Why practice questions matter
The AZ-900 exam tests not just facts, but your ability to apply cloud concepts to real scenarios. Practicing with exam-style questions is the single fastest way to improve your score. These 20 sample questions cover all exam domains: cloud concepts, Azure architecture & services, and management & governance.
AZ-900 sample questions (try these!)
Question 1
Which cloud model combines on-premises infrastructure with public cloud services?
Answer: Hybrid cloud. A hybrid model connects your on-premises (private) environment to public cloud services, letting you keep some workloads local while using the cloud for others.
Question 2
In the shared responsibility model, which of these is ALWAYS the customer's responsibility?
Answer: Your data and identities. The provider handles physical security and infrastructure; the customer always owns responsibility for their data, users, and access.
Question 3
Which Azure service is a PaaS offering for hosting web applications?
Answer: Azure App Service. It manages the underlying infrastructure, patching, and scaling so you focus on code.
Question 4
What is an Availability Zone?
Answer: Physically separate data centers within an Azure region, each with independent power, cooling, and networking — protecting apps from data center failures.
Question 5
Which service provides a private, dedicated connection to Azure that does not use the public internet?
Answer: Azure ExpressRoute.
Question 6
Which RBAC role gives full access but CANNOT grant access to others?
Answer: Contributor. Owner can also assign roles; Reader is view-only.
Question 7
Which Azure service stores secrets, keys, and certificates securely?
Answer: Azure Key Vault.
Question 8
What is the passing score for AZ-900?
Answer: 700 out of 1000 points (70%).
Question 9
Which pricing model lets you pay only for what you use?
Answer: Consumption-based (pay-as-you-go) pricing.
Question 10
Which tool estimates the cost of an Azure solution before deploying it?
Answer: Azure Pricing Calculator.
Question 11
Which storage tier is cheapest for rarely accessed data?
Answer: Archive tier.
Question 12
Which service is serverless and runs code only when triggered by an event?
Answer: Azure Functions.
Question 13
Which Azure Policy effect BLOCKS creation of non-compliant resources?
Answer: Deny.
Question 14
Which service provides global DNS-based traffic routing with failover?
Answer: Azure Traffic Manager.
Question 15
What does Zero Trust's "verify explicitly" principle mean?
Answer: Always authenticate and authorize based on all available data points — never trust implicitly.
Question 16
Which service provides browser-based RDP/SSH access to VMs without public IPs?
Answer: Azure Bastion.
Question 17
What is the correct management hierarchy in Azure?
Answer: Management groups → Subscriptions → Resource groups → Resources.
Question 18
Which service is a cloud-native SIEM solution?
Answer: Microsoft Sentinel.
Question 19
What SLA applies to two or more VMs in an availability set?
Answer: 99.95%.
Question 20
Which Azure feature prevents accidental deletion of critical resources?
Answer: Resource locks.
🚀 Ready for the full experience? Take our
free timed practice tests — 210+ questions with a real exam timer, scoring, and detailed reviews.