Microsoft Azure Fundamentals (AZ-900) Exam Dumps & Questions 2026
Microsoft Azure Fundamentals (AZ-900) Exam Dumps & Questions 2026
Visit Official SkillCertPro Website :-
For a full set of 730 questions. Go to
https://skillcertpro.com/product/microsoft-azure-fundamentals-az-900-exam-questions/
SkillCertPro offers detailed explanations to each question which helps to understand the concepts better.
It is recommended to score above 85% in SkillCertPro exams before attempting a real exam.
SkillCertPro updates exam questions every 2 weeks.
You will get life time access and life time free updates
SkillCertPro assures 100% pass guarantee in first attempt.
Question 1:
You have an Azure environment that contains multiple Azure virtual machines. You plan to implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines. You need to recommend which Azure resources must be created for the planned solution.
Which two Azure resources should you include in the recommendation?
A.Load Balancer
B.Virtual Network
C.Application Gateway
D.Gateway Subnet
E.Virtual Network Private Gateway
Answer: D and E
Explanation:
D – Gateway Subnet
Required to configure a VPN gateway in Azure. The gateway subnet is a dedicated subnet within the virtual network that hosts the VPN gateway resources. Without this, on‑premises clients cannot connect securely to Azure VMs.
E – Virtual Network Private Gateway
Also required to establish secure communication between on‑premises client computers and Azure VMs. The VPN gateway provides the encrypted tunnel for traffic between the two environments.
Incorrect
A – Load Balancer
Incorrect because a load balancer distributes traffic among VMs inside Azure. It does not enable communication between on‑premises clients and Azure VMs.
B – Virtual Network
Incorrect in this context. While a virtual network is necessary for Azure VMs, the question specifically asks which resources must be created to enable communication from on‑premises. The critical missing pieces are the gateway subnet and VPN gateway.
C – Application Gateway
Incorrect because Application Gateway is a Layer 7 load balancer for web traffic. It does not provide secure connectivity between on‑premises clients and Azure VMs.
Question 2:
Select two correct statements for Azure Subscriptions.
A.A company can store resources in multiple subscriptions
B.The virtual machines can be moved to the new subscription-only if they are all in the same resource group
C.Each Azure Subscription can contain multiple account Admins
D.A single account can be associated with at most 10 Subscriptions
E.Each Azure Subscription can be managed by using a Microsoft account only
Answer: A and C
Explanation:
A. A company can store resources in multiple subscriptions
Organizations frequently use multiple subscriptions to segregate environments (such as Production, Development, and Testing), accommodate different department billing requirements, or satisfy distinct access policies and compliance boundaries.
C. Each Azure Subscription can contain multiple account Admins
This is correct (conceptually in legacy classic models and via Azure RBAC Roles like Owner/Administrator). Azure allows you to designate multiple users with administrative control over a subscription to ensure operational continuity and proper management coverage.
Incorrect:
B. The virtual machines can be moved to the new subscription-only if they are all in the same resource group
While moving virtual machines across subscriptions requires moving their dependent resources (like disks and network interfaces) together, they do not strictly have to belong to a single resource group beforehand. You can move VMs out of different resource groups sequentially or together.
D. A single account can be associated with at most 10 Subscriptions
A single Azure account or identity can be associated with or manage a significantly larger number of subscriptions (often hundreds or thousands depending on enterprise agreements and tenant structures), far exceeding the limit of 10.
E. Each Azure Subscription can be managed by using a Microsoft account only
Azure Subscriptions can be managed using both personal Microsoft accounts (like Outlook or Hotmail) and enterprise organizational identities through Microsoft Entra ID (formerly Azure Active Directory) accounts.
Question 3:
A company is planning on migrating their public web site to Azure. Which of the following do they need to consider when it comes to hosting their public web site on Azure?
