AZ-900Questions 31-40Mixed ReviewPractice Mode
AZ-900 Questions 31-40: Mixed Review and Exam Readiness
This final mixed-review block reinforces the most testable AZ-900 fundamentals: shared responsibility, cloud models, availability, service-level agreements, security controls, compliance, and Azure management decisions.
Series position: Continue here after AZ-900 Questions 21-30: Management, Governance, and Cost Tools. This set works well as a final readiness check after completing Questions 1-30.
Exam code
AZ-900: Microsoft Azure Fundamentals
AZ-900: Microsoft Azure Fundamentals
Question range
31-40
31-40
Question style
Mixed objective review
Mixed objective review
Answer behavior
Hidden until clicked
Hidden until clicked
Practice mode: Treat each question like the real exam: eliminate two weak distractors, choose the best answer, then reveal the explanation.
Questions
Question 31
A company uses Azure SQL Database. Microsoft manages the underlying physical datacenter, host hardware, and platform patching. What is the customer still responsible for?
Reveal answer and explanation
Correct answer: B. Securing application data and configuring access appropriately
In shared responsibility, Microsoft manages more of the platform for PaaS services, but customers remain responsible for data, identities, access, and application configuration.
In shared responsibility, Microsoft manages more of the platform for PaaS services, but customers remain responsible for data, identities, access, and application configuration.
Why the others are wrong: Physical infrastructure, service fabric operations, power, and cooling are Microsoft responsibilities in Azure.
Objective: Describe shared responsibility in the cloud.
Question 32
A company wants to run workloads in its own datacenter and in Azure, with both environments connected and managed as part of a combined architecture. Which cloud model is this?
Reveal answer and explanation
Correct answer: C. Hybrid cloud
A hybrid cloud combines on-premises or private cloud resources with public cloud resources such as Azure.
A hybrid cloud combines on-premises or private cloud resources with public cloud resources such as Azure.
Why the others are wrong: Public cloud only would not include the company datacenter. Private cloud only would not include Azure public cloud services. Community cloud is not the best match for this scenario.
Objective: Describe cloud computing models.
Question 33
An online store needs to automatically add capacity during holiday traffic spikes and reduce capacity after traffic returns to normal. Which cloud benefit is being used?
Reveal answer and explanation
Correct answer: A. Elasticity
Elasticity is the ability to dynamically increase or decrease resources based on demand.
Elasticity is the ability to dynamically increase or decrease resources based on demand.
Why the others are wrong: Fault tolerance is continued operation after failure. High latency is undesirable. Data sovereignty concerns where data is stored and governed.
Objective: Describe the benefits of cloud computing.
Question 34
A workload must continue running if one datacenter in an Azure region experiences a failure. Which Azure feature provides physically separate datacenter locations within a region?
Reveal answer and explanation
Correct answer: A. Availability zones
Availability zones are physically separate locations within an Azure region, designed to protect applications and data from datacenter failures.
Availability zones are physically separate locations within an Azure region, designed to protect applications and data from datacenter failures.
Why the others are wrong: Resource groups, tags, and management groups help organize or govern resources; they do not provide datacenter-level redundancy.
Objective: Describe Azure regions and availability zones.
Question 35
An application depends on two separate services. If either service is unavailable, the application is unavailable. What generally happens to the combined SLA compared with each individual service SLA?
Reveal answer and explanation
Correct answer: B. The combined SLA is usually lower than the individual SLAs
When an application depends on multiple required services, the composite SLA is calculated by multiplying the individual SLAs, which typically results in a lower overall SLA.
When an application depends on multiple required services, the composite SLA is calculated by multiplying the individual SLAs, which typically results in a lower overall SLA.
Why the others are wrong: Adding dependencies does not automatically increase availability. 100% availability is not guaranteed. Composite availability can usually be estimated when service SLAs are known.
Objective: Describe service-level agreements and lifecycle concepts.
Question 36
A team wants to deploy a web application without managing virtual machines, operating system patching, or web server installation. Which Azure service is the best fit?
