AZ-900 Practice Questions — Free

AZ-900 is Microsoft's foundational cloud certification, and it is broader than its name suggests. Only one of its three domains is about Azure's architecture and services. The other two cover cloud concepts in general and the management and governance side of Azure: cost tools, service level agreements, compliance offerings, and how a subscription is organised and kept under control.

It suits anyone in a Microsoft shop who needs the concepts, and it leans noticeably harder on governance, compliance and cost management than the AWS foundational exam does. That is the part people underestimate. Daily use of the portal is less preparation than it looks: knowing how to create a resource is not the same as knowing how it is billed, which tool governs it, or what Microsoft commits to in writing about keeping it available.

With only three domains, each carries a large share of the result, so there is no small corner of the syllabus to write off. A shortfall in any one of them shows up in the score.

How AZ-900 is weighted

  1. Describe cloud conceptsabout 27.5%
  2. Describe Azure architecture and servicesabout 37.5%
  3. Describe Azure management and governanceabout 32.5%

Microsoft publishes these weightings as ranges; each figure shown falls inside its range.

Describe cloud concepts

7 questions

  1. Question 1 of 25

    When comparing cloud models, which offers the fastest time-to-deploy for a team that just wants to use finished software with no setup?

    • A.Private cloud
    • B.PaaS
    • C.IaaS
    • D.SaaSCorrect

    Answer: D

    SaaS delivers ready-to-use applications with nothing to build or manage, giving the fastest path to value when a finished product meets the need - IaaS and PaaS require progressively more setup.

  2. Question 2 of 25

    A company must decide whether an AI use case is appropriate before building it. Which step fits?

    • A.Selecting the model with the highest published benchmark score
    • B.Estimating the monthly token consumption of the workload
    • C.Choosing the Azure region with the lowest service pricing
    • D.Assessing potential harms and who could be affected by errorsCorrect

    Answer: D

    Responsible AI begins with whether to build, not how to build.

  3. Question 3 of 25

    Which statement about AI and the shared responsibility model is accurate?

    • A.Neither party is responsible for the decisions AI systems make
    • B.The customer remains responsible for their data and their use caseCorrect
    • C.Responsibility is fully transferred once a managed service is used
    • D.The provider becomes responsible for all outcomes the AI produces

    Answer: B

    Data and use-case responsibility always remain with the customer.

  4. Question 4 of 25

    Why should a company treat AI-generated code or content as a draft rather than a final product?

    • A.It is billed at a higher rate once it is published
    • B.It is always shorter than the equivalent human output
    • C.It may contain errors that a reviewer needs to identifyCorrect
    • D.It cannot legally be used in a commercial product

    Answer: C

    AI output requires human review before it is relied upon.

  5. Question 5 of 25

    Why might an organisation choose a smaller AI model over a larger one?

    • A.Larger models are unavailable in most Azure regions
    • B.Larger models cannot be deployed inside a private network
    • C.It meets the accuracy requirement at lower cost and latencyCorrect
    • D.Smaller models are always more accurate for every task

    Answer: C

    Model selection matches capability to the task, cost, and latency needs.

  6. Question 6 of 25

    What does generative AI produce that traditional machine learning typically does not?

    • A.A numeric prediction derived from historical training data
    • B.New content such as text, images, or code rather than a predictionCorrect
    • C.A classification label assigned to an input record
    • D.A cluster grouping of similar records in a dataset

    Answer: B

    Generative models create new content; traditional ML mostly predicts values or labels.

  7. Question 7 of 25

    Which is the clearest example of an operational expenditure (OpEx) rather than a capital expenditure (CapEx)?

    • A.A monthly Azure bill based on VMs and storage consumedCorrect
    • B.Buying a building to house an organization's IT equipment
    • C.A three-year hardware maintenance contract paid upfront
    • D.Purchasing physical servers to install in a datacenter

    Answer: A

    A usage-based monthly cloud bill is quintessential OpEx, versus the upfront capital investment of buying hardware.

Describe Azure architecture and services

9 questions

  1. Question 8 of 25

    Which managed disk tier offers the highest performance for the most demanding, latency-sensitive workloads?

    • A.Standard SSD
    • B.Premium SSD (in comparison to Ultra Disk)
    • C.Ultra DiskCorrect
    • D.Standard HDD

    Answer: C

    Ultra Disk sits at the top of Azure's managed disk performance tiers, offering the highest IOPS and lowest latency, above Premium SSD, Standard SSD, and Standard HDD - suited to the most demanding transactional workloads.

