Free Microsoft Azure AZ-900 Practice Questions
Original practice questions with a full explanation for every answer — see why the right choice is right and why each wrong one is wrong.
⏱️ 12 questions
Click an answer to reveal the reasoning. These are original questions written to test the same concepts as the exam — not copied exam items — so you learn the <em>why</em>.
In short: These are free, original Microsoft Azure AZ-900 practice questions covering all three exam areas. Each question includes a full explanation of the correct answer and why the other options are wrong. No signup is required.
Azure AZ-900 practice set
Twelve original questions across the three areas. Tap an option to check it, or use “Show all answers” to review the reasoning.
Area 1 · Cloud concepts
1. A company pays only for the compute it actually uses each month, with no upfront hardware purchase. Which cloud characteristic does this describe?
Correct answer: The consumption-based (pay-as-you-go) model.
Paying only for what you use, with no upfront capital purchase, is the consumption-based model — it turns a capital expense (CapEx) into an operating expense (OpEx). Vertical scaling is resizing a resource, high availability is about uptime, and shared responsibility is about who secures what.
Area 1 · Cloud concepts
2. A team wants to run a web app without managing the underlying operating system or servers, deploying only their code. Which service model fits best?
Correct answer: PaaS (Platform as a Service).
PaaS gives you a managed platform where you deploy just your app and data — the provider handles the OS and servers (e.g. Azure App Service). IaaS (like a VM) would still leave you managing the OS; SaaS is finished software you only consume; on-premises is not cloud at all.
Area 1 · Cloud concepts
3. In the shared responsibility model, which item is ALWAYS the customer's responsibility, regardless of cloud service type?
Correct answer: Data and user access/identities.
Data, accounts, and access management always belong to the customer in every model. The physical datacenter, network hardware, and hypervisor are the cloud provider's responsibility. How much else you own shifts with IaaS vs PaaS vs SaaS — but your data and identities never leave your side.
Area 1 · Cloud concepts
4. An application automatically adds servers during a traffic spike and removes them afterwards. Which cloud benefit does this BEST illustrate?
Correct answer: Elasticity.
Automatically adding and removing capacity to match demand is elasticity (closely related to horizontal scaling). Disaster recovery is about restoring after an outage, governance is about enforcing rules, and confidentiality is a security goal — none describe auto-scaling to demand.
Area 2 · Architecture and services
5. A business needs its application to keep running even if an entire Azure datacenter within a region fails. Which concept should they design around?
Correct answer: Availability zones.
Availability zones are physically separate datacenters within a region; spreading resources across zones keeps an app running if one datacenter fails. Resource groups and management groups are organisational containers, and tags are labels — none provide physical fault isolation.
Area 2 · Architecture and services
6. Which Azure container groups a set of related resources so they can be managed, and have permissions applied, together?
Correct answer: A resource group.
A resource group is a logical container for related resources you manage as a unit (deploy, permission, delete together). A virtual network is for connectivity, an availability zone is a physical location, and a blob container holds storage objects, not general resources.
Area 2 · Architecture and services
7. A developer wants to run small pieces of code in response to events without provisioning or managing any servers. Which service is the BEST fit?
Correct answer: Azure Functions.
Azure Functions is serverless compute: you run event-driven code and pay only when it executes, with no servers to manage. Virtual Machines require you to manage the OS, Blob Storage stores data, and ExpressRoute is a networking connection.
Area 2 · Architecture and services
8. A company needs a private, dedicated connection between its on-premises datacenter and Azure that does NOT travel over the public internet. Which service provides this?
Correct answer: ExpressRoute.
ExpressRoute provides a private, dedicated connection that bypasses the public internet. A VPN Gateway also connects on-premises to Azure but travels over the internet (encrypted). Azure DNS resolves names and a Load Balancer distributes traffic.
Area 2 · Architecture and services
9. Which storage redundancy option protects your data against the failure of an entire Azure region?
Correct answer: Geo-redundant storage (GRS).
GRS replicates your data to a second, geographically distant region, so it survives a whole-region outage. LRS keeps copies in a single datacenter and ZRS across zones within one region — neither survives losing the entire region.
Area 3 · Management and governance
10. Before deploying anything, a team wants to estimate the monthly cost of a planned set of Azure services. Which tool should they use?
Correct answer: The Azure Pricing Calculator.
The Pricing Calculator estimates costs before you deploy. Microsoft Cost Management tracks actual spend after deployment, Azure Advisor gives recommendations, and Azure Monitor collects health metrics and logs.
Area 3 · Management and governance
11. An organisation wants to automatically prevent anyone from creating resources in unapproved regions. Which Azure tool enforces this?
Correct answer: Azure Policy.
Azure Policy enforces organisational rules and standards on resources (for example, allowed regions), and can block non-compliant deployments. Advisor only recommends, tags only label, and Service Health reports the status of Azure itself.
Area 3 · Management and governance
12. Which Azure service provides personalised recommendations to improve the cost, security, reliability, and performance of your resources?
Correct answer: Azure Advisor.
Azure Advisor analyses your usage and gives personalised recommendations across cost, security, reliability, and performance. Azure Policy enforces rules, and Azure DNS resolves names — neither provides recommendations.
🔑 How to read your score
Your result here reflects how you did on these practice questions — it is not a prediction of your real exam score. Use it to spot which areas to review next.
Frequently asked questions
Are these real AZ-900 exam questions?
No. Every question here is original, written to test the same concepts as the exam. Reproducing real exam items would breach Microsoft's exam agreement and copyright, and it wouldn't help you understand the material.
Do I need to sign up to see the answers?
No. The answer and full explanation for every question are free and shown on this page.
Ready to test yourself under exam-style conditions?
Explore the full Azure AZ-900 course →
Independent study resource. Not affiliated with, authorized, endorsed by, or sponsored by CompTIA, Amazon Web Services, Microsoft, or ISC2. All trademarks are the property of their respective owners and are used here for identification only. All practice questions are original.