Prepare for the AZ-900 Microsoft Azure Fundamentals Exam

Free AZ-900 Practice Questions (With Answers)

5 real questions from the AZ-900 bank, with the full explanation for each answer. No sign-up needed to read them.

1. Question 1Describe cloud concepts [CapEx vs. OpEx]

   A small business is evaluating migrating its IT infrastructure to the cloud. They currently own all their servers and hardware, which required a significant upfront investment. They are looking for a model that minimizes large initial expenditures. Which core benefit of cloud computing directly addresses this concern?

   • A.Shifting from Operational Expenditure (OpEx) to Capital Expenditure (CapEx)
   • B.Reducing data egress costs
   • C.Eliminating the need for software licenses
   • D.Shifting from Capital Expenditure (CapEx) to Operational Expenditure (OpEx)
   Show answer and explanation

   Correct answer: D

   Correct. Cloud computing shifts IT spending from Capital Expenditure (CapEx), which is upfront spending on physical infrastructure, to Operational Expenditure (OpEx), which is spending on services or products as you use them (pay-as-you-go). This reduces the need for large initial investments, making it ideal for businesses seeking to minimize upfront costs.

   Why the other options are wrong

   A. Incorrect. Capital Expenditure (CapEx) involves upfront spending on physical infrastructure. The cloud model aims to reduce this by shifting to a pay-as-you-go model.

   B. Incorrect. While cost-effectiveness is a benefit, data egress costs are a specific aspect of ongoing operational costs, not the fundamental shift from large upfront investments.

   C. Incorrect. While some cloud services include software, many still require separate licensing or have bundled costs, but this is not the primary benefit related to minimizing upfront hardware investment.

2. Question 2Describe Azure architecture and services [Azure Virtual Machines (VMs)]

   A company needs to migrate a legacy application to Azure. This application requires a very specific operating system configuration and several third-party software components that are not compatible with managed platforms. Which Azure compute service is the most appropriate choice?

   • A.Azure Virtual Machines (VMs)
   • B.Azure Container Instances (ACI)
   • C.Azure App Service
   • D.Azure Functions
   Show answer and explanation

   Correct answer: A

   Correct. Azure Virtual Machines (VMs) provide Infrastructure as a Service (IaaS), offering granular control over the operating system, installed software, and overall environment. This is ideal for 'lift-and-shift' migrations of legacy applications requiring customized OS configurations or specific software that cannot be easily refactored for PaaS or containerized.

   Why the other options are wrong

   B. Incorrect. ACI is for running isolated containers and while it offers some flexibility, it's generally not suitable for complex legacy applications with deeply integrated OS dependencies and specific software installations that aren't containerized.

   C. Incorrect. Azure App Service is a PaaS offering that abstracts away the operating system and infrastructure, limiting control over specific OS configurations and custom software installations.

   D. Incorrect. Azure Functions is a serverless compute service for event-driven code snippets and does not provide an environment for hosting traditional, full-stack applications with custom OS dependencies.

3. Question 3Describe cloud concepts [Public Cloud Use Cases]

   An online retail startup is preparing for a new product launch. They anticipate a massive but unpredictable surge in customer traffic for a limited period and want to pay only for the resources they consume during this peak. Which cloud deployment model is ideal for this highly variable and cost-sensitive workload?

   • A.Private Cloud
   • B.Hybrid Cloud
   • C.Public Cloud
   • D.Community Cloud
   Show answer and explanation

   Correct answer: C

   Correct. A public cloud offers high scalability, elasticity, and a pay-as-you-go pricing model, making it ideal for workloads with unpredictable and variable demand, allowing the startup to scale resources up or down as needed and pay only for what they use.

   Why the other options are wrong

   A. Incorrect. A private cloud requires significant upfront investment and management, which is not suitable for a cost-sensitive startup with unpredictable, short-term traffic spikes.

   B. Incorrect. While a hybrid cloud offers flexibility, a public cloud alone is sufficient and most cost-effective for a purely burstable, unpredictable workload with no existing on-premises dependencies mentioned.

   D. Incorrect. A community cloud is for shared concerns among a specific group of organizations, not primarily for individual business scalability or cost-effectiveness for unpredictable consumer traffic.

4. Question 4Describe Azure architecture and services [Microsoft Defender for Cloud]

   An organization needs a centralized solution to continuously monitor the security posture of its Azure resources, identify security misconfigurations, and receive actionable recommendations to improve its overall security. Which Azure service provides these capabilities?

   • A.Azure Security Center, configured separately for each monitored service.
   • B.Microsoft Defender for Cloud, which provides a unified security posture score and actionable hardening recommendations.
   • C.Azure Policy, which evaluates your resources against defined compliance rules and automatically enforces organizational standards.
   • D.Azure Monitor, which collects performance metrics, logs, and operational telemetry.
   Show answer and explanation

   Correct answer: B

   Correct. Microsoft Defender for Cloud (formerly Azure Security Center) is a cloud security posture management (CSPM) and workload protection platform. It continuously assesses resources, scores your posture, and returns prioritised hardening recommendations.

   Why the other options are wrong

   A. Incorrect. Azure Security Center is the retired name for this capability, and it was superseded by Microsoft Defender for Cloud, which provides unified, automated posture management rather than per-service configuration.

   C. Incorrect. Azure Policy enforces organizational standards and can audit compliance, but it does not provide a live security posture score or threat protection — that is the role of Defender for Cloud.

   D. Incorrect. Azure Monitor focuses on operational telemetry — metrics, logs, and alerts for performance and availability. Security posture assessment and hardening recommendations come from Microsoft Defender for Cloud, not Azure Monitor.

5. Question 5Describe Azure management and governance [Factors Affecting Azure Costs]

   Which factor is generally NOT considered a primary factor affecting Azure costs?

   • A.Type of resource used (e.g., VM, storage)
   • B.Inbound data transfer (ingress) into Azure
   • C.Geographic region where resources are deployed
   • D.Outbound data transfer (egress) from Azure datacenters
   Show answer and explanation

   Correct answer: B

   Correct. Data transfer *into* (ingress) an Azure datacenter is generally free of charge. Data transfer *out of* (egress) Azure datacenters typically incurs costs.

   Why the other options are wrong

   A. Incorrect. Different resource types have different pricing models and base costs, significantly affecting overall Azure costs.

   C. Incorrect. The cost of Azure services can vary significantly between different geographic regions due to variations in infrastructure, energy costs, and taxes.

   D. Incorrect. Outbound data transfer (egress) is a common source of unexpected costs and is a primary factor affecting Azure bills.