which Azure SQL Database feature enables automatic failover to a secondary database in a different region with minimal data loss? → Active geo-replication
- What is the maximum number of data disks that can be attached to a Standard_D8s_v3 VM? → 32
- Which Azure governance service allows you to deploy a consistent set of Azure resources, policies, and RBAC assignments across multiple subscriptions? → Azure Blueprints
- What is the maximum size of a single Azure Queue Storage message? → 64 KB
- What Azure feature enables you to reserve compute capacity for VMs in a specific region, guaranteeing availability even during capacity constraints? → Capacity Reservations
- An enterprise requires that Azure VM backups be retained for 5 years to meet compliance requirements. Which Azure Backup feature supports this? → Azure Backup long-term retention using the Archive tier in a Recovery Services vault
- What is the purpose of Azure Private DNS Zones? → Resolve custom domain names privately within VNets without exposing DNS to the internet
- A web application must remain available even if an entire Azure datacenter fails. Which redundancy option should be used? → Deploy VMs across Availability Zones in the same region
Turn these facts into recall: