AZ-900 is Microsoft's foundational cloud certification, and it is broader than its name suggests. Only one of its three domains is about Azure's architecture and services. The other two cover cloud concepts in general and the management and governance side of Azure: cost tools, service level agreements, compliance offerings, and how a subscription is organised and kept under control.
It suits anyone in a Microsoft shop who needs the concepts, and it leans noticeably harder on governance, compliance and cost management than the AWS foundational exam does. That is the part people underestimate. Daily use of the portal is less preparation than it looks: knowing how to create a resource is not the same as knowing how it is billed, which tool governs it, or what Microsoft commits to in writing about keeping it available.
With only three domains, each carries a large share of the result, so there is no small corner of the syllabus to write off. A shortfall in any one of them shows up in the score.
Microsoft publishes these weightings as ranges; each figure shown falls inside its range.
7 questions
Question 1 of 25
When comparing cloud models, which offers the fastest time-to-deploy for a team that just wants to use finished software with no setup?
Answer: D
SaaS delivers ready-to-use applications with nothing to build or manage, giving the fastest path to value when a finished product meets the need - IaaS and PaaS require progressively more setup.
Question 2 of 25
A company must decide whether an AI use case is appropriate before building it. Which step fits?
Answer: D
Responsible AI begins with whether to build, not how to build.
Question 3 of 25
Which statement about AI and the shared responsibility model is accurate?
Answer: B
Data and use-case responsibility always remain with the customer.
Question 4 of 25
Why should a company treat AI-generated code or content as a draft rather than a final product?
Answer: C
AI output requires human review before it is relied upon.
Question 5 of 25
Why might an organisation choose a smaller AI model over a larger one?
Answer: C
Model selection matches capability to the task, cost, and latency needs.
Question 6 of 25
What does generative AI produce that traditional machine learning typically does not?
Answer: B
Generative models create new content; traditional ML mostly predicts values or labels.
Question 7 of 25
Which is the clearest example of an operational expenditure (OpEx) rather than a capital expenditure (CapEx)?
Answer: A
A usage-based monthly cloud bill is quintessential OpEx, versus the upfront capital investment of buying hardware.
9 questions
Question 8 of 25
Which managed disk tier offers the highest performance for the most demanding, latency-sensitive workloads?
Answer: C
Ultra Disk sits at the top of Azure's managed disk performance tiers, offering the highest IOPS and lowest latency, above Premium SSD, Standard SSD, and Standard HDD - suited to the most demanding transactional workloads.
Question 9 of 25
Which Azure compute option is best suited to short-lived, event-driven code such as an image-processing trigger?
Answer: B
Functions are the event-driven, serverless compute option.
Question 10 of 25
A company wants virtual desktops delivered to staff from Azure. Which service fits?
Answer: C
Azure Virtual Desktop delivers desktop and app virtualisation from Azure.
Question 11 of 25
What is the purpose of public and private endpoints for Azure services?
Answer: D
Many PaaS services default to internet-reachable public endpoints; a private endpoint projects the service into your VNet with a private IP, keeping traffic on the Microsoft backbone - promoted to its own item in the current study guide.
Question 12 of 25
Following Microsoft's rename, what is the current name for what was previously called Azure Active Directory?
Answer: A
Azure Active Directory was renamed Microsoft Entra ID; the capabilities are the same identity and access management service, but the current name (Entra ID) is what appears on the updated exam.
Question 13 of 25
What are Azure Spot Virtual Machines?
Answer: A
Spot VMs offer large discounts for unused capacity, with the tradeoff that Azure can evict them when it needs the capacity - suited to interruptible workloads like batch processing, not critical always-on services.
Question 14 of 25 · multiple response
Which of the following are Azure storage services suited to unstructured data at large scale? (Select TWO)
Answers: A, C
Blob and Data Lake handle unstructured data at scale.
Question 15 of 25
A company wants Copilot to help staff draft documents inside Microsoft 365. What does this represent?
Answer: A
Copilot embeds AI assistance into the products people already use.
Question 16 of 25
What is the benefit of using a content delivery network (CDN) like Azure CDN or Front Door caching?
Answer: A
A CDN caches content at globally distributed edge locations, so users are served from a nearby point of presence - reducing latency and offloading requests from the origin server.
9 questions
Question 17 of 25
What is the relationship between Azure Advisor and the Well-Architected Framework pillars?
Answer: A
Azure Advisor operationalizes Well-Architected thinking - its recommendation categories (reliability, security, performance, cost, operational excellence) mirror the framework's pillars, applied to your actual deployed resources.
Question 18 of 25
Why might an organization separate workloads into different subscriptions?
Answer: D
Subscriptions act as boundaries for billing, access, policy, and quotas, so organizations commonly separate environments (prod vs dev) or business units into different subscriptions for cleaner governance and cost tracking.
Question 19 of 25
What is the Azure Pricing Calculator used for?
Answer: C
The Pricing Calculator models estimated costs for planned workloads pre-deployment; actual historical spend analysis is Cost Management's job - a distinction AZ-900 tests.
Question 20 of 25 · multiple response
Which of the following support governing AI workloads in Azure? (Select TWO)
Answers: B, D
Policy and the activity log govern and audit; the calculator and Bastion do not.
Question 21 of 25
Why might an organization use Azure Policy's 'Audit' effect instead of 'Deny' when first rolling out governance?
Answer: B
Starting with Audit lets teams see what would be non-compliant and understand the impact before switching to Deny, avoiding sudden deployment breakage - a common phased governance rollout approach.
Question 22 of 25
What is the Microsoft Azure Well-Architected Framework?
Answer: D
The Well-Architected Framework defines pillars for assessing and improving workload quality on Azure - the design-guidance counterpart to the adoption-focused Cloud Adoption Framework.
Question 23 of 25
What is the general purpose of Dev/Test pricing offers in Azure?
Answer: C
Dev/Test pricing offers reduced rates on services like VMs for non-production workloads, available to customers with eligible subscriptions (such as Visual Studio subscriptions), reflecting that dev/test environments don't need production-grade pricing.
Question 24 of 25
What is Azure Monitor Application Insights used for?
Answer: B
Application Insights is Azure Monitor's application performance management (APM) feature - instrumenting your apps for request rates, failures, dependencies, and user telemetry.
Question 25 of 25
What information does the Azure Service Health 'Resource Health' feature provide?
Answer: C
Resource Health (part of Service Health) reports on the health of your individual resources, helping distinguish platform-caused issues from problems originating in your own configuration.
20 more free after signup, then the full 432-question bank for $9.
Get 20 more free questions