Azure Fundamentals (AZ-900) — All Questions

A hospital must keep certain patient records on infrastructure it fully controls but wants cloud scale for its public website. Which model fits both needs?

• a.SaaS only
• b.Public cloud only
• c.Hybrid cloud✓
• d.A single private cloud with no internet access at all

A hybrid cloud lets the hospital keep sensitive records on controlled infrastructure while using public cloud scale for the website. Data and apps can move between the two. This balances compliance with flexibility.

How does deploying to multiple global regions improve the user experience?

• a.It increases the distance data must travel to users
• b.It removes the need for any redundancy in the design
• c.It forces all traffic through one single country
• d.It places resources closer to users, lowering latency✓

Running resources in regions near users reduces network latency. It also supports resilience and data-residency compliance. Global reach is a core advantage of large cloud platforms.

In a traditional on-premises datacenter (not cloud), who is responsible for the physical security of the servers?

• a.No one is responsible for it in that model
• b.The external cloud provider that hosts the organization's other workloads
• c.The internet service provider that supplies connectivity
• d.The organization that owns the datacenter✓

On-premises, the owning organization is fully responsible for physical security, hardware, and everything else. Moving to the cloud shifts physical security to the provider. This is a key difference in the shared responsibility model.

During off-peak hours, an elastic system automatically removes unused instances. What is the main benefit?

• a.Lower cost by not paying for idle capacity✓
• b.A guarantee that the customer owns the physical hardware
• c.Permanently fixed capacity that never changes
• d.Consistently higher latency and slower response times for all end users

Elasticity releases resources when demand falls so you stop paying for idle capacity. Capacity returns automatically when demand rises. This keeps performance steady while controlling cost.

Which cloud capability most improves reliability during a hardware failure?

• a.Turning off all health monitoring to save money
• b.Deleting older backups on a regular schedule to conserve storage space
• c.Automatic failover to redundant resources✓
• d.Using only a single availability zone for all resources

Reliability during failures depends on redundancy and automatic failover. When one component fails, traffic shifts to healthy resources. This keeps the service available with minimal disruption.

What does 'scalability' primarily describe?

• a.The ability to increase capacity to handle growing workloads✓
• b.The ability to encrypt data both at rest and in transit automatically
• c.The ability to physically own the underlying servers
• d.The ability to disable all logging across the system

Scalability is the capacity to grow resources to meet increasing demand. It can be achieved by scaling up or scaling out. It ensures applications keep performing as workloads expand.

Why might a growing startup prefer the cloud's OpEx model over large CapEx purchases?

• a.It locks them into rigid ten-year hardware purchase and maintenance contracts
• b.It requires buying a full datacenter building first before any deployment
• c.It preserves cash by avoiding large upfront hardware investments✓
• d.It guarantees the software they build will contain no bugs

The OpEx model spreads cost over time as usage-based charges. This preserves cash and avoids risky upfront hardware bets. Startups can scale spending gradually as they grow.

You deploy a virtual machine using IaaS. Who applies security updates to the guest operating system?

• a.The hardware manufacturer handles it automatically
• b.The provider does it silently on your behalf
• c.No operating system updates are ever needed in IaaS
• d.You, the customer✓

With IaaS the customer manages the guest OS, including patching. The provider only maintains the physical host and hypervisor. This division is central to cloud security responsibilities.

An enterprise gradually moving workloads to the cloud over several years, keeping some systems on-premises meanwhile, is using which approach?

• a.A hybrid cloud migration✓
• b.Colocation hosting only
• c.SaaS used exclusively for everything
• d.Pure public cloud adopted from day one

Running some systems on-premises while others move to the cloud is a hybrid approach. It supports phased migration and reduces risk. Workloads can be shifted as they are ready.

In disaster recovery planning, what does the Recovery Time Objective (RTO) represent?

• a.The target time to restore a system after an outage✓
• b.The total number of users on the system
• c.The total amount of storage the system uses
• d.The total monthly cost of the service including data transfer charges

RTO is the maximum acceptable time to restore service after a disruption. It guides how fast recovery mechanisms must work. A related metric, RPO, defines acceptable data loss.

Compared with pay-as-you-go, what do you trade for a discount when you reserve capacity for one or three years?

• a.You automatically lose all technical support entitlements
• b.You must immediately move to a competing cloud provider
• c.You commit to a term in exchange for lower rates✓
• d.You receive noticeably worse performance for the same reserved workloads

Reservations give a discount in return for committing to a one- or three-year term. They suit steady, predictable workloads. The trade-off is reduced flexibility, not reduced performance.

Which of the following is NOT typically a benefit of public cloud computing?

