Microsoft Certification — Questions and Answers

Question 1: What is Azure Private Endpoint used for?

Assigning static public IP addresses to virtual machines
Creating public-facing API endpoints for mobile apps
Connecting to Azure PaaS services over a private IP within your VNet, eliminating public internet exposure (Correct answer)
Load balancing traffic between Azure regions

Correct answer: Connecting to Azure PaaS services over a private IP within your VNet, eliminating public internet exposure

Azure Private Endpoint assigns a private IP address from your VNet to Azure PaaS services like Storage or SQL, so all traffic stays on the Microsoft backbone without traversing the public internet.

Question 2: Which Azure service provides a fully managed Kubernetes environment for containerized application deployment?

Azure Kubernetes Service (AKS) (Correct answer)
Azure Container Instances
Azure Service Fabric
Azure App Service

Correct answer: Azure Kubernetes Service (AKS)

Azure Kubernetes Service (AKS) provides a managed Kubernetes cluster where Azure handles control plane operations, upgrades, and health monitoring.

Question 3: Which Azure caching service is based on open-source Redis and reduces database load?

Azure Cache for Redis (Correct answer)
Azure Table Storage
Azure Blob Storage
Azure CDN

Correct answer: Azure Cache for Redis

Azure Cache for Redis is a fully managed in-memory data store based on Redis, used to cache frequently accessed data and reduce backend database load.

Question 4: What is Microsoft Power Automate used for in Microsoft 365?

Managing user accounts
Automating repetitive workflows and business processes (Correct answer)
Creating spreadsheets
Generating reports from databases

Correct answer: Automating repetitive workflows and business processes

Power Automate (formerly Flow) allows users to create automated workflows between apps and services without writing code.

Question 5: Which Microsoft service provides identity protection by detecting risky sign-ins and compromised accounts?

Microsoft Entra ID Protection (Correct answer)
Microsoft Defender for Cloud
Azure Firewall
Microsoft Sentinel

Correct answer: Microsoft Entra ID Protection

Microsoft Entra ID Protection uses machine learning to detect suspicious sign-in behaviors and user risk conditions, enabling automated remediation policies.

Question 6: What type of Azure subscription scope is HIGHEST in the management hierarchy?

Subscription
Resource
Resource Group
Management Group (Correct answer)

Correct answer: Management Group

Management Groups sit above subscriptions in the Azure hierarchy, allowing governance policies to be applied across multiple subscriptions at once.

Question 7: Which Microsoft 365 service provides enterprise social networking features?

Yammer (Correct answer)
Planner
SharePoint
Forms

Correct answer: Yammer

Yammer (now part of Viva Engage) is Microsoft's enterprise social networking platform for company-wide conversations.

Question 8: Which Microsoft 365 licensing tier includes advanced security features like Microsoft Defender for Identity?

Microsoft 365 E5 (Correct answer)
Microsoft 365 F1
Microsoft 365 Apps for Business
Microsoft 365 Business Basic

Correct answer: Microsoft 365 E5

Microsoft 365 E5 is the highest enterprise tier and includes advanced security, compliance, and analytics tools including Defender for Identity.

Question 9: Which Microsoft 365 app is used to create low-code business applications without traditional programming?

Access
Visio
Project
Power Apps (Correct answer)

Correct answer: Power Apps

Power Apps enables users to build custom business apps with a low-code interface that connects to data sources across Microsoft 365.

Question 10: What is the Strangler Fig pattern in cloud migration?

Migrating entire workloads in one big-bang cutover
Immediately rewriting all legacy code from scratch in the cloud
Decomposing databases by vertical partitioning
Incrementally replacing a monolithic application by routing specific features to new microservices while the old system handles the rest (Correct answer)

Correct answer: Incrementally replacing a monolithic application by routing specific features to new microservices while the old system handles the rest

The Strangler Fig pattern gradually migrates a monolith by redirecting specific capabilities to new cloud-native services until the legacy system is fully replaced and can be retired.

Question 11: Which Microsoft 365 plan is best suited for small businesses needing basic Office apps plus email?

Microsoft 365 F3
Microsoft 365 E5
Microsoft 365 E3
Microsoft 365 Business Basic (Correct answer)

Correct answer: Microsoft 365 Business Basic

Microsoft 365 Business Basic provides cloud-based Office apps, Exchange email, and Teams at an entry-level price for small businesses.