A.They would need to reduce the number of connections to the web site
B.They would need to deploy a Virtual Private connection from their on-premise site to Azure
C.They would have to consider paying a monthly cost for the solution
D.They would need to pay for the user data transfer onto the site
Answer: C
Explanation:
C. Paying a monthly cost for the solution
Hosting a public website on Azure involves ongoing subscription costs for the chosen service (e.g., Azure App Service, Azure Virtual Machines, or Azure Static Web Apps).
Costs depend on compute, storage, bandwidth, and scaling requirements.
This is the key consideration when migrating a public website to Azure.
Incorrect
A. Reduce the number of connections
Azure services are designed to scale automatically to handle traffic.
There is no requirement to reduce connections; instead, scaling and load balancing are used.
B. Deploy a Virtual Private connection
A public website does not require a private connection (like ExpressRoute or VPN).
Public websites are accessible over the internet, so private connectivity is not needed.
D. Pay for user data transfer onto the site
Inbound data transfer (data coming into Azure) is free of charge.
Only outbound data transfer (data leaving Azure to users) incurs costs.
Question 4:
Your company has an on-premises network that contains multiple servers and plans to reduce the administrative responsibilities of network administrators by migrating several servers to Azure virtual machines. Identify which two administrative responsibilities will be reduced after the planned migration.
A.Replacing failed server hardware
B.Updating server operating systems
C.Backing up application data
D.Managing physical server security
E.Managing permissions to shared documents
Answer: A and D
Explanation:
A. Replacing failed server hardware
In an Infrastructure as a Service (IaaS) model like Azure Virtual Machines, Microsoft is responsible for managing, maintaining, and replacing all underlying physical infrastructure and hardware components in the datacenter.
D. Managing physical server security
Physical security boundaries, biometric access controls, security guards, and surveillance at the datacenters are fully handled by Microsoft, eliminating these responsibilities for your local network administrators.
Incorrect:
B. Updating server operating systems
Azure Virtual Machines are an IaaS offering. While the physical host is managed by Microsoft, you retain full ownership of the guest operating system, meaning your team remains responsible for OS patching, configuration, and updates.
C. Backing up application data
Under the shared responsibility model, data management and protection belong strictly to the customer. While Azure provides tools like Azure Backup to facilitate this, configuring and ensuring backups happen remains your responsibility.
E. Managing permissions to shared documents
Data governance, identity and access management (IAM), and the permissions assigned to application files or shared documents remain entirely the customer's responsibility regardless of where the server is hosted.
Question 5:
Which statement accurately describes the Modern Lifecycle Policy for Azure services?
A.When a service is retired, you can purchase extended support for the service for up to five years.
B.After a service is made generally available, Microsoft provides support for the service for a minimum of four years.
C.Microsoft provides mainstream support for service for five years.
D.Microsoft provides a minimum of 12 months‘ notice before ending support for a service.
Answer: D
Explanation:
D. Microsoft provides a minimum of 12 months’ notice before ending support for a service.
Under the Modern Lifecycle Policy, Azure services do not follow fixed support timelines (like 5 years mainstream + 5 years extended).
Instead, Microsoft commits to providing at least 12 months’ notice before retiring or ending support for a service.
This ensures customers have sufficient time to plan migrations or adjustments.
Incorrect
A. When a service is retired, you can purchase extended support for the service for up to five years.
Incorrect because extended support is part of the Fixed Lifecycle Policy, not the Modern Lifecycle Policy.
Azure services under Modern Lifecycle do not offer extended paid support after retirement.
B. After a service is made generally available, Microsoft provides support for the service for a minimum of four years.
Incorrect because Modern Lifecycle does not guarantee a fixed number of years of support.
Instead, support continues as long as the service is offered, with retirement notice provided at least 12 months in advance.
C. Microsoft provides mainstream support for service for five years.
Incorrect because this is again part of the Fixed Lifecycle Policy (used for traditional software products).
Azure services under Modern Lifecycle do not follow the 5-year mainstream support model.
For a full set of 730 questions. Go to
https://skillcertpro.com/product/microsoft-azure-fundamentals-az-900-exam-questions/
SkillCertPro offers detailed explanations to each question which helps to understand the concepts better.
