Microsoft Azure Fundamentals (AZ-900) — All Questions

A developer wants to run small pieces of code in response to events and be billed only when the code executes. Which Azure service is designed for this?

• a.Azure Virtual Machines
• b.Azure App Service
• c.Azure Functions✓
• d.Azure Kubernetes Service

Azure Functions is a serverless, event-driven compute service billed per execution. Virtual Machines and App Service run continuously, and AKS orchestrates containers rather than billing per individual function execution.

What is an Azure Availability Zone?

• a.A physically separate datacenter within a region that protects against datacenter-level failures✓
• b.A backup copy of data in another country
• c.A billing boundary for subscriptions
• d.A virtual network subnet

Availability Zones are physically separate datacenters inside a region, each with independent power and networking, so a workload spread across zones survives a single datacenter failure. They are not a cross-country backup, a billing boundary, or a subnet.

Which Azure storage service is best suited to store large amounts of unstructured data such as images, video, and backups?

• a.Azure Table storage
• b.Azure Queue storage
• c.Azure Files
• d.Azure Blob storage✓

Azure Blob storage is optimized for unstructured object data like media and backups. Table storage holds NoSQL key-value data, Queue storage passes messages, and Files provides SMB file shares.

An organization needs a globally distributed NoSQL database with low-latency reads and writes in multiple regions. Which service fits?

• a.Azure SQL Database
• b.Azure Cosmos DB✓
• c.Azure Blob storage
• d.Azure Files

Azure Cosmos DB is a globally distributed, multi-model NoSQL database offering low latency and multi-region writes. Azure SQL Database is relational and regionally focused, and Blob and Files are storage services, not databases.

A company needs a dedicated, private connection from its on-premises datacenter to Azure that does not traverse the public internet. Which service provides this?

• a.Azure VPN Gateway
• b.Azure Load Balancer
• c.Azure ExpressRoute✓
• d.Azure DNS

ExpressRoute establishes a private, dedicated connection to Azure that bypasses the public internet, offering more reliable throughput. A VPN Gateway connects over the encrypted public internet, Load Balancer distributes traffic, and DNS resolves names.

Which compute service lets you fully control and manage the guest operating system, giving the most configuration flexibility?

• a.Azure Virtual Machines✓
• b.Azure Functions
• c.Azure App Service
• d.Azure Container Instances

Azure Virtual Machines are IaaS, giving you full control over the guest OS and installed software. Functions, App Service, and Container Instances are more managed and abstract away OS management.