Question 12: What does OneDrive provide in the Microsoft 365 ecosystem?

Video conferencing
Personal cloud storage and file synchronization (Correct answer)
Email hosting
Identity management

Correct answer: Personal cloud storage and file synchronization

OneDrive is Microsoft's personal cloud storage service that syncs files across devices and integrates with Microsoft 365 apps.

Question 13: What is the primary function of Azure Databricks?

Big data processing and machine learning using Apache Spark (Correct answer)
Managing Azure AD identities and access
Relational database management and SQL optimization
Network traffic analysis and DDoS protection

Correct answer: Big data processing and machine learning using Apache Spark

Azure Databricks is an Apache Spark-based analytics platform optimized for big data processing, collaborative data science, and machine learning workloads.

Question 14: What is the primary consideration when choosing between Azure Traffic Manager and Azure Front Door?

Front Door only works in US regions; Traffic Manager is global
Traffic Manager routes DNS-level traffic globally; Front Door is an application-layer (L7) global load balancer with WAF and CDN capabilities (Correct answer)
Traffic Manager supports HTTP/HTTPS; Front Door supports TCP only
Traffic Manager is cheaper; Front Door has no cost difference

Correct answer: Traffic Manager routes DNS-level traffic globally; Front Door is an application-layer (L7) global load balancer with WAF and CDN capabilities

Traffic Manager operates at DNS level for global routing, while Azure Front Door provides Layer 7 HTTP routing with built-in WAF, SSL offload, and CDN edge caching.

Question 15: Which Azure service provides a fully managed relational database based on the SQL Server engine?

Azure Blob Storage
Azure SQL Database (Correct answer)
Azure Table Storage
Azure Cosmos DB

Correct answer: Azure SQL Database

Azure SQL Database is a fully managed, Platform-as-a-Service relational database built on the SQL Server engine.

Question 16: In Azure Functions, what is a 'binding'?

A security policy applied to a function
A declarative way to connect a function to data sources or destinations without writing code (Correct answer)
A way to link two Azure subscriptions
A pricing tier for function execution

Correct answer: A declarative way to connect a function to data sources or destinations without writing code

Bindings in Azure Functions declaratively connect functions to input data sources or output destinations like Storage, Service Bus, or Cosmos DB without boilerplate code.

Question 17: What is the purpose of an Azure Application Gateway?

Connecting on-premises networks to Azure via VPN
Providing private DNS resolution for virtual networks
Managing service endpoints for Azure PaaS services
A Layer 7 web application load balancer with SSL termination, URL-based routing, and optional WAF (Correct answer)

Correct answer: A Layer 7 web application load balancer with SSL termination, URL-based routing, and optional WAF

Azure Application Gateway is a Layer 7 load balancer that routes HTTP/S traffic based on URL paths or hostnames, with SSL offloading and an optional Web Application Firewall.

Question 18: What does the term 'data lake' refer to in modern data architecture?

A centralized repository that stores raw data in its native format at any scale (Correct answer)
A data visualization and dashboard tool
A real-time data streaming and processing service
A structured relational database optimized for reporting

Correct answer: A centralized repository that stores raw data in its native format at any scale

A data lake is a centralized storage repository that holds raw data in its native format until it is needed, supporting structured, semi-structured, and unstructured data.

Question 19: Which TCP port must be available for Azure file sharing to work?

1903
445 (Correct answer)
3389
1809

Correct answer: 445

Azure File shares use the Server Message Block (SMB) protocol for communication, which is a network file sharing protocol. TCP port 445 is the standard port used by the SMB protocol. Therefore, for Azure file sharing to function correctly, TCP port 445 must be open and accessible from the client attempting to connect to the file share.

Question 20: When designing a multi-region active-active architecture, which Azure database service supports automatic multi-region write capabilities?

Azure Cosmos DB with multi-region writes enabled (Correct answer)
Azure SQL Database
Azure Database for MySQL
Azure Table Storage

Correct answer: Azure Cosmos DB with multi-region writes enabled

Azure Cosmos DB supports multi-region writes, allowing applications to write data to any configured region with automatic conflict resolution.

Question 21: Which Azure storage service is best suited for storing large amounts of unstructured data such as images, videos, and log files?

