How can I use this Microsoft Azure Fundamentals Practice Test practice test page?

Open the starter set, generate the test, and then replace the sample with your own questions whenever you want more targeted revision.

Is this Microsoft Azure Fundamentals Practice Test mock test useful for entrance exam preparation?

Yes. It is designed for Microsoft Azure Fundamentals (AZ-900) aspirants for chapter-wise revision, speed practice and AI-generated mock papers from previous-year style questions.

More Practice / Microsoft Azure Fundamentals (AZ-900)

Microsoft Azure Fundamentals Practice Test

To make your study session as productive as possible, we align these practice problems with Microsoft's official three-pronged division of the AZ-900. Core Azure Architecture and Services claims the largest slice at 35–40%, while Management and Governance sits at 30–35%, and general Cloud Concepts represents the final 25–30%. This structure guarantees that you'll spend less time on abstract definitions and more time understanding actual products like VMs, Cosmos DB, and subscriptions.

Microsoft Azure Fundamentals (AZ-900)AzureAI practice test

Browse all competitive exams

About this Microsoft Azure Fundamentals (AZ-900) Azure practice test

Whether you are a shifting career professional, a non-technical manager, or a student, AZ-900 serves as the perfect launchpad since it has absolutely no hands-on technical prerequisites. The focus of this introductory pathway is high-level cloud literacy—understanding the financial benefits of migrating databases, knowing the differences between SaaS and IaaS, and establishing a basic command of Microsoft's cloud product suite. This study pack is engineered to demystify Azure's vast dictionary of service names in a welcoming, conversational format.

Microsoft Azure Fundamentals Practice Test sample questions

These starter questions help you launch a azure mock test quickly. Swap them with your own worksheet, notebook, or textbook questions any time.

1. What does IaaS stand for?
- A) Infrastructure as a Service
- B) Internet as a Service
- C) Integration as a Service
- D) Intelligence as a Service
2. Which Azure service provides scalable virtual machines?
- A) Azure App Service
- B) Azure Virtual Machines
- C) Azure Functions
- D) Azure Container Instances
3. What is the Azure Shared Responsibility Model?
- A) Microsoft manages everything
- B) The customer manages everything
- C) Microsoft manages the physical infrastructure; customers manage their data and applications
- D) Responsibilities are split by cost
4. Which Azure service is a serverless compute option?
- A) Azure Virtual Machines
- B) Azure App Service
- C) Azure Functions
- D) Azure Kubernetes Service
5. What is an Azure Resource Group?
- A) A billing account
- B) A logical container for Azure resources that share the same lifecycle
- C) A type of virtual network
- D) A subscription tier
6. What is Azure Blob Storage primarily used for?
- A) Storing structured relational data
- B) Storing unstructured data such as images, videos and documents
- C) Running virtual machines
- D) Managing DNS records
7. Which Azure service provides a managed relational database with SQL Server compatibility?
- A) Azure Cosmos DB
- B) Azure SQL Database
- C) Azure Table Storage
- D) Azure Cache for Redis
8. What does Azure Active Directory (Azure AD) provide?
- A) Physical network security
- B) Identity and access management for cloud resources
- C) Content delivery
- D) Virtual machine management
9. What is the purpose of Azure Availability Zones?
- A) To reduce costs
- B) To protect applications from datacenter failures within a region
- C) To speed up content delivery
- D) To manage subscriptions
10. Which tool helps estimate Azure costs before deployment?
- A) Azure Cost Management
- B) Azure Pricing Calculator
- C) Azure Advisor
- D) Azure Monitor
11. What is Azure ExpressRoute?
- A) A fast CDN
- B) A private, dedicated connection between on-premises networks and Azure
- C) A load balancer
- D) An API gateway
12. What does Azure Policy do?
- A) Sets user passwords
- B) Enforces organisational standards and compliance on Azure resources
- C) Monitors network traffic
- D) Manages virtual machines
13. Which Azure service delivers globally distributed, multi-model database capabilities?
- A) Azure SQL Database
- B) Azure Cosmos DB
- C) Azure Synapse Analytics
- D) Azure Database for MySQL
14. What is an Azure Subscription?
- A) A type of virtual machine
- B) A billing boundary and access control boundary in Azure
- C) A type of storage account
- D) A VPN gateway
15. Which Azure service provides DDoS protection?
- A) Azure Firewall
- B) Azure DDoS Protection
- C) Network Security Groups
- D) Azure Bastion
16. What is the purpose of Azure Monitor?
- A) To manage user identities
- B) To collect, analyse, and act on telemetry data from Azure and on-premises environments
- C) To store virtual machine images
- D) To manage DNS
17. What is Azure Kubernetes Service (AKS)?
- A) A serverless compute service
- B) A managed container orchestration service
- C) A relational database service
- D) A CDN
18. Which pricing model allows you to pay only for compute time used?
- A) Reserved
- B) Spot
- C) Pay-as-you-go
- D) Hybrid Benefit
19. What is Azure Blueprints used for?
- A) Creating virtual networks
- B) Defining a repeatable set of Azure resources and policies for environments
- C) Monitoring costs
- D) Running containers
20. What does "geo-redundant storage" mean in Azure?
- A) Data is stored in multiple storage accounts
- B) Data is replicated to a secondary region hundreds of miles away
- C) Data is stored faster
- D) Data is encrypted
21. Which Azure service is a regional Layer-7 load balancer that can have Web Application Firewall (WAF) enabled to protect web apps from common exploits?
- A) Azure Firewall
- B) Azure Application Gateway
- C) Network Security Groups
- D) Azure Front Door
22. What is the Azure free account?
- A) A permanently free tier with unlimited resources
- B) 12 months of free popular services plus always-free services and a credit for the first 30 days
- C) Free access for students only
- D) Free for non-profit organisations only
23. What is Azure Service Health?
- A) A performance benchmark tool
- B) A personalised dashboard that provides alerts about Azure service issues that affect your resources
- C) A cost management tool
- D) An identity service
24. Which Azure storage type is best for storing virtual machine disks?
- A) Blob Storage
- B) File Storage
- C) Managed Disks
- D) Queue Storage
25. What is Azure Bastion?
- A) A DNS service
- B) A fully managed PaaS service providing secure RDP/SSH access to VMs without public IP exposure
- C) A load balancer
- D) A content delivery network
26. What does the Azure Well-Architected Framework include?
- A) Billing history
- B) Five pillars: Cost Optimisation, Operational Excellence, Performance Efficiency, Reliability, Security
- C) SLA guarantees
- D) Azure service documentation
27. Which tool provides recommendations to optimise Azure cost, security, reliability, and performance?
- A) Azure Policy
- B) Azure Advisor
- C) Azure Monitor
- D) Azure Blueprints
28. What is a Management Group in Azure?
- A) A team of Azure administrators
- B) A container for organising multiple subscriptions with unified policy and access management
- C) A type of storage account
- D) A virtual network
29. What is the purpose of Azure Key Vault?
- A) To store virtual machine backups
- B) To securely store and manage secrets, keys, and certificates
- C) To manage user accounts
- D) To monitor network traffic
30. Which compliance framework certifies that Microsoft Azure meets international cloud security standards?
- A) ISO 9001
- B) ISO/IEC 27001
- C) PCI DSS only
- D) HIPAA only

Syllabus & Core Topics

cloud computing fundamentalsAzure core servicesAzure identity and securityAzure pricing and supportAzure governance tools

A solid AZ-900 strategy prioritizes broad vocabulary over granular configuration details. Simply spending a few minutes mapping out how several related products fit into a wider service map can instantly clarify how Azure designs its overall ecosystem.

