Questions & answers (free, no sign-in needed)
- View
10 beginner questions on the AZ-900 skills measured: cloud concepts (shared responsibility, service types, consumption-based model), Azure architecture and services (availability zones, the resource hierarchy, networking, storage redundancy) and Azure management and governance (resource locks, Azure Policy, Service Health).
Ready to test yourself? Take the graded Beginner test (free; sign in with Google, one click) to get your score.
Under the shared responsibility model, which responsibility always stays with the customer, whether they use IaaS, PaaS or SaaS?
- A. Physical security of the datacenter
- B. The customer's data and how it is classified and protected ✔ correct
- C. Patching the host operating system of the physical servers
- D. Maintaining the physical network hardware
Answer: B. Regardless of the deployment type, the customer always keeps responsibility for their data, endpoints, accounts and access management. Physical datacenter, network and hosts are the cloud provider's responsibility.
Source: learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility · Domain: Describe cloud concepts
A development team wants to deploy its web application code without managing virtual machines, operating systems or runtime patches. Which cloud service type fits best?
- A. Infrastructure as a service (IaaS)
- B. On-premises hosting
- C. Platform as a service (PaaS) ✔ correct
- D. A private colocation rack
Answer: C. With PaaS the provider manages the infrastructure, operating system, runtime and middleware, so the team only deploys and manages its application. IaaS still leaves the operating system and runtime to the customer.
Source: azure.microsoft.com/en-us/resources/cloud-computing-dictionary/what-is-paas · Domain: Describe cloud concepts
In the cloud consumption-based model, you pay for the IT resources you use, with no upfront cost for hardware or datacenter infrastructure.
- A. True ✔ correct
- B. False
Answer: A. True. Cloud resources are rented and released as needed, so spending is an operational expense (OpEx) based on use, instead of a large capital expense (CapEx) for servers and datacenter space.
Source: learn.microsoft.com/en-us/training/modules/describe-cloud-compute/6-describe-con · Domain: Describe cloud concepts
What are Azure availability zones?
- A. Pairs of Azure regions in different countries used only for backups
- B. Separate Azure subscriptions created for each environment
- C. Groups of resources that share the same lifecycle and tags
- D. Physically separate groups of datacenters within one Azure region ✔ correct
Answer: D. Availability zones are physically separate datacenter groups inside a region, each with independent power, cooling and networking. Deploying across zones protects an application if one zone fails.
Source: learn.microsoft.com/en-us/azure/reliability/availability-zones-overview · Domain: Describe Azure architecture and services
Which order lists Azure management scopes from the broadest to the narrowest?
- A. Management group, subscription, resource group, resource ✔ correct
- B. Subscription, management group, resource, resource group
- C. Resource group, subscription, management group, resource
- D. Resource, resource group, management group, subscription
Answer: A. Management groups contain subscriptions, subscriptions contain resource groups, and resource groups contain resources. Settings such as role assignments applied at a higher scope are inherited by the lower scopes.
Source: learn.microsoft.com/en-us/azure/azure-resource-manager/management/overview · Domain: Describe Azure architecture and services
Which two Azure services can connect an on-premises network to an Azure virtual network? (Select TWO)
- A. Azure VPN Gateway ✔ correct
- B. Azure ExpressRoute ✔ correct
- C. Azure Policy
- D. Azure Advisor
- E. Azure Arc
Answer: A, B. VPN Gateway provides site-to-site and point-to-site VPN connections over the internet, and ExpressRoute provides a private connection through a connectivity provider. Policy and Advisor are governance and recommendation tools.
Source: learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-overview · Domain: Describe Azure architecture and services
A company wants its storage account data to be copied automatically to a secondary Azure region in case the primary region has an outage. Which redundancy option meets this need?
- A. Locally redundant storage (LRS)
- B. Zone-redundant storage (ZRS)
- C. Geo-redundant storage (GRS) ✔ correct
- D. Premium SSD managed disks
Answer: C. GRS copies data within the primary region and then asynchronously to a secondary region. LRS keeps copies in one datacenter and ZRS across zones of the same region, so neither protects against a full regional outage.
Source: learn.microsoft.com/en-us/azure/storage/common/storage-redundancy · Domain: Describe Azure architecture and services
An administrator wants to prevent a production resource group from being deleted by accident, while still allowing changes to its resources. What should they apply?
- A. A tag named Environment with the value Production
- B. A budget alert in Microsoft Cost Management
- C. An Azure Advisor recommendation
- D. A Delete (CanNotDelete) resource lock ✔ correct
Answer: D. A Delete lock (CanNotDelete) lets authorized users read and modify resources but blocks deletion. Tags only label resources, and budgets or Advisor recommendations do not stop anyone from deleting anything.
Source: learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources · Domain: Describe Azure management and governance
A company requires that new resources can be created only in two approved Azure regions. Which service enforces this rule?
- A. Azure Policy ✔ correct
- B. Azure role-based access control
- C. Azure Service Health
- D. Azure Arc
Answer: A. Azure Policy evaluates resources against rules, such as allowed locations, and can deny non-compliant deployments. Azure RBAC controls who can perform actions, not which regions or settings a resource may use.
Source: learn.microsoft.com/en-us/azure/governance/policy/overview · Domain: Describe Azure management and governance
Which Azure service informs you about Azure service incidents and planned maintenance that affect the regions and services you use?
- A. Azure Advisor
- B. Azure Service Health ✔ correct
- C. Microsoft Defender for Cloud
- D. Azure Resource Manager
Answer: B. Azure Service Health gives a personalized view of service issues, planned maintenance and health advisories for the services and regions you use. Azure Advisor gives best-practice recommendations instead.
Source: learn.microsoft.com/en-us/azure/service-health/overview · Domain: Describe Azure management and governance
Original practice questions written by xOps School (DevOpsSchool Private Limited) from the public Microsoft exam objectives (Skills measured as of 2026-07-20), checked 2026-10-25. They are not actual exam questions. xOps School is not affiliated with or endorsed by Microsoft; exam names are trademarks of their owners. Official exam page: learn.microsoft.com/en-us/credentials/certifications/resources/study-g.