Try the questions in the test above first, then open each one here to see the correct answer and why every other option is wrong.
01In IaaS, who is responsible for maintaining the operating system?
Practice question Unit: Describe cloud concepts
AThe hardware manufacturer under its standard warranty
The hardware manufacturer does not administer the tenant’s guest operating system.
BIt is shared equally for each update
The model separates responsibilities by layer, rather than dividing each guest-OS update equally.
CThe customer ✓ Correct answer
In IaaS, the customer manages the guest operating system, including its updates and security settings.
DThe cloud provider
The provider manages physical infrastructure; guest-OS management remains with the IaaS customer.
Reference: Microsoft Learn, Shared responsibility in the cloud; https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility
Ask a friend
02Which cloud model combines public and private clouds and lets data and apps move between them?
Practice question Unit: Describe cloud concepts
APublic cloud
Public cloud alone does not include the private-cloud component in the question.
BHybrid cloud ✓ Correct answer
Hybrid cloud integrates private and public cloud environments.
CMulti-cloud
Multi-cloud means using more than one cloud provider; it does not necessarily combine public and private clouds.
DPrivate cloud
Private cloud alone is dedicated to one organisation and does not supply the public-cloud component.
Reference: Microsoft Azure Fundamentals (AZ-900), Describe cloud concepts – Cloud computing, shared responsibility, cloud models, consumption-based model, serverless
Ask a friend
03What describes the consumption-based model?
Practice question Unit: Describe cloud concepts
AYou pay per employee who has an Azure account in Microsoft Entra ID
Per-user licensing is a possible software licence model, not the definition of consumption-based resource billing.
BYou pay only for the resources you use ✓ Correct answer
Consumption charges are based on the resources or services used and their applicable meters.
CYou must buy hardware upfront
Upfront hardware purchasing is capital expenditure, rather than metered cloud consumption.
DYou pay a fixed annual fee regardless of use
A fixed fee independent of use does not describe the consumption-based model.
Reference: Microsoft Azure Fundamentals (AZ-900), Describe cloud concepts – Cloud computing, shared responsibility, cloud models, consumption-based model, serverless
Ask a friend
04What are availability zones?
Practice question Unit: Describe Azure architecture and services
AEdge sites for content caching and delivery
Edge locations cache or deliver content close to users; they are not availability zones in a Region.
BPaired Azure Regions in the same geography
A Region pair links separate Regions, rather than separate zones within one Region.
CLogical collections of Azure subscriptions
Subscriptions are administrative and billing containers, not physical fault-isolation locations.
DSeparate physical locations inside a Region ✓ Correct answer
Availability zones are separated locations within a Region, with independent power, cooling and networking.
Reference: Microsoft Learn, What are Azure availability zones?; https://learn.microsoft.com/en-us/azure/availability-zones/az-overview
Ask a friend
05What is a resource group?
Practice question Unit: Describe Azure architecture and services
AA logical container for related Azure resources ✓ Correct answer
A resource group is a logical container for related resources managed together.
BA management container for multiple subscriptions
A management group organises subscriptions above the subscription level.
CA billing and access scope containing resource groups
A subscription provides a scope for access and billing and can contain resource groups.
DA physically separate location within an Azure Region
An availability zone is a physical location within a Region, not a resource-management container.
Reference: Microsoft Learn, Manage resource groups, What is a resource group; https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/manage-resource-groups-portal
Ask a friend
06Which service hosts web apps, REST APIs and mobile back ends as a managed platform?
Practice question Unit: Describe Azure architecture and services
AAzure Load Balancer
Load Balancer distributes network traffic; it does not host the application code as a web platform.
BAzure Virtual Machines
Virtual Machines provide IaaS, requiring management of the guest OS and web stack.
CAzure App Service ✓ Correct answer
App Service provides managed hosting for web applications, REST APIs and mobile back ends.
DAzure Container Instances
Container Instances runs containers, rather than providing the App Service web-app platform described.
Reference: Microsoft Learn, App Service overview; https://learn.microsoft.com/en-us/azure/app-service/overview
Ask a friend
07Which Azure Storage service stores massive amounts of unstructured data such as images and video?
Practice question Unit: Describe Azure architecture and services
AAzure Queue Storage for messages
Queue Storage stores messages for asynchronous communication between application components.
BAzure Blob Storage ✓ Correct answer
Blob Storage is object storage suited to unstructured content such as images and videos.
CAzure Table Storage for key/attribute data
Table Storage stores structured NoSQL entities, not general binary objects as blobs.
DAzure Disk Storage attached to a VM
Disk Storage supplies block devices for VMs rather than an object-store namespace.
Reference: Microsoft Azure Fundamentals (AZ-900), Describe Azure architecture and services – Storage services
Ask a friend
08An Azure budget alert reaches its configured threshold. Without any separate automation, what happens to the running resources?
Practice question Unit: Describe Azure management and governance
AThey continue running; the alert itself only notifies recipients ✓ Correct answer
The alert notifies recipients; resources keep running unless a separate action has been configured.
BResources are stopped to enforce a hard spending cap
Budget alerts do not impose an automatic hard spending cap on the subscription.
CExisting resources run, but all new deployments are blocked
A budget threshold does not automatically block new resource deployments.
DThe subscription changes to a fixed monthly price
A budget does not switch the subscription to a fixed-price billing model.
Reference: Microsoft Learn, Create and manage budgets (resources are not affected); https://learn.microsoft.com/en-us/azure/cost-management-billing/costs/tutorial-acm-create-budgets
Ask a friend
09A finance team wants to report Azure spending by cost center. What is the simplest approach?
Practice question Unit: Describe Azure management and governance
ACreate a separate Entra tenant for each cost center
Separate tenants are a much larger identity boundary and are unnecessary for simple cost-centre reporting.
BCreate a resource lock per cost center
A resource lock prevents certain changes; it does not categorise costs by business ownership.
CUse Azure Service Health
Service Health reports service incidents and advisories, not cost-centre attribution.
DApply a CostCenter tag and group by it in cost analysis ✓ Correct answer
Consistent CostCenter tags on supported resources allow cost analysis to group the associated charges.
Reference: Microsoft Azure Fundamentals (AZ-900), Describe Azure management and governance – Cost management
Ask a friend
10How does Azure Policy differ from Azure RBAC?
Practice question Unit: Describe Azure management and governance
APolicy only applies to Entra ID users while RBAC applies only to storage
Policy and RBAC both operate at resource-management scopes; neither is limited as stated.
BRBAC controls resource properties; Policy controls user permissions
This reverses the roles: RBAC grants permissions, while Policy evaluates resource compliance.
CThey are the same service
They complement each other but solve different governance and access-control problems.
DPolicy controls resource properties; RBAC controls what users can do ✓ Correct answer
Policy evaluates resource configurations against rules; RBAC determines permitted actions by a principal at a scope.
Reference: Microsoft Learn, Azure Policy overview, Azure Policy and Azure RBAC; https://learn.microsoft.com/en-us/azure/governance/policy/overview
Ask a friend