✦

Why this practice page is useful

The fundamental challenge of the AZ-900 is matching business needs to the right Azure product — grouping Blob Storage, Cosmos DB, and App Services together here helps you identify each one's purpose immediately.
Terms like Azure Policy, Resource Groups, and Management Groups sound similar in theory; working through these scenario questions maps out exactly how administrative restrictions actually flow between them.
The shared-responsibility model can feel abstract until you've seen it applied — these real-world scenarios pin down exactly where Microsoft's control ends and yours begins.

Answer key & quick explanations

Short answers for the sample questions above. Use this to self-check before generating a fresh AI-built mock test.

1. What does IaaS stand for?
A) Infrastructure as a Service
IaaS stands for Infrastructure as a Service — the cloud model where the provider supplies raw compute, storage, and networking, while the customer still manages the OS and anything installed on top. The other expansions aren't real cloud service model terms.
2. Which Azure service provides scalable virtual machines?
B) Azure Virtual Machines
Azure Virtual Machines provisions resizable virtual servers where you control the OS and installed software. App Service and Container Instances host applications without exposing a full VM, and Functions runs individual pieces of code — none of them are IaaS virtual machines.
3. What is the Azure Shared Responsibility Model?
C) Microsoft manages the physical infrastructure; customers manage their data and applications
Under the Shared Responsibility Model, Microsoft is responsible for securing the underlying physical infrastructure — datacenters, host hardware, networking — while the customer remains responsible for their data, identities, and how they configure their applications on top of it. It isn't an all-or-nothing split, and it isn't based on cost.
4. Which Azure service is a serverless compute option?
C) Azure Functions
Azure Functions is Azure's serverless compute service — it runs code in response to events without you provisioning or managing any servers. Virtual Machines and AKS both require you to manage underlying compute, and App Service, while PaaS, still relies on an App Service Plan with allocated compute rather than being fully serverless.
5. What is an Azure Resource Group?
B) A logical container for Azure resources that share the same lifecycle
A resource group is a logical container that holds related Azure resources so they can be managed, deployed, and deleted together as a unit, typically resources that share the same lifecycle. It isn't a billing account, a network type, or a subscription tier.
6. What is Azure Blob Storage primarily used for?
B) Storing unstructured data such as images, videos and documents
Blob Storage is built for unstructured data — files like images, video, backups and logs — stored as objects rather than in a fixed schema. Structured relational data belongs in a database service, VMs aren't a storage service, and DNS records are managed elsewhere, such as Azure DNS.
7. Which Azure service provides a managed relational database with SQL Server compatibility?
B) Azure SQL Database
Azure SQL Database is a fully managed relational database service built on the Microsoft SQL Server engine, making it the SQL Server-compatible option here. Cosmos DB is a NoSQL database, Table Storage is a simple key-value store, and Cache for Redis is an in-memory cache, not a relational database.
8. What does Azure Active Directory (Azure AD) provide?
B) Identity and access management for cloud resources
Azure Active Directory (Azure AD, now Microsoft Entra ID) is Microsoft's cloud-based identity and access management service, handling authentication and authorization for users and applications. It doesn't provide physical security, content delivery, or VM management.
9. What is the purpose of Azure Availability Zones?
B) To protect applications from datacenter failures within a region
Availability Zones are physically separate locations within an Azure region, each with independent power, cooling, and networking, so that spreading resources across them protects an application from a single datacenter failure. They aren't primarily a cost, content-delivery, or subscription-management feature.
10. Which tool helps estimate Azure costs before deployment?
B) Azure Pricing Calculator
The Azure Pricing Calculator lets you model the projected cost of a planned deployment before you build anything. Cost Management analyses spending you've already incurred, and Advisor and Monitor focus on optimisation recommendations and telemetry rather than pre-deployment cost estimates.
11. What is Azure ExpressRoute?
B) A private, dedicated connection between on-premises networks and Azure
