Microsoft (Azure Fundamentals) Practice Test 1 — Questions and Answers

Question 1: Which type of data does Azure Storage Service Encryption (SSE) assist secure by automatically encrypting?

data in transit
data in motion
data at rest (Correct answer)
data in use

Correct answer: data at rest

Azure Storage Service Encryption (SSE) is designed to protect data that is 'at rest' in Azure storage accounts. This means it automatically encrypts data when it is persisted to storage media, such as blobs, files, queues, and tables. While Azure also offers encryption for data in transit (e.g., via TLS), SSE specifically addresses the security of stored data.

Question 2: Which of the following is a fundamental component of a cloud adoption environment that has been deployed and set up to host workloads?

chamber
compartment
cell
landing zone (Correct answer)

Correct answer: landing zone

A landing zone is a fundamental component in cloud adoption, representing a pre-configured, secure, and scalable environment in the cloud. It is specifically designed and set up to host workloads, providing the necessary infrastructure, governance, and security controls. This allows organizations to deploy applications and services confidently while adhering to best practices and organizational policies.

Question 3: Which of the following Azure features logically links user accounts to the resources created by those user accounts?

subscriptions (Correct answer)
tabs
credits
vindications

Correct answer: subscriptions

In Azure, subscriptions serve as a logical container that links user accounts to the resources created by those accounts. They define the billing boundary for Azure services and also act as a management boundary for applying policies and access controls. All resources deployed in Azure must belong to a subscription, making it crucial for organizing and managing cloud assets.

Question 4: In Azure, which of the following is the primary technique of access management?

DAC
RBAC (role-based) (Correct answer)
MAC
RBAC (rule-based)

Correct answer: RBAC (role-based)

Role-Based Access Control (RBAC) is the primary technique for managing access to Azure resources. It allows you to define granular permissions based on roles, specifying who can do what with which resources. By assigning users, groups, or applications to predefined or custom roles, RBAC ensures that individuals only have the necessary access to perform their job functions, enhancing security and compliance.

Question 5: Which Azure service can manage on-premises resource migration as well as manage and coordinate disaster recovery for business continuity and disaster recovery?

Azure Site Recovery (Correct answer)
Azure Snapshot
Azure TAR
Azure BCPDR

Correct answer: Azure Site Recovery

Azure Site Recovery is a disaster recovery service that helps manage and orchestrate the replication, failover, and recovery of machines and applications. It can protect on-premises virtual machines and physical servers, as well as Azure VMs, ensuring business continuity during outages. This service is crucial for maintaining application availability and minimizing downtime by coordinating disaster recovery efforts.

Question 6: Which of the following is open-source orchestration software for deploying, managing, and scaling containers across a cluster when working with widely used Azure applications?

Bristle
Kubernetes (Correct answer)
Decker
Swarm

Correct answer: Kubernetes

Kubernetes is an open-source container orchestration platform that automates the deployment, scaling, and management of containerized applications across a cluster. It is widely used in Azure (as Azure Kubernetes Service, AKS) to manage complex, distributed applications. Kubernetes provides features like self-healing, load balancing, and automated rollouts, making it ideal for modern cloud-native development.

Question 7: Which TCP port must be available for Azure file sharing to work?

3389
1903
445 (Correct answer)
1809

Correct answer: 445

Azure File shares use the Server Message Block (SMB) protocol for communication, which is a network file sharing protocol. TCP port 445 is the standard port used by the SMB protocol. Therefore, for Azure file sharing to function correctly, TCP port 445 must be open and accessible from the client attempting to connect to the file share.

Question 8: What Azure product automatically detects application components on Windows and Linux platforms and visually maps service interactions, making it particularly beneficial for migrations?

Service Map (Correct answer)
Service Station
Road Atlas
NMap

Correct answer: Service Map

Azure Service Map, a feature of Azure Monitor, automatically discovers application components on Windows and Linux platforms and visually maps service interactions. It provides a comprehensive view of connections between servers, processes, and ports, making it invaluable for understanding complex application architectures, troubleshooting, and planning migrations. This helps identify dependencies and potential issues across your environment.

Question 9: Which of the following Azure roles is not one of the built-in ones?

Contributor
Owner
Reader
Author (Correct answer)

Correct answer: Author

Azure has several built-in roles that define common sets of permissions, such as Owner, Contributor, and Reader, which grant different levels of access to manage Azure resources. 'Author' is not a standard built-in role in Azure's Role-Based Access Control (RBAC) system. Built-in roles are predefined by Azure to simplify access management.

