AZ-900 · Microsoft · Azure Architecture and Services · Bank updated 2026-09-20
AZ-900 practice questions: Azure Architecture and Services
5 free questions from 28 on this area · answer and explanation for each · no sign-up
These 5 questions come from the Azure Architecture and Services section of our AZ-900 bank (28 questions on this area, which carries 38% of the real exam). Every question is original, with the correct answer explained and linked to the source it is drawn from.
1/5 · Azure Architecture and Services · easy
A public website has to serve tens of millions of scanned documents, each one addressed by its own URL and downloaded straight into the visitor's browser. The archive keeps growing and has to stay as cheap as possible per gigabyte held. Which Azure Storage service does Learn point to?
AAzure Files shares for the documents
BAzure Disks attached to the web servers
CAzure Table Storage for the documents
DAzure Blob Storage for the documents
Show answer & explanation
D is correct. Bullet 'Compare Azure Storage services'. The Learn unit 'Describe Azure storage services' lists the core data services: Azure Blobs, a massively scalable object store for text and binary data, ideal for serving images or documents directly to a browser; Azure Files, managed file shares accessible over SMB or NFS; Azure Disks, block-level storage volumes for Azure virtual machines; Azure Queues for messaging; and Azure Tables for structured, non-relational data.
↗ Microsoft Learn — AZ-900 study guide: Describe Azure architecture and services
2/5 · Azure Architecture and Services
A resource group was created in West Europe, and a team now wants to put virtual machines that run in Japan East into that group. What does Microsoft's documentation say about the arrangement?
AThe machines must be created in the region of their resource group.
BThe machines may run elsewhere; the group keeps its own region.
CThe machines must be created in the group's region or its pair.
DThe machines may run elsewhere; the group's region follows them.
Show answer & explanation
B is correct. Bullet 'Describe Azure resources and resource groups'. The article 'What is Azure Resource Manager?' states under 'What is a resource group?' that the resources in a resource group can be located in different regions than the resource group, though the same location is recommended. Under 'Which location should I use for my resource group?' it states that the resource group stores metadata about resources and that when you specify a location for the resource group you're also specifying where that metadata is stored, which may matter for compliance reasons.
↗ Microsoft Learn — AZ-900 study guide: Describe Azure architecture and services
3/5 · Azure Architecture and Services
A team already publishes its public website and its REST API through Azure App Service. It now has a containerized background processor that must scale out while a queue builds up and fall back to a small baseline afterwards, and the team has nobody to operate a cluster. Which hosting option does Learn present for that component?
AAzure App Service on the existing plan
BAzure Kubernetes Service for the processor
CAzure Container Apps to run the processor
DAzure Container Instances for the processor
Show answer & explanation
C is correct. Bullet 'Describe application hosting options, including web apps, containers, and virtual machines'. The Learn unit 'Describe application hosting options' states that App Service lets you build and host web apps, background jobs, mobile back-ends and RESTful APIs without managing infrastructure. The unit 'Describe Azure containers' states that Azure Container Instances offers the fastest and simplest way to run a container in Azure, and that Azure Container Apps allows you to get up and running right away, removes container management overhead and supports load balancing and scaling.
↗ Microsoft Learn — AZ-900 study guide: Describe Azure architecture and services
4/5 · Azure Architecture and Services
A security lead is planning to take passwords out of daily sign-in for staff. Which combination does Learn name as the passwordless options that Microsoft Entra ID supports?
AWindows Hello for Business, FIDO2 keys, and SMS codes
BAuthenticator, FIDO2 keys, and hardware OATH tokens
CWindows Hello for Business, Authenticator, and SMS codes
DWindows Hello for Business, Authenticator, FIDO2 security keys
Show answer & explanation
D is correct. Bullet 'Describe authentication methods in Azure, including single sign-on (SSO), multifactor authentication (MFA), and passwordless'. The Learn unit 'Describe Azure authentication methods' states that passwordless methods eliminate the password entirely, replacing it with a trusted device plus a biometric signal or PIN, that after initial registration the user signs in with a factor they know or are, such as a PIN or fingerprint, instead of typing a password, and that Microsoft Entra ID supports three passwordless options: Windows Hello for Business, Microsoft Authenticator app, and FIDO2 security keys.
↗ Microsoft Learn — AZ-900 study guide: Describe Azure architecture and services
5/5 · Azure Architecture and Services
A security team wants one place that keeps checking how its Azure resources, its servers in its own datacenter and its workloads at another cloud provider are configured, ranks what to fix first, and gives it one figure to follow as the estate improves. Which service does Learn describe for that?
AMicrosoft Sentinel across the same estate
BMicrosoft Defender for Cloud on the estate
CMicrosoft Entra ID Protection for the tenant
DMicrosoft Purview across the data estate
Show answer & explanation
B is correct. Bullet 'Describe the purpose of Microsoft Defender for Cloud'. The Learn unit 'Describe Microsoft Defender for Cloud' presents it as a monitoring tool for security posture management and threat protection that monitors cloud, on-premises, hybrid and multicloud resources, and lists its three needs as continuously assess, secure (with prioritized, actionable recommendations and a secure score) and defend (with security alerts). The Microsoft Sentinel overview describes a cloud-native SIEM for threat detection, investigation and response.
↗ Microsoft Learn — AZ-900 study guide: Describe Azure architecture and services
Other AZ-900 areas
The same kind of free sample for every other section of the AZ-900 bank:
Study Azure Architecture and Services with instant feedback
6 free questions · filter study mode by area and difficulty · error log with spaced repetition · no card, no dumps, no ads.
Create your free account →
ExamDeck is an independent study tool, not affiliated with, endorsed by, or sponsored by Microsoft. AZ-900 and related marks are trademarks of their respective owners, used for identification only. Exam facts checked against official Microsoft materials (as of September 2026); always confirm current details with the vendor before booking.