AZ-900 Microsoft Azure Fundamentals 2 — Questions and Answers
Question 1: Which benefit of cloud computing allows organizations to avoid large upfront hardware investments and instead pay for only the resources they consume?
- Pay-as-you-go (consumption-based) pricing (Correct answer)
- High availability guarantees
- Geographic distribution
- Automatic scaling
Correct answer: Pay-as-you-go (consumption-based) pricing
Pay-as-you-go pricing is a cloud computing model where you pay only for the resources you actually use, eliminating the need for large upfront capital expenditure on hardware.
The consumption-based or pay-as-you-go model is a fundamental cloud benefit. In traditional IT, organizations must purchase and maintain infrastructure for peak capacity, resulting in idle resources during off-peak periods. Cloud computing allows organizations to spin up resources when needed and scale back (or eliminate) them when not needed, paying only for actual consumption. Azure offers multiple pricing models including pay-as-you-go, reserved (discounted 1-3 year commitments), and spot pricing for interruptible workloads.
Question 2: What is Microsoft Entra ID (formerly Azure Active Directory) primarily used for in Azure?
- Cloud-based identity and access management — authenticating users and controlling access to Azure and Microsoft services (Correct answer)
- Managing DNS zones and domain name resolution for Azure resources
- Storing relational data in a managed database service
- Providing private network connectivity within Azure
Correct answer: Cloud-based identity and access management — authenticating users and controlling access to Azure and Microsoft services
Microsoft Entra ID is Azure's cloud-based identity provider, responsible for authenticating users, managing accounts, and controlling access to Azure resources, Microsoft 365, and SaaS applications.
Microsoft Entra ID (formerly Azure Active Directory) is the foundation of identity management in Azure. It provides authentication (verifying who you are) and authorization (what you can access) for cloud resources. Key features include Single Sign-On (SSO) for thousands of SaaS apps, Multi-Factor Authentication (MFA), Conditional Access policies, and B2B/B2C collaboration. It differs from on-premises Active Directory Domain Services (AD DS) in that it is cloud-native and uses modern protocols (OAuth 2.0, OpenID Connect, SAML) rather than Kerberos/NTLM.
Question 3: What does the term fault tolerance mean in cloud computing?
- The ability of a system to continue operating correctly even when one or more of its components fail (Correct answer)
- The ability to scale resources automatically in response to increased demand
- The process of distributing workloads across multiple geographic regions
- The ability to recover data after accidental deletion or corruption
Correct answer: The ability of a system to continue operating correctly even when one or more of its components fail
Fault tolerance means a system is designed to continue functioning even when individual components fail, through redundancy and failover mechanisms.
Fault tolerance is achieved by building redundancy into every layer of a system so that if any single component fails, a backup takes over automatically without service interruption. In Azure, this is achieved through Availability Zones (multiple independent datacenters in a region), Availability Sets (spreading VMs across fault and update domains), and geo-redundant storage replication. A fault-tolerant system has zero or near-zero downtime even during failures, as opposed to a highly available system which may have brief downtime during failover.
Question 4: Which Azure networking service provides secure connectivity between Azure virtual networks in different regions using the Microsoft backbone?
- Azure VNet Peering (Global VNet Peering) (Correct answer)
- Azure VPN Gateway
- Azure Load Balancer
- Azure Private Endpoint
Correct answer: Azure VNet Peering (Global VNet Peering)
Global VNet Peering connects Azure virtual networks across different regions, allowing resources in different regions to communicate privately using Microsoft's backbone network.
Azure Virtual Network Peering enables you to seamlessly connect two Azure virtual networks, making them appear as one for connectivity purposes. VNet Peering within a region uses the Azure backbone network (not the internet) for low-latency, high-bandwidth connectivity. Global VNet Peering extends this capability across Azure regions. Traffic between peered VNets never traverses the public internet. VPN Gateway creates encrypted tunnels over the public internet or private connections, Load Balancer distributes traffic within a region, and Private Endpoint provides private access to Azure PaaS services.
Question 5: What does the Azure Free Account provide to new Azure users?
- A free account offering 12 months of popular services, always-free services, and a $200 credit for the first 30 days (Correct answer)
- A permanently free tier giving unlimited access to all Azure services at no cost
- A free developer license for building and testing Azure applications in a sandbox environment
- A complimentary enterprise agreement for small businesses with fewer than 50 employees
Correct answer: A free account offering 12 months of popular services, always-free services, and a $200 credit for the first 30 days
Azure Free Account provides new users with a $200 credit for the first 30 days, 12 months of popular services for free, and over 55 always-free services with usage limits.
The Azure Free Account includes: (1) $200 USD credit to explore any Azure services for the first 30 days, (2) 12 months of free access to popular services like VMs (B1s), Azure SQL Database (250 GB), Blob Storage (5 GB), and more, (3) 55+ always-free services including Azure Functions (1 million requests/month), Azure Cosmos DB (400 RU/s), and Azure App Service (10 web apps). After the free tier limits are exhausted, standard pay-as-you-go pricing applies. It is not unlimited access and is not an enterprise agreement.
Question 6: Which Azure service category includes tools like Azure DevOps, Azure Monitor, and Azure Automation for managing and operating Azure deployments?
- Azure management and governance tools (Correct answer)
- Azure compute services
- Azure networking services
- Azure identity services
Correct answer: Azure management and governance tools
Azure management and governance tools include services for monitoring, automating, and governing Azure deployments, such as Azure Monitor, Azure Automation, Azure Policy, and Azure DevOps.
Azure's management and governance toolset includes: Azure Monitor (collect and analyze telemetry), Azure Automation (automate repetitive tasks), Azure Policy (enforce governance rules), Azure Blueprints (package policy and RBAC for repeatable environments), Azure Cost Management (track and optimize spending), and Azure DevOps (CI/CD pipelines and project management). These tools help organizations operate, secure, and optimize their Azure environments. They are distinct from compute services (VMs, Functions), networking services (VNets, Load Balancer), and identity services (Entra ID).
AZ-900 Microsoft Azure Fundamentals 2
Which benefit of cloud computing allows organizations to avoid large upfront hardware investments and instead pay for only the resources they consume?