Describe Azure architecture and services

AZ-900 · 115 questions

• A coastal city wants Azure resources near citizens for lower latency and asks what an Azure region is. Which definition is accurate?
• During disaster planning, staff ask why Azure pairs regions. What is the fundamentals purpose of region pairs?
• A national government workload needs a specially isolated Azure environment for compliance. Which Azure concept addresses that need at fundamentals depth?
• Council members use "region" and "availability zone" as if they mean the same thing. Which distinction is correct?
• A records ordinance requires certain data to remain in-country. Which Azure architectural choice primarily addresses that data residency need?
• A 911 computer-aided dispatch app must keep running if a single datacenter in the region fails. Which Azure construct is designed for that in-region high availability need?
• Staff ask whether every Azure region has availability zones and what zones are for. Which fundamentals statement is the best answer?
• A facilities brief describes three separate buildings in one region, each with independent power, networking, and cooling. Which Azure concept matches that description?
• On a municipal disaster-recovery slide, how should staff contrast availability zones with region pairs?
• During a school tour of city IT, a student asks what an Azure datacenter is. Which definition is accurate?
• How do Azure datacenters relate to regions and availability zones at a fundamentals level?
• A council member says "the cloud" has no physical footprint anywhere. Which correction is accurate for Azure?
• A library catalog deployment includes a virtual machine, a network interface, and a disk. What are these items called in Azure?
• The library wants one lifecycle unit so deleting a container removes the entire catalog stack together. Which Azure construct provides that logical container for related resources?
• Can a single Azure resource belong to more than one resource group at the same time?
• A parks department wants a throwaway test stack for a permit portal and a stable production stack, and needs to delete the entire test environment in one action without touching production. How should the team organize those Azure resources?
• A city finance clerk asks whether creating a new resource group automatically creates a separate Azure bill for that group. What should the cloud lead explain?
• Municipal finance needs a clear Azure billing and access boundary for each department so invoices and spending limits stay separate. Which Azure construct provides that account-level billing unit?
• A city IT office wants production citizen services and a free-form sandbox for experiments kept apart so quotas, billing, and accidental changes do not collide. What Azure approach matches that goal?
• During an architecture review, a vendor diagram shows resource groups floating above subscriptions. Where do resource groups actually sit in Azure?
• A county wants a convenient scope where role assignments and Azure Policy can cover many resource groups at once for a whole workload estate. Which scope often serves that management purpose?
• A city now has ten Azure subscriptions and wants one place to inherit governance policy downward instead of configuring each subscription from scratch. Which construct organizes subscriptions for that hierarchy?
• A state IT office must oversee many county Azure subscriptions under one governance tree while counties keep their own subscriptions. Which Azure feature fits that multi-subscription hierarchy?
• On a municipal cloud hierarchy poster, where should management groups be placed relative to subscriptions?
• A small town runs a single Azure subscription with a handful of resource groups. When is introducing management groups most clearly justified?
• A civic architect asks trainees to list Azure’s core resource hierarchy from highest governance container to lowest. Which order is correct?
• A draft city architecture slide places resource groups above subscriptions. What correction should reviewers insist on?
• A state cloud team assigns Azure Policy at a parent management group that contains several city subscriptions. What describe-level behavior should leaders expect?
• An operator deletes a resource group that held a city’s pilot chatbot resources. What is the expected scope of that deletion?
• A civic org chart maps Public Works, Parks, and Finance each to their own Azure subscription under one root management group. What does that mapping illustrate?
• For a city lunch-and-learn slide, which comparison best distinguishes virtual machines, containers, and functions at Azure Fundamentals depth?
• A legacy permitting application needs full guest operating-system control for custom drivers, while a small webhook should run only when a form is submitted. Which compute pairing fits those needs?
• How should a municipal cloud primer correctly place Azure Functions versus Azure Virtual Machines?
• At Azure Fundamentals depth, what is a useful way to contrast containers with virtual machines for a city app team?
• A training vendor starts explaining AKS node-pool design during an AZ-900 compute-types module for city staff. What should the instructor keep the lesson focused on instead?
• A small planning office needs one Azure-hosted machine for a lightweight GIS tool where staff will manage the operating system. Which service is the core IaaS compute option for that need?
• A citizen portal must grow and shrink across many identical web-tier virtual machines as traffic rises and falls. Which Azure VM option is designed for that identical-instance scale-out pattern?
• A records office wants several related Azure VMs placed so a rack- or fault-domain style outage inside a datacenter is less likely to take all of them down together. Which VM option describes that availability grouping?
• Remote municipal staff need Windows desktops hosted in Azure instead of carrying office PCs home. Which Azure VM-related offering matches that virtual desktop purpose?
• A city architect must explain when to choose Virtual Machine Scale Sets versus an availability set. Which describe-level contrast is accurate?
