Free practice test · no sign-up
Azure AZ-900Free Microsoft Azure Fundamentals practice test
- ✓ 10 free questions
- ✓ Instant answers & explanations
- ✓ No sign-up, no email
10 real Azure AZ-900 practice questions with instant answers and explanations — no account, no credit card, no email. Score yourself, then unlock the full bank of 300 questions whenever you’re ready. The Azure AZ-900 passing score is 700 / 1000.
A company is deploying a web application and wants to ensure the workload remains available even if an entire Azure datacenter experiences an unexpected outage. Which Azure feature should the architect use to distribute the application across physically separate datacenters within the same metropolitan area?
Answer key
All 10 Azure AZ-900 questions & answers
Prefer to just read the answers and explanations? Here’s the full key for this free Azure AZ-900 test.
Q1. A company is deploying a web application and wants to ensure the workload remains available even if an entire Azure datacenter experiences an unexpected outage. Which Azure feature should the architect use to distribute the application across physically separate datacenters within the same metropolitan area?
Correct answer: B. Availability Zones
Availability Zones are physically separate datacenters within a single Azure region, each with independent power, cooling, and networking. Distributing a workload across multiple Availability Zones protects against single-datacenter failures. Region pairs span geographically distant regions (hundreds of miles apart) and are used for disaster recovery, not local datacenter-level isolation. Resource Groups and Management Groups are organizational constructs and have no bearing on physical redundancy.
Q2. Contoso Ltd. operates in Brazil and must ensure all customer data remains within Brazilian borders due to local data-sovereignty laws. Which Azure concept directly determines where data is physically stored and processed?
Correct answer: C. Azure Region
An Azure Region is a specific geographic area — such as Brazil South — that contains one or more datacenters where resources are deployed and data physically resides. Choosing the correct region is the primary mechanism for meeting data-residency requirements. Availability Zones exist within a region and do not change data's country of residence. Subscriptions and Management Groups are billing and governance constructs that do not control physical data location.
Q3. An Azure administrator creates a virtual machine, a storage account, and a virtual network for a development project. She wants a logical container that lets her apply a single set of tags and delete all three resources at once when the project ends. What should she use?
Correct answer: C. Resource Group
A Resource Group is a logical container that holds related Azure resources. Applying tags to the resource group and deleting the group removes all contained resources simultaneously, which is ideal for project lifecycle management. A Subscription is a broader billing/access boundary that can contain many resource groups. Management Groups aggregate subscriptions for policy governance. Availability Zones are about physical datacenter separation, not resource organization.
Q4. A global enterprise uses multiple Azure subscriptions — one per business unit — and needs to enforce a corporate policy that prevents any subscription from deploying resources outside of approved regions. What is the most efficient way to apply this restriction across all subscriptions simultaneously?
Correct answer: C. Apply an Azure Policy at the Management Group level
Management Groups allow you to organize subscriptions into a hierarchy and apply Azure Policies at the management-group scope, which then inherit down to all child subscriptions and resource groups automatically. This is far more efficient than assigning policies to each subscription individually. Resource Locks prevent accidental deletion or modification of resources but cannot restrict deployment location. Tags are metadata only and cannot enforce governance rules.
Q5. Which statement correctly describes the relationship between Azure region pairs?
Correct answer: B. Paired regions are located at least 300 miles apart within the same geopolitical boundary to support data residency and disaster recovery.
Azure region pairs are predefined by Microsoft and are typically located at least 300 miles (approximately 500 km) apart within the same geopolitical boundary (e.g., both in the United States or both in Europe). This distance minimizes the chance of a single disaster affecting both regions while keeping data within regulatory boundaries. Customers cannot define their own region pairs. Pairs are specifically for replication and disaster recovery, not for latency reduction, which is addressed by CDN or edge services.
Q6. A financial-services firm is evaluating Azure for workloads that require strict US-government compliance and must be inaccessible to the general public cloud environment. Which Azure offering meets this requirement?
Correct answer: C. Azure Government (sovereign region)
Azure Government is a sovereign cloud region physically and logically separated from the public Azure cloud. It is operated by screened US personnel and meets FedRAMP High, DoD IL2/IL4/IL5, and other US government compliance requirements. Availability Zones provide physical redundancy within a public region but do not provide the legal/operational separation required for government workloads. Resource group policies and dedicated subscriptions under the public root management group are still part of the public Azure environment.
Q7. An organization has the following Azure hierarchy: a root Management Group containing two child management groups ('Production' and 'Development'), each containing multiple subscriptions, which in turn contain resource groups and resources. A cost-center budget alert is assigned at the 'Production' management group scope. Which resources will be subject to that budget alert?
Correct answer: B. All resources in all subscriptions nested under the 'Production' management group
Azure management group settings, policies, and budgets inherit downward through the hierarchy. An alert or policy applied to the 'Production' management group automatically applies to every child subscription, and subsequently to all resource groups and resources within those subscriptions. It does not affect the sibling 'Development' management group or its children. The scope is not limited to just the immediate children — the entire subtree under 'Production' is covered.
Q8. A solutions architect needs to design a billing boundary that separates costs between two internal teams sharing the same Azure Active Directory tenant, while also allowing each team to have independent role-based access control (RBAC) assignments for their own resources. What Azure construct satisfies both requirements?
Correct answer: B. Separate Subscriptions — one per team — under the same tenant
An Azure Subscription is both a billing boundary and an access-control boundary. Separate subscriptions under the same Azure AD tenant produce independent invoices (or cost allocations) for each team, while also allowing each team to manage its own RBAC assignments without interference. Resource Groups within a single subscription share the subscription's billing scope and access model, making it harder to cleanly separate billing. Management Groups organize and govern subscriptions but are not themselves billing units. Availability Zones are a physical-redundancy concept with no billing or RBAC role.
Q9. A startup wants to run a stateless web API that processes incoming HTTP requests only during business hours. The team wants to pay solely for execution time rather than for a reserved server. Which Azure compute option is the best fit?
Correct answer: B. Azure Functions
Azure Functions is a serverless compute service that charges only for the time your code executes, making it ideal for event-driven, stateless workloads with variable or infrequent traffic. Virtual Machines and Virtual Machine Scale Sets require you to pay for reserved compute capacity even when idle. Azure Kubernetes Service adds container orchestration overhead inappropriate for a simple serverless API scenario.
Q10. An e-commerce company needs its web-tier virtual machines to remain available even if a single Azure datacenter within a region experiences a cooling failure. Which deployment configuration should the administrator use?
Correct answer: B. Azure Availability Zones
Availability Zones are physically separate datacenters within a single Azure region, each with independent power, cooling, and networking. Deploying VMs across zones protects against a single datacenter failure. Availability Sets spread VMs across fault and update domains within one datacenter, which does not protect against a full datacenter outage. Region Pairs provide cross-region disaster recovery, which is a broader and more expensive approach than needed here. Resource Groups are a logical management boundary, not a resilience feature.
Exam facts and objectives sourced from the official Microsoft certification page. Last reviewed June 2026.
Ready for the full Azure AZ-900 bank? Start free.
300 questions, timed mock exams, and missed-question review — 30 free questions, no card.
Start free trial