Reveal answer and explanation
Correct answer: A. Azure App Service
Azure App Service is a platform as a service option for hosting web apps, APIs, and back ends without managing the underlying servers.
Azure App Service is a platform as a service option for hosting web apps, APIs, and back ends without managing the underlying servers.
Why the others are wrong: VMs require more OS management. Storage queues store messages. ExpressRoute provides private network connectivity.
Objective: Describe Azure compute services and cloud service types.
Question 37
A security architect says users and devices should not be automatically trusted just because they are on a corporate network. Access should be continuously verified. Which security model does this describe?
Reveal answer and explanation
Correct answer: A. Zero Trust
Zero Trust is based on principles such as verify explicitly, use least privilege access, and assume breach.
Zero Trust is based on principles such as verify explicitly, use least privilege access, and assume breach.
Why the others are wrong: Pricing, scaling, and region pairing are not security trust models.
Objective: Describe Azure identity, access, and security concepts.
Question 38
A compliance officer wants to review Microsoft cloud compliance offerings, audit reports, and trust documentation. Which Microsoft resource is designed for this purpose?
Reveal answer and explanation
Correct answer: A. Microsoft Service Trust Portal
The Service Trust Portal provides access to Microsoft security, privacy, compliance, and trust resources, including audit reports and compliance documentation.
The Service Trust Portal provides access to Microsoft security, privacy, compliance, and trust resources, including audit reports and compliance documentation.
Why the others are wrong: Pricing Calculator estimates costs. Cloud Shell is a command-line environment. Azure DNS hosts DNS zones.
Objective: Describe compliance and trust resources.
Question 39
A company wants to repeatedly deploy the same Azure infrastructure in a consistent way using declarative templates. Which Azure management capability supports this?
Reveal answer and explanation
Correct answer: A. Azure Resource Manager templates or Bicep
ARM templates and Bicep support declarative infrastructure deployments so environments can be deployed consistently and repeatedly.
ARM templates and Bicep support declarative infrastructure deployments so environments can be deployed consistently and repeatedly.
Why the others are wrong: Advisor, Service Health, and budgets are useful management tools, but they do not define and deploy infrastructure templates.
Objective: Describe tools for managing and deploying Azure resources.
Question 40
A production team needs technical support from Microsoft for an Azure issue. Which type of Azure support plan capability should they make sure they have?
Reveal answer and explanation
Correct answer: A. A plan that includes technical support for Azure services
Azure support plans vary. For production technical support, an organization should have a support plan that includes technical support for Azure services.
Azure support plans vary. For production technical support, an organization should have a support plan that includes technical support for Azure services.
Why the others are wrong: Free learning resources and service alerts are helpful, but they are not a substitute for a technical support plan when Microsoft support is required.
Objective: Describe Azure support options and service lifecycle concepts.
Answer key
Reveal full answer key
| Question | Correct answer | Objective area |
|---|---|---|
| 31 | B | Shared responsibility |
| 32 | C | Cloud models |
| 33 | A | Elasticity |
| 34 | A | Availability zones |
| 35 | B | Composite SLA |
| 36 | A | PaaS / App Service |
| 37 | A | Zero Trust |
| 38 | A | Compliance resources |
| 39 | A | ARM/Bicep deployment |
| 40 | A | Support plans |
Watch out: For AZ-900, “best answer” often means choosing the simplest service or concept that matches the requirement. Avoid over-engineering fundamentals questions.
AZ-900 practice block status: Questions 1-40 now form a continuous AZ-900 practice sequence across cloud concepts, architecture, services, management, governance, and final mixed review.
Sources
- Microsoft Learn: Study guide for Exam AZ-900
- Microsoft Learn: Shared responsibility in the cloud
- Microsoft Learn: Azure availability zones
- Microsoft Azure: Service Level Agreements
- Microsoft Learn: Azure App Service overview
- Microsoft Learn: Zero Trust overview
- Microsoft Service Trust Portal
- Microsoft Learn: ARM templates overview
- Microsoft Learn: Bicep overview
- Microsoft Azure support plans
