MICROSOFT CERTIFICATION

AZ-900 Azure Fundamentals Practice Exam

Exam Number: 3113 | Last updated 16-Apr-26 | 784+ questions across 4 vendor-aligned objectives

The AZ-900 Azure Fundamentals certification validates the skills of anyone seeking foundational knowledge of cloud concepts and core Azure services, including non-technical business stakeholders. This exam measures your ability to work with Azure Virtual Machines, Azure App Service, Azure Storage, Azure SQL Database, Microsoft Entra ID, Azure Cost Management, demonstrating both conceptual understanding and practical implementation skills required in today’s enterprise environments.

The heaviest exam domains include Describe Azure Architecture and Services (35–40%), Describe Azure Management and Governance (30–35%), and Describe Cloud Concepts (25–30%). These areas collectively represent the majority of exam content and require focused preparation across their respective subtopics.

Candidates should ensure thorough coverage of all domains, as each contributes meaningfully to the overall exam score and reflects distinct competencies expected on the job.

 No hands-on or coding questions appear. Concentrate on the shared responsibility model, IaaS vs. PaaS vs. SaaS distinctions, and Azure governance tools like Policy and Blueprints. Azure Architecture and Services carries the most weight.

Every answer links to the source. Each explanation below includes a hyperlink to the exact Microsoft documentation page the question was derived from. PowerKram is the only practice platform with source-verified explanations. Learn about our methodology →

806

practice exam users

95.4%

satisfied users

91.9%

passed the exam

4.9/5

quality rating

Test your AZ-900 Azure Fundamentals knowledge

10 of 784+ questions

Question #1 - Describe Cloud Concepts

A startup is deciding between building their own datacenter and using Azure. They want to convert large upfront hardware costs into monthly operational expenses.

Which cloud benefit does this describe?

A) Geo-distribution
B) Shift from capital expenditure to operational expenditure
C) Scalability
D) High availability

 

Correct answers: B – Explanation:
Moving from CapEx (buying hardware) to OpEx (paying monthly for cloud services) is a core cloud benefit. High availability ensures uptime. Scalability handles demand changes. Geo-distribution spreads resources globally. Source: Check Source

A startup evaluates building their own datacenter vs. using Azure. They want to convert large upfront hardware costs into monthly expenses.

Which cloud benefit does this describe?

A) Scalability allowing resources to increase or decrease based on changing demand patterns
B) High availability ensuring applications remain accessible during hardware failure events
C) Shifting from capital expenditure on owned hardware to operational expenditure on services
D) Geo-distribution placing application copies in multiple regions around the world

 

Correct answers: C – Explanation:
Moving from CapEx (purchasing and maintaining hardware) to OpEx (paying monthly for cloud services as consumed) is a foundational cloud economic benefit. High availability addresses uptime during failures. Scalability handles demand fluctuation. Geo-distribution addresses global reach and latency for internationally distributed users. Source: Check Source

A company needs complete control over their operating system and middleware but does not want to manage physical hardware.

Which cloud service type meets this need?

A) Platform as a Service where the provider manages the OS while customers deploy code
B) Software as a Service where the provider manages all layers including the application
C) Infrastructure as a Service where customers manage VMs while the provider handles hardware
D) Serverless computing where the provider manages all infrastructure and scales automatically

 

Correct answers: C – Explanation:
IaaS provides virtual machines where customers control the operating system, middleware, and runtime while Azure manages the physical infrastructure underneath. SaaS manages the entire stack including the application. PaaS manages the OS, so customers cannot control middleware. Serverless abstracts all infrastructure decisions from the customer entirely. Source: Check Source

A retail chain needs their e-commerce platform available 99.99% of the time, even during regional Azure outages.

Which cloud concept addresses this requirement?

A) Cost optimization reducing monthly cloud spending through reserved capacity commitments
B) High availability through redundancy across multiple geographic regions for resilience
C) Agility enabling rapid deployment of new features and infrastructure within minutes
D) Elasticity automatically adding or removing resources based on real-time demand signals

 

Correct answers: B – Explanation:
High availability with multi-region redundancy ensures the application remains accessible even during a complete regional failure by serving traffic from surviving regions. Agility describes the speed of deploying new capabilities. Elasticity handles demand-driven scaling, not failure resilience. Cost optimization focuses on reducing spending, not ensuring continuous availability. Source: Check Source

An organization needs to group Azure resources that share the same lifecycle, permissions, and billing for a marketing project.

Which Azure construct should they use?

A) An Azure subscription serving as the primary billing boundary and access control container
B) A resource group organizing resources that share lifecycle, permissions, and billing tags
C) A management group organizing multiple subscriptions under a unified governance hierarchy
D) An availability zone providing physically separate datacenter locations within an Azure region

 

Correct answers: B – Explanation:
Resource groups organize resources sharing a lifecycle and enable RBAC and billing tags at the group level. Management groups organize subscriptions, not individual resources. Subscriptions are billing boundaries containing multiple resource groups. Availability zones are physical datacenter locations for high availability, not resource organization constructs. Source: Check Source

A company evaluates Azure VMs, App Service, and Functions. They want code to run only on events with zero cost when idle.

Which service should they select?

