AZ-900 practice questions: Azure Architecture and Services

Answer: D. Bullet 'Compare Azure Storage services'. The Learn unit 'Describe Azure storage services' lists the core data services: Azure Blobs, a massively scalable object store for text and binary data, ideal for serving images or documents directly to a browser; Azure Files, managed file shares accessible over SMB or NFS; Azure Disks, block-level storage volumes for Azure virtual machines; Azure Queues for messaging; and Azure Tables for structured, non-relational data. Source: Microsoft Learn - AZ-900 study guide: Describe Azure architecture and services

Answer: D. Bullet 'Describe authentication methods in Azure, including single sign-on (SSO), multifactor authentication (MFA), and passwordless'. The Learn unit 'Describe Azure authentication methods' states that passwordless methods eliminate the password entirely, replacing it with a trusted device plus a biometric signal or PIN, that after initial registration the user signs in with a factor they know or are, such as a PIN or fingerprint, instead of typing a password, and that Microsoft Entra ID supports three passwordless options: Windows Hello for Business, Microsoft Authenticator app, and FIDO2 security keys. Source: Microsoft Learn - AZ-900 study guide: Describe Azure architecture and services

Answer: C. Bullet 'Describe directory services in Azure, including Microsoft Entra ID and Microsoft Entra Domain Services'. The Learn unit 'Describe Azure directory services' states under 'Is information synchronized?' that 'a managed domain is configured to perform a one-way synchronization from Microsoft Entra ID to Microsoft Entra Domain Services. You can create resources directly in the managed domain, but they aren't synchronized back to Microsoft Entra ID.' In a hybrid environment, Microsoft Entra Connect synchronises the on-premises directory with Microsoft Entra ID, which is then synchronised to the managed domain. Source: Microsoft Learn - AZ-900 study guide: Describe Azure architecture and services

Answer: B. Bullet 'Describe redundancy options'. The Learn unit 'Describe Azure storage redundancy' states that GRS 'copies data synchronously three times in the primary region (LRS), then asynchronously to the secondary region'. Its Important note explains the consequence: 'Because data is replicated to the secondary region asynchronously, a failure that affects the primary region may result in data loss if the primary region can't be recovered. The interval between the most recent writes to the primary region and the last write to the secondary region is known as the recovery point objective (RPO). ... Azure Storage typically has an RPO of less than 15 minutes, although there's currently no SLA on how long it takes to replicate data to the secondary region.' Source: https://learn.microsoft.com/en-us/training/modules/describe-azure-storage-services/3-redundancy

Answer: A. Bullet 'Describe virtual networking, including the purpose of Azure virtual networks, subnets'. The article 'Reliability in Azure Virtual Network' states: 'A virtual network and its subnets span all availability zones within the region where you deploy them, so they're automatically zone redundant. You don't need to configure anything to enable zone redundancy.' It continues: 'You don't need to divide your virtual networks or subnets by availability zones to accommodate zonal resources. For example, if you configure a zonal VM, you don't have to consider the virtual network when you select the availability zone for the VM.' Under 'Cross-zone operation' it adds: 'Resources deployed in any zone use the same virtual network and address space. Private IP traffic flows directly between resources, even when the resources are in different availability zones.' The three zonal machines can therefore share one subnet; the zone is chosen on each machine, not on the subnet. Source: https://learn.microsoft.com/en-us/azure/reliability/reliability-virtual-network