Azure Table Storage
Azure Queue Storage
Azure SQL Database
Azure Blob Storage (Correct answer)

Correct answer: Azure Blob Storage

Azure Blob Storage is designed for storing massive amounts of unstructured object data, including images, videos, documents, and backups.

Question 22: Which Microsoft 365 compliance feature helps organizations prevent accidental data leaks?

Multi-Factor Authentication
Power Automate
Azure AD
Data Loss Prevention (DLP) (Correct answer)

Correct answer: Data Loss Prevention (DLP)

Data Loss Prevention policies in Microsoft 365 detect and prevent the unauthorized sharing of sensitive information.

Question 23: Which Microsoft 365 service replaces traditional on-premises Exchange server for email hosting?

Teams
Outlook.com
Exchange Online (Correct answer)
SharePoint Online

Correct answer: Exchange Online

Exchange Online is the cloud-hosted version of Microsoft Exchange that provides email, calendar, and contacts without on-premises servers.

Question 24: What is Azure Synapse Analytics primarily designed for?

Real-time event streaming and messaging
Document storage and content retrieval
Integrated analytics combining data warehousing and big data processing (Correct answer)
Deploying and managing containerized applications

Correct answer: Integrated analytics combining data warehousing and big data processing

Azure Synapse Analytics is an integrated analytics service that unifies data warehousing, big data analytics, and data integration into a single platform.

Question 25: When should an architect choose Azure Service Bus over Azure Event Hubs?

When ingesting millions of telemetry events per second for streaming analytics
When storing events for long-term replay and historical analysis
When building real-time IoT pipelines
When enterprise messaging semantics like message ordering, dead-lettering, and transactions are required (Correct answer)

Correct answer: When enterprise messaging semantics like message ordering, dead-lettering, and transactions are required

Azure Service Bus is appropriate when you need enterprise messaging guarantees like ordering, dead-letter queues, and transactions, while Event Hubs is designed for high-volume event streaming.

Question 26: What is the role of Microsoft Entra ID (formerly Azure Active Directory) in Microsoft 365?

Email filtering
Document co-authoring
Cloud storage management
Identity and access management for users and services (Correct answer)

Correct answer: Identity and access management for users and services

Microsoft Entra ID is the identity platform that handles authentication and authorization for Microsoft 365 and connected services.

Question 27: In a hub-spoke network topology in Azure, what is the purpose of the hub VNet?

Centralizing shared services like VPN gateway, firewall, and DNS that spoke VNets connect to via peering (Correct answer)
Acting as the only VNet with internet access for billing purposes
Isolating development environments from production
Hosting all production workloads

Correct answer: Centralizing shared services like VPN gateway, firewall, and DNS that spoke VNets connect to via peering

The hub VNet in a hub-spoke topology centralizes shared network services like VPN gateways, Azure Firewall, and DNS servers that multiple spoke VNets consume via peering.

Question 28: What does Microsoft Viva provide in Microsoft 365?

Employee experience platform covering learning, insights, and engagement (Correct answer)
Antivirus scanning
DNS management
Network routing

Correct answer: Employee experience platform covering learning, insights, and engagement

Microsoft Viva is an employee experience platform that integrates learning, wellbeing, knowledge, and insights into Teams.

Question 29: What is Azure Cosmos DB best known for?

Managed SQL Server instances with Always On availability
Globally distributed, multi-model NoSQL database with low latency (Correct answer)
Strict relational schema enforcement
Batch analytics on petabytes of historical data

Correct answer: Globally distributed, multi-model NoSQL database with low latency

Azure Cosmos DB is a globally distributed, multi-model NoSQL database designed for high availability, low latency, and automatic scalability worldwide.

Question 30: What is the purpose of Azure Blueprints?

Generating cost reports for Azure subscriptions
Creating virtual machine images for deployment
Defining repeatable sets of Azure resources, policies, and role assignments to deploy compliant environments consistently (Correct answer)
Designing network topology diagrams

Correct answer: Defining repeatable sets of Azure resources, policies, and role assignments to deploy compliant environments consistently

Azure Blueprints package ARM templates, policies, and RBAC assignments into a single artifact that can be deployed to subscriptions to enforce consistent, compliant environments.

Question 31: Which Azure service provides real-time analytics on fast-moving streaming data from IoT devices and applications?

