AZ-900 Questions 91-100: Final Mixed Practice Test

0
1
AZ-900Questions 91-100Original PracticeAnswers Hidden

AZ-900 Questions 91-100: Final Mixed Practice Test

Continue the AZ-900 practice bank with 10 original exam-style questions focused on final mixed exam-readiness scenarios. Choose your answer first, then reveal the explanation.

Series position: This continues the AZ-900 sequence after the previous 10-question batch. The goal is a complete, reviewable Microsoft Azure Fundamentals practice bank from Questions 1-100.
Exam code
AZ-900
Question range
91-100
Format
Single-best-answer practice
Status
Original questions, source-grounded
Practice mode: Answers are hidden by default. Decide on A, B, C, or D before opening the reveal panel.

Questions

Question 91

Single answerBest service choice
A company needs a managed relational database for a line-of-business app and wants to avoid managing SQL Server on a VM. Which service is the best fit?
  • A. Azure SQL Database
  • B. Azure Virtual Machines with self-managed SQL only
  • C. Azure Blob Storage
  • D. Azure DNS
Reveal answer and explanation
Correct answer: A. Azure SQL Database
Azure SQL Database is a managed relational database service and reduces infrastructure management.
Why the others are wrong: Self-managed SQL on VMs requires OS and database server management; Blob and DNS are not relational database services.

Objective: Best service choice.

Question 92

Single answerIdentity protection
A company wants to enforce MFA only when sign-in risk is high or when users are outside trusted locations. Which feature is most relevant?
  • A. Conditional Access
  • B. Azure Reservations
  • C. Azure Load Balancer
  • D. Availability sets
Reveal answer and explanation
Correct answer: A. Conditional Access
Conditional Access can apply access controls such as MFA based on conditions like user, device, location, or risk.
Why the others are wrong: The other options are cost, traffic, or VM availability features.

Objective: Identity protection.

Question 93

Single answerStorage redundancy
A storage account must replicate data synchronously across multiple availability zones in the primary region. Which redundancy option matches?
  • A. Zone-redundant storage
  • B. Locally redundant storage
  • C. Archive storage only
  • D. Read-only routing only
Reveal answer and explanation
Correct answer: A. Zone-redundant storage
Zone-redundant storage replicates data across availability zones in the primary region.
Why the others are wrong: LRS stays within one datacenter in a region; Archive is an access tier, not redundancy.

Objective: Storage redundancy.

Question 94

Single answerGovernance scope
A policy should apply to every current and future subscription in a business unit. Where should it be assigned?
  • A. At a management group that contains those subscriptions
  • B. On one individual VM
  • C. On a single storage container
  • D. Inside Azure Cloud Shell preferences
Reveal answer and explanation
Correct answer: A. At a management group that contains those subscriptions
Assigning policy at the management group scope can apply it to subscriptions under that management group.
Why the others are wrong: The other scopes are too narrow or unrelated.

Objective: Governance scope.

Question 95

Single answerService outage notification
Users report that a normally healthy app is failing, and the team suspects an Azure regional platform issue. Which tool should they check first for personalized impact?
  • A. Azure Service Health
  • B. Azure Pricing Calculator
  • C. Azure Marketplace
  • D. Azure Resource Locks
Reveal answer and explanation
Correct answer: A. Azure Service Health
Azure Service Health provides personalized information about Azure service issues affecting your resources.
Why the others are wrong: Pricing Calculator, Marketplace, and locks do not report service incidents.

Objective: Service outage notification.

Question 96

Single answerSecure VM access
Admins need browser-based private RDP/SSH access to VMs without exposing public IP addresses on the VMs. Which service helps?
  • A. Azure Bastion
  • B. Azure DNS
  • C. Azure TCO Calculator
  • D. Azure Policy only
Reveal answer and explanation
Correct answer: A. Azure Bastion
Azure Bastion provides secure RDP and SSH connectivity through the Azure portal without requiring public IPs on VMs.
Why the others are wrong: DNS, TCO, and Policy do not provide interactive VM access.

Objective: Secure VM access.

Question 97

Single answerContent delivery
A global website wants cached static content closer to users to reduce latency. Which service category fits best?
  • A. Content delivery network or Azure Front Door caching capabilities
  • B. Azure Key Vault
  • C. Azure Policy compliance results
  • D. Azure Cost Management budgets
Reveal answer and explanation
Correct answer: A. Content delivery network or Azure Front Door caching capabilities
Content delivery services cache content closer to users and can improve performance for global web traffic.
Why the others are wrong: The other services address secrets, compliance, and cost controls.

Objective: Content delivery.

Question 98

Single answerMonitoring query
An engineer wants to search logs using Kusto Query Language after enabling diagnostic settings. Where are logs commonly sent?
  • A. Log Analytics workspace
  • B. Azure Key Vault only
  • C. A management group only
  • D. A public IP address
Reveal answer and explanation
Correct answer: A. Log Analytics workspace
A Log Analytics workspace stores Azure Monitor Logs and supports KQL queries.
Why the others are wrong: Key Vault, management groups, and public IPs are not log query stores.

Objective: Monitoring query.

Question 99

Single answerBest cost signal
A workload has predictable compute usage every day for the next year. Which purchase model is likely to reduce cost versus pay-as-you-go?
  • A. A one-year reserved instance or savings commitment where applicable
  • B. Always using the highest VM size
  • C. Disabling all tags
  • D. Moving all data to Hot tier
Reveal answer and explanation
Correct answer: A. A one-year reserved instance or savings commitment where applicable
Reservations or savings commitments can reduce costs for predictable workloads compared with pure pay-as-you-go.
Why the others are wrong: The other actions either increase cost or reduce manageability.

Objective: Best cost signal.

Question 100

Single answerExam strategy
A question asks for the Azure feature that enforces allowed resource locations. Which answer should you choose?
  • A. Azure Policy
  • B. Azure Advisor
  • C. Azure Monitor
  • D. Azure Service Health
Reveal answer and explanation
Correct answer: A. Azure Policy
Azure Policy enforces organizational standards such as allowed locations.
Why the others are wrong: Advisor recommends, Monitor observes, and Service Health reports service-impacting events; they do not enforce allowed locations.

Objective: Exam strategy.

Answer key

Reveal full answer key
QuestionCorrect answerObjective area
91ABest service choice
92AIdentity protection
93AStorage redundancy
94AGovernance scope
95AService outage notification
96ASecure VM access
97AContent delivery
98AMonitoring query
99ABest cost signal
100AExam strategy
Exam tip: AZ-900 questions usually reward the simplest Azure service or concept that exactly matches the requirement. Watch for distractors that are real services but solve a different problem.
Next: AZ-900 Questions 1-100 now forms a full fundamentals practice bank; the next step can be a timed case-study set or a new exam series.

Sources

📚 More questions from: AZ-900: Microsoft Azure Fundamentals

Related QuestionMORE FROM AUTHOR