AZ-900Questions 91-100Original PracticeAnswers Hidden
AZ-900 Questions 91-100: Final Mixed Practice Test
Continue the AZ-900 practice bank with 10 original exam-style questions focused on final mixed exam-readiness scenarios. Choose your answer first, then reveal the explanation.
Series position: This continues the AZ-900 sequence after the previous 10-question batch. The goal is a complete, reviewable Microsoft Azure Fundamentals practice bank from Questions 1-100.
Exam code
AZ-900
Question range
91-100
Format
Single-best-answer practice
Status
Original questions, source-grounded
Practice mode: Answers are hidden by default. Decide on A, B, C, or D before opening the reveal panel.
Questions
Question 91
Single answerBest service choice
A company needs a managed relational database for a line-of-business app and wants to avoid managing SQL Server on a VM. Which service is the best fit?
- A. Azure SQL Database
- B. Azure Virtual Machines with self-managed SQL only
- C. Azure Blob Storage
- D. Azure DNS
Reveal answer and explanation
Correct answer: A. Azure SQL Database
Azure SQL Database is a managed relational database service and reduces infrastructure management.
Why the others are wrong: Self-managed SQL on VMs requires OS and database server management; Blob and DNS are not relational database services.
Objective: Best service choice.
Question 92
Single answerIdentity protection
A company wants to enforce MFA only when sign-in risk is high or when users are outside trusted locations. Which feature is most relevant?
- A. Conditional Access
- B. Azure Reservations
- C. Azure Load Balancer
- D. Availability sets
Reveal answer and explanation
Correct answer: A. Conditional Access
Conditional Access can apply access controls such as MFA based on conditions like user, device, location, or risk.
Why the others are wrong: The other options are cost, traffic, or VM availability features.
Objective: Identity protection.
Question 93
Single answerStorage redundancy
A storage account must replicate data synchronously across multiple availability zones in the primary region. Which redundancy option matches?
- A. Zone-redundant storage
- B. Locally redundant storage
- C. Archive storage only
- D. Read-only routing only
Reveal answer and explanation
Correct answer: A. Zone-redundant storage
Zone-redundant storage replicates data across availability zones in the primary region.
Why the others are wrong: LRS stays within one datacenter in a region; Archive is an access tier, not redundancy.
Objective: Storage redundancy.
Question 94
Single answerGovernance scope
A policy should apply to every current and future subscription in a business unit. Where should it be assigned?
- A. At a management group that contains those subscriptions
- B. On one individual VM
- C. On a single storage container
- D. Inside Azure Cloud Shell preferences
Reveal answer and explanation
Correct answer: A. At a management group that contains those subscriptions
Assigning policy at the management group scope can apply it to subscriptions under that management group.
Why the others are wrong: The other scopes are too narrow or unrelated.
Objective: Governance scope.
Question 95
Single answerService outage notification
Users report that a normally healthy app is failing, and the team suspects an Azure regional platform issue. Which tool should they check first for personalized impact?
- A. Azure Service Health
- B. Azure Pricing Calculator
- C. Azure Marketplace
- D. Azure Resource Locks
Reveal answer and explanation
Correct answer: A. Azure Service Health
Azure Service Health provides personalized information about Azure service issues affecting your resources.
Why the others are wrong: Pricing Calculator, Marketplace, and locks do not report service incidents.
Objective: Service outage notification.
Question 96
Single answerSecure VM access
Admins need browser-based private RDP/SSH access to VMs without exposing public IP addresses on the VMs. Which service helps?
- A. Azure Bastion
- B. Azure DNS
- C. Azure TCO Calculator
- D. Azure Policy only
Reveal answer and explanation
Correct answer: A. Azure Bastion
Azure Bastion provides secure RDP and SSH connectivity through the Azure portal without requiring public IPs on VMs.
Why the others are wrong: DNS, TCO, and Policy do not provide interactive VM access.
Objective: Secure VM access.
Question 97
Single answerContent delivery
A global website wants cached static content closer to users to reduce latency. Which service category fits best?
- A. Content delivery network or Azure Front Door caching capabilities
- B. Azure Key Vault
- C. Azure Policy compliance results
- D. Azure Cost Management budgets
Reveal answer and explanation
Correct answer: A. Content delivery network or Azure Front Door caching capabilities
Content delivery services cache content closer to users and can improve performance for global web traffic.
Why the others are wrong: The other services address secrets, compliance, and cost controls.
Objective: Content delivery.
Question 98
Single answerMonitoring query
An engineer wants to search logs using Kusto Query Language after enabling diagnostic settings. Where are logs commonly sent?
- A. Log Analytics workspace
- B. Azure Key Vault only
- C. A management group only
- D. A public IP address
Reveal answer and explanation
Correct answer: A. Log Analytics workspace
A Log Analytics workspace stores Azure Monitor Logs and supports KQL queries.
Why the others are wrong: Key Vault, management groups, and public IPs are not log query stores.
Objective: Monitoring query.
Question 99
Single answerBest cost signal
A workload has predictable compute usage every day for the next year. Which purchase model is likely to reduce cost versus pay-as-you-go?
- A. A one-year reserved instance or savings commitment where applicable
- B. Always using the highest VM size
- C. Disabling all tags
- D. Moving all data to Hot tier
Reveal answer and explanation
Correct answer: A. A one-year reserved instance or savings commitment where applicable
Reservations or savings commitments can reduce costs for predictable workloads compared with pure pay-as-you-go.
Why the others are wrong: The other actions either increase cost or reduce manageability.
Objective: Best cost signal.
Question 100
Single answerExam strategy
A question asks for the Azure feature that enforces allowed resource locations. Which answer should you choose?
- A. Azure Policy
- B. Azure Advisor
- C. Azure Monitor
- D. Azure Service Health
Reveal answer and explanation
Correct answer: A. Azure Policy
Azure Policy enforces organizational standards such as allowed locations.
Why the others are wrong: Advisor recommends, Monitor observes, and Service Health reports service-impacting events; they do not enforce allowed locations.
Objective: Exam strategy.
Answer key
Reveal full answer key
| Question | Correct answer | Objective area |
|---|
| 91 | A | Best service choice |
| 92 | A | Identity protection |
| 93 | A | Storage redundancy |
| 94 | A | Governance scope |
| 95 | A | Service outage notification |
| 96 | A | Secure VM access |
| 97 | A | Content delivery |
| 98 | A | Monitoring query |
| 99 | A | Best cost signal |
| 100 | A | Exam strategy |
Exam tip: AZ-900 questions usually reward the simplest Azure service or concept that exactly matches the requirement. Watch for distractors that are real services but solve a different problem.
Next: AZ-900 Questions 1-100 now forms a full fundamentals practice bank; the next step can be a timed case-study set or a new exam series.
Sources