• a.Reduced upfront capital cost through a pay-as-you-go consumption model
• b.Global reach across many regions
• c.On-demand scalability of resources
• d.Full physical control over the underlying hardware✓

Public cloud customers give up physical control of hardware to the provider. The recognized benefits include scalability, lower upfront cost, and global reach. Trading physical control for these advantages defines the model.

Regardless of using IaaS, PaaS, or SaaS, which security duty stays with the customer?

• a.Securing the physical building and its entrances
• b.Cooling and powering the physical datacenter
• c.Replacing failed network switches and other hardware in the server racks
• d.Managing their own user identities and access✓

Across every model the customer remains responsible for their data, identities, and access. The provider always handles the physical facility and hardware. Understanding this boundary is essential to cloud security.

An online retailer's site automatically adds capacity on a busy shopping holiday and releases it afterward. This is a direct example of what?

• a.Fixed, static provisioning of resources
• b.Data residency requirements
• c.Elasticity✓
• d.Vendor lock-in to a single provider

Automatically adding and removing capacity in response to demand is elasticity. It keeps the site fast during spikes and cheap during lulls. This is a hallmark of well-designed cloud systems.

What is a common trade-off of choosing a private cloud over the public cloud?

• a.It cannot enforce any security controls at all
• b.It usually costs more and requires more management effort✓
• c.It always provides completely unlimited capacity at no additional cost whatsoever
• d.It removes the ability to control who has access

Private clouds offer greater control and isolation but typically cost more and demand more management. Capacity is limited by what the organization provisions. The benefit is control; the cost is effort and expense.

How does cloud agility support innovation?

• a.By locking teams into one fixed design permanently
• b.By letting teams quickly spin up and tear down environments to experiment✓
• c.By actively preventing any experimentation by teams
• d.By requiring long hardware procurement cycles before any new idea can be tested

Agility lets teams create and discard environments in minutes. Cheap, fast experimentation lowers the cost of trying new ideas. This accelerates innovation and learning.

How do high availability and disaster recovery differ?

• a.High availability only relates to monthly billing
• b.They are two identical concepts that mean exactly the same thing in every practical case
• c.High availability minimizes downtime day to day; disaster recovery restores service after a major event✓
• d.Disaster recovery guarantees that downtime can never occur

High availability keeps services running through routine failures with minimal downtime. Disaster recovery focuses on restoring service after a major, often regional, disruption. Robust designs use both.

When comparing on-premises to cloud, which cost is often overlooked but included in a true total cost of ownership?

• a.The particular color and finish chosen for the server chassis
• b.Power, cooling, and datacenter staffing✓
• c.The brand of coffee in the office kitchen
• d.The number of company holidays each year

Total cost of ownership includes hidden operational costs like electricity, cooling, and staff. These are easy to overlook when comparing to cloud pricing. Accounting for them gives a fairer comparison.

What is one risk of the consumption-based model if usage is not monitored?

• a.Physical theft of hardware directly from the provider's secured datacenter
• b.Unexpectedly high bills from unmonitored usage✓
• c.Guaranteed perfectly fixed bills every month
• d.A complete inability for costs to change at all

Because charges scale with usage, unmonitored growth can lead to surprise bills. Cost controls, budgets, and alerts help prevent this. Monitoring spending is a key cloud discipline.

Several government agencies with shared compliance needs pool infrastructure used only among themselves. This is best described as what?

• a.A pure public cloud open to everyone
• b.A SaaS application
• c.A community cloud✓
• d.A strictly single-tenant private cloud for one agency

A community cloud is shared by several organizations with common requirements, such as compliance. It sits between private and public models. Costs and governance are shared among the members.

What distinguishes autoscaling from manual scaling?

• a.Autoscaling requires placing a phone call to the provider's support team each time
• b.Manual scaling needs no human action whatsoever
• c.Autoscaling adjusts capacity automatically based on defined rules✓
• d.Autoscaling can only reduce capacity and never increase it

Autoscaling changes capacity automatically according to metrics or schedules. Manual scaling requires a person to act. Autoscaling supports elasticity with minimal operational effort.

Automated, regular backups in the cloud primarily support which goal?

• a.Data durability and recoverability✓
• b.Reduced font sizes in applications
• c.Faster graphics rendering for video editing workloads on the desktop
• d.Lower physical screen brightness on monitors

Regular backups protect against data loss and enable recovery after failures or mistakes. They underpin reliability and disaster recovery. Cloud platforms make backups easy to automate.

Shifting IT spending from CapEx to OpEx can improve which business measure?