  2. Question 9 of 25

    Which Azure compute option is best suited to short-lived, event-driven code such as an image-processing trigger?

    • A.Azure VMware Solution, which runs vSphere workloads natively
    • B.Azure Functions, which run code in response to eventsCorrect
    • C.Azure Dedicated Host, which reserves physical server capacity
    • D.Azure Virtual Machines, which run continuously once started

    Answer: B

    Functions are the event-driven, serverless compute option.

  3. Question 10 of 25

    A company wants virtual desktops delivered to staff from Azure. Which service fits?

    • A.Azure Container Instances
    • B.Azure Event Grid
    • C.Azure Virtual DesktopCorrect
    • D.Azure Data Factory

    Answer: C

    Azure Virtual Desktop delivers desktop and app virtualisation from Azure.

  4. Question 11 of 25

    What is the purpose of public and private endpoints for Azure services?

    • A.Public endpoints are billed while private endpoints are always entirely free
    • B.Private endpoints are a networking feature usable only by virtual machines
    • C.The two endpoint types are simply interchangeable names for one feature
    • D.Public endpoints expose a service over the internet; private endpoints keep traffic inside your VNet on a private IPCorrect

    Answer: D

    Many PaaS services default to internet-reachable public endpoints; a private endpoint projects the service into your VNet with a private IP, keeping traffic on the Microsoft backbone - promoted to its own item in the current study guide.

  5. Question 12 of 25

    Following Microsoft's rename, what is the current name for what was previously called Azure Active Directory?

    • A.Microsoft Entra IDCorrect
    • B.Azure Identity Hub
    • C.Microsoft Passport
    • D.Microsoft Azure Directory

    Answer: A

    Azure Active Directory was renamed Microsoft Entra ID; the capabilities are the same identity and access management service, but the current name (Entra ID) is what appears on the updated exam.

  6. Question 13 of 25

    What are Azure Spot Virtual Machines?

    • A.VMs using spare Azure capacity at a deep discount, evictable when Azure needs it backCorrect
    • B.Virtual machines that come with a guarantee of permanent, uninterrupted availability
    • C.The single most expensive virtual machine pricing tier Azure offers
    • D.Virtual machines committed to a fixed one- to three-year reservation term

    Answer: A

    Spot VMs offer large discounts for unused capacity, with the tradeoff that Azure can evict them when it needs the capacity - suited to interruptible workloads like batch processing, not critical always-on services.

  7. Question 14 of 25 · multiple response

    Which of the following are Azure storage services suited to unstructured data at large scale? (Select TWO)

    • A.Azure Data Lake Storage for large-scale analytics dataCorrect
    • B.Azure SQL Database for relational transactional records
    • C.Azure Blob Storage for objects such as images and backupsCorrect
    • D.Azure Cache for Redis for in-memory key-value lookups

    Answers: A, C

    Blob and Data Lake handle unstructured data at scale.

  8. Question 15 of 25

    A company wants Copilot to help staff draft documents inside Microsoft 365. What does this represent?

    • A.AI assistance embedded directly into the productivity applicationsCorrect
    • B.A migration tool for moving files into Azure storage
    • C.A monitoring service for the Microsoft 365 tenant
    • D.A replacement for the organisation's identity provider

    Answer: A

    Copilot embeds AI assistance into the products people already use.

  9. Question 16 of 25

    What is the benefit of using a content delivery network (CDN) like Azure CDN or Front Door caching?

    • A.Serving cached content from nearby edge locations, cutting latency and origin loadCorrect
    • B.A CDN feature whose function is to encrypt the origin's database
    • C.A CDN feature whose function is to block all traffic reaching the origin
    • D.A CDN feature whose function is to increase the origin server's raw CPU

    Answer: A

    A CDN caches content at globally distributed edge locations, so users are served from a nearby point of presence - reducing latency and offloading requests from the origin server.

Describe Azure management and governance

9 questions

  1. Question 17 of 25

    What is the relationship between Azure Advisor and the Well-Architected Framework pillars?

    • A.Azure Advisor's recommendation categories align with Well-Architected principles like reliability, security, cost, performance, and operational excellenceCorrect
    • B.Advisor's recommendations are limited exclusively to billing and invoicing topics
    • C.The two are entirely unrelated products developed by separate Microsoft teams
    • D.Advisor is a newer service that has fully replaced the Well-Architected Framework

    Answer: A

    Azure Advisor operationalizes Well-Architected thinking - its recommendation categories (reliability, security, performance, cost, operational excellence) mirror the framework's pillars, applied to your actual deployed resources.

