AZ-900: Microsoft Azure Fundamentals

By Microsoft · Browse Mode
About the Exam

This exam is for technology professionals who want to demonstrate foundational knowledge of cloud concepts and Microsoft Azure. It covers cloud concepts, Azure architecture and services, and Azure management and governance, including core services, identity, security, cost, and monitoring topics. Passing shows you can describe Azure architectural components and services at a foundational level.

Exam Topics

  • Describe cloud concepts25–30%
  • Describe Azure architecture and services35–40%
  • Describe Azure management and governance30–35%

How to Use This Practice Exam

  1. Browse — Read each question, select your answer, and reveal the explanation.
  2. Exam Mode — Simulate real exam conditions with a timed session and score report.
  3. Learn Mode — Spaced repetition schedules questions you struggle with for long-term retention.

Download the Full Exam PDF

Get every question and answer in a clean, printable PDF built for offline study. Purchase once, keep permanent access, and re-download the latest version anytime.

Get PDF
Learn More

Last updated July 9, 2026 at 10:22 AM

Topic filter
Retired questions
Question sort
Questions per page

QuestionQ1

Describe cloud concepts

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Yes or No
StatementsYesNo
You must have physical servers to use cloud computing.
You must have internet connectivity to use cloud computing.
The costs to increase cloud computing capacity are less than the costs to increase the computing capacity of an on-premises datacenter.
Explanation

Cloud customers consume provider-managed infrastructure and do not need to purchase or operate physical servers. Cloud services are delivered through network connectivity, typically the internet. Elastic, consumption-based capacity can be scaled as needed, avoiding the up-front hardware procurement and overprovisioning associated with expanding an on-premises datacenter.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ2

Describe Azure architecture and services

You intend to deploy several Azure virtual machines.

You need to control which ports Internet devices can use to access the virtual machines.

What should you use?

Explanation

A network security group (NSG) uses inbound security rules to allow or deny traffic to Azure virtual machines by source, destination, port, and protocol. An NSG can be associated with a virtual machine network interface or its subnet to restrict Internet access to approved ports.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ3

Describe Azure management and governance

What should a desktop application use to communicate with Azure and manage resources?

Explanation

Azure Resource Manager REST APIs provide the programmatic interface an application uses to create, update, query, and delete Azure resources. ARM templates are declarative deployment files, while Azure CLI and Azure Cloud Shell are interactive command environments.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ4

Describe cloud concepts

For each of the following statements, select Yes if it is true. Otherwise, select No.

Yes or No
StatementsYesNo
Azure Advisor supports alerts.
Azure Advisor recommendations can be filtered by Administrative unit.
Azure Advisor provides recommendations on improving the performance of resources.
Explanation

Azure Advisor supports alerts for newly generated recommendations. Its filters do not include Administrative units. Advisor includes a Performance category with recommendations that improve application speed and responsiveness.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ5

Describe Azure architecture and services

You plan to deploy 20 virtual machines to an Azure environment. To ensure that a virtual machine named VM1 cannot connect to the other virtual machines, VM1 must

Select
Explanation

Virtual machines in the same virtual network can communicate over private IP addresses by default. Deploying VM1 to a separate virtual network prevents that connectivity unless an explicit connection, such as VNet peering or a VPN gateway, is later configured. Operating system choice, resource group membership, and adding a second network interface do not provide network isolation.

Community Discussion

No comments yet. Be the first to start the discussion!
Know a question that should be here? Contribute to this exam
Back home