Question 10: Azure takes a multi-layered security approach. NSGs (network security groups) operate at which two layers?

3 & 4 (Correct answer)
6 & 7
1 & 2
5 & 6

Correct answer: 3 & 4

Network Security Groups (NSGs) in Azure operate at layers 3 (Network Layer) and 4 (Transport Layer) of the OSI model. They allow you to filter network traffic to and from Azure resources in a virtual network based on source/destination IP address, source/destination port, and protocol. This provides a fundamental level of network security by controlling inbound and outbound traffic flows.

Question 11: Which of the following is the entire time it takes to complete a disk IO request?

Expectancy
Latency (Correct answer)
Torpidity
Throughput

Correct answer: Latency

Latency refers to the time delay between when an I/O request is issued and when it is completed. It encompasses the entire duration it takes for a disk I/O request to travel from the application, through the operating system and storage stack, to the physical disk, and for the response to return. Lower latency indicates faster response times for storage operations.

Question 12: Which two forms of scaling are synonymous?

Directional scaling
Vertical scaling (Correct answer)
Scaling up (Correct answer)
Scaling in
Horizontal scaling

Correct answer: Vertical scaling

Vertical scaling, also known as 'scaling up,' involves increasing the capacity of an existing resource, such as adding more CPU, memory, or disk space to a single virtual machine. This enhances the performance of a single instance. In contrast, horizontal scaling (scaling out) involves adding more instances of a resource.

Question 13: What is the maximum number of VMs that may be added to a scale set using the VM orchestration mode?

180
250
200 (Correct answer)
125

Correct answer: 200

When using the Virtual Machine Orchestration mode for Azure Virtual Machine Scale Sets, the maximum number of VMs that can be added to a single scale set is 200. This mode provides greater control over individual VM instances within the set, allowing for custom configurations and management while still benefiting from scale set features.

Question 14: Azure Disk Encryption encrypts all disks, including managed disks, that are utilized in Azure. The DM-Crypt technology is used to encrypt the drives under Linux. What encryption method does Windows make use of?

Blowfish
BitLocker (Correct answer)
EAS
DM-Crypt

Correct answer: BitLocker

Azure Disk Encryption uses industry-standard encryption technologies to encrypt the OS and data disks of Azure virtual machines. For Windows VMs, it leverages BitLocker, a full-disk encryption feature built into the Windows operating system. For Linux VMs, it uses DM-Crypt.

Question 15: Which of the three main disk roles in Azure is not one of the three?

Data disk
OS disk
Assembler disk (Correct answer)
Temporary disk

Correct answer: Assembler disk

In Azure, the three main disk roles for a virtual machine are the OS disk, data disks, and temporary disk. The OS disk contains the operating system, data disks are used for persistent data storage, and the temporary disk provides short-term storage for applications and processes. 'Assembler disk' is not a recognized disk role in Azure's virtual machine architecture.

Question 16: Which of the following is used to link a virtual machine (VM) to a virtual network (VNet)?

Network interface card (Correct answer)
TPM
Core
Cluster

Correct answer: Network interface card

A Network Interface Card (NIC) is used to connect a virtual machine (VM) to a virtual network (VNet) in Azure. Each VM requires at least one NIC to enable network communication, allowing it to send and receive data within the VNet and to the internet (if configured). The NIC defines the IP configuration and network security group associations for the VM.

Question 17: Restarting VMs in a partially deallocated availability set has the same effect as which of the following?

removing VMs
scaling back VMs
adding VMs (Correct answer)
striking VMs

Correct answer: adding VMs

When VMs in a partially deallocated availability set are restarted, Azure treats this action similarly to adding new VMs to the availability set. This is because deallocated VMs release their underlying hardware resources, and restarting them involves provisioning new resources. This process can potentially place them on different fault and update domains, which is akin to adding new instances to maintain the high availability guarantees of the set.

Question 18: Multithreading will result in [Blank] IOPS and [Blank] throughput when used to push a larger number of requests to Premium Storage.

higher, higher (Correct answer)
lower, lower
lower, higher
higher, lower

Correct answer: higher, higher

When using multithreading to push a larger number of requests to Premium Storage, it allows for parallel processing of I/O operations. This concurrency leads to both higher IOPS (Input/Output Operations Per Second) because more operations are completed simultaneously, and higher throughput (data transfer rate) as more data is processed in parallel. Effectively utilizing multiple threads maximizes the storage's performance capabilities.

Question 19: Your scale set can automatically scale in all of the following ways when an autoscale rule is triggered, except for which one?

