AZ-900 Microsoft Azure Assessment 2 — Questions and Answers
Question 1: Which Azure service provides a fully managed relational database with built-in high availability, automated backups, and intelligent performance tuning?
- Azure SQL Database (Correct answer)
- Azure Table Storage
- Azure Cosmos DB
- Azure Synapse Analytics
Correct answer: Azure SQL Database
Azure SQL Database is a fully managed PaaS relational database service with built-in high availability, automated backups, and intelligent performance features like automatic tuning.
Azure SQL Database is a fully managed platform as a service (PaaS) database engine that handles most database management functions without user involvement. It provides built-in high availability with 99.99% uptime SLA, automated backups with point-in-time restore, and intelligent performance tuning. Unlike Azure Table Storage (NoSQL key-value) or Cosmos DB (multi-model NoSQL), Azure SQL Database is specifically relational and SQL Server-compatible.
Question 2: In Azure, what is the primary purpose of a Resource Group?
- To logically organize and manage related Azure resources as a single unit (Correct answer)
- To provide network isolation between Azure services
- To define billing boundaries for individual team members
- To replicate resources across multiple Azure regions
Correct answer: To logically organize and manage related Azure resources as a single unit
A Resource Group is a logical container that holds related Azure resources, allowing you to manage, deploy, and delete them together as a single unit.
A Resource Group is a container that holds related resources for an Azure solution. It allows you to deploy, update, monitor, and delete all the resources in a group together. Every resource in Azure must belong to exactly one resource group. Resource Groups are useful for organizing resources by lifecycle, department, project, or environment (e.g., dev vs. prod), though they do not provide network isolation or per-user billing boundaries on their own.
Question 3: Which cloud service model gives you the most control over the underlying infrastructure, including the operating system and installed software?
- Infrastructure as a Service (IaaS) (Correct answer)
- Platform as a Service (PaaS)
- Software as a Service (SaaS)
- Function as a Service (FaaS)
Correct answer: Infrastructure as a Service (IaaS)
IaaS provides the highest level of control, giving you access to virtualized hardware including networking, storage, and compute. You manage the OS, middleware, and applications.
In the IaaS model, the cloud provider manages the physical infrastructure (servers, networking, storage), while you control everything from the operating system upward — including patching the OS, installing runtimes, middleware, and applications. PaaS abstracts away the OS (you only manage your application and data), and SaaS abstracts everything (you only consume the software). IaaS offers the most flexibility at the cost of more administrative responsibility.
Question 4: What Azure feature allows you to estimate the cost of Azure services before deploying them?
- Azure Pricing Calculator (Correct answer)
- Azure Cost Management
- Azure Advisor
- Azure Monitor
Correct answer: Azure Pricing Calculator
The Azure Pricing Calculator is a web-based tool that lets you configure and estimate the monthly costs of Azure products before you deploy them.
The Azure Pricing Calculator (available at azure.microsoft.com/en-us/pricing/calculator) allows you to select Azure services, configure their settings (region, tier, quantity), and receive an estimated monthly cost. This is used for planning and budgeting before deployment. Azure Cost Management helps you analyze and optimize costs for resources already deployed. Azure Advisor provides recommendations across cost, security, reliability, and performance.
Question 5: Which Azure identity service is used to manage user identities and provide authentication for Azure resources and Microsoft 365?
- Microsoft Entra ID (Azure Active Directory) (Correct answer)
- Azure Key Vault
- Azure Security Center
- Azure Policy
Correct answer: Microsoft Entra ID (Azure Active Directory)
Microsoft Entra ID (formerly Azure Active Directory) is Azure's cloud-based identity and access management service, providing authentication and authorization for Azure and Microsoft 365.
Microsoft Entra ID (formerly Azure Active Directory or Azure AD) is a cloud-based identity and access management (IAM) service. It provides authentication for users signing into Azure, Microsoft 365, and thousands of third-party SaaS applications. It supports features like Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access. Azure Key Vault is for secrets management, Azure Security Center (now Defender for Cloud) is for threat protection, and Azure Policy enforces organizational standards.
Question 6: What is the Azure SLA concept that defines the minimum uptime percentage Microsoft commits to for a service?
- Monthly uptime percentage guarantee expressed in the service agreement (Correct answer)
- Recovery Time Objective (RTO)
- Recovery Point Objective (RPO)
- Mean Time Between Failures (MTBF)
Correct answer: Monthly uptime percentage guarantee expressed in the service agreement
Azure SLAs define the minimum uptime and connectivity guarantees Microsoft commits to, expressed as a percentage (e.g., 99.9%, 99.95%, 99.99%) of monthly uptime.
Azure Service Level Agreements (SLAs) define Microsoft's commitment to availability and performance, typically expressed as a percentage of monthly uptime (e.g., 99.9% = up to ~43.8 minutes downtime/month). Different services have different SLA tiers, and combining services in an architecture can result in a composite SLA that is lower than any individual component's SLA. RTO and RPO are disaster recovery concepts related to how quickly you can recover and how much data loss is acceptable, which are different from the SLA uptime commitment.
AZ-900 Microsoft Azure Assessment 2
Which Azure service provides a fully managed relational database with built-in high availability, automated backups, and intelligent performance tuning?