  2. Question 18 of 25

    Why might an organization separate workloads into different subscriptions?

    • A.Because Azure requires a separate subscription to be created per employee
    • B.Because a single Azure subscription is only able to hold one resource
    • C.Purely to make deployed resources run measurably faster
    • D.To create clear management, billing, and governance boundaries between environmentsCorrect

    Answer: D

    Subscriptions act as boundaries for billing, access, policy, and quotas, so organizations commonly separate environments (prod vs dev) or business units into different subscriptions for cleaner governance and cost tracking.

  3. Question 19 of 25

    What is the Azure Pricing Calculator used for?

    • A.Automatically applying discounts to an active subscription
    • B.Reviewing exactly what was charged on last month's completed invoice
    • C.Estimating the cost of Azure services before deploying themCorrect
    • D.Calculating the salaries owed to a company's own employees

    Answer: C

    The Pricing Calculator models estimated costs for planned workloads pre-deployment; actual historical spend analysis is Cost Management's job - a distinction AZ-900 tests.

  4. Question 20 of 25 · multiple response

    Which of the following support governing AI workloads in Azure? (Select TWO)

    • A.The Azure Pricing Calculator estimating future AI spend
    • B.Azure Policy constraining how AI resources may be configuredCorrect
    • C.Azure Bastion providing access to the AI service endpoints
    • D.The activity log recording who created or changed AI resourcesCorrect

    Answers: B, D

    Policy and the activity log govern and audit; the calculator and Bastion do not.

  5. Question 21 of 25

    Why might an organization use Azure Policy's 'Audit' effect instead of 'Deny' when first rolling out governance?

    • A.Because the Deny effect is, once applied, permanently impossible to undo
    • B.To surface non-compliant resources without blocking deployments, easing enforcement inCorrect
    • C.Because Audit is stated to be the only policy effect that actually works
    • D.To have Azure immediately and automatically delete non-compliant resources

    Answer: B

    Starting with Audit lets teams see what would be non-compliant and understand the impact before switching to Deny, avoiding sudden deployment breakage - a common phased governance rollout approach.

  6. Question 22 of 25

    What is the Microsoft Azure Well-Architected Framework?

    • A.A fixed monthly pricing model applied to Enterprise Agreement customers
    • B.A paid certification exam administered by Microsoft Learn
    • C.A physical construction standard governing how Microsoft data centers are built
    • D.A set of guiding tenets - reliability, security, cost optimization, operational excellence, and performance efficiency - for building quality workloadsCorrect

    Answer: D

    The Well-Architected Framework defines pillars for assessing and improving workload quality on Azure - the design-guidance counterpart to the adoption-focused Cloud Adoption Framework.

  7. Question 23 of 25

    What is the general purpose of Dev/Test pricing offers in Azure?

    • A.A discount that is applied automatically to every deployed VM
    • B.A pricing model available exclusively to Enterprise Support customers
    • C.Reduced service rates for non-production workloads under eligible subscriptionsCorrect
    • D.A free tier of usage that is available to every customer regardless of plan

    Answer: C

    Dev/Test pricing offers reduced rates on services like VMs for non-production workloads, available to customers with eligible subscriptions (such as Visual Studio subscriptions), reflecting that dev/test environments don't need production-grade pricing.

  8. Question 24 of 25

    What is Azure Monitor Application Insights used for?

    • A.Scanning source code repositories specifically for exposed secrets
    • B.Monitoring live apps for performance anomalies, failures, and usage patternsCorrect
    • C.Monitoring the raw power usage of a physical data center
    • D.Providing general insight into Microsoft's own internal product roadmap

    Answer: B

    Application Insights is Azure Monitor's application performance management (APM) feature - instrumenting your apps for request rates, failures, dependencies, and user telemetry.

  9. Question 25 of 25

    What information does the Azure Service Health 'Resource Health' feature provide?

    • A.A list of cost-saving recommendations for underused resources
    • B.A directory listing every Azure Region currently available worldwide
    • C.The current and past health status of your specific individual resources, and whether issues are due to Azure or your own actionsCorrect
    • D.A running total of your subscription's accumulated spend

    Answer: C

    Resource Health (part of Service Health) reports on the health of your individual resources, helping distinguish platform-caused issues from problems originating in your own configuration.

20 more free after signup, then the full 432-question bank for $9.

Get 20 more free questions