AZ-900: Microsoft Azure Fundamentals – Top 50 Questions and Answers Dumps

Azure Administrator AZ-104 Exam Questions and Answers Dumps

Microsoft Certified: Azure Fundamentals Average Salary — $126,653/year

Amazon’s AWS and Microsoft’s Azure are the big boys of the cloud computing world, even though AWS is much bigger than Azure.

Revenue from Microsoft Azure grew 72% from 2018 from $7.56 billion to $13 billion. Azure contributed to almost 10.5% of Microsoft’s total revenue in 2019. It has also been noted that the US defense chose Azure in its tactical operations. The last quarter earnings of 2019 grew by 64%.

Azure Fundamentals exam is an opportunity to prove knowledge of cloud concepts (20%), Azure services (20%), Azure workloads, security and privacy in Azure (30%), as well as Azure pricing and support (25%). This blog also includes Azure Services Cheat Sheet.

The exam is intended for candidates who are just beginning to work with cloud-based solutions and services or are new to Azure.
Candidates should be familiar with the general technology concepts, including concepts of
networking, storage, compute, application support, and application development.

Azure Fundamentals can be used to prepare for other Azure role-based or specialty
certifications, but it is not a prerequisite for any of them.

Below are the top 40 AZ-900 Microsoft Azure fundamentals Certification exam questions and answers dumps.

‎Learn Azure Fundamentals AZ900
‎Learn Azure Fundamentals AZ900
  • ‎Learn Azure Fundamentals AZ900 Screenshot
  • ‎Learn Azure Fundamentals AZ900 Screenshot
  • ‎Learn Azure Fundamentals AZ900 Screenshot
  • ‎Learn Azure Fundamentals AZ900 Screenshot
  • ‎Learn Azure Fundamentals AZ900 Screenshot
  • ‎Learn Azure Fundamentals AZ900 Screenshot
  • ‎Learn Azure Fundamentals AZ900 Screenshot
  • ‎Learn Azure Fundamentals AZ900 Screenshot
  • ‎Learn Azure Fundamentals AZ900 Screenshot
  • ‎Learn Azure Fundamentals AZ900 Screenshot
  • ‎Learn Azure Fundamentals AZ900 Screenshot
  • ‎Learn Azure Fundamentals AZ900 Screenshot
  • ‎Learn Azure Fundamentals AZ900 Screenshot
  • ‎Learn Azure Fundamentals AZ900 Screenshot
  • ‎Learn Azure Fundamentals AZ900 Screenshot
  • ‎Learn Azure Fundamentals AZ900 Screenshot
  • ‎Learn Azure Fundamentals AZ900 Screenshot
  • ‎Learn Azure Fundamentals AZ900 Screenshot

I- AZ-900 Cloud Concepts – Azure Services

Question 1: Microsoft Office 365 is an example of which cloud deployment model?

A. PaaS

B. IaaS


D. SaaS




Software as a service (SaaS) allows users to connect to and use cloud-based apps over the internet. Common examples are email, calendar, and office tools, such as Microsoft Office 365.

Reference1: SAAS

Question 2: You have an on-premises application that processes incoming Simple Message Submission Service (SMSS) queue messages and records the data to a log file. You migrate this application to an Azure function app. What kind of cloud service would this be considered?

A. Software-as-a-Service (SaaS)

B. Infrastructure-as-a-Service (IaaS)

C. Serverless

D. Platform-as-a-Service (PaaS)




Serverless computing is the abstraction of servers, infrastructure, and operating systems. When you build serverless apps, you don’t need to provision and manage any servers, so you don't have to worry about infrastructure. Serverless computing is driven by the reaction to events and triggers happening in near-real time in the cloud.

Reference2: Platform-as-a-Service (PaaS)

Question 3: Define “economy of scale”.

A. Spending money on products or services now and being billed for them now. You can deduct this expense from your tax bill in the same year.

B. Spending money on physical infrastructure up front, and then deducting that expense from your tax bill over time.

C. Prices for individual resources and services are provided so you can predict how much you will spend in a given billing period based on your expected usage.

D. The ability to do things more efficiently or at a lower cost per unit when operating at a larger scale.

Answer 3:


Notes 3:

Cloud providers such as Microsoft, Google, and Amazon are large businesses that leverage the benefits of economies of scale and then pass the savings on to their customers.

Reference3: Cloud: Economies at scale

Question 4: Which of the following are characteristic of private clouds?

