AZ-900 - Microsoft Azure Fundamentals Azure Core Architectural Components Questions and Answers 1 — Questions and Answers
Question 1: A company is planning to deploy a critical application on Azure Virtual Machines. They need to ensure the application remains available even if a single datacenter in an Azure region fails. Which Azure concept should they use to achieve this level of resilience?
- Resource Groups
- Availability Zones (Correct answer)
- Azure Geographies
- Region Pairs
Correct answer: Availability Zones
Availability Zones are physically separate locations within an Azure region, each with its own power, cooling, and networking. Deploying virtual machines across multiple Availability Zones ensures that if one zone experiences an outage (equivalent to a datacenter failure), the VMs in the other zones remain operational, providing high availability for the application.
Question 2: Which of the following is the primary function of an Azure Resource Group?
- To provide a service level agreement (SLA) for a collection of resources.
- To act as a container for applying governance policies across multiple subscriptions.
- To function as a logical container for grouping and managing related Azure resources that share a common lifecycle. (Correct answer)
- To physically isolate resources in different datacenters for high availability.
Correct answer: To function as a logical container for grouping and managing related Azure resources that share a common lifecycle.
An Azure Resource Group is a fundamental organizational unit that acts as a logical container to hold related resources for an Azure solution. This grouping allows for collective management, including deployment, updating, and deletion of all resources as a single unit, which is ideal for resources that share the same lifecycle.
Question 3: A large enterprise has numerous Azure subscriptions for different departments (e.g., HR, Finance, IT). The central IT team needs to apply a consistent set of security policies and access controls across all these subscriptions efficiently. What is the most appropriate Azure feature to use for this purpose?
- Azure Policy applied to each subscription individually
- Resource Groups
- Management Groups (Correct answer)
- Azure Advisor
Correct answer: Management Groups
Management Groups are designed for this exact scenario. They sit above subscriptions in the Azure hierarchy and allow organizations to apply governance controls, such as policies and role-based access control (RBAC), across multiple subscriptions at scale. This avoids the repetitive and error-prone task of configuring each subscription individually.
Question 4: An organization is deploying resources to an Azure region and must comply with data sovereignty laws that require customer data to remain within a specific geopolitical boundary. Which Azure architectural component defines these boundaries and ensures data residency?
- Availability Zone
- Resource Group
- Subscription
- Geography (Correct answer)
Correct answer: Geography
An Azure Geography is a defined area of the world, often aligned with geopolitical boundaries, that contains one or more Azure regions. Geographies are designed to meet data residency, sovereignty, and compliance requirements, ensuring that data stored in a region within that geography stays there.
Question 5: Which of the following is a key capability of the Azure Resource Manager (ARM)?
- Providing recommendations to optimize resource costs and performance.
- Directly managing user identities and authentication.
- Offering a consistent management layer that processes all requests for Azure resources, whether from the portal, CLI, or SDKs. (Correct answer)
- Automatically replicating data between paired regions for disaster recovery.
Correct answer: Offering a consistent management layer that processes all requests for Azure resources, whether from the portal, CLI, or SDKs.
Azure Resource Manager (ARM) is the central deployment and management service for Azure. It provides a consistent management layer, processing all requests through a single API, regardless of the tool used (Azure Portal, PowerShell, CLI, etc.). This ensures consistent application of policies, locks, and access controls.
Question 6: A developer needs to deploy a three-tier application consisting of a web server, an application server, and a database. The resources for this application should be managed as a single unit. When the project is over, all associated resources must be deleted simultaneously. How should the developer organize these resources in Azure?
- Place each resource in a separate subscription.
- Deploy all resources into a single Availability Zone.
- Group all the resources together in a single Resource Group. (Correct answer)
- Assign a unique Management Group to the application.
Correct answer: Group all the resources together in a single Resource Group.
A Resource Group is the ideal way to organize resources that belong to a single solution and share the same lifecycle. By placing the web server, application server, and database into one resource group, they can be deployed, managed, and, importantly, deleted together as a single unit. Deleting the resource group will delete all the resources contained within it.
AZ-900 - Microsoft Azure Fundamentals Azure Core Architectural Components Questions and Answers 1
A company is planning to deploy a critical application on Azure Virtual Machines.
They need to ensure the application remains available even if a single datacenter in an Azure region fails.
Which Azure concept should they use to achieve this level of resilience?