Describe Azure architecture and services
Free Microsoft Certified: Azure Fundamentals practice — 6 questions on Describe Azure architecture and services, with explanations. No sign-up. Full 12-question mixed test →
A manufacturing company operates globally and needs to deploy Azure resources in a geography where data must remain within specific national boundaries due to legal requirements. The company cannot use standard Azure public cloud regions. Which Azure offering should they use?
Azure sovereign regions (such as Azure Government, Azure China, Azure Germany) are physically and logically isolated instances of Azure designed to meet specific compliance, sovereignty, and regulatory requirements. They operate independently from the public Azure cloud and ensure data residency within specific national boundaries.
A development team needs to run a containerized microservices application that requires automatic scaling, load balancing, self-healing, and rolling updates without managing the underlying infrastructure. The team wants built-in monitoring and wants to use Kubernetes. Which Azure service BEST meets these requirements?
Azure Kubernetes Service (AKS) is a managed Kubernetes orchestration service that provides automatic scaling, load balancing, self-healing, rolling updates, and built-in monitoring. AKS manages the Kubernetes control plane while you focus on your containers, meeting all requirements including the specific request for Kubernetes.
A financial services company needs to connect their on-premises datacenter to Azure with a private, dedicated connection that does NOT traverse the public internet and provides predictable latency and throughput up to 100 Gbps. Which networking service should they implement?
Azure ExpressRoute provides private, dedicated connectivity between on-premises infrastructure and Azure through a connectivity provider. It does not traverse the public internet, offers predictable performance, supports up to 100 Gbps bandwidth, and provides lower latencies than typical internet connections - perfect for financial services requirements.
A company stores 500 TB of archived compliance documents that are accessed once per year for audits. They need the lowest possible storage cost and can tolerate several hours of retrieval time. The data must be kept for 10 years. Which Azure Storage solution provides the MOST cost-effective option?
Azure Blob Storage Archive tier is specifically designed for rarely accessed data with the lowest storage cost (approximately $0.00099 per GB/month as of 2026). It can tolerate retrieval times of several hours (rehydration process), making it perfect for compliance archives accessed once yearly. The 180-day minimum storage duration is acceptable for 10-year retention.
A healthcare organization requires users to sign in once using their corporate credentials and then access multiple Azure services and SaaS applications without re-entering passwords. Additionally, they want to require an authentication app verification when users sign in from unknown devices. Which combination of Microsoft Entra ID features addresses these requirements?
Single Sign-On (SSO) allows users to sign in once with corporate credentials and access multiple applications without re-authentication. Multi-Factor Authentication (MFA) provides the additional verification requirement (authentication app) when signing in, especially from unknown devices. This combination directly addresses both stated requirements.
A company is developing an application that needs to process user-uploaded images to detect inappropriate content using AI. They want to use a pre-built Azure AI service without training custom models and need to ensure they follow responsible AI principles including transparency and accountability. Which Azure service should they use and what responsibility framework must they follow?
Azure AI Vision includes Content Safety API (part of Azure AI services) which provides pre-built content moderation capabilities for images without requiring custom model training. Microsoft's Responsible AI Standard encompasses transparency, accountability, and other principles (fairness, reliability, privacy, inclusiveness, security) that guide the ethical use of AI services - specifically applicable to Azure AI services as of the January 2026 exam update.
Ready for the real thing?
The full course has two full-length practice tests, video lessons for every exam domain, hands-on labs and detailed answer explanations.
Start my full course on Udemy →