Azure Data Factory
Azure Stream Analytics (Correct answer)
Azure Synapse Analytics
Azure Databricks

Correct answer: Azure Stream Analytics

Azure Stream Analytics is a real-time event-processing engine that analyzes streaming data from IoT devices, applications, and other sources.

Question 32: What does the Microsoft 365 Security & Compliance Center help administrators manage?

Network bandwidth
Software licensing
Organizational security policies, audit logs, and compliance reports (Correct answer)
Hardware inventory

Correct answer: Organizational security policies, audit logs, and compliance reports

The Microsoft Purview compliance portal centralizes tools for managing data governance, audits, eDiscovery, and security policies.

Question 33: What is the role of Power Pages in the Power Platform?

Building external-facing websites with secure data access (Correct answer)
Creating internal employee chatbots
Generating automated financial reports
Managing cloud infrastructure

Correct answer: Building external-facing websites with secure data access

Power Pages is a low-code platform for building secure, external-facing business websites connected to Dataverse data.

Question 34: What is the maximum file size that can be uploaded to SharePoint Online in Microsoft 365?

15 GB (Correct answer)
4 TB
250 GB
1 GB

Correct answer: 15 GB

SharePoint Online supports file uploads up to 250 GB, making it suitable for large media files and documents.

Question 35: What is the purpose of Microsoft Intune within Microsoft 365?

Video streaming
Mobile device and application management (Correct answer)
File storage
Email encryption

Correct answer: Mobile device and application management

Microsoft Intune is a cloud-based endpoint management solution that controls how devices and apps access organizational data.

Question 36: Which Azure architecture pattern involves event sourcing and maintaining separate read/write models?

Microservices pattern
Bulkhead pattern
CRUD pattern
CQRS (Command Query Responsibility Segregation) (Correct answer)

Correct answer: CQRS (Command Query Responsibility Segregation)

CQRS separates the command (write) and query (read) models of an application, allowing each to be optimized independently and often combined with event sourcing.

Question 37: What type of data store is Azure Table Storage?

NoSQL key-value store for semi-structured data (Correct answer)
Graph database for relationship mapping
Relational database with foreign key constraints
Document store with JSON support

Correct answer: NoSQL key-value store for semi-structured data

Azure Table Storage is a NoSQL key-value store that can hold large amounts of semi-structured data without requiring a fixed schema.

Question 38: What does ETL stand for in data processing pipelines?

Execute, Transfer, Link
Export, Translate, Log
Extract, Transfer, Launch
Extract, Transform, Load (Correct answer)

Correct answer: Extract, Transform, Load

ETL stands for Extract, Transform, Load — the three-step process of extracting data from source systems, transforming it into the desired format, and loading it into a destination.

Question 39: What is ransomware?

Malware that encrypts victim files and demands payment for the decryption key (Correct answer)
A type of network protocol
A vulnerability scanner tool
Software that optimizes CPU performance

Correct answer: Malware that encrypts victim files and demands payment for the decryption key

Ransomware is malicious software that encrypts a victim's files or systems and demands a ransom payment in exchange for the decryption key.

Question 40: What is a primary key in a relational database?

A unique identifier that distinguishes each row in a table (Correct answer)
A column that references a row in another table
The first column defined in a table
The most frequently queried field in a record

Correct answer: A unique identifier that distinguishes each row in a table

A primary key uniquely identifies each row in a database table, ensuring no two rows have the same key value and enabling efficient lookups.

Question 41: What is an Azure Landing Zone?

A physical data center location for Azure hardware
A temporary sandbox for testing Azure resources
A pre-configured, scalable environment following best practices for deploying enterprise workloads in Azure (Correct answer)
A specific Azure VM size tier

Correct answer: A pre-configured, scalable environment following best practices for deploying enterprise workloads in Azure

Azure Landing Zones provide a modular, opinionated environment with governance, networking, security, and identity foundations for deploying enterprise workloads at scale.

Question 42: What is the purpose of Azure Cost Management + Billing in architecture planning?

Configuring network routing policies
Monitoring, analyzing, and optimizing Azure spending through budgets, alerts, and cost allocation (Correct answer)
Managing Microsoft 365 license assignments
Optimizing CPU performance of virtual machines

Correct answer: Monitoring, analyzing, and optimizing Azure spending through budgets, alerts, and cost allocation

Azure Cost Management + Billing provides visibility into Azure spending, allows budget creation with alerts, and provides cost optimization recommendations to control cloud costs.

