AZ-900 Azure Compute and Networking 2 — Questions and Answers
Question 1: Which Azure compute option lets you run code without managing any underlying infrastructure, billed only for execution time?
- Azure Functions (Correct answer)
- Azure Virtual Machines
- Azure Batch
- Azure Dedicated Host
Correct answer: Azure Functions
Azure Functions is a serverless service that runs event-driven code and bills based on executions and resource consumption.
Question 2: What is the primary benefit of an Azure Virtual Machine Scale Set?
- Automatically scaling identical VMs in or out based on demand (Correct answer)
- Providing free static IP addresses
- Encrypting all network traffic by default
- Replacing the need for a virtual network
Correct answer: Automatically scaling identical VMs in or out based on demand
VM Scale Sets let you deploy and manage a group of load-balanced, identical VMs that automatically scale with demand.
Question 3: Which service provides a fully managed Kubernetes container orchestration platform in Azure?
- Azure Kubernetes Service (AKS) (Correct answer)
- Azure Container Registry
- Azure App Service
- Azure Logic Apps
Correct answer: Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS) is a managed service that simplifies deploying and operating Kubernetes clusters.
Question 4: A company wants to host a web app without managing servers or operating systems. Which service is most appropriate?
- Azure App Service (Correct answer)
- Azure Virtual Machines
- Azure Dedicated Host
- Azure Blob Storage
Correct answer: Azure App Service
Azure App Service is a platform-as-a-service offering for hosting web apps without managing the underlying OS or servers.
Question 5: What does an Azure availability zone protect an application against?
- Failure of a single datacenter within a region (Correct answer)
- Failure of an entire Azure region
- Loss of internet connectivity globally
- Accidental deletion of resources
Correct answer: Failure of a single datacenter within a region
Availability zones are physically separate datacenters within a region, protecting against datacenter-level failures.
Question 6: Which Azure networking resource securely connects an on-premises network to Azure over a private, dedicated connection bypassing the public internet?
- Azure ExpressRoute (Correct answer)
- Azure VPN Gateway
- Azure Load Balancer
- Azure DNS
Correct answer: Azure ExpressRoute
ExpressRoute establishes a private, dedicated connection to Azure that does not traverse the public internet.
Question 7: What is the purpose of an Azure Network Security Group (NSG)?
- Filtering inbound and outbound network traffic by rules (Correct answer)
- Distributing traffic across multiple VMs
- Providing a managed DNS service
- Encrypting data at rest in storage
Correct answer: Filtering inbound and outbound network traffic by rules
An NSG contains security rules that allow or deny network traffic to and from Azure resources.
AZ-900 Azure Compute and Networking 2
Which Azure compute option lets you run code without managing any underlying infrastructure, billed only for execution time?