Microsoft Azure Fundamentals · Domain 2 · 35% of exam

Describe Azure architecture and services

Drill 20 practice questions focused entirely on Describe Azure architecture and services for the Microsoft AZ-900 exam. Tap an answer for instant feedback and a full explanation — no sign-up, always free.

Verified answer20 questions
Question 1 of 20

A development team has containerized a microservices application composed of a dozen interdependent services. They need a platform that automatically orchestrates deployment, scaling, load balancing, and self-healing of these containers across a cluster of nodes, without building orchestration logic themselves. Which Azure service should they use?

Reviewed for accuracy · Report an issue
Question 2 of 20

Your company stores compliance documents in Azure Blob Storage that must be retained for 7 years but are rarely accessed. To minimize costs, you move these blobs to the Archive tier. A legal audit now requires immediate access to a document stored in Archive. What must you do before you can read the blob data?

Reviewed for accuracy · Report an issue
Question 3 of 20

A company wants to automatically require multi-factor authentication when employees sign in from outside the corporate network, but allow seamless sign-in when they are in the office. The decision must be evaluated at sign-in time based on the user's location. Which Microsoft Entra ID feature should be used to enforce this?

Reviewed for accuracy · Report an issue
Question 4 of 20

Your company runs two Azure virtual networks in different regions. Application servers in one virtual network must communicate directly with database servers in the other virtual network using private IP addresses, without traffic traversing the public internet. Which Azure networking feature should you implement?

Reviewed for accuracy · Report an issue
Question 5 of 20

A company has noticed several sign-in attempts using stolen employee passwords. Leadership wants to reduce the risk that a stolen password alone allows an attacker to access company resources, without deploying certificates or hardware to every user. Which Microsoft Entra ID feature should you enable?

Reviewed for accuracy · Report an issue
Question 6 of 20

Your organization stores compliance documents in Azure Blob Storage that must be retained for 7 years but are rarely accessed. To minimize costs, you moved 500 GB of blobs to the Archive tier last month. A legal team now needs immediate access to one of these archived documents. What must you do before the document can be downloaded?

Reviewed for accuracy · Report an issue
Question 7 of 20

Your company stores critical application data in an Azure Storage account in the East US region. Compliance requirements mandate that data must remain available even if an entire Azure datacenter fails, but the data does not need to be replicated to a secondary region. Which redundancy option should you configure for the storage account?

Reviewed for accuracy · Report an issue
Question 8 of 20

Your company stores critical application data in an Azure Storage account in the West Europe region. Management requires that the data remains accessible even if an entire Azure datacenter within the region becomes unavailable, but cross-region replication is not necessary due to compliance restrictions. Which redundancy option should you configure for the storage account?

Reviewed for accuracy · Report an issue
Question 9 of 20

Your company stores critical business data in Azure Blob Storage in the East US region. Management requires that data must remain available even if an entire Azure region becomes unavailable due to a disaster, and the data must be readable from the secondary location without waiting for Microsoft to initiate a failover. Which storage redundancy option should you configure?

Reviewed for accuracy · Report an issue
Question 10 of 20

Your company stores critical financial data in an Azure Storage account in the East US region. Management requires that data must survive a complete datacenter failure within the region, but does not need protection against a regional disaster. Which redundancy option meets this requirement at the lowest cost?

Reviewed for accuracy · Report an issue
Question 11 of 20

Your company stores critical financial data in an Azure Storage account in the East US region. Management requires that data must remain accessible even if the entire East US region experiences a catastrophic failure, and they want Azure to automatically handle failover to another region. Which storage redundancy option should you configure?

Reviewed for accuracy · Report an issue
Question 12 of 20

Your company stores critical financial data in an Azure Storage account in the East US region. The compliance team requires that data must remain available even if the entire East US region experiences an outage, and the data must be readable from a secondary location during such an outage. Which redundancy option should you configure for the storage account?

Reviewed for accuracy · Report an issue
Question 13 of 20

Your company stores critical financial data in an Azure Storage account in the East US region. You need to ensure that if the entire East US region becomes unavailable, the data will be automatically readable from a secondary region without requiring manual intervention. Which storage redundancy option should you configure?

Reviewed for accuracy · Report an issue
Question 14 of 20

Your company stores critical financial data in an Azure Storage account in the East US region. Management requires that the data must remain available even if the entire East US region becomes unavailable due to a major disaster, and the data must be readable from the secondary location without waiting for Microsoft to initiate a failover. Which storage redundancy option should you configure?

Reviewed for accuracy · Report an issue
Question 15 of 20

Your company stores critical business documents in an Azure Storage account. Management requires that the data remain accessible even if an entire Azure region becomes unavailable, and they also want protection against the failure of a single datacenter within the primary region. Which redundancy option should you choose?

Reviewed for accuracy · Report an issue
Question 16 of 20

Your company stores critical business documents in an Azure Storage account. Management requires that the data remain accessible even if an entire Azure region becomes unavailable due to a natural disaster. You must choose the lowest-cost redundancy option that meets this requirement. Which redundancy option should you select?

Reviewed for accuracy · Report an issue
Question 17 of 20

A company stores critical backup files in an Azure Storage account. Management requires that the data remain available even if an entire Azure region becomes unavailable, while keeping costs as low as possible. Which redundancy option should you recommend?

Reviewed for accuracy · Report an issue
Question 18 of 20

Your company stores critical business documents in an Azure Storage account. The compliance team requires that the data remain accessible even if an entire Azure region becomes unavailable, and they also want the lowest-cost option that still meets this requirement. Which redundancy option should you choose?

Reviewed for accuracy · Report an issue
Question 19 of 20

Your company stores critical business data in an Azure Storage account. Management requires that the data remain accessible even if an entire Azure region becomes unavailable due to a natural disaster. Which redundancy option should you choose to meet this requirement at the lowest cost?

Reviewed for accuracy · Report an issue
Question 20 of 20

Your company stores customer archive files in an Azure Storage account. The business requires that the data remain accessible even if an entire Azure region becomes unavailable due to a natural disaster. You want to meet this requirement at the lowest possible cost. Which redundancy option should you choose?

Reviewed for accuracy · Report an issue

More AZ-900 practice

Keep going with the other Microsoft Azure Fundamentals domains, or take a full timed mock exam.

← Back to AZ-900 overview