Question 43: What is the purpose of Azure CDN (Content Delivery Network)?

Managing user authentication
Running serverless code
Storing database backups
Delivering web content to users from geographically distributed edge servers for low latency (Correct answer)

Correct answer: Delivering web content to users from geographically distributed edge servers for low latency

Azure CDN caches static web content at globally distributed edge servers, reducing latency by serving content from locations closest to users.

Question 44: What is the relationship between Dynamics 365 and the Power Platform?

Power Platform is only for non-business users
Dynamics 365 apps are built on the Power Platform, enabling customization via Power Apps and Power Automate (Correct answer)
They are completely separate products with no integration
Dynamics 365 replaces the Power Platform

Correct answer: Dynamics 365 apps are built on the Power Platform, enabling customization via Power Apps and Power Automate

Dynamics 365 applications are built on the Power Platform foundation, allowing users to extend and customize them using Power Apps, Power Automate, and Power BI.

Question 45: Azure Disk Encryption encrypts all disks, including managed disks, that are utilized in Azure. The DM-Crypt technology is used to encrypt the drives under Linux. What encryption method does Windows make use of?

Blowfish
EAS
DM-Crypt
BitLocker (Correct answer)

Correct answer: BitLocker

Azure Disk Encryption uses industry-standard encryption technologies to encrypt the OS and data disks of Azure virtual machines. For Windows VMs, it leverages BitLocker, a full-disk encryption feature built into the Windows operating system. For Linux VMs, it uses DM-Crypt.

Question 46: Which Azure service provides a fully managed, serverless SQL data warehouse for large-scale analytics?

Azure Synapse Analytics (Correct answer)
Azure Database for PostgreSQL
Azure SQL Managed Instance
Azure SQL Database

Correct answer: Azure Synapse Analytics

Azure Synapse Analytics combines enterprise data warehousing and big data analytics, offering on-demand or provisioned query processing at petabyte scale.

Question 47: What is the purpose of Azure App Configuration?

Storing binary data
Running Docker containers
Deploying ARM templates
Centrally managing application settings and feature flags (Correct answer)

Correct answer: Centrally managing application settings and feature flags

Azure App Configuration provides a managed service for centralizing application settings and feature flags, separating configuration from code.

Question 48: What is the difference between Recovery Time Objective (RTO) and Recovery Point Objective (RPO)?

They are the same concept with different names
RTO measures data loss; RPO measures downtime duration
RTO is the maximum acceptable downtime to restore service; RPO is the maximum acceptable data loss measured in time (Correct answer)
RTO applies to databases; RPO applies to virtual machines only

Correct answer: RTO is the maximum acceptable downtime to restore service; RPO is the maximum acceptable data loss measured in time

RTO defines how quickly a system must be restored after a failure (downtime tolerance), while RPO defines how much data loss is acceptable (last backup age tolerance).

Question 49: What is the primary benefit of an Azure Availability Zone?

Lower compute pricing
Automatic code deployment
Protection from datacenter-level failures within a region (Correct answer)
Faster internet bandwidth

Correct answer: Protection from datacenter-level failures within a region

Availability Zones are physically separate datacenters within a region that protect applications from datacenter failures.

Question 50: What is the purpose of Microsoft Sentinel?

Cloud-native SIEM and SOAR solution (Correct answer)
Device enrollment service
Password reset portal
Email spam filtering

Correct answer: Cloud-native SIEM and SOAR solution

Microsoft Sentinel is a cloud-native security information and event management (SIEM) and security orchestration, automation, and response (SOAR) solution.

Question 51: What is Azure App Service primarily used for?

Running batch processing jobs
Hosting web applications, REST APIs, and mobile backends (Correct answer)
Storing large media files
Managing DNS zones

Correct answer: Hosting web applications, REST APIs, and mobile backends

Azure App Service is a fully managed PaaS platform for hosting web apps, REST APIs, and mobile back-ends on Windows or Linux.

Microsoft Certification

Microsoft Certification exams validate technical skills across Azure, Microsoft 365, security, data, and other Microsoft technologies. Each exam tests role-based competencies for cloud architects, administrators, developers, and data professionals, with a scaled passing score of 700 out of 1000.

Questions

100 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds