AZ-900 · Microsoft · Updated September 2026
AZ-900 practice questions
Original & expert-reviewed · explanation for every option · no dumps
Practise AZ-900 with original, expert-reviewed questions — each with an explanation for every option, linked to the source, across the full exam blueprint. No dumps, no ads, 6 free to start.
Free: 6 questions in study mode, no card. Full AZ-900 bank with mock exams and the error log: $15 one-time, or every exam with All-Access for $19/mo or $119/yr.
3
skills measured (mid-points of Microsoft's ranges)
What makes these different from dumps
📚 An explanation for every option
Not just the right answer — why each wrong option is wrong, linked to the source. Wrong answers teach the most.
⏱️ Real-format timed mocks
Sit full 45-question, 45-minute exams and get a readiness report by area — know when you're ready.
↻ Spaced-repetition error log
Every miss comes back on a 1 → 3 → 7 → 16-day schedule, so the fixes actually stick.
🔖 Original & reviewed
Every question is written to test the concepts and reviewed before it ships — never copied or leaked “dumps”.
Try 10 real AZ-900 questions — free, no sign-up
A representative slice of the bank: every skills measured (mid-points of Microsoft's ranges), mixed difficulty (hard ones included). Answers are one tap away — no email wall.
1/10 · Azure Architecture and Services
An engineer reorganizing an Azure estate checks the rules that govern which resource group a resource sits in. What does Learn say about the membership of a resource?
AIt can belong to two resource groups at the same time.
BIt can be added to a second group as a linked reference.
CIt belongs to one group, and moving it changes which one.
DIt belongs to one group, and that group can be nested.
Show answer & explanation
C is correct. Bullet 'Describe Azure resources and resource groups'. The Learn unit 'Describe Azure management infrastructure' states that resource groups are groupings of resources, that every resource must belong to exactly one resource group, that you can move some resources between groups but a resource is only associated with one group at a time, and that resource groups can't be nested and can't be renamed after creation. It adds that actions applied to a resource group affect all the resources inside it.
↗ Microsoft Learn — AZ-900 study guide: Describe Azure architecture and services
2/10 · Azure Management and Governance
A governance lead wants two things. Every resource belonging to the marketing team should be reportable under one cost centre, and a new resource created without that information should be refused at deployment time. What do resource tags themselves deliver here?
AThey deliver the reporting, not the refusal
BThey deliver both of the goals on their own
CThey deliver the refusal, not the reporting
DThey deliver neither goal at either scope
Show answer & explanation
A is correct. Bullet 'Describe the purpose of tags'. The Learn unit 'Describe the purpose of tags' states that a tag consists of a name and a value, and lists the uses of resource tags: resource management, cost management and optimization (grouping resources so you can report on costs, allocate internal cost centers and forecast), operations management, security classification, governance and regulatory compliance, and workload optimization and automation. Tags describe resources; they do not by themselves stop one from being created.
↗ Microsoft Learn — AZ-900 study guide: Describe Azure management and governance
3/10 · Cloud Concepts
An organization runs some workloads on infrastructure as a service, some on platform as a service, and some on software as a service. Which item remains the organization's responsibility in all three cases?
AThe accounts and identities of its people, services, and devices.
BPhysical access control to the buildings where the servers are installed.
CInstallation and patching of the operating systems beneath the workloads.
DConfiguration of the switching hardware that connects racks in the datacenter.
Show answer & explanation
A is correct. Bullet 'Describe the shared responsibility model'. The Learn unit of the same name lists, under 'What always stays with you': the information and data stored in the cloud, the devices allowed to connect, and the accounts and identities of people, services, and devices. Its 'What the provider always owns' list is the physical datacenter, physical network, and physical hosts, while operating systems, network controls, applications, and identity and access depend on the service type.
↗ Microsoft Learn — AZ-900 study guide: Describe cloud concepts
4/10 · Azure Architecture and Services
An organization places its development work in one Azure subscription and its production workloads in another. What does that split establish between the two environments?
AIt sets a separate network address space for each environment
BIt fixes the region in which each environment's resources run
CIt gives each environment its own Microsoft Entra tenant
DIt separates the billing reports and the access-management scope
Show answer & explanation
D is correct. Bullet 'Describe subscriptions'. The Learn unit 'Describe Azure management infrastructure' names the two types of subscription boundary: a billing boundary, which determines how an Azure account is billed and produces separate billing reports and invoices, and an access control boundary, at which Azure applies access-management policies - with the documented example of one subscription for development and another for production, each with different spending limits and access rules.
↗ Microsoft Learn — AZ-900 study guide: Describe Azure architecture and services
5/10 · Azure Management and Governance
An outage takes a single Azure datacenter offline. A new administrator asks whether the Azure portal itself can still be used while that is going on. What does Learn say?
AIt stays available, running from the subscription's region
BIt is unavailable until that datacenter has been restored
CIt stays available, with a presence in each Azure datacenter
DIt is available for reading until maintenance completes
Show answer & explanation
C is correct. Bullet 'Describe the Azure portal'. The Learn unit 'Describe tools for interacting with Azure' states that the Azure portal is a web-based, unified console that provides an alternative to command-line tools, and that it is designed for resiliency and continuous availability: it maintains a presence in every Azure datacenter, which makes it resilient to individual datacenter failures and avoids network slowdowns by being close to users, and it is continuously updated with no downtime for maintenance activities.
↗ Microsoft Learn — AZ-900 study guide: Describe Azure management and governance
6/10 · Cloud Concepts
Two cloud environments are built to the same hardware design and run to the same standard by the same provider. Which difference does Learn name as the one that makes one of them public and the other private?
AWhether the provider or the customer owns the physical servers.
BWhether the environment is reachable from the public internet.
CWhether anyone who wants to buy cloud services can use the resources.
DWhether the customer or the provider maintains the operating systems.
Show answer & explanation
C is correct. Bullet 'Define cloud models, including public, private, and hybrid'. The Learn unit 'Define cloud models' states that a public cloud is built, controlled and maintained by a third-party cloud provider, that with a public cloud anyone that wants to purchase cloud services can access and use resources, and that the general public availability is a key difference between public and private clouds. A private cloud is an environment used by a single entity and may be hosted on site or in a dedicated datacenter offsite, potentially even by a third party.
↗ Microsoft Learn — AZ-900 study guide: Describe cloud concepts
7/10 · Azure Architecture and Services
A team hands its container images to Azure Container Instances, and Azure runs them for the team. Which service category does Learn place that offering in?
AInfrastructure as a service (IaaS)
BSoftware as a service (SaaS)
CA container orchestration service
DPlatform as a service (PaaS)
Show answer & explanation
D is correct. Bullet 'Compare compute types, including containers, virtual machines, and functions'. The Learn unit 'Describe Azure containers' states that Azure Container Instances offer the fastest and simplest way to run a container in Azure, without managing any virtual machines or adopting extra services, that Azure Container Instances are a platform as a service offering, and that you upload your containers and the service runs them for you. It states the same service category for Azure Container Apps, and adds that containers differ from virtual machines in that you don't manage the operating system for a container, which is why the infrastructure category does not fit.
↗ Microsoft Learn — AZ-900 study guide: Describe Azure architecture and services
8/10 · Azure Management and Governance
A team is deciding whether to standardize its Azure automation on Azure PowerShell or on the Azure CLI. Which statement about the pair does Learn support?
AThey differ in which resource types each one can manage
BThey differ in that one runs in a browser and one locally
CThey differ in the Azure regions each one is able to reach
DThey differ mainly in command syntax, and both cover the same work
Show answer & explanation
D is correct. Bullet 'Describe Azure Cloud Shell, Azure CLI, and Azure PowerShell'. The Learn unit 'Describe tools for interacting with Azure' states that the Azure CLI is functionally equivalent to Azure PowerShell, with the primary difference being the syntax of commands - PowerShell uses PowerShell commands and the CLI uses Bash commands - and that because of the similarities the choice mainly comes down to which language you're most familiar with. Both are installable on Windows, Linux and macOS and both are available through Cloud Shell.
↗ Microsoft Learn — AZ-900 study guide: Describe Azure management and governance
9/10 · Azure Architecture and Services · hard
A service is deployed into a single availability zone that the team picked itself, and that zone later suffers an outage. Who moves the workload to another zone, according to Microsoft's reliability guidance?
AThe team; Microsoft does not manage failover for a deployment pinned to one zone.
BMicrosoft; failover is managed in the same way as for a multi-zone deployment.
CThe team; the platform first restarts the resource inside the failed zone.
DMicrosoft; the resource is redeployed into the region that is paired with this one.
Show answer & explanation
A is correct. Bullet 'Describe availability zones'. The reliability article 'What are Azure Availability Zones?' distinguishes the two kinds of support under 'Types of availability zone support'. For zone-redundant resources it states that with zone-redundant deployments Microsoft manages spreading requests across zones and the replication of data across zones, and that if an outage occurs in an availability zone Microsoft manages failover to another zone automatically. For zonal resources, which are deployed to a single availability zone that you select yourself, it states that zonal deployments don't automatically provide resiliency to availability zone outages, that Microsoft doesn't manage the process for you, and that if an outage occurs you're responsible for failover to another zone.
↗ Microsoft Learn — AZ-900 study guide: Describe Azure architecture and services
10/10 · Azure Architecture and Services · hard
An architect is planning a second region for a workload that runs in Brazil South and looks up how that region is paired. What does Learn record about the pairing of Brazil South?
AIt is paired with another Brazilian region, in both directions.
BIts secondary is South Central US, whose secondary is another region.
CIt is paired with West Europe, chosen for the distance between them.
DIt has no pair, and relies on availability zones for its resiliency.
Show answer & explanation
B is correct. Bullet 'Describe Azure regions, region pairs, and sovereign regions'. The Learn unit 'Describe Azure physical infrastructure' states under 'Region pairs' that most regions are paired in two directions, meaning they are the backup for the region that provides a backup for them, but that some regions, such as Brazil South, are paired in only one direction, that in a one-direction pairing the primary region does not provide backup for its secondary region, and that Brazil South is unique because it's paired with a region outside of its geography, its secondary region being South Central US while the secondary region of South Central US isn't Brazil South. The same note names Italy North, Poland Central and Israel Central as regions without a traditional pair.
↗ Microsoft Learn — AZ-900 study guide: Describe Azure architecture and services
Practice by knowledge area
Five more free questions for each section of the AZ-900 bank, drawn from that area only, with the answer explained and linked to the source:
Covering every skills measured (mid-points of Microsoft's ranges)
The bank spans the whole AZ-900 blueprint, weighted toward what the exam tests most:
Start practising AZ-900 free
6 free questions in study mode · no card · full AZ-900 bank: $15 one-time · no dumps, no ads.
Start AZ-900 free →
AZ-900 practice — FAQ
Does AZ-900 expire?
No. Microsoft's renewal policy applies to role-based certifications; Fundamentals certifications such as Azure Fundamentals never expire and carry no renewal assessment or fee.
What changed in AZ-900 in 2026?
Microsoft's study guide lists the current skills measured as of July 20, 2026, with minor wording changes in compute/networking, deployment tools and monitoring. The three skill areas and their weights are unchanged.
Is AZ-900 enough to get an Azure job?
On its own, rarely — it proves cloud literacy, not administration skill. It is the standard first step before AZ-104 (Administrator) or a role-based associate exam, and a common requirement in sales, project and business roles that touch Azure.
How many questions is the AZ-900 exam and how long is it?
45 minutes of exam time (65 minutes seat time), delivered by Pearson VUE at a test centre or online, or through Certiport for students and educators.
What is the passing score for AZ-900?
The passing score is 700 on a scale of 1–1,000 (roughly 70%). Aim for a consistent 80–85% on realistic practice exams before booking.
What is the AZ-900 pass rate?
Microsoft does not publish official pass rates, so any exact percentage quoted online is unverified. The readiness signal that actually predicts passing: consistently holding 80–85% on realistic, full-length practice exams before you book.
What are the AZ-900 eligibility requirements?
No prerequisites — anyone can schedule AZ-900 through Microsoft Learn (Pearson VUE) or, as a student, through Certiport. Microsoft's audience profile is a technology professional with skills in some area of IT (infrastructure, database or software development) who wants to demonstrate foundational cloud knowledge; no Azure hands-on experience is required.
How much does AZ-900 cost?
The exam fee is $99 USD in the United States; Microsoft prices exams per country, so check the price shown on the AZ-900 page for your region. Microsoft regularly issues free exam vouchers through virtual training days. A free official Practice Assessment is available on Microsoft Learn.
How long should I study for AZ-900?
For most candidates, commonly reported 15–30 hours; Microsoft Learn's free learning paths are sufficient for most candidates (no official figure). What matters most is practising questions and analysing why each option is right or wrong — not just reading.
Does the AZ-900 certification need recertification?
none — Microsoft Fundamentals certifications do not expire and have no renewal requirement.
Are ExamDeck's AZ-900 questions exam dumps?
No — every question is original, written to test the concepts and reviewed before it ships, with an explanation linked to the source for every option. Dumps are stale, often wrong, and against Microsoft's policies.
ExamDeck is an independent study tool, not affiliated with, endorsed by, or sponsored by Microsoft. AZ-900 and related marks are trademarks of their respective owners, used for identification only. Exam facts checked against official Microsoft materials (as of September 2026); always confirm current details with the vendor before booking.