A. Lower costs

B. High scalability

C. Improved security

D. Limited flexibility

Answer 4:

B and C

Notes 4:

Private clouds still afford the scalability and efficiency of a public cloud. Resources are purchased and available to meet your business needs.

Video for reference: The Private Cloud Model

Because resources are not shared with others, private clouds provide higher levels of control and security.

Reference 4: The private cloud model

Question 5: Which of the following Azure solutions allows you to geographically cache and distribute high-bandwidth content, such as streaming videos, to users in different parts of the world?

A. Content Delivery Network (CDN)

B. Load Balancer

C. Application Gateway

D. Virtual Network Gateway

Answer 5:


Notes 5:

Azure Content Delivery Network (CDN) offers developers a global solution for rapidly delivering high-bandwidth content to users by caching their content at strategically placed physical nodes around the world. Azure CDN can also accelerate dynamic content, which cannot be cached, by leveraging various network optimizations using CDN POPs.

Reference 5: CDN

Question 6: You are beginning to extend your on-premises data center into Azure. You have created a new Azure subscription and resource group called RG-One. You deploy two virtual machines into RG-One with the intent of promoting these to Active Directory domain controllers. What kind of cloud service would this be considered?

A. Platform-as-a-Service (PaaS)

B. Infrastructure-as-a-Service (IaaS)

C. Software-as-a-Service (SaaS)

D. Hybrid-as-a-Service (HaaS)

Answer 6:


Notes 6:

Infrastructure as a service (IaaS) is an instant computing infrastructure, provisioned and managed over the internet. Deploying virtual machines into an Azure subscription would be considered an IaaS service.

Reference 6: IAAS

Question 7: Select the concept that is defined as ensuring that servers are available if a single data center goes offline.

A. Scalability

B. Fault tolerance

C. Elasticity

D. Agility

Answer 7:


Notes 7:

Fault tolerance is the property that enables a system to continue operating properly in the event of the failure of one or more of its components. In Azure, it refers to ensuring that a portion of the production systems are available online (via a failover cluster, available set, or available zone) if a subset of the system components (or an entire data center) goes offline.

Reference 7: Fault Tolerance

Question 8: In regards to comparing Public Cloud and Private Cloud, which of these best describe the characteristics of a Public Cloud?

A. No-upfront costs

B. More control over the security

C. Less reliability

D. Less maintenance

Answer 8:

A and D

Notes 8

The public cloud provides a pay-as-you-go pricing model which can lead to lower costs than those in private cloud solutions where capital expenditures are high.

The public cloud provides agility to provision and de-provision resources quickly with far less maintenance than that of private cloud solutions.

Reference 8: Pay as you go

Question 9: Which of the following are considered capital expenditures (CapEx)?

A. Storage area network

B. Cloud-based virtual machine

C. Office 365 licenses

D. Hyper-V host server

Answer 9:

A and D

Notes 9:

Storage costs are typically considered CapEx and include storage hardware components and the cost of supporting them. Depending on the application and level of fault tolerance, centralized storage can be expensive.

Server costs are considered CapEx and include all server hardware components and the cost of supporting them. When purchasing servers, make sure to design for fault tolerance and redundancy (e.g., server clustering, redundant power supplies, and uninterruptible power supplies). When a server needs to be replaced or added to a data center, you need to pay for the computer. This can affect your immediate cash flow because you must pay for the server up front.

Reference 9: Storage area networkHyper-V host server

Question 10: You are in the process of migrating your existing on-premises SQL databases to Azure. You will migrate them to Azure SQL databases, as opposed to deploying SQL database servers in Azure. What kind of cloud service would this be considered?

A. Software-as-a-Service (SaaS)

B. Platform-as-a-Service (PaaS)

C. Serverless

D. Infrastructure-as-a-Service (IaaS)

Answer 10:


Notes 10:

Platform as a service (PaaS) is a complete development and deployment environment in the cloud with resources that enable you to deliver everything from simple cloud-based apps to sophisticated, cloud-enabled enterprise applications. An Azure SQL instance would be considered a PaaS service.

Reference 10: PAAS

Question 11: Which of the following statements are true for IaaS cloud services?

A. The client is responsible for purchasing all Operating System (OS) host licensing.

B. Services can be scaled automatically to support system load.

C. The client has complete control over the host operating system.

D. The client is responsible for all guest OS and application updates.

Answer 11:

B and D

Notes 11:

IaaS host services are scaled automatically to combat increased system load and scaled back during periods of inactivity.