It is recommended to score above 85% in SkillCertPro exams before attempting a real exam.
SkillCertPro updates exam questions every 2 weeks.
You will get life time access and life time free updates
SkillCertPro assures 100% pass guarantee in first attempt.
Question 6:
Which of the following Azure features is most likely to deliver the most immediate savings when it comes to reducing Azure costs?
Select the correct option.
A.Changing your storage accounts from globally redundant (GRS) to locally redundant (LRS).
B.Auto shutdown of development and QA servers over night and on weekends.
C.Using Azure Reserved Instances for most of your virtual machines.
D.Using Azure Policy to restrict the user of expensive VM SKUs.
Answer: C
Explanation:
C. Using Azure Reserved Instances delivers the most immediate savings (up to 72% on VMs) because they apply discounts instantly upon purchase to existing or new predictable workloads, providing the highest percentage reduction compared to other options in AZ-900 cost management scenarios.finout
Incorrect:
Option A: Changing from GRS to LRS saves ~40-50% on storage redundancy costs, but the savings magnitude is lower than Reserved Instances since storage typically represents a smaller portion of total Azure spend than compute.cloud9infosystems
Option B: Auto-shutdown of dev/QA VMs eliminates idle hours (potentially 70% savings on those VMs), but requires scheduling setup and only affects non-production environments, yielding less immediate impact than VM reservations across production workloads.holori
Option D: Azure Policy prevents future overspending by restricting expensive SKUs, but delivers no immediate savings on existing resources—it’s preventive rather than retroactive cost reduction.
Question 7:
What makes estimating the cost of an unmanaged storage account difficult?
A.You are charged for data coming into Azure, and it's difficult to predict that
B.The cost of storage changes frequently
C.There is no way to predict the amount of data in the account
D.You are charged for data leaving Azure, and it's difficult to predict that
Answer: D
Explanation:
D. You are charged for data leaving Azure, and it’s difficult to predict that.
In Azure, outbound data transfers (egress) are charged, while inbound data transfers are generally free.
For an unmanaged storage account, the challenge lies in predicting how much data will leave Azure, since usage patterns can vary widely.
This unpredictability makes cost estimation difficult, especially for workloads with fluctuating or unknown external access requirements.
Incorrect
A. You are charged for data coming into Azure, and it’s difficult to predict that.
Incorrect because data ingress (incoming data) into Azure is typically free.
Costs are associated with outbound traffic, not inbound, so this does not explain the difficulty in estimating costs.
B. The cost of storage changes frequently.
Azure storage pricing is relatively stable and published transparently.
Costs do not fluctuate unpredictably; they are based on clear tiers (Hot, Cool, Archive).
C. There is no way to predict the amount of data in the account.
Organizations can estimate storage needs based on workload requirements.
While growth may be uncertain, Azure provides calculators and monitoring tools to help forecast storage usage.
The real challenge is predicting data egress, not storage volume.
Question 8:
Your company plans to automate the deployment of servers to Azure.
Your manager is concerned that you may expose administrative credentials during the deployment.
You need to recommend an Azure solution that encrypts the administrative credentials during the deployment.
What should you include in the recommendation?
A.Azure Key Vault
B.Azure Information Protection
C.Azure Security Center
D.Azure Multi-Factor Authentication (MFA)
Answer: A
Explanation:
The scenario is about automating server deployments while avoiding exposure of administrative credentials.
Azure Key Vault is a cloud service that securely stores secrets, keys, and certificates.
During automation (for example, via ARM templates, Azure CLI, or PowerShell), you can reference credentials stored in Key Vault instead of hardcoding them in scripts.
This ensures credentials are never exposed in deployment code, and access can be controlled via Azure RBAC and policies.
Incorrect:
Azure Information Protection ❌
Primarily used to classify and protect sensitive documents and emails, not store credentials.
