AZ-900
Free Microsoft Certified: Azure Fundamentals Practice Test
12 exam-style questions with full explanations — no sign-up. Score yourself, then close your gaps with the full course.
Exam fee ~$993 exam domainsLevel Beginner2 timed practice tests in the course
✅ Free practice — no sign-up📝 Real exam-style questions💡 Detailed explanations💸 30-day money-back via Udemy
A healthcare organization must ensure that patient data stored in Azure remains within specific geographic boundaries to comply with data residency regulations. The organization also needs the ability to store some non-sensitive analytics data in the most cost-effective region globally. Which cloud deployment model BEST meets these requirements?
Hybrid cloud allows the organization to keep sensitive patient data on-premises or in specific Azure regions that meet compliance requirements, while leveraging the cost benefits and global reach of Azure's public cloud for non-regulated analytics workloads. This provides the flexibility to meet both regulatory and cost-optimization requirements.
A healthcare organization needs to deploy virtual machines in Azure to comply with US government regulations requiring that customer data remains within US sovereign boundaries and is isolated from commercial Azure regions. Which Azure offering should they use?
Azure Government is a separate instance of Azure designed specifically for US government agencies and their partners. It provides physical and network isolation from commercial Azure, meets strict compliance requirements (FedRAMP, CJIS, IRS 1075), and ensures data stays within US sovereign boundaries. This is the only option that meets the regulatory requirement for sovereign cloud isolation.
A company wants to estimate the cost savings of migrating their on-premises infrastructure to Azure. They need to compare their current datacenter costs including electricity, cooling, and hardware maintenance against Azure's pay-as-you-go pricing. Which tool should they use?
The TCO Calculator is specifically designed to compare on-premises infrastructure costs (including datacenter expenses like power, cooling, IT labor, hardware, software licensing) against Azure cloud costs. It provides a comprehensive migration cost analysis over 1-5 years.
A startup company is migrating its application to Azure. The application consists of a web frontend, application logic, and a database. The company wants to minimize infrastructure management while retaining full control over the operating system and runtime environment for the application logic tier. Which combination of Azure service models should they use?
Azure App Service (PaaS) for the web frontend minimizes management overhead, Azure Virtual Machines (IaaS) for the application logic provides the OS-level control they require, and Azure SQL Database (PaaS) for the database reduces database management tasks. This combination meets their specific control requirements while optimizing management overhead where possible.
A company runs a web application that experiences predictable traffic spikes every Monday morning from 8 AM to 10 AM, requiring 20 VMs during this period but only 5 VMs the rest of the week. The application must maintain consistent performance during spikes. Which Azure compute solution BEST optimizes cost while meeting this requirement?
Virtual Machine Scale Sets support scheduled scaling (time-based autoscaling), allowing automatic scale-out to 20 VMs every Monday 8-10 AM and scale-in to 5 VMs afterward. This eliminates manual intervention, optimizes costs by running only needed VMs, and ensures consistent performance during predictable spikes. VMs remain available throughout the spike period.
An organization needs to ensure that all Azure resources in their subscription are tagged with 'Department' and 'CostCenter' values before they can be created. Users who attempt to create resources without these tags should receive an error. What should they implement?
Azure Policy with a Deny effect prevents resource creation if required tags are missing. The built-in policy 'Require a tag and its value on resources' or custom policies can enforce tagging requirements at creation time, blocking non-compliant deployments.
In the Azure shared responsibility model, which security task is ALWAYS the customer's responsibility regardless of whether they use IaaS, PaaS, or SaaS?
Identity and access management (including user authentication, authorization, and account management) is always the customer's responsibility across all service models. Even in SaaS solutions like Microsoft 365, customers must manage who has access to their data and applications, configure multi-factor authentication, and control user permissions.
An organization needs to transfer 80 TB of archived data from an on-premises datacenter to Azure Blob Storage. The datacenter has a 100 Mbps internet connection, and the transfer must complete within 2 weeks. Which Azure service should they use?
Azure Data Box is designed for offline bulk data transfer when network transfer is impractical. Transferring 80 TB over 100 Mbps would take approximately 74 days (80 TB = 640,000 Gb ÷ 100 Mbps ÷ 86,400 seconds/day), far exceeding the 2-week requirement. Data Box allows you to copy data to a physical device (up to 80 TB capacity), ship it to Azure, where Microsoft uploads the data to your storage account within days.
A company manages Azure resources across multiple subscriptions and needs to view consolidated cost data, set budgets with email alerts when spending reaches 80% of budget, and analyze spending trends by department using tags. Which tool provides these capabilities?
Microsoft Cost Management provides cost analysis across multiple subscriptions, budget creation with configurable alert thresholds (e.g., 80%, 100%), cost breakdowns by tags, and historical spending trends. It's the central tool for ongoing Azure cost monitoring and optimization.
A company experiences predictable traffic patterns with normal baseline usage but occasional traffic spikes that are 10 times the baseline during product launches. They want to optimize costs while maintaining performance. Which Azure cloud benefit BEST addresses this requirement?
Elasticity allows resources to automatically scale out during traffic spikes and scale in during normal periods, optimizing both performance and costs. The company pays only for resources during peak usage and can reduce capacity (and costs) during baseline periods, directly addressing their cost optimization requirement while handling variable demand.
A development team needs to ensure that only users from the marketing department can access a specific Azure Storage account, and access should be automatically denied if the user is signing in from outside the corporate network. Which Azure identity and access feature should be configured?
Microsoft Entra Conditional Access allows you to create policies that enforce access controls based on multiple conditions including user/group membership and location (network/IP range). You can create a policy that targets the marketing department group and requires the sign-in to originate from corporate network IP ranges, automatically denying access from other locations. This provides centralized, dynamic policy enforcement.
An administrator needs to prevent any user from accidentally deleting a critical Azure SQL Database that contains production data. The database must remain modifiable (schema changes, data updates) but deletion must be blocked for all users including subscription owners. What should be configured?
A CanNotDelete resource lock prevents deletion of the resource while allowing all other operations including modifications, updates, and configuration changes. It overrides RBAC permissions, blocking even subscription owners from deleting the resource until the lock is removed.
Ready for the real thing?
The full course has two full-length practice tests, video lessons for every exam domain, hands-on labs and detailed answer explanations.
Start my full course on Udemy →AZ-900 exam — quick answers
How much does the AZ-900 exam cost?
The exam fee is approximately $99 and varies by region — confirm current pricing with the certification vendor before you book.
What topics are on the exam?
It covers 3 domains: Describe cloud concepts (25-30%), Describe Azure architecture and services (35-40%), Describe Azure management and governance (30-35%). The full course has a dedicated chapter, lab and practice-test coverage for each.
Is this practice test really free?
Yes — all questions on this page are free with explanations and no sign-up. The paid Udemy course adds two full-length timed exams, video lessons and hands-on labs.
Will this prepare me for the real exam?
The questions mirror the real exam's style and are mapped to the official domains. This is exam-focused preparation — combine the free test with the full course's timed simulations to gauge your readiness.