The cloud service provider performs all underlying hardware, OS, and middleware updates. The client performs all guest OS and application updates.

Question 12: Which of the following tools can be used to manage Azure resources on a Google Chromebook?

A. Azure portal

B. PowerShell

C. Azure Cloud Shell

D. Azure CLI

Answer 12:

A and C

Notes 12:

You can run the Azure portal on all modern desktop, tablet devices, and browsers.

Azure Cloud Shell is an interactive, browser-accessible shell for managing Azure resources. It provides the flexibility of choosing the shell experience that best suits the way you work. Linux users can opt for a Bash experience, while Windows users can opt for PowerShell.

Reference 12: Azure PortalAzure Cloud Shell

Question 13: Which Azure service can provide big data analysis for machine learning?

A. Azure App Service

B. Azure WebJobs

C. Application Insights

D. Azure Databricks

Answer 13:


Notes 13:

Azure Databricks is an Apache Spark-based analytics platform optimized for the Microsoft Azure cloud services platform. Databricks enables collaboration between data scientists, data engineers, and business analysts.

Reference 13: Azure Databricks

Question 14: You need to create an Azure storage solution that will store messages created by an Azure web role. The messages will then be processed by an Azure worker role. What type of storage solution should you create?

A. A Queue service in a storage account

B. A virtual machine data disk

C. A File service in a storage account

D. A Blob service in a storage account

Answer 14:


Notes 14:

Azure Queue storage is a service for storing large numbers of messages that can be accessed from anywhere in the world via authenticated calls using HTTP or HTTPS.

Reference: Azure Queue storage

Question 15: You have an on-premises application that sends email notifications automatically based on a rule. You plan to migrate the application to Azure. You need to recommend a computing solution for the application that should minimize costs by incurring charges only when it is executed.

Which Azure solution is best for this type of application?

A. Logic App

B. A web app

C. Service Bus App

D. IaaS web server in Azure

Answer 15:


Notes 15:

Azure Logic Apps is a cloud service that helps you automate and orchestrate tasks, business processes, and workflows when you need to integrate apps, data, systems, and services across enterprises or organizations. Logic Apps simplifies how you design and build scalable solutions for app integration, data integration, system integration, enterprise application integration (EAI), and business-to-business (B2B) communication, whether in the cloud, on-premises, or both.

For example, here are just a few workloads you can automate with logic apps:Process and route orders across on-premises systems and cloud services.

Send email notifications with Office 365 when events happen in various systems, apps, and services.

Move uploaded files from an SFTP or FTP server to Azure Storage.

Monitor tweets for a specific subject, analyze the sentiment, and create alerts or tasks for items that need review.

For new logic apps that run in the public or “global” Azure Logic Apps service, you pay only for what you use. These logic apps use a consumption-based plan and pricing model.

Reference 15: Logic App Logic App Pricing

Question 16: You are the Systems Administrator for a local university. You are deploying several sets of systems that will be used for research and development teams. Each set of systems will be uniform in nature, containing the same number and type of Azure resources.

What should you recommend to automate the creation of these Azure resources?

A. Azure Resource Manager templates

B. Multiple Azure subscriptions

C. Management groups

D. Virtual machine scale sets

Answer 16:


Notes 16:

An Azure Resource Manager template is the framework by which resources are created. They can be used to define and automate the creation of similar resources.

Reference 16: ARM Templates

Question 17: You are deploying a pair of Azure virtual machines. You want to ensure that the application will remain available in the event of a complete data center failure. What Azure technology will help most in this task?

A. Locally redundant storage

B. Zone Redundant Storage

C. Availability zone

D. Availability set

Answer 17:


Notes 17:

An Availability zone consists of two or more virtual machines in different physical locations within an Azure region. This configuration ensures that only a subset of the virtual machines in an availability zone will be affected in the event of hardware failure, OS update, or a complete data center outage. This configuration offers 99.99% SLA.

Question 18: Which of the following database solutions has the ability to add data concurrently from multiple regions simultaneously?

A. SQL managed instances

B. Cosmos DB

C. SQL Data Warehouses

D. Azure SQL Databases

Answer 18:


Notes 18:

Azure Cosmos DB is Microsoft's globally distributed, multi-model database service. Cosmos DB elastically and independently scales throughput and storage across any number of Azure regions worldwide.

Reference: Azure Cosmo DB

Question 19: Which Azure service can host your web apps without you having to manage underlying infrastructure?

