AZ-900 practice test: 485 questions with full explanations

Questions on the exam

about 45 — vendor indicates, no fixed count published

Time allowed

45 minutes format →

Passing score

700 of 1000 — vendor, checked September 4, 2026 detail →

Exam fee

$99 — vendor, checked September 5, 2026 detail →

485 practice test questions for Microsoft Azure Fundamentals AZ-900, grouped by exam domain. Every question below shows all four options, which one is correct, and why each of the other three is not — the wrong answers are where most candidates lose marks.

Not sure where you stand? Take the free 5-min AZ-900 readiness check →

AZ-900 exam format →  ·  AZ-900 passing score →  · AZ-900 exam cost →

Questions by domain

• Describe Azure architecture and services — 237 questions →
• Describe Azure management and governance — 154 questions →
• Describe cloud concepts — 94 questions →

Sample questions

Availability Zones: Which Azure feature should they use?

1. Availability Zones ✓

   Correct. Availability Zones are physically separate datacenters within the same Azure region, each with independent power, cooling, and networking. Deploying across AZs protects against single-datacenter failures while keeping all data within the primary region.
2. Region pairs

   Incorrect. Region pairs replicate data to a different geographic region, which would violate the data sovereignty requirement to keep data within the primary region.
3. Availability Sets

   Incorrect. Availability Sets group VMs within a single datacenter to protect against rack-level hardware failures. They do NOT protect against an entire datacenter failure.
4. Azure Virtual Machine Scale Sets

   Incorrect. VM Scale Sets provide automatic scaling of VM instances but do not inherently protect against datacenter-level failures unless combined with zone-aware configuration.

All 237 Describe Azure architecture and services questions →

Outbound data transfers from Azure Blob Storage to viewers: Which type of data transfer is most likely respons

1. Outbound data transfers from Azure Blob Storage to viewers on the public internet ✓

   Correct. Outbound data transfers (egress) from Azure to the public internet incur charges. Streaming video to worldwide viewers sends large volumes of data from Azure to the internet, which is billed based on volume and destination region.
2. Inbound data transfers from the company's on-premises servers uploading content to Azure Blob Storage

   Incorrect. Inbound data transfers (ingress) into Azure are generally free. Uploading content to Blob Storage would not explain the charges.
3. Data transfers between Azure Blob Storage and an Azure VM in the same Azure region

   Incorrect. Data transfers between Azure services within the same region are typically free. Blob Storage reads from a co-located VM would not incur transfer charges.
4. Data transferred from Azure Blob Storage to Azure CDN within the same region

   Incorrect. Transfers from Azure Blob Storage to Azure CDN within the same region are typically free or very low cost. CDN is designed to reduce egress costs by caching content at edge nodes — using CDN would actually reduce the charges the company is seeing.

All 154 Describe Azure management and governance questions →

The data stored in the application and the accounts: Which responsibility does your organization ALWAYS retain

1. The data stored in the application and the accounts that access it ✓

   Correct. Regardless of whether the service is IaaS, PaaS, or SaaS, the customer always retains responsibility for their data and the identities/accounts that access it. Microsoft never takes ownership of customer data.
2. Managing network infrastructure components such as routers and switches

   Incorrect. Network infrastructure (physical networking, routers, switches in the datacenter) is always Microsoft's responsibility in Azure.
3. Patching and updating the underlying operating system

   Incorrect. In SaaS, the provider manages the OS. In PaaS, the provider also manages the OS. Only in IaaS does the customer manage the OS.
4. The physical security of the datacenter where the servers are located

   Incorrect. Physical datacenter security is always Microsoft's responsibility in Azure, across all service types (IaaS, PaaS, SaaS).

All 94 Describe cloud concepts questions →

All resources in all three subscriptions: Which resources are affected by this policy?

1. Only resources in the management group's default subscription, but not resources located in the child subscriptions

   Incorrect. Management groups do not have a 'default subscription.' Policies inherit to all subscriptions within the group.
2. All resources in all three subscriptions, because a management group policy is inherited by each subscription and resource within ✓

   Correct. Governance conditions like policies applied to a management group automatically inherit down to all subscriptions, resource groups, and resources within it.
3. Only resources created after the policy is applied, because pre-existing resources in the group are never evaluated or affected by it

   Incorrect. Azure Policy affects existing resources (flagged as non-compliant) and new resources (denied or flagged at creation). It applies to all resources, not just new ones.
4. Only the subscriptions themselves, because resource groups and individual resources are not subject to these policies

   Incorrect. Policy inheritance flows through the entire hierarchy: management group, subscriptions, resource groups, and resources. Resources at all levels are subject to the policy.

All 237 Describe Azure architecture and services questions →

The Azure Total Cost of Ownership Calculator: Which tool should the company use?

1. Azure Advisor, which recommends optimizations for existing Azure deployments rather than migration comparisons

   Incorrect. Azure Advisor gives optimization recommendations for existing Azure deployments and does not perform migration cost comparisons.
2. Microsoft Cost Management, which analyzes actual Azure spending after deployment and cannot model hypothetical scenarios

   Incorrect. Microsoft Cost Management analyzes actual Azure spending after deployment and cannot model hypothetical on-premises versus Azure comparisons.
3. The Azure Total Cost of Ownership (TCO) Calculator, comparing full on-premises costs to equivalent Azure services ✓

   Correct. The TCO Calculator helps build a cloud migration business case by comparing fully loaded on-premises costs (hardware, software, electricity, datacenter space, IT staff) against equivalent Azure services.
4. The Azure Pricing Calculator, which estimates only Azure resource costs and omits on-premises hardware and staffing

   Incorrect. The Azure Pricing Calculator estimates only Azure resource costs and ignores on-premises hardware, electricity, and staff, making it unsuitable for an on-premises versus Azure comparison.

All 154 Describe Azure management and governance questions →

The company, because Azure virtual machines are an IaaS: Who is responsible for patching the operating system

1. A shared responsibility, because Microsoft patches the OS kernel while the company handles application updates

   Incorrect. OS patching responsibility does not split at the kernel level. In IaaS, the entire guest OS, including kernel updates, is the customer's responsibility.
2. The company, because Azure virtual machines are an IaaS offering where the customer manages the guest OS ✓

   Correct. Azure VMs are an IaaS service. Microsoft manages the physical hardware, network, and hypervisor, but the customer is responsible for the guest OS, runtime, middleware, applications, and data.
3. Microsoft, because operating system patching in Azure is always handled automatically by the platform

   Incorrect. Microsoft manages the host OS (hypervisor layer), not the guest OS inside customer VMs. In IaaS the customer must patch and maintain the guest OS; Azure Update Manager can assist but must be configured by the customer.
4. Microsoft, because the provider is responsible for all infrastructure layers in every cloud service model

   Incorrect. The Shared Responsibility Model varies by service type. In IaaS the customer takes on more responsibility than in PaaS or SaaS, including the guest OS.

All 94 Describe cloud concepts questions →

Azure Container Instances: Which Azure service best meets their needs?

1. Azure Kubernetes Service (AKS), a managed cluster for orchestrating many containers that requires node and upgrade management

   Incorrect. AKS is a managed Kubernetes cluster for orchestrating containers at scale and requires cluster management (node pools, networking, upgrades), more than needed for simple on-demand batch jobs.
2. Azure Virtual Machines, IaaS compute that can run containers but requires you to manage the guest OS yourself

   Incorrect. VMs are IaaS and require OS management, which the requirement to avoid managing virtual machines explicitly excludes.
3. Azure Container Instances (ACI), a service that runs containers on demand without managing VMs or an orchestrator ✓

   Correct. Azure Container Instances runs containers directly in Azure without managing VMs or an orchestration platform, ideal for simple on-demand containerized workloads like batch processing.
4. Azure App Service, a managed platform optimized for continuously available web apps rather than on-demand batch runs

   Incorrect. Azure App Service can run containers but is optimized for continuously available web apps and APIs, not simple on-demand batch container runs.

All 237 Describe Azure architecture and services questions →

Microsoft Cost Management: Which Azure tool allows you to set budget thresholds and receive email alerts when

1. Azure Monitor, which collects performance and log telemetry from resources rather than tracking billing budgets

   Incorrect. Azure Monitor collects telemetry (performance, logs) from resources. It is not primarily a billing tool, though it can alert on metrics.
2. Azure Pricing Calculator, which estimates costs before deployment and cannot alert on real ongoing spend

   Incorrect. The Azure Pricing Calculator estimates costs before deployment and cannot monitor actual spending or send budget alerts.
3. Azure Advisor, which recommends ways to optimize spending but does not set budgets or send spend alerts

   Incorrect. Azure Advisor recommends ways to optimize spending but does not set budget thresholds or send spending alerts.
4. Microsoft Cost Management, which monitors actual spending and sends alerts as budget thresholds are approached ✓

   Correct. Microsoft Cost Management lets you monitor actual Azure spending, set budget thresholds, and configure alerts when spending approaches or exceeds a defined budget.

All 154 Describe Azure management and governance questions →

AZ-900 exam: the facts

How many questions are on the AZ-900 exam?

Around 45. The vendor does not publish a fixed count for AZ-900, so this is the figure it indicates rather than a guaranteed number.

How long is the AZ-900 exam?

45 minutes. Across 45 questions that is about 60 seconds per question.

What topics does the AZ-900 exam cover?

3 domains: Describe Azure architecture and services, Describe Azure management and governance, Describe cloud concepts. Weights: Describe Azure architecture and services 0.375%, Describe Azure management and governance 0.325%, Describe cloud concepts 0.275%.

How many AZ-900 practice test questions does Certsqill have?

485, spread across 3 exam domains. Every one shows all options, which is correct, and why each of the others is not.