Microsoft Azure Fundamentals (AZ-900) — All Questions

A developer wants to run small pieces of code in response to events and be billed only when the code executes. Which Azure service is designed for this?

• a.Azure Functions✓
• b.Azure Virtual Machines
• c.Azure Kubernetes Service
• d.Azure App Service

Azure Functions is a serverless, event-driven compute service billed per execution. Virtual Machines and App Service run continuously, and AKS orchestrates containers rather than billing per individual function execution.

What is an Azure Availability Zone?

• a.A backup copy of data in another country
• b.A billing boundary for subscriptions
• c.A physically separate datacenter within a region that protects against datacenter-level failures✓
• d.A virtual network subnet

Availability Zones are physically separate datacenters inside a region, each with independent power and networking, so a workload spread across zones survives a single datacenter failure. They are not a cross-country backup, a billing boundary, or a subnet.

Which Azure storage service is best suited to store large amounts of unstructured data such as images, video, and backups?

• a.Azure Blob storage✓
• b.Azure Queue storage
• c.Azure Files
• d.Azure Table storage

Azure Blob storage is optimized for unstructured object data like media and backups. Table storage holds NoSQL key-value data, Queue storage passes messages, and Files provides SMB file shares.

An organization needs a globally distributed NoSQL database with low-latency reads and writes in multiple regions. Which service fits?

• a.Azure Files
• b.Azure SQL Database
• c.Azure Cosmos DB✓
• d.Azure Blob storage

Azure Cosmos DB is a globally distributed, multi-model NoSQL database offering low latency and multi-region writes. Azure SQL Database is relational and regionally focused, and Blob and Files are storage services, not databases.

A company needs a dedicated, private connection from its on-premises datacenter to Azure that does not traverse the public internet. Which service provides this?

• a.Azure DNS
• b.Azure ExpressRoute✓
• c.Azure Load Balancer
• d.Azure VPN Gateway

ExpressRoute establishes a private, dedicated connection to Azure that bypasses the public internet, offering more reliable throughput. A VPN Gateway connects over the encrypted public internet, Load Balancer distributes traffic, and DNS resolves names.

Which compute service lets you fully control and manage the guest operating system, giving the most configuration flexibility?

• a.Azure App Service
• b.Azure Container Instances
• c.Azure Functions
• d.Azure Virtual Machines✓

Azure Virtual Machines are IaaS, giving you full control over the guest OS and installed software. Functions, App Service, and Container Instances are more managed and abstract away OS management.