AZ-900 Exam Questions

Free AZ-900 Exam Questions and Answers

Updated October 13, 2026  |  20 questions with full answers

The short answer

AZ-900 is a 45-minute exam (65 minutes of total seat time) with 40-60 questions, and you need 700 out of 1000 to pass. The questions below come from our 400-question AZ-900 bank, spread across all three weighted domains, with the correct answer and an explanation for each.

AZ-900 exam facts

Questions40-60
Time limit45 minutes test time (65 minutes total seat time)
Passing score700 / 1000
Cost$99 USD
DeliveryPearson VUE test centre or online proctored
PrerequisitesNone - this is Microsoft's entry-level Azure certification

What the exam covers, domain by domain

Domain Weight What it tests
Describe cloud concepts25-30%Cloud models, shared responsibility, consumption-based pricing, serverless.
Describe Azure architecture and services35-40%Core components, compute, networking, storage, identity and security. The heaviest domain.
Describe Azure management and governance30-35%Cost management, governance and compliance features, monitoring tools.

20 free AZ-900 exam questions with answers

Real questions from our 400-question AZ-900 bank, spread across every domain. The correct answer is marked and every question carries an explanation, so you can check the reasoning and not just the result. The interactive mocks serve the full bank, timed and scaled-scored.

Question 1 Describe Azure architecture and services

A company needs to store unstructured data like images and videos for a web application. Which Azure storage service is most suitable?

  • ○ Azure Disk Storage
  • ○ Azure File Storage
  • ✓ Azure Blob Storage
  • ○ Azure Table Storage
Answer: C. Azure Blob Storage
Azure Blob Storage is optimized for storing large amounts of unstructured data, such as images, videos, and documents, and is commonly used for web content and backup.
Question 2 Describe Azure management and governance Choose 3

Which of the following are capabilities of Azure Advisor? (Select all that apply.)

  • ✓ Provides personalized recommendations for cost optimization
  • ○ Enforces compliance policies across subscriptions
  • ✓ Monitors resource configuration for security best practices
  • ○ Deploys repeatable packages of Azure resources
  • ✓ Helps improve the performance of your applications
Answer: A. Provides personalized recommendations for cost optimization | C. Monitors resource configuration for security best practices | E. Helps improve the performance of your applications
Azure Advisor analyzes your resource configuration and usage to provide personalized, actionable recommendations in four categories: Cost (optimization), Security (best practices), Reliability (availability), and Performance (application speed). It does not enforce policies (that's Azure Policy) or deploy resource packages (that's Azure Blueprints).
Question 3 Domain 1: Describe cloud concepts

A retail company can automatically provision virtual machines for its e-commerce website during peak shopping seasons without contacting the cloud provider. Which cloud computing principle does this demonstrate?

  • ○ Broad network access
  • ○ Measured service
  • ✓ On-demand self-service
  • ○ Resource pooling
Answer: C. On-demand self-service
On-demand self-service allows users to provision computing resources, such as virtual machines, automatically as needed without human intervention from the service provider. This enables the company to scale resources during high demand periods efficiently.
Question 4 Domain 2: Describe Azure architecture and services

An organization needs to create isolated network environments for different projects in Azure. Which service allows them to define private IP address spaces and subnets?

  • ○ Azure Load Balancer
  • ✓ Azure Virtual Network
  • ○ Azure VPN Gateway
  • ○ Azure ExpressRoute
Answer: B. Azure Virtual Network
Azure Virtual Network enables the creation of isolated networks in Azure with configurable IP address spaces, subnets, and network security groups for segmentation.
Question 5 Domain 3: Describe Azure management and governance

You are planning a large migration to Azure and want to estimate the total cost of ownership (TCO) over three years. Which tool should you use?

  • ○ Azure Pricing Calculator
  • ✓ Azure TCO Calculator
  • ○ Azure Cost Management
  • ○ Azure Budgets
Answer: B. Azure TCO Calculator
The Azure TCO (Total Cost of Ownership) Calculator is designed to help compare the costs of running on-premises infrastructure versus Azure over a specified period, such as three years. The Pricing Calculator is for estimating the cost of specific Azure services, not for comparing to on-premises.
Question 6 Domain 1: Describe cloud concepts Choose 3

Which of the following are true about measured service in cloud computing? (Select all that apply.)

  • ✓ Resources are billed based on actual usage
  • ✓ It enables pay-as-you-go pricing
  • ○ It requires manual monitoring by the customer
  • ✓ It provides transparency for resource utilization
  • ○ It eliminates the need for resource scaling
Answer: A. Resources are billed based on actual usage | B. It enables pay-as-you-go pricing | D. It provides transparency for resource utilization
Measured service involves automatic monitoring and billing based on resource consumption, enabling pay-as-you-go models and transparency. It does not require manual monitoring or eliminate scaling needs; scaling is handled by rapid elasticity.
Question 7 Domain 2: Describe Azure architecture and services

Which Azure service is a cloud-based SIEM and SOAR solution that provides intelligent security analytics and threat intelligence across an enterprise?

  • ○ Azure Security Center
  • ✓ Azure Sentinel
  • ○ Azure Key Vault
  • ○ Azure Firewall
Answer: B. Azure Sentinel
Azure Sentinel is a scalable, cloud-native Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) solution. It uses AI to analyze security data across the enterprise, providing threat detection, visibility, and automated response.
Question 8 Domain 3: Describe Azure management and governance Choose 5

Which of the following are valid sources of data for Azure Monitor? (Select all that apply.)

  • ✓ Platform metrics from Azure resources
  • ✓ Activity Log entries (administrative operations)
  • ✓ Application telemetry (traces, exceptions)
  • ✓ Guest OS performance counters (from VMs)
  • ✓ Custom log files from applications
Answer: A. Platform metrics from Azure resources | B. Activity Log entries (administrative operations) | C. Application telemetry (traces, exceptions) | D. Guest OS performance counters (from VMs) | E. Custom log files from applications
Azure Monitor is a comprehensive data collection service. It ingests: Platform metrics (from Azure resource providers), the Azure Activity Log (management plane events), Application telemetry via Application Insights, Guest OS data (metrics and logs from VMs via the Log Analytics agent or Azure Monitor Agent), and custom logs from any source.
Question 9 Domain 1: Describe cloud concepts

A media company is launching a new video streaming service. They anticipate unpredictable spikes in viewership when new content is released. Which cloud characteristic is most critical to handle these sudden increases in user traffic?

  • ○ High availability
  • ✓ Elasticity
  • ○ Global reach
  • ○ Managed services
Answer: B. Elasticity
Elasticity is crucial for handling unpredictable, sudden spikes in demand. The cloud platform can automatically provision additional compute and bandwidth resources to serve the influx of viewers during a new release and then scale back down when traffic normalizes, ensuring a smooth user experience cost-effectively.
Question 10 Domain 2: Describe Azure architecture and services

An organization needs to manage billing and access control for different departments separately in Azure. What should they use to logically isolate resources and provide distinct billing reports?

  • ○ Resource Groups
  • ○ Availability Zones
  • ✓ Subscriptions
  • ○ Virtual Networks
Answer: C. Subscriptions
Subscriptions in Azure provide a way to organize and manage resources, with separate billing and access control. They allow departments to have their own isolated environments for cost tracking and security.
Question 11 Domain 3: Describe Azure management and governance

You need to find documentation that proves Azure meets the ISO/IEC 27001 information security standard for a compliance audit. Where should you look?

  • ○ Azure Pricing calculator
  • ✓ Azure Service Trust Portal
  • ○ Azure Policy definitions
  • ○ Azure Advisor recommendations
Answer: B. Azure Service Trust Portal
The Service Trust Portal (STP) is the repository for Microsoft's compliance documentation. Auditors and customers can access independent audit reports, compliance guides, and trust documents that provide evidence of Azure's compliance with standards like ISO 27001, SOC, GDPR, and more.
Question 12 Domain 1: Describe cloud concepts

What is the primary purpose of the shared responsibility model in cloud computing?

  • ○ To define pricing models between the provider and customer.
  • ✓ To clearly delineate security and management tasks between the cloud provider and the customer.
  • ○ To determine which geographic region hosts the customer's data.
  • ○ To specify the level of technical support provided.
Answer: B. To clearly delineate security and management tasks between the cloud provider and the customer.
The primary purpose of the shared responsibility model is to provide a clear framework that defines which security, compliance, and management responsibilities are handled by the cloud provider and which remain the obligation of the customer. This clarity is essential for securing cloud deployments.
Question 13 Domain 2: Describe Azure architecture and services

An administrator needs to securely store and manage cryptographic keys, certificates, and secrets used by cloud applications. Which Azure service should they use?

  • ○ Azure Information Protection
  • ○ Azure Sentinel
  • ✓ Azure Key Vault
  • ○ Azure Security Center
Answer: C. Azure Key Vault
Azure Key Vault is a centralized cloud service for storing and managing secrets (like passwords), keys (encryption keys), and certificates. It helps safeguard cryptographic keys and secrets used by cloud applications and services.
Question 14 Domain 3: Describe Azure management and governance

You need to monitor the performance metrics of a set of Azure virtual machines and set up alerts when CPU usage exceeds 80% for 5 minutes. Which Azure service should you use?

  • ○ Azure Service Health
  • ○ Azure Advisor
  • ✓ Azure Monitor
  • ○ Azure Policy
Answer: C. Azure Monitor
Azure Monitor is the core service for collecting and analyzing performance metrics (like CPU) and setting up metric alerts based on defined thresholds. Azure Service Health monitors Azure service issues, Azure Advisor provides recommendations, and Azure Policy is for governance.
Question 15 Domain 1: Describe cloud concepts Choose 3

Which of the following are cloud service types? (Select all that apply.)

  • ✓ Infrastructure as a Service (IaaS)
  • ✓ Platform as a Service (PaaS)
  • ✓ Software as a Service (SaaS)
  • ○ Hardware as a Service (HaaS)
  • ○ Network as a Service (NaaS)
Answer: A. Infrastructure as a Service (IaaS) | B. Platform as a Service (PaaS) | C. Software as a Service (SaaS)
The primary cloud service models are Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). HaaS and NaaS are not standard categories; they are often considered part of IaaS.
Question 16 Domain 2: Describe Azure architecture and services

Which Azure service provides durable, high-performance block storage for use with Azure Virtual Machines?

  • ○ Azure Blob Storage
  • ○ Azure Files
  • ✓ Azure Managed Disks
  • ○ Azure Table Storage
Answer: C. Azure Managed Disks
Azure Managed Disks are block-level storage volumes managed by Azure and used with Azure Virtual Machines. They are designed for high performance and durability, handling storage account management (like replication) in the background.
Question 17 Domain 3: Describe Azure management and governance

Which Azure tool provides a high-level, aggregated view of your compliance posture against regulatory standards and built-in policy initiatives, showing percentages of compliant vs. non-compliant resources?

  • ○ Azure Monitor Workbooks
  • ✓ Azure Policy Compliance dashboard
  • ○ Azure Cost Management Reports
  • ○ Azure Service Health dashboard
Answer: B. Azure Policy Compliance dashboard
The Compliance section in Azure Policy provides a dashboard that shows an aggregated compliance state for your policies and initiatives, including built-in ones for standards like NIST or CIS, detailing how many resources are compliant.
Question 18 Domain 1: Describe cloud concepts

A retail company is migrating its on-premises web servers to the cloud. The company's IT team wants to maintain full control over the operating system, installed applications, and security configurations, similar to their physical servers. Which cloud service model would require the IT team to manage the operating system and applications?

  • ✓ Infrastructure as a Service (IaaS)
  • ○ Platform as a Service (PaaS)
  • ○ Software as a Service (SaaS)
  • ○ Desktop as a Service (DaaS)
Answer: A. Infrastructure as a Service (IaaS)
Infrastructure as a Service (IaaS) provides virtualized computing resources over the internet. The cloud provider manages the underlying physical infrastructure, but the customer is responsible for managing the operating system, runtime, and applications, giving them a high level of control.
Question 19 Domain 2: Describe Azure architecture and services Choose 4

Which of the following are networking services in Azure? (Select all that apply.)

  • ✓ Azure Virtual Network
  • ✓ Azure Load Balancer
  • ✓ Azure DNS
  • ✓ Azure ExpressRoute
Answer: A. Azure Virtual Network | B. Azure Load Balancer | C. Azure DNS | D. Azure ExpressRoute
Azure Virtual Network, Load Balancer, DNS, and ExpressRoute are all networking services that provide connectivity, load balancing, name resolution, and private connections.
Question 20 Domain 3: Describe Azure management and governance

After deploying an Azure Blueprint, you update the original blueprint definition. What must you do to apply those updates to the already-deployed environments?

  • ○ Reassign the blueprint to the same scope.
  • ✓ Create a new blueprint version and publish it.
  • ○ Manually update each resource.
  • ○ Delete and redeploy the blueprint.
Answer: B. Create a new blueprint version and publish it.
When you update a blueprint definition, you create a new version of it and publish that version. You can then update existing blueprint assignments to use the new version, which will apply the changes per the blueprint's update rules.

How to use these questions

AZ-900 is a vocabulary exam. The questions rarely ask you to configure anything - they ask which service or which model fits a described situation. Learn the definitions precisely and the exam gets much easier.

Domain 2 is 35-40% of the exam. Azure compute (VMs, containers, functions, App Service) and Azure networking (VNets, subnets, DNS, ExpressRoute) are where most of the marks sit.

Watch the pricing and support questions. Consumption-based pricing, the Azure pricing calculator, and the difference between the support plans come up consistently and are easy marks if you have looked at them once.

45 minutes for 40-60 questions is comfortable, but only if you do not over-think. If two answers look right, the tiebreaker is usually the most managed or least administrative effort option.

Frequently asked questions

What score do you need to pass AZ-900?

700 out of 1000. Microsoft does not publish a raw percentage, but 700 scaled is roughly 70% of available points.

How long is the AZ-900 exam?

45 minutes of actual test time, inside a 65-minute total seat time that includes the introduction, the NDA and the survey.

Is AZ-900 worth it if I already know Azure?

If you are working with Azure already, AZ-900 is a fast credential that validates fundamentals and is a prerequisite-free stepping stone to AZ-104. If you are starting from nothing, it is the correct first step.

Does AZ-900 expire?

No. Microsoft Fundamentals certifications do not expire, so there is no renewal requirement - unlike the associate-level AZ-104.

Ready to test yourself under exam conditions?

400 questions across 6 timed mock exams, domain-wise drills, and the same scaled scoring as the real thing. Free, no signup.

Related AZ-900 guides