• A city operations team is sizing a new Azure virtual machine for a records-scanning app and must list the core dependent resources a typical VM also needs. Which set best matches those requirements?
• When a parks IT admin creates a virtual machine in the Azure portal for a trail-map server, what else commonly appears in the same resource group?
• A municipal GIS VM must talk to other Azure resources and eventually to users. Why is networking considered a required piece for typical VM connectivity?
• A county clerk’s Azure VM stores the operating system on one disk and scanned deed images on another. How should those storage attachments be described?
• A city wants to host a public grants website with managed web hosting and prefers not to patch guest OS images itself. Which application hosting option fits that need?
• A municipal development team packages a permitting microservice into a container image for consistent deployment. Which application hosting approach does that packaging represent?
• Public works needs the same custom Windows Server and IIS configuration it runs on-premises, with full guest OS control in Azure. Which hosting option best matches that requirement?
• A city architect must pick hosting for a municipal API: maximum platform management, packaged portable images, or full guest OS control. Which describe-level mapping is correct?
• When explaining hosting options to a county board, how should Azure web apps and virtual machines be tied to service types?
• A city wants to isolate Azure resources inside a private address space so internal systems are not exposed as a flat public network. Which service provides that private network foundation?
• A municipal design places the citizen web tier and the database tier in separate segments inside one Azure Virtual Network. What Azure networking concept provides that segmentation?
• Parks and police each have their own Azure Virtual Network and need private connectivity between those VNets. Which feature provides that VNet-to-VNet connection purpose?
• A city IT team needs name resolution for Azure resources and related DNS scenarios so hostnames map to the right addresses. Which service’s purpose matches that need at a describe level?
• City hall needs encrypted connectivity from on-premises networks to Azure across the public internet. Which Azure networking feature matches that hybrid purpose?
• A county wants private dedicated connectivity from its fiber provider into Azure rather than a VPN over the public internet. Which service matches that purpose?
• A storage account used for public open-data downloads is reachable on the public internet. What does that reachability indicate about the endpoint type?
• Finance wants Azure SQL and storage reachable only from inside the city’s Virtual Network, not from the open internet. Which feature provides that private access pattern?
• A citizen portal must stay reachable on the internet, but its backend storage should not be. How should endpoint types be chosen for those two pieces?
• Field crews upload unstructured pothole photos that must be stored as objects in Azure. Which Azure Storage service best fits that data type?
• Departments currently use shared network file shares on-premises and want a lift-and-shift style share in Azure using SMB. Which Azure Storage service matches that need?
• An on-premises uploader drops work items for a cloud worker to process later. Which Azure Storage service provides that simple message queue pattern?
• A small IoT device registry for park sensors needs structured NoSQL-style entity rows with keys and attributes. Which Azure Storage service fits at a compare level?
• A civic app must store large permit PDF files as objects, not as SMB shares, message queues, or NoSQL entity rows. Which Azure Storage service should the team select?
• Permit PDFs are viewed many times each day by clerks and applicants. Which Azure Blob access tier best matches that frequent-access pattern?
• Monthly financial reports are stored in blob storage but are rarely opened after filing. Which access tier best matches that infrequent-access pattern?
• A city clerk must keep decade-old council minutes in Azure Blob Storage. The files are almost never opened and retrieval can wait hours. Which access tier best matches this pattern?
• A municipal records team is choosing a Blob access tier for scanned permit packs. Which statement best describes the main trade-off they should weigh?
• A county IT lead is documenting Azure Blob access tiers for a staff training slide. Which set lists common Azure blob access tiers without inventing non-Azure names?
• A small town wants the lowest-cost redundancy for Blob data that keeps multiple copies inside a single datacenter model. Which option matches that describe-level goal?
• A city housing portal must keep Blob copies resilient across availability zones inside one Azure region. Which redundancy option describes that protection?
• A county emergency archive must replicate Blob data to a secondary Azure region for disaster recovery. Which redundancy concept fits at describe level?
• A metro IT board wants Blob protection that combines availability-zone copies in the primary region with replication to a secondary region. Which option names that combined theme?
• A city disaster-recovery policy requires Blob Storage copies in another Azure region, not only within one datacenter. Which choice correctly matches that policy?
• A village CIO asks what an Azure storage account is in fundamentals terms. Which description is accurate?
• A county warehouse project learns that Azure storage accounts offer performance and account-kind choices. Which statement stays at describe-level accuracy?
• A city open-data team wants blobs for documents and queues for async job messages under one Azure Storage setup. What should they understand about a storage account?
• A records officer is creating an Azure storage account for resident privacy-sensitive scans. Why do naming and region choices matter at a describe level?
• A help-desk trainee confuses an Azure storage account with a single blob container. Which hierarchy statement is correct?
