AZ-900 Cheat Sheet 2026

The 30 highest-yield AZ-900 facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. Which expense type are operating costs in a pay-as-you-go cloud model classified as? → Operational expenditure (OpEx)
2. In the defense in depth model, which layer focuses on controlling access to applications and data through identity? → Identity and access layer
3. Which two tasks can be completed through the Azure portal's graphical user interface (GUI)? Each accurate response offers an entire resolution. → Create new resources.
4. What is the term for Microsoft's identity and access management cloud service formerly called Azure Active Directory? → Microsoft Entra ID
5. What managed service provides stateful firewall protection for Azure virtual networks? → Azure Firewall
6. What is the purpose of resource tags in Azure? → To organize and categorize resources for billing and management
7. Which Azure service is best for storing large amounts of unstructured data like images and backups? → Azure Blob Storage
8. Which Azure resource is the smallest deployable unit of compute that you create and manage? → A resource
9. Which Azure management tool is best for automating repetitive tasks using a cross-platform command-line interface that runs on Windows, macOS, and Linux? → Azure CLI
10. In a SaaS model, who is responsible for managing the application software? → The cloud provider
11. Which Azure tool is commonly used to move large amounts of on-premises data into Azure Storage by shipping a physical device? → Azure Data Box
12. Choose the response that fully completes the statement. The Azure deployment and management service is _____________ . → Azure Resource Manager (ARM)
13. Choose the response that fully completes the statement. ____________ refers to expanding an application's capacity by adding extra virtual machines → horizontal scaling
14. Which Azure feature allows you to preview your estimated Azure bill before it is due, based on current resource usage? → Azure Cost Analysis with forecasted costs
15. What is the primary purpose of Azure Resource Manager (ARM)? → To serve as the deployment and management layer for all Azure resources
16. Which Azure scope is used to organize multiple subscriptions together? → Management group
17. Which Azure service provides protection against distributed denial-of-service attacks? → Azure DDoS Protection
18. What happens to your data redundancy if you choose LRS and the entire data center fails? → Data may be lost since copies are in one location
19. Which Azure service enables you to run big data analytics workloads using open-source frameworks like Apache Spark, Hadoop, and Hive? → Azure HDInsight
20. What can you use to link an Azure virtual network to an Azure resource, such as an Azure SQL database? → service endpoints
21. What is the primary benefit of cloud elasticity? → Automatically scaling resources to match demand
22. What Azure feature allows you to estimate the cost of Azure services before deploying them? → Azure Pricing Calculator
23. What is a key characteristic of premium performance tiers in Azure Storage? → They use solid-state drives for low latency
24. Which cloud service model gives you the most control over the underlying infrastructure, including the operating system and installed software? → Infrastructure as a Service (IaaS)
25. What is the main function of an Azure virtual network (VNet)? → Enabling secure communication between Azure resources
26. Which characteristic describes the cloud's ability to recover from disruptive events? → Disaster recovery
27. Which Azure service helps protect privileged accounts by providing just-in-time access? → Privileged Identity Management (PIM)
28. A company wants automatic scaling and reduced management for its container-based microservices. Which service is most suitable? → Azure Kubernetes Service
29. What Azure governance tool allows you to enforce organizational standards and compliance requirements across Azure resources at scale? → Azure Policy
30. Which deployment model is owned and used exclusively by a single organization? → Private cloud