• a.The total square footage of the company's physical office building space
• b.Cash flow and financial flexibility✓
• c.The design of the company logo
• d.The number of parking spaces available to staff

Replacing large upfront purchases with pay-as-you-go spending improves cash flow. Money is not tied up in depreciating hardware. This flexibility helps organizations adapt to change.

As you move from IaaS to PaaS to SaaS, how does the customer's share of responsibility generally change?

• a.It increases steadily at each step
• b.It only becomes the provider's responsibility after a continuous ten-year period
• c.It decreases as more is managed by the provider✓
• d.It stays exactly the same across all three models

Moving from IaaS toward SaaS, the provider manages more of the stack. The customer's responsibilities shrink accordingly. SaaS leaves the customer mainly responsible for data and access.

Which term specifically implies automatic, demand-driven adjustment rather than a one-time capacity increase?

• a.Colocation of servers
• b.Vertical scaling of a single machine
• c.Capital expenditure on new hardware
• d.Elasticity✓

Elasticity means resources automatically expand and contract with demand. A one-time capacity increase is scaling, not necessarily elastic. Elasticity is the automatic, real-time form.

A common way to describe the agility benefit of cloud is improved…

• a.datacenter floor tiling and paint
• b.time to market for new solutions✓
• c.network cable color coding standards
• d.physical server weight and the total rack loading in the facility

Agility shortens the time from idea to deployed solution. Fast provisioning removes long hardware delays. This improved time to market is a central cloud advantage.

Which feature most directly enables recovery of data after a regional disaster?

• a.Disabling geo-replication to reduce complexity
• b.Storing exactly one single copy of the data in the local datacenter only
• c.Cross-region replication of data✓
• d.Turning off all scheduled backups permanently

Replicating data across regions ensures a copy survives a whole-region failure. This underpins disaster recovery. Keeping only a single local copy leaves data vulnerable.

In a public cloud IaaS scenario, which task does the provider handle?

• a.Maintaining the physical host servers✓
• b.Configuring your virtual firewall and network security rules
• c.Managing your users' passwords and sign-in
• d.Applying patches and updates to your own custom application code

In IaaS the provider maintains the physical hosts, hypervisor, and facility. The customer handles the OS, applications, network config, and identities. Knowing the split clarifies who does what.

Which capability is essential to make a hybrid cloud function as one environment?

• a.Avoiding the internet entirely at all times
• b.Permanently deleting all of the organization's existing on-premises systems first
• c.Using only paper-based records for data
• d.Secure network connectivity between on-premises and cloud✓

A hybrid cloud needs secure, reliable connectivity linking on-premises and cloud resources. This lets workloads and data move between them. Without it, the two environments cannot act as one.

Which pricing behavior best reflects 'pay for what you use'?

• a.Paying the full three-year cost upfront in advance
• b.A fixed flat fee that applies no matter how much or how little you actually use
• c.A flat one-time perpetual license bought outright
• d.Being charged for the gigabytes of storage actually consumed each month✓

Paying for the gigabytes actually consumed is consumption-based pricing. Cost tracks real usage rather than a fixed fee. This is a defining trait of cloud economics.

If a service promises 99.9% availability, roughly how much downtime does that allow per year?

• a.Zero downtime is guaranteed
• b.About 8.76 hours per year✓
• c.About 3.65 days per year
• d.About 87 days per year

99.9% (three nines) allows roughly 8.76 hours of downtime per year. Each added nine reduces allowed downtime by about tenfold. Higher SLAs mean tighter downtime limits.

Which pairing correctly matches a service model to an example?

• a.PaaS is a managed app-hosting platform for your code✓
• b.IaaS is a ready-to-use webmail application accessed in a browser
• c.SaaS is a raw virtual machine with no operating system installed
• d.PaaS is a bare-metal server you rack and cable yourself

PaaS provides a managed platform where you deploy your code. Webmail is SaaS, and a raw VM is IaaS. Matching examples to models is a common exam skill.

Who is responsible for classifying data as sensitive or public in any cloud model?

• a.No data classification is ever needed in the cloud
• b.The internet service provider classifies it
• c.The provider always classifies it for you
• d.The customer✓

Data classification and protection always remain the customer's responsibility. The provider secures infrastructure but does not know your data's sensitivity. This holds true across IaaS, PaaS, and SaaS.

By offloading infrastructure management to a cloud provider, an IT team can focus more on what?

• a.Cooling and powering the datacenter facility
• b.Rewiring the server racks in the datacenter
• c.Replacing failed hard drives and other spare parts inside the servers
• d.Delivering business value and applications✓

When the provider handles hardware and facilities, IT teams spend less time on maintenance. They can focus on applications and business outcomes. This shift in focus is a major cloud benefit.