Azure Security Center ❌
Provides security monitoring and threat protection; it does not store or manage secrets for automation.
Azure Multi-Factor Authentication (MFA) ❌
Provides additional login verification for users but does not securely store or manage secrets for deployment.
References: https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview
Question 9:
A team of developers at your company plans to deploy, and then remove, 50 customized virtual machines each week. Thirty of the virtual machines run Windows Server 2016 and 20 of the virtual machines run Ubuntu Linux.
You need to recommend which Azure service will minimize cost and the administrative effort required to deploy and remove the virtual machines.
What should you recommend?
A.A team of developers at your company plans to deploy, and then remove, 50 customized virtual machines each week. Thirty of the virtual machines run Windows Server 2016 and 20 of the virtual machines run Ubuntu Linux.
You need to recommend which Azure service will minimize cost and the administrative effort required to deploy and remove the virtual machines.
What should you recommend?
B.Azure Resource Manager Template (ARM)
C.Azure virtual machine scale sets
D.Azure Reserved Virtual Machines (VM) Instances
E.Azure DevTest Labs
Answer: D
Explanation:
D. Azure DevTest Labs
Azure DevTest Labs is designed specifically to quickly create, manage, and delete virtual machines while minimizing both cost and administrative overhead. It supports Windows and Linux VMs, allows the use of custom images, and includes features such as auto-shutdown, quotas, and policies. These capabilities make it ideal for environments where VMs are frequently deployed and removed, such as weekly test or development workloads.
Incorrect:
A. Azure Resource Manager Template (ARM)
ARM templates automate deployment, but they do not reduce ongoing administrative effort or cost by themselves. While they help with consistency, managing frequent creation and deletion of large numbers of VMs still requires manual orchestration and lacks built-in cost-control features like quotas and auto-shutdown.
B. Azure virtual machine scale sets
Virtual machine scale sets are intended for scaling identical VMs in response to load, typically for production applications. They are not well-suited for deploying and removing many customized VMs across different operating systems on a weekly basis.
C. Azure Reserved Virtual Machines (VM) Instances
Reserved VM Instances are designed to reduce cost for long-running workloads by committing to one- or three-year usage. They are not appropriate for short-lived VMs that are frequently created and deleted, as they would increase cost rather than reduce it.
Question 10:
A company is planning to use Azure solutions and wants to understand the Azure global infrastructure.
Which statement regarding Azure regions is correct?
A.Regions contain a maximum of two availability zones.
B.They are contained within data centers.
C.Azure service availability can vary by region.
D.They are contained within availability zones.
Answer: C
Explanation:
✅ Azure service availability can vary by region
Azure services are not available in every Azure region. Service availability varies from region to region.
An Azure region is a geographical area that contains at least one, and potentially multiple, datacenters located close together and connected by a low-latency network.
Reference: https://azure.microsoft.com/en-in/global-infrastructure/services/
❌ Regions contain a maximum of two availability zones
Incorrect. A region can have 0 or more Availability Zones (AZs).
Some Azure regions have no Availability Zones (for example, Australia Central), while others have three Availability Zones (for example, UK South and Australia East).
Reference: https://azure.microsoft.com/en-au/global-infrastructure/geographies
❌ They are contained within data centers
Incorrect. A region is a geographical area that contains one or more datacenters connected by a low-latency network.
Datacenters are contained within a region, not the other way around.
❌ They are contained within availability zones
Incorrect. An Azure region contains Availability Zones, not vice versa.
Therefore, this statement reverses the actual relationship between regions and Availability Zones.
For a full set of 730 questions. Go to
https://skillcertpro.com/product/microsoft-azure-fundamentals-az-900-exam-questions/
SkillCertPro offers detailed explanations to each question which helps to understand the concepts better.
It is recommended to score above 85% in SkillCertPro exams before attempting a real exam.
SkillCertPro updates exam questions every 2 weeks.
You will get life time access and life time free updates
SkillCertPro assures 100% pass guarantee in first attempt.