Back to AZ-900 pack
AZ-900 Sample Preview
Microsoft Azure Fundamentals Study Guide Preview
Preview representative AZ-900 practice questions, answer options, and explanations before choosing this downloadable ZIP pack.
Sample 1. A company must apply least privilege to one resource group. What should be configured?
- Azure RBAC assignment at the resource group scope
- Owner access at tenant root
- A public storage container
- A billing export
Answer: A - RBAC at the narrowest practical scope limits unnecessary access.
Sample 2. Which Azure service is best for storing secrets and certificates?
- Azure Key Vault
- Azure Blob Storage public container
- Azure DNS
- Azure Cost Management
Answer: A - Key Vault is designed for controlled storage of secrets, keys, and certificates.
Sample 3. A web app needs managed hosting without direct VM management. Which service fits?
- Azure App Service
- Route table
- Recovery Services vault
- Network security group only
Answer: A - App Service hosts web apps and APIs as a managed platform.
Sample 4. A team wants to enforce allowed regions for deployments. What should they use?
- Azure Policy
- A virtual machine extension
- A storage SAS token
- A DNS CNAME record
Answer: A - Azure Policy evaluates resources against governance rules such as allowed locations.
Sample 5. Which tool helps query operational logs from Azure resources?
- Log Analytics workspace
- Management group only
- Public IP prefix
- App registration secret
Answer: A - Log Analytics supports centralized log collection and Kusto queries.