Why should disaster recovery plans be tested periodically?

• a.To intentionally increase the organization's monthly electricity and cooling bills
• b.To confirm systems can actually be restored within the expected time✓
• c.To reduce the amount of available storage on purpose
• d.To deliberately slow down the corporate network

Testing verifies that recovery procedures work and meet the RTO. Untested plans often fail during real incidents. Regular drills build confidence and reveal gaps.

A purchased physical server is treated in accounting as what?

• a.A recurring monthly usage charge that appears on every cloud invoice
• b.A consumable expense billed each hour of use
• c.A per-second billing line item
• d.A capital asset that depreciates over time✓

A bought server is a capital asset that is depreciated across its useful life. That is CapEx. Cloud usage, by contrast, is expensed as OpEx as it is consumed.

Elasticity works best for workloads that have what characteristic?

• a.No users and no activity of any kind
• b.A demand level that never varies even slightly
• c.Variable or unpredictable demand✓
• d.Perfectly constant, completely unchanging demand at all hours

Elasticity shines when demand fluctuates, adding capacity for spikes and removing it during lulls. Perfectly steady workloads gain less from it. Variable demand is where elasticity saves the most.

The main reason an organization chooses a private cloud is usually greater…

• a.control and isolation✓
• b.electricity usage in the datacenter
• c.vendor lock-in to a single supplier
• d.font selection in applications

Private clouds provide dedicated resources with greater control and isolation. This helps meet strict security and compliance needs. The trade-off is typically higher cost and effort.

Because cloud environments can be created and deleted quickly, failed experiments cost less. This reflects which benefit?

• a.Encryption of stored data
• b.Data residency compliance
• c.Multi-tenancy of shared hardware
• d.Agility✓

Fast, disposable environments make experimentation cheap and low-risk. This is a direct expression of cloud agility. Teams can try, learn, and discard quickly.

Which is the core principle behind high availability?

• a.Using exactly one single server to handle every workload in the environment
• b.Removing all backups to save storage space
• c.Eliminating single points of failure through redundancy✓
• d.Disabling automatic failover mechanisms

High availability removes single points of failure by adding redundancy. If one component fails, another takes over. This keeps services accessible with minimal downtime.

A major advantage of aligning cost with actual usage is that you…

• a.only pay for resources while they are running✓
• b.always pay a single fixed maximum amount regardless of real consumption levels
• c.pay continuously for idle servers running overnight
• d.must buy all hardware upfront before use

Paying only for running resources ties cost to real demand. Idle resources can be stopped to save money. This usage alignment is central to cloud cost efficiency.

Which deployment model description is correct?

• a.Community cloud: dedicated to a single company only
• b.Private cloud: infrastructure shared freely and openly with the general public
• c.Hybrid cloud: environments that have no connection between them
• d.Public cloud: shared, provider-owned infrastructure over the internet✓

Public cloud is provider-owned, shared, and delivered over the internet. Private is dedicated to one organization, hybrid connects both, and community is shared by a group. Only the public cloud description here is accurate.

For a SaaS email product, which layer does the provider manage?

• a.The application, runtime, OS, and infrastructure✓
• b.Only the customer's data and none of the underlying application components
• c.Nothing at all in the stack
• d.Only the list of end users

In SaaS the provider manages nearly the whole stack: application, runtime, OS, and infrastructure. The customer manages data, users, and access. This makes SaaS the most hands-off model.

Cloud providers publish SLAs primarily so customers can…

• a.plan around guaranteed levels of uptime and support✓
• b.learn the provider's corporate home mailing address
• c.review the confidential architectural blueprints of the physical datacenter
• d.choose the color of the physical servers

An SLA communicates the provider's uptime and support commitments. Customers use it to plan for reliability and set expectations. Composite SLAs help estimate an overall solution's availability.

How does elasticity reduce the need for traditional capacity planning?

• a.You must still purchase enough hardware for the highest peak every single year
• b.Resources adjust automatically, so you need not provision for peak in advance✓
• c.It forces manual resizing of every server daily
• d.It requires large fixed hardware orders each quarter

Elasticity adds capacity on demand, so you do not have to size for peak ahead of time. This lessens the guesswork of capacity planning. You avoid both shortages and costly over-provisioning.

Which best summarizes why many organizations adopt the cloud economically?

• a.To increase their upfront capital spending significantly
• b.To convert large upfront costs into flexible, usage-based spending✓
• c.To deliberately lengthen the hardware procurement and approval cycles across teams
• d.To buy and operate more physical datacenters of their own

A core economic driver is turning big CapEx into flexible OpEx. Spending then tracks actual usage instead of upfront bets. This improves cash flow and agility.