A) Azure Functions on Consumption plan executing code only on events with per-execution billing
B) Azure App Service hosting web apps on always-available managed platform infrastructure
C) Azure Container Instances running container images with per-second billing while active
D) Azure Virtual Machines providing full OS control with per-second billing while running

 

Correct answers: A – Explanation:
Azure Functions on the Consumption plan executes code only when triggered by events and charges only during execution, with zero cost during idle periods. Virtual Machines incur per-second charges while the VM is running. App Service charges for the plan whether or not requests are being processed. Container Instances charge per-second while the container group is active and running. Source: Check Source

A multinational needs a database replicating automatically across three Azure regions with single-digit millisecond reads globally.

Which service provides this?

A) Azure Cosmos DB with turnkey multi-region distribution and guaranteed low-latency reads
B) Azure Database for MySQL Flexible Server with zone-redundant high availability enabled
C) Azure Table Storage providing simple key-value data access across storage account regions
D) Azure SQL Database with active geo-replication providing readable secondary replicas

 

Correct answers: A – Explanation:
Cosmos DB provides turnkey multi-region replication with single-digit millisecond read latency guarantees backed by comprehensive SLAs at any scale. SQL Database geo-replication supports readable secondaries but with higher cross-region latency. MySQL Flexible Server provides zone redundancy within a single region, not global distribution. Table Storage offers basic key-value access without guaranteed cross-region latency commitments. Source: Check Source

A dev team needs a private container image registry integrated with Azure supporting geo-replication and vulnerability scanning.

Which service should they use?

A) Docker Hub providing a public container registry with community-maintained image libraries
B) Azure Blob Storage configured with container-organized folders for storing image layer files
C) GitHub Container Registry hosting container images alongside source code repositories
D) Azure Container Registry offering private registries with geo-replication and security scanning

 

Correct answers: D – Explanation:
Azure Container Registry provides private registries with geo-replication across regions and integrates with Microsoft Defender for automated vulnerability scanning. Docker Hub is primarily a public registry and requires paid plans for private repositories. GitHub Container Registry integrates with GitHub but lacks Azure-native security scanning integration. Blob Storage stores unstructured data and is not a container image registry with pull/push semantics. Source: Check Source

A CFO wants to understand Azure spending by department and set budgets with alerts when spending approaches limits.

Which Azure service provides this financial visibility?

A) Azure Monitor tracking resource performance metrics, logs, and diagnostic telemetry data
B) Azure Policy evaluating resource configuration compliance against organizational standards
C) Azure Advisor offering optimization recommendations across cost, security, and performance
D) Azure Cost Management and Billing providing cost analysis, budgets, and spending alert rules

 

Correct answers: D – Explanation:
Cost Management provides cost analysis breakdowns by tags, departments, and subscriptions, along with budget creation and spending threshold alerts. Advisor offers periodic optimization recommendations but is not a financial management tool. Monitor tracks resource performance telemetry, not financial spending. Policy enforces resource configuration compliance, not budget management. Source: Check Source

A CTO wants to prevent teams from creating expensive VM sizes in development subscriptions while allowing all sizes in production.

Which governance tool enforces this restriction?

A) Azure Policy with an allowed VM SKU sizes definition assigned to the development subscription
B) RBAC Reader role assigned to developers preventing all resource creation write operations
C) Azure Advisor generating weekly cost optimization recommendations for review by each team
D) Azure Blueprints deploying standardized environment templates with predefined resource types

 

Correct answers: A – Explanation:
Azure Policy with allowed VM SKU sizes restricts which VM types can be created, enforced at the subscription scope for development environments. Advisor provides recommendations but does not prevent resource creation. Blueprints package governance artifacts but the Policy definition itself enforces the SKU restriction. Reader role prevents all write operations entirely, not just specific VM sizes. Source: Check Source

Get 784+ more questions with source-linked explanations

Every answer traces to the exact Microsoft documentation page — so you learn from the source, not just memorize answers.

Exam mode & learn mode · Score by objective · Updated 16-Apr-26

Learn more...

What the AZ-900 Azure Fundamentals exam measures

  • Describe Cloud Concepts (25–30%) — Evaluate your ability to implement and manage tasks within this domain, including real-world job skills and scenario-based problem solving.
  • Describe Azure Architecture and Services (35–40%) — Evaluate your ability to implement and manage tasks within this domain, including real-world job skills and scenario-based problem solving.
  • Describe Azure Management and Governance (30–35%) — Evaluate your ability to implement and manage tasks within this domain, including real-world job skills and scenario-based problem solving.

  • Review the official exam guide to understand every objective and domain weight before you begin studying
  • Complete the relevant Microsoft Learn learning path to build a structured foundation across all exam topics
  • Get hands-on practice in an Azure free-tier sandbox or trial environment to reinforce what you have studied with real configurations
  • Apply your knowledge through real-world project experience — whether at work, in volunteer roles, or contributing to open-source initiatives
  • Master one objective at a time, starting with the highest-weighted domain to maximize your score potential early
  • Use PowerKram learn mode to study by individual objective and review detailed explanations for every question
  • Switch to PowerKram exam mode to simulate the real test experience with randomized questions and timed conditions

Earning this certification can open doors to several in-demand roles:

Microsoft provides comprehensive free training to prepare for the AZ-900 Azure Fundamentals exam. Start with the official Microsoft Learn learning path for structured, self-paced modules covering every exam domain. Review the exam study guide for the complete skills outline and recent updates.

Related certifications to explore

Related reading from our Learning Hub