Increase percent by
Increase count by
Increase count to
Increase percent to (Correct answer)

Correct answer: Increase percent to

Azure Autoscale rules for scaling in (reducing instances) typically offer options like 'Decrease count by' (reduce by a fixed number), 'Decrease percent by' (reduce by a percentage of current instances), or 'Decrease count to' (reduce to a specific number of instances). 'Increase percent to' is an action for scaling *out* (adding instances), not scaling in.

Question 20: Which Azure feature allows you to scale apps automatically based on usage patterns and resource utilization?

Autoscale (Correct answer)
EC2
AutoElastic
Elastic Cloud

Correct answer: Autoscale

Azure Autoscale is a feature that allows applications to automatically scale their resources (like VM instances in a scale set or App Service plans) based on demand or a schedule. It monitors metrics such as CPU usage, memory, or queue length and automatically adds or removes instances to match the workload. This ensures optimal performance and cost efficiency by dynamically adjusting resources.

Question 21: Real-time analytics and a powerful event-processing engine offer _____________________

Azure Logic Apps
Azure Event Hub
Azure Stream Analytics (Correct answer)
Azure Data Lake

Correct answer: Azure Stream Analytics

Azure Stream Analytics is a real-time analytics and complex event-processing engine designed for processing large volumes of streaming data from various sources. It allows you to analyze data in motion, perform transformations, and detect patterns or anomalies in real-time. This makes it ideal for scenarios requiring immediate insights from live data streams, such as IoT telemetry or application logs.

Question 22: _____________ is the ability of a system to stay up and functioning even if one of its components is down, such as a single Azure data center outage.

Agility
Elasticity
Fault tolerance (Correct answer)
Scalability

Correct answer: Fault tolerance

Fault tolerance is the ability of a system to continue operating without interruption even if one or more of its components fail. In Azure, this means that services and applications can remain available and functional despite issues like a single data center outage, often achieved through redundancy and replication across different regions or availability zones. It ensures resilience against failures.

Question 23: Which Azure Service would you recommend if you want to build an application with an event-based architecture and the ability to ingest events from Blob storage and create custom topics?

Azure Logic Apps
Azure Event Grid (Correct answer)
Azure Machine Learning Studio
Azure Functions

Correct answer: Azure Event Grid

Azure Event Grid is a fully managed event routing service that enables event-based architectures. It allows you to easily manage events from various sources, including Blob storage, and route them to different handlers. Its ability to create custom topics makes it perfect for building reactive applications that respond to specific events across your Azure environment, facilitating decoupled and scalable solutions.

Question 24: To store certificates, which Azure service should you use?

an Azure Storage account
Azure Key Vault (Correct answer)
Azure Information Protection
Azure Security Center

Correct answer: Azure Key Vault

Azure Key Vault is a cloud service specifically designed to securely store and manage cryptographic keys, secrets, and certificates. It provides a centralized, highly secure repository for certificates, ensuring they are protected from unauthorized access and can be easily managed and rotated. This makes it the ideal service for certificate storage in Azure environments.

Question 25: In Azure, which service offers serverless computing?

Azure storage account
Azure Container Instances
Azure Virtual Machines
Azure Functions (Correct answer)

Correct answer: Azure Functions

Azure Functions is a serverless compute service that allows you to run small pieces of code, known as functions, without explicitly provisioning or managing infrastructure. With Azure Functions, you only pay for the compute time your code consumes, and Azure automatically scales the resources as needed. This pay-per-execution model and automatic scaling are hallmarks of serverless computing.

Microsoft (Azure Fundamentals) Practice Test 1

Which type of data does Azure Storage Service Encryption (SSE) assist secure by automatically encrypting?

What Practice Test Geeks adds beyond an AI chat for Microsoft Certification

An AI chatbot can quiz you, but it can't reproduce the exam conditions or keep your record. Here you get:

A timed, full-length Microsoft Certification mock exam — 60 questions in 100 minutes with a 70% pass mark, modeled on the official exam's question count and time limit, followed by a score report broken down by exam domain.
A fixed Microsoft Certification question bank: the same test every attempt, so your score is comparable from one try to the next instead of changing with every regenerated quiz.
Progress saved on your device: completed tests, scores and missed questions stay in My Progress, so you can retake only what you got wrong.
A printable Microsoft Certification cheat sheet you can print or save as a PDF.
Microsoft Certification flashcards built from the same question bank.

Start the Timed Microsoft Certification Mock Exam →

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

learn.microsoft.com — Test delivery, eligibility, registration, renewal, score validity, retake fee, passing score, exam format, time limit, fees · verified Oct 2026