AZ-900 Exam Prep Free practice test →

Free AZ-900 Practice Questions

10 free, exam-style Microsoft Certified: Azure Fundamentals (AZ-900) practice questions with answers and explanations. No signup required. Work through them below, then take the full free AZ-900 practice test to study every exam domain.

The AZ-900 exam has 60 questions and runs 0 hours 45 minutes.

These 10 free AZ-900 questions are organized by exam domain, so you can see how each part of the Microsoft Certified: Azure Fundamentals blueprint is tested. Reveal the answer and explanation under each question.

Domain 1: Describe cloud concepts (25-30%)

Question 1

A company is moving several workloads to Azure and wants to understand its obligations under the cloud shared responsibility model. Which responsibility ALWAYS remains with the customer, regardless of whether they use IaaS, PaaS, or SaaS?

  1. Maintaining the physical servers that run inside the datacenter
  2. Patching the operating system of the underlying physical host
  3. The information and data, plus the accounts and identities they own
  4. Securing the physical networking hardware in the datacenter
Show answer & explanation

Correct answer: C - The information and data, plus the accounts and identities they own

Question 2

A development team needs to publish a web application and a REST API, but wants to avoid managing, patching, or configuring the underlying operating system and servers. Which cloud service type is MOST appropriate?

  1. Platform as a Service (PaaS), which manages the OS for you
  2. Infrastructure as a Service (IaaS), where you manage the OS
  3. Software as a Service (SaaS)
  4. On-premises server virtualization
Show answer & explanation

Correct answer: A - Platform as a Service (PaaS), which manages the OS for you

Question 3

During a traffic spike, an application running on a single virtual machine becomes slow. The team responds by adding several identical virtual machines behind a load balancer to share the load. This is an example of:

  1. Replacing the VM with one that has more CPU and memory (scaling up)
  2. Recovering workloads in a second region (disaster recovery)
  3. Copying data to a paired region (geo-replication)
  4. Adding more identical instances to share load (scaling out)
Show answer & explanation

Correct answer: D - Adding more identical instances to share load (scaling out)

Question 4

A CFO notes that the company no longer makes large upfront hardware purchases and instead pays only for the cloud resources consumed each month. This shift is BEST described as a move from:

  1. Operational expenditure (OpEx) to capital expenditure (CapEx)
  2. Capital expenditure (CapEx) to operational expenditure (OpEx)
  3. A public cloud model to a private cloud model
  4. A consumption model to a fixed annual license
Show answer & explanation

Correct answer: B - Capital expenditure (CapEx) to operational expenditure (OpEx)

Question 5

A team chooses a serverless compute option for an event-driven task that runs only when files are uploaded. Which characteristic BEST describes the expected behavior of this serverless approach?

  1. It keeps a fixed pool of servers running at all times to guarantee reserved capacity
  2. It requires the team to size, manage, and patch the underlying virtual machines themselves
  3. It scales automatically with demand, can scale to zero when idle, and bills only for execution
  4. It must be started and stopped manually by an administrator every single time an upload event occurs
Show answer & explanation

Correct answer: C - It scales automatically with demand, can scale to zero when idle, and bills only for execution

Domain 2: Describe Azure architecture and services (35-40%)

Question 6

An architect must design an application so that it stays available even if an entire physical datacenter within an Azure region experiences a power or cooling failure. Which Azure capability is specifically designed to protect against this?

  1. Region pairs, which replicate data across two separate regions hundreds of miles apart
  2. Resource groups, which logically organize related resources
  3. Management groups, which span multiple subscriptions
  4. Availability zones, which are isolated datacenters within a region
Show answer & explanation

Correct answer: D - Availability zones, which are isolated datacenters within a region

Question 7

An enterprise has 12 separate Azure subscriptions and needs to apply a single set of governance policies and access controls consistently across all of them at once. Which Azure construct should they use?

  1. A management group placed above the subscriptions
  2. A resource group that contains all 12 subscriptions
  3. A single virtual network shared by every subscription
  4. An availability set spanning the subscriptions
Show answer & explanation

Correct answer: A - A management group placed above the subscriptions

Question 8

A bank requires a connection between its on-premises datacenter and Azure that is private, dedicated, and does NOT travel over the public internet. Which option meets this requirement?

  1. Azure VPN Gateway, using an encrypted tunnel over the internet
  2. Azure ExpressRoute, a private dedicated link to Azure
  3. Virtual network (VNet) peering between two Azure VNets
  4. A site-to-site VPN connection across the public internet
Show answer & explanation

Correct answer: B - Azure ExpressRoute, a private dedicated link to Azure

Question 9

A team wants their storage data to remain available if a single datacenter fails, by keeping three copies spread across three separate availability zones within the SAME region. Which redundancy option should they choose?

  1. Locally redundant storage (LRS), three copies in one datacenter
  2. Geo-redundant storage (GRS), copied to a paired region
  3. Zone-redundant storage (ZRS), three copies across three zones
  4. Geo-zone-redundant storage (GZRS), combining zones and regions
Show answer & explanation

Correct answer: C - Zone-redundant storage (ZRS), three copies across three zones

Question 10

A company must retain compliance archives that are almost never accessed, and can tolerate several hours to retrieve the data when it is occasionally needed. Which blob storage access tier offers the LOWEST storage cost for this scenario?

  1. Hot tier, optimized for data accessed frequently
  2. Cool tier, for data accessed infrequently over 30 days
  3. Premium tier, optimized for high-performance workloads
  4. Archive tier, the lowest-cost tier for rarely accessed data
Show answer & explanation

Correct answer: D - Archive tier, the lowest-cost tier for rarely accessed data

The rest of the AZ-900 blueprint

The AZ-900 exam also covers these domains. Drill them in the full free practice test:

Ready for the real thing?

Practice hundreds more AZ-900 questions with instant scoring, weak-area drills, and full exam simulations.

Start the free practice test See pricing