A. Azure App Service

B. Azure WebJobs

C. Azure Databricks

D. Application Insights

Answer 19:


Notes 19:

Azure App Service enables you to build and host web apps, mobile back-ends, and RESTful APIs in the programming language of your choice without managing infrastructure.

Reference 19: Azure App Services

Question 20: Which of the following components can be used to load balance traffic to web applications, such as Azure App Service web apps using layer 7 of the OSI model?

A. Virtual Network

B. Virtual Network Gateway

C. Route table

D. Load Balancer

E. Application Gateway

Answer 20:


Notes 20:

Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications. Traditional load balancers operate at the transport layer (OSI layer 4 — TCP and UDP) and route traffic based on source IP address and port to a destination IP address and port.

Reference 20: Application Gateway

Question 21: Which Azure service can help you collect, analyze, and act on telemetry from your cloud and on-premises environments?

A. Azure App Service

B. Azure Monitor

C. Azure Analyzer

D. Azure WebJobs

Answer 21:


Notes 21:

Azure Monitor is a service that can help you understand how your applications are performing and proactively identify issues affecting them and the resources they depend on.

Reference 21: Azure Monitor

II- Azure workloads, Security, Privacy, Compliance, and Trust

Question 22: Which of the following components are required to establish communication between on-premises resources and resources in Azure?

A. Virtual Network

B. VNet peer

C. Route tables

D. Virtual network gateway

Answer 22:

A and D

Notes 22:

Question 23: Which Azure service should you use to correlate metrics and logs from multiple resources into a centralized repository?
A. Azure Event Grid

B. Azure Event Hubs

C. Azure SQL Data Warehouse

D. Azure Monitor

Answer 23:


Notes 23:

Log data collected by Azure Monitor (formerly Azure Log Analytics) is stored in a Log Analytics workspace, which is based on Azure Data Explorer. It collects telemetry from a variety of sources and uses the Kusto query language used by Data Explorer to retrieve and analyze data.

Reference 23: Azure Monitor – Log Query Overview

Question 24: You are the Azure Administrator for Radio Gaga, LTD. You have a resource group named RG-RG and need to ensure no other administrators can create virtual networks in this resource group. What can you implement to accomplish this?

A. Access Control (IAM)

B. Azure policy

C. Locks

D. Properties

Answer 24:


Notes 24:

Azure Policy is a service in Azure used to create, assign, and manage policies. These policies enforce different rules and effects over your resources, so those resources stay compliant with your corporate standards and service level agreements.

For example, you can have the policy to allow only a certain SKU size of virtual machines in your environment. Once this policy is implemented, new and existing resources are evaluated for compliance. With the right type of policy, existing resources can be brought into compliance.

Reference 24: Azure Policy

Question 25: Which of the following is the organization that defines standards used by the United States government?





Answer 25:


Notes 25:

The National Institute of Standards and Technology (NIST) promotes and maintains measurement standards and guidance to help organizations assess risk. It defines the standards that are used by the United States government as well as the US Department of Defense (DoD).

Reference 25: NIST

Question 26: You have an Azure virtual network named VNet in a resource group named Bob-RG. You assign an Azure policy specifying virtual networks are not an allowed resource type in Bob-RG. What happens to VNet once this policy is applied?

A. VNet is moved to a new resource group.

B. Bob-RG is deleted automatically

C. VNet continues to function normally, but no new subnets can be added.

D. VNet is deleted automatically.

Answer 26:


Notes 26:

Azure policies that determine the allowed types of resources can only prevent non-compliant resources from being created. Existing non-compliant resources are not affected. However, the policy is flagged as non-compliant so that the administrator can determine action (if any).

Reference: Here

Question 27: Which Azure tool allows you to view which user turned off a specific virtual machine during the last 14 days?

A. Azure Event Hubs

B. Azure Activity Log

C. Azure Service Health

D. Azure Monitor

Answer 27:


Notes 27:

The Azure Activity Log is a subscription log that provides insight into subscription-level events that have occurred in Azure. This includes a range of data, from Azure Resource Manager operational data to updates on Service Health events. Events such as starting and stopping of virtual machines can be found here.

Reference 27: Here

Question 28: What kind of information does Azure Information Protection protect?

A. Email messages

B. Office documents

C. Azure Blob Storage

D. Virtual hard disks

E. PDF documents

Answer 28:


Notes 28:

Azure Information Protection (sometimes referred to as AIP) is a cloud-based solution that helps an organization classify and, optionally, protect its documents and emails by applying labels. Labels can be applied automatically by administrators who define rules and conditions, manually by users, or a combination where users are given recommendations.

Azure Information Protection (sometimes referred to as AIP) is a cloud-based solution that helps an organization classify and, optionally, protect its documents and emails by applying labels. Labels can be applied automatically by administrators who define rules and conditions, manually by users, or a combination where users are given recommendations.

A collaboration between Microsoft and Adobe brings you a more simplified and consistent experience for PDF documents that have been classified and, optionally, protected. This collaboration provides support for Adobe Acrobat native integration with Microsoft Information Protection solutions, such as Azure Information Protection.

Question 29: Which of the following is true regarding HDInsight?

A. It is an on-demand analytics job service that simplifies big data. Instead of deploying, configuring, and tuning hardware, you write queries to transform your data and extract valuable insights.

B. It is a managed relational cloud database service.

C. It is a cloud-based service that is a limitless analytics service that brings together enterprise data warehousing and Big Data analytics.

D. It is an open-source framework for the distributed processing and analysis of big datasets in clusters.

Answer 29:


Notes 29:

Azure HDInsight is a managed, full-spectrum, open-source analytics service for enterprises. HDInsight is a cloud service that makes it easy, fast, and cost-effective to process massive amounts of data. HDInsight also supports a broad range of scenarios, like extract, transform, and load (ETL); data warehousing; machine learning; and IoT.

Question 30: Which of the following website provides information on Azure product updates, roadmaps, and announcements?





Answer 30:


Notes 30:

Learn about important Azure product updates, roadmap, and announcements here

Questions 31: Azure virtual machines can be moved between which of the following Azure resources?

A. Subscriptions

B. Regions

C. Availability Sets

D. Resource Groups

E. Availability Zones

Answer 31:

A, B, D, E

Notes 31:

Azure virtual machines can be moved between subscriptions with either Azure PowerShell or the Azure portal. Using Azure Site Recovery, you can migrate Azure VMs to other regions. Azure virtual machines can be moved between resource groups with either Azure PowerShell or the Azure portal. Using Azure Site Recovery, you can migrate Azure VMs to other Availability Zones.

II- Azure Pricing and Support

Question 32: Which Azure support plans can open support cases?

A. Professional Direct

B. Basic

C. Standard

D. Developer

E. Premier

Answer 32:

A, C, D, E

Notes 32:

Question 33: For any Single Instance virtual machine using premium SSD or Ultra Disk for all Operating System Disks and Data Disks, what is the SLA guarantee for virtual machine connectivity?

A. 99.9%

B. 99.99

C. 99.95%

D. There is no SLA guarantee

Answer 33:


Notes 33:

Question 34: Which of the following Azure services is a cloud-based service that leverages massively parallel processing (MPP) to quickly run complex queries across petabytes of data in a relational database?

A. Azure SQL database

B. Azure HDInsight

C. Azure SQL Data Warehouse (Azure Synapse )

D. Azure Data Lake Analytics

Answer 34:


Notes 34:

Azure SQL Data Warehouse (Azure Synapse ) is a cloud-based service that leverages massively parallel processing (MPP) to quickly run complex queries across petabytes of data in a relational database.

Reference 34: Azure SQL Data Warehouse (Azure Synapse )

Question 35: You have an Azure subscription that contains the following unused resources:

Name Type Configuration
nic0 Network Interface
pip1 Public IP Static
lb1 Load Balancer Standard, 5 rules configured
VNet2 Virtual Network
VM3 Virtual Machine Stopped (Deallocated)

Based on this information, which of the following unused resources should you remove to lower cost?

A. lb1

B. VNet2

C. pip1

D. nic0

E. VM3

Answer 35:

A and C

Notes 35:

The pricing for Standard Load Balancer is based on the number of rules configured (load balancer rules and NAT rules) and data processed. However, there is no hourly charge for the Standard Load Balancer itself when no rules are configured. Since this load balancer contains rules, it should be removed to save money.

In ARM deployment model, there is no charge for dynamic public IP addresses when the associated virtual machine is “stopped-deallocated”. However, you’re charged for a static public IP address irrespective of the associated resource (unless it is part of the first five static ones in the region). This resource should be removed.

Reference 35: IP addresses

Question 36: Which of the following recommendations is provided by Azure Advisor?

A. Azure resource costs

B. Azure virtual machine IP configuration

C. Storage performance and reliability

D. Azure App Service security

Answer 36:


Notes 36: