AZ-900 DOMAIN-WISE PRACTICE
Practice by Azure Domain
Select a domain below to see multiple question sets.
Each set is 20 questions — rotate through sets to master the full domain.
Describe cloud concepts
27% of exam • 100 questions • 5 sets
Choose a set
Describe Azure architecture and services
38% of exam • 150 questions • 8 sets
Choose a set
Describe Azure management and governance
35% of exam • 150 questions • 8 sets
Choose a set
What Each Domain Covers
Describe cloud concepts
27%
- Cloud computing models: IaaS, PaaS, SaaS
- Cloud deployment models: Public, Private, Hybrid, Multi-cloud
- Shared responsibility model
- Benefits of cloud: scalability, elasticity, agility, HA, fault tolerance, global reach
- CapEx vs OpEx and the consumption-based model
Exam Tip: IaaS/PaaS/SaaS is always tested. Know real Azure examples: VMs = IaaS, Azure App Service = PaaS, Microsoft 365 = SaaS.
Describe Azure architecture and services
38%
- Azure regions, availability zones, region pairs, datacenters
- Azure compute: VMs, AKS, Container Instances, App Service, Functions
- Azure storage: Blob, Files, Queue, Table, Disk
- Azure networking: VNet, VPN Gateway, ExpressRoute, DNS, Load Balancer, Application Gateway
- Azure databases: Azure SQL, Cosmos DB, MySQL, PostgreSQL
- Azure AI: Cognitive Services, Azure Machine Learning
- Azure DevOps, GitHub Actions, Azure Arc
Exam Tip: This is the largest domain. Focus on knowing what each service does conceptually and which scenarios it fits. Availability Zones = physical datacenter isolation within a region.
Describe Azure management and governance
35%
- Cost management: Pricing Calculator, TCO Calculator, Azure Cost Management and Billing
- Azure governance: Azure Policy, Blueprints, Management Groups, resource locks
- Azure compliance: Trust Center, compliance offerings, Microsoft Purview
- Identity: Microsoft Entra ID (Azure AD), MFA, Conditional Access, RBAC
- Monitoring: Azure Monitor, Azure Service Health, Azure Advisor
Exam Tip: Microsoft Entra ID (Azure Active Directory) questions always appear. Know RBAC roles (Owner, Contributor, Reader) and when Azure Policy vs. RBAC is the right tool.
Sample AZ-900 questions with explanations
Use these examples to check how the topics are tested. Read the explanation for every option you were unsure about, then start a scored practice set above.
Question 1
Describe Azure architecture and services
A company needs to store unstructured data like images and videos for a web application. Which Azure storage service is most suitable?
- ○ Azure Disk Storage
- ○ Azure File Storage
- ✓ Azure Blob Storage
- ○ Azure Table Storage
Answer:
C. Azure Blob Storage
Azure Blob Storage is optimized for storing large amounts of unstructured data, such as images, videos, and documents, and is commonly used for web content and backup.
Question 2
Describe Azure management and governance
Choose 3
Which of the following are capabilities of Azure Advisor? (Select all that apply.)
- ✓ Provides personalized recommendations for cost optimization
- ○ Enforces compliance policies across subscriptions
- ✓ Monitors resource configuration for security best practices
- ○ Deploys repeatable packages of Azure resources
- ✓ Helps improve the performance of your applications
Answer:
A. Provides personalized recommendations for cost optimization | C. Monitors resource configuration for security best practices | E. Helps improve the performance of your applications
Azure Advisor analyzes your resource configuration and usage to provide personalized, actionable recommendations in four categories: Cost (optimization), Security (best practices), Reliability (availability), and Performance (application speed). It does not enforce policies (that's Azure Policy) or deploy resource packages (that's Azure Blueprints).
Question 3
Domain 1: Describe cloud concepts
Which statement accurately describes a key difference between scalability and elasticity in cloud computing?
- ○ Scalability is manual, elasticity is automatic.
- ✓ Scalability refers to adding resources, elasticity refers to adding and removing resources dynamically.
- ○ Elasticity only applies to storage, while scalability applies to compute.
- ○ They are synonymous terms with no difference.
Answer:
B. Scalability refers to adding resources, elasticity refers to adding and removing resources dynamically.
Scalability is the ability of a system to handle increased load by adding resources (scale up/out). Elasticity is a more dynamic concept; it is the ability to automatically or quickly scale resources both out and in to match fluctuating demand, optimizing both performance and cost.
Question 4
Domain 2: Describe Azure architecture and services
What is the main characteristic of a serverless compute service like Azure Functions?
- ○ It requires you to manually scale the underlying servers.
- ✓ It automatically allocates compute resources when your code runs.
- ○ It provides dedicated virtual machines that are always running.
- ○ It is only suitable for long-running background processes.
Answer:
B. It automatically allocates compute resources when your code runs.
The core concept of serverless computing is that the cloud provider dynamically manages the allocation and provisioning of servers. With Azure Functions, you write code, and the service runs it on-demand, scaling automatically and charging you only for the time your code executes.
Question 5
Domain 3: Describe Azure management and governance
Your IT security team needs a dashboard that consolidates security alerts and vulnerabilities from across all your Azure subscriptions. Which Azure service provides a unified view of your organization's security posture?
- ○ Azure Monitor
- ○ Azure Policy
- ○ Azure Service Health
- ✓ Microsoft Defender for Cloud
Answer:
D. Microsoft Defender for Cloud
Microsoft Defender for Cloud (formerly Azure Security Center) provides a unified security management and threat protection dashboard. It offers security alerts, vulnerability assessments, and secure score recommendations.