AZ-900 Microsoft Azure Certification 2 — Questions and Answers

Question 1: What is the AZ-900 exam primarily designed to test?

Foundational knowledge of cloud concepts and Azure services without requiring technical experience (Correct answer)
Advanced skills in designing Azure solutions and architectures
Expertise in implementing Azure security and compliance solutions
Proficiency in developing cloud-native applications on Azure

Correct answer: Foundational knowledge of cloud concepts and Azure services without requiring technical experience

AZ-900 (Microsoft Azure Fundamentals) is an entry-level exam that validates foundational knowledge of cloud concepts and Azure services. It is intended for non-technical business roles and those beginning their Azure journey.

The AZ-900 Microsoft Azure Fundamentals exam is designed for candidates who want to demonstrate foundational-level knowledge of cloud services and how those services are provided with Azure. It covers cloud concepts, Azure core services, Azure pricing, SLA, and lifecycle. Unlike AZ-104 (Administrator), AZ-204 (Developer), or AZ-500 (Security), AZ-900 requires no prerequisite technical experience and serves as an ideal starting point for anyone exploring cloud computing or Azure.

Question 2: Which of the following is an example of a Platform as a Service (PaaS) offering in Azure?

Azure App Service (Correct answer)
Azure Virtual Machines
Microsoft 365
Azure Dedicated Host

Correct answer: Azure App Service

Azure App Service is a PaaS offering — you deploy and run web applications without managing the underlying infrastructure (OS, runtime patching). Microsoft handles the platform.

Platform as a Service (PaaS) provides a managed platform for developing, running, and managing applications without the complexity of managing infrastructure. Azure App Service is a prime PaaS example — you deploy your code and Azure handles the OS, patching, scaling, and availability. Azure Virtual Machines is IaaS (you manage the OS). Microsoft 365 is SaaS (fully managed software). Azure Dedicated Host provides physical server isolation and is also an IaaS construct.

Question 3: What concept describes distributing workloads and data across multiple Azure regions to protect against regional outages?

Geo-redundancy (Correct answer)
High availability
Fault tolerance
Scalability

Correct answer: Geo-redundancy

Geo-redundancy involves replicating data or deploying services across multiple geographically separated Azure regions, ensuring continuity if an entire region experiences an outage.

Geo-redundancy (or geographic redundancy) means distributing data, applications, or services across multiple Azure regions. Examples include Geo-Redundant Storage (GRS) which replicates data to a paired region hundreds of miles away, and Active Geo-Replication for Azure SQL Database. High availability refers to keeping services running with minimal downtime (often within a single region). Fault tolerance is the ability to continue operating despite component failures. Scalability is the ability to handle increased load.

Question 4: Which Azure cost management feature allows you to set spending limits and receive alerts when costs approach or exceed a defined threshold?

Azure Budgets (Correct answer)
Azure Reservations
Azure Spending Caps
Azure Cost Policies

Correct answer: Azure Budgets

Azure Budgets allow you to set cost or usage thresholds and configure alert notifications when spending reaches defined percentages of the budget.

Azure Budgets (within Azure Cost Management) let you set financial boundaries and alert thresholds. You can create budgets at the scope of a subscription, resource group, or management group, and define monthly, quarterly, or annual amounts. Alert notifications can be sent when actual spending or forecasted spending reaches configured percentages (e.g., 80%, 100%). Azure Reservations are commitments for 1 or 3 years that provide discounts, not alerts. Spending Caps and Cost Policies are not standard Azure features.

Question 5: In Azure, what is the role of Role-Based Access Control (RBAC)?

To grant users only the permissions they need to perform their job roles, minimizing the risk of unauthorized access (Correct answer)
To enforce network traffic rules between Azure subnets
To automatically classify and protect sensitive data in Azure storage
To rotate cryptographic keys on a scheduled basis

Correct answer: To grant users only the permissions they need to perform their job roles, minimizing the risk of unauthorized access

RBAC allows you to assign specific permissions to users, groups, or service principals based on their role, following the principle of least privilege to minimize security risk.

Azure Role-Based Access Control (RBAC) is an authorization system built on Azure Resource Manager that provides fine-grained access management. You assign built-in roles (like Owner, Contributor, Reader) or custom roles to security principals (users, groups, managed identities) at specific scopes (management group, subscription, resource group, or resource). This enforces the principle of least privilege — users get only the minimum permissions needed. Network Security Groups handle subnet traffic rules, Microsoft Purview handles data classification, and Azure Key Vault handles key rotation.

Question 6: What Azure feature provides a hierarchical structure to organize multiple Azure subscriptions under a single management boundary?

Management Groups (Correct answer)
Resource Groups
Azure Tenants
Subscription Enrollments

Correct answer: Management Groups

Management Groups allow you to organize multiple Azure subscriptions into a hierarchy, enabling you to apply governance policies, RBAC, and budgets across all subscriptions in the group.

Azure Management Groups sit above subscriptions in the Azure governance hierarchy: Management Groups, then Subscriptions, then Resource Groups, then Resources. You can nest management groups up to six levels deep. Policies and RBAC assignments applied to a management group are inherited by all subscriptions and resources within it. This is essential for large enterprises with multiple subscriptions that need consistent governance. The root management group spans the entire Azure Active Directory tenant. Resource Groups organize resources within a single subscription, not across multiple subscriptions.

AZ-900 Microsoft Azure Certification 2

What is the AZ-900 exam primarily designed to test?