• A municipal jump box must run a scripted bulk copy of property records into Azure Blob Storage. Which tool is purpose-built for that command-line transfer pattern?
• A city help desk prefers a graphical tool to browse and upload blobs without writing scripts. Which Azure-related tool fits that need?
• Branch offices still use on-premises Windows file servers, but the city wants those shares synchronized with Azure Files. Which service describes that hybrid sync pattern?
• A county must pick a file-movement approach: nightly automated Blob uploads, occasional GUI browsing, or ongoing hybrid sync of on-prem file servers. Which matching rule is correct?
• A town wants to discover, assess, and migrate on-premises virtual machines into Azure. Which service suite is aimed at that purpose?
• A transit authority has many terabytes of camera archives and a network link too slow for a timely online upload. Which Azure option fits offline physical transfer?
• A city must choose between assessing online VM migration readiness and shipping a huge offline dataset when the WAN cannot finish in time. Which pairing is correct?
• City staff need a cloud identity directory so they can sign in to Microsoft 365 and Azure resources with organizational accounts. Which service fulfills that purpose?
• A legacy line-of-business app in Azure still needs traditional domain-join and legacy protocol behaviors without the city running its own domain controllers. Which managed service fits that describe-level need?
• A municipal architect must contrast Microsoft Entra ID with Microsoft Entra Domain Services for staff. Which distinction is accurate at fundamentals depth?
• Training materials for city administrators still say “Azure AD,” but newer docs say “Microsoft Entra ID.” What should learners understand?
• City employees complain about separate passwords for the portal, email, and a line-of-business web app. Which identity benefit describes signing in once to use multiple applications?
• A city VPN admin team must approve a phone prompt in addition to entering a password before connecting to municipal systems. Which authentication concept does that requirement describe?
• A municipal help desk wants staff to sign in with a FIDO2 security key instead of typing a shared password. Which authentication approach does that describe?
• A county CIO asks how single sign-on (SSO) differs from multifactor authentication (MFA) for city apps. Which comparison is accurate?
• Citizen-service contractors must access a municipal portal without sharing one department password among the crew. Which approach best matches modern authentication guidance?
• A city project lead needs to invite a vendor architect into the municipal Microsoft Entra tenant so the vendor can collaborate without becoming a full city employee. Which identity concept does that describe?
• A partner nonprofit needs limited access to a city planning app but should not receive a full municipal employee account. Which Azure identity approach fits that use case?
• A public-works manager says inviting a consulting firm as Entra guests is the same as opening a storage account to anonymous internet access. What is the correct clarification?
• The finance department wants to block sign-ins to a municipal finance app when the attempt comes from unexpected countries. Which Microsoft Entra capability is designed for that kind of policy-based control?
• City staff on the municipal network may sign in with a password, but staff working from home must complete MFA. Which concept describes that signal-based enforcement?
• A network engineer argues that Microsoft Entra Conditional Access is simply another hardware firewall appliance for the city datacenter. How should a fundamentals-level reply correct that view?
• During an AZ-900 study session, a municipal IT trainee asks what Conditional Access is for—without needing full policy JSON. Which statement best describes its purpose?
• The city help desk needs to view resources in one resource group without changing them. Which Azure capability is used to grant a group the Reader role on that resource group?
• A municipal architect notes that Azure RBAC is often confused with Entra app single sign-on. What does Azure RBAC primarily authorize?
• Summer interns need limited rights on one parks-and-recreation resource group. Which RBAC practice best follows least privilege?
• A city cloud class asks what pieces make up an Azure RBAC role assignment at a describe level. Which trio is correct?
• City security training says never trust and always verify—even for staff already on the municipal network. Which security model does that principle describe?
• A department claims that deploying a VPN is enough to achieve Zero Trust for all municipal cloud apps. Why is that claim incomplete?
• During a council briefing, someone asks which Azure portal toggle turns on Zero Trust as a single product. What is the accurate fundamentals response?
• A municipal security architecture stacks physical, identity, network, application, and data controls so one failure is not catastrophic. Which concept does that layered approach describe?
• A parks department relies only on a strong password for a public-facing app and calls that defense-in-depth. What is wrong with that claim?
• A municipal architecture slide shows stacked controls from identity through network and application down to data protection. Which security model is illustrated?
• The city cloud team wants unified security posture management and recommendations across Azure resources. Which service purpose matches that need?
• A trainee says Microsoft Defender for Cloud and Entra Conditional Access are the same feature. Which distinction is correct?
• City leadership wants visibility into a secure score and prioritized security recommendations for Azure workloads. Which service is aimed at that fundamentals-level outcome?
• For Azure Fundamentals study, how should a municipal learner describe Microsoft Defender for Cloud without drifting into AZ-500 operations depth?