AZ-900 Microsoft Azure Basic 2 — Questions and Answers

Question 1: What is the term for Azure's global network of datacenters organized into geographic locations?

Azure Regions (Correct answer)
Availability Zones
Resource Groups
Management Groups

Correct answer: Azure Regions

Azure Regions are geographic locations around the world where Azure datacenters are located. Each region contains one or more datacenters connected by a low-latency network.

Azure Regions are geographic areas around the world where Microsoft has deployed Azure datacenters. Each region has at least one datacenter and they are interconnected with a high-bandwidth, low-latency Microsoft network. As of 2024, Azure operates in over 60 regions worldwide. Availability Zones are physically separate locations WITHIN a single region. Resource Groups are logical containers for managing resources, and Management Groups organize multiple subscriptions.

Question 2: Which Azure storage tier is most cost-effective for storing data that is rarely accessed and can tolerate higher retrieval latency?

Archive tier (Correct answer)
Hot tier
Cool tier
Premium tier

Correct answer: Archive tier

The Archive tier is the lowest-cost Azure Blob Storage tier, designed for data that is rarely accessed and where retrieval latency of hours is acceptable. Storage costs are lowest but retrieval costs are highest.

Azure Blob Storage offers four access tiers: Hot (frequently accessed, higher storage cost, lower access cost), Cool (infrequently accessed, lower storage cost, higher access cost, minimum 30-day storage), Cold (rarely accessed, minimum 90-day storage), and Archive (rarely accessed, lowest storage cost, retrieval can take hours, minimum 180-day storage). Archive data must be rehydrated before it can be accessed, which can take up to 15 hours for standard priority.

Question 3: What Azure feature automatically adjusts the number of virtual machine instances based on demand to maintain performance while minimizing cost?

Azure Autoscale (Correct answer)
Virtual Machine Scale Sets
Azure Load Balancer
Azure App Service Plans

Correct answer: Azure Autoscale

Azure Autoscale automatically adjusts the number of compute resources (like VMs or App Service instances) based on demand, scaling out during peak times and scaling in during low demand.

Azure Autoscale is the feature that monitors metrics (like CPU utilization or request queue length) and automatically adds or removes instances based on rules you define. It can be applied to Virtual Machine Scale Sets, Azure App Service, Azure Cloud Services, and other services. VM Scale Sets provide the group of identical VMs that Autoscale can adjust. While Load Balancer distributes traffic across instances, it does not scale the number of instances.

Question 4: Which Azure service acts as a global content delivery network (CDN) to reduce latency by caching content closer to users?

Azure CDN (Correct answer)
Azure Front Door
Azure Traffic Manager
Azure Application Gateway

Correct answer: Azure CDN

Azure CDN (Content Delivery Network) caches static content at edge nodes globally, reducing latency for end users by serving content from a location geographically closer to them.

Azure CDN reduces latency by caching static assets (images, JavaScript, CSS, videos) at point-of-presence (POP) locations around the world. When a user requests content, the CDN serves it from the nearest edge node rather than the origin server. Azure Front Door is a global load balancer that also has CDN capabilities along with WAF and URL routing. Traffic Manager is a DNS-based load balancer for routing between regions, and Application Gateway is a regional Layer 7 load balancer.

Question 5: What is the purpose of Multi-Factor Authentication (MFA) in Azure?

To require users to verify their identity using two or more verification methods, adding security beyond passwords (Correct answer)
To restrict access to Azure resources based on user location
To automatically reset expired passwords for Azure users
To encrypt data stored in Azure storage accounts

Correct answer: To require users to verify their identity using two or more verification methods, adding security beyond passwords

MFA requires users to provide two or more verification factors (e.g., password plus phone code) to authenticate, significantly reducing the risk of account compromise from stolen passwords.

Multi-Factor Authentication (MFA) strengthens security by requiring users to verify their identity using at least two of these categories: something you know (password/PIN), something you have (authenticator app, hardware token, phone), or something you are (fingerprint, face recognition). Even if a password is stolen, an attacker cannot authenticate without the second factor. In Azure, MFA can be enforced through Microsoft Entra ID Conditional Access policies for all users or specific scenarios.

Question 6: Which Azure service allows you to run small pieces of code in the cloud without managing servers, paying only when the code executes?

Azure Functions (Correct answer)
Azure App Service
Azure Logic Apps
Azure Batch

Correct answer: Azure Functions

Azure Functions is a serverless compute service that lets you run event-driven code without provisioning or managing servers. You pay only for the time your code runs.

Azure Functions is Microsoft's serverless Functions as a Service (FaaS) offering. Code executes in response to triggers (HTTP requests, timer schedules, queue messages, blob storage events, etc.) and you are billed based on execution count and duration. This contrasts with Azure App Service where you pay for always-on compute. Azure Logic Apps provides low-code/no-code workflow automation, and Azure Batch handles large-scale parallel and high-performance computing jobs.

AZ-900 Microsoft Azure Basic 2

What is the term for Azure's global network of datacenters organized into geographic locations?