ExpressRoute provides a private, dedicated connection from an on-premises network to Azure that doesn't travel over the public internet, which is typically more reliable and lower-latency than a standard internet connection. It isn't a CDN, load balancer, or API gateway.
12. What does Azure Policy do?
B) Enforces organisational standards and compliance on Azure resources
Azure Policy evaluates resources against rules you define — such as allowed regions or required tags — and can audit or block non-compliant resources to enforce organisational standards. It doesn't manage passwords, monitor network traffic, or manage VMs directly.
13. Which Azure service delivers globally distributed, multi-model database capabilities?
B) Azure Cosmos DB
Azure Cosmos DB is a globally distributed, multi-model database service supporting document, key-value, graph, and column-family data, with low-latency access from multiple regions. Azure SQL Database is relational and single-model, Synapse Analytics is a data warehousing and analytics service, and Database for MySQL supports only the MySQL relational engine.
14. What is an Azure Subscription?
B) A billing boundary and access control boundary in Azure
An Azure subscription is both a billing boundary (it's what accumulates and is billed for usage) and an access-control boundary tied to Azure AD. It isn't a VM type, storage account type, or VPN gateway.
15. Which Azure service provides DDoS protection?
B) Azure DDoS Protection
Azure DDoS Protection is purpose-built to detect and mitigate distributed denial-of-service attacks against Azure resources. Azure Firewall filters network traffic, Network Security Groups filter traffic at the subnet/NIC level, and Azure Bastion provides secure remote access — none specifically defends against DDoS traffic volumes.
16. What is the purpose of Azure Monitor?
B) To collect, analyse, and act on telemetry data from Azure and on-premises environments
Azure Monitor collects and analyses telemetry — metrics and logs — from Azure resources as well as on-premises and hybrid environments, and can trigger alerts and automated actions based on that data. It doesn't manage identities, store VM images, or manage DNS.
17. What is Azure Kubernetes Service (AKS)?
B) A managed container orchestration service
Azure Kubernetes Service is a managed platform for deploying and orchestrating containerised applications using Kubernetes, handling much of the cluster management for you. It isn't a serverless service, a relational database, or a CDN.
18. Which pricing model allows you to pay only for compute time used?
C) Pay-as-you-go
Pay-as-you-go pricing charges you only for the compute time and resources actually consumed, with no upfront commitment. Reserved pricing requires a 1- or 3-year commitment, Spot pricing uses spare capacity that can be reclaimed, and the Azure Hybrid Benefit reduces licensing cost rather than defining a consumption model.
19. What is Azure Blueprints used for?
B) Defining a repeatable set of Azure resources and policies for environments
Azure Blueprints lets you define a repeatable package of Azure resources, policies, and role assignments that can be deployed consistently across environments or subscriptions. It doesn't create individual virtual networks by itself, monitor cost, or run containers.
20. What does "geo-redundant storage" mean in Azure?
B) Data is replicated to a secondary region hundreds of miles away
Geo-redundant storage (GRS) copies data to a secondary Azure region located hundreds of miles from the primary region, protecting against a regional outage. It isn't about splitting data across multiple accounts, faster performance, or encryption — those are separate concerns from redundancy.
21. Which Azure service is a regional Layer-7 load balancer that can have Web Application Firewall (WAF) enabled to protect web apps from common exploits?
B) Azure Application Gateway
Azure Application Gateway is a regional Layer-7 load balancer that can have Web Application Firewall (WAF) enabled to protect against common exploits like SQL injection and cross-site scripting. Azure Firewall filters network and application traffic but isn't a WAF, NSGs only filter by IP address and port rather than inspecting web request content, and Azure Front Door operates globally rather than as a regional load balancer.
22. What is the Azure free account?
B) 12 months of free popular services plus always-free services and a credit for the first 30 days
The Azure free account combines 12 months of free usage for a set of popular services, a list of services that are always free within limits, and a one-time credit to spend in the first 30 days. It isn't unlimited, isn't restricted to students, and isn't limited to non-profits.
23. What is Azure Service Health?
B) A personalised dashboard that provides alerts about Azure service issues that affect your resources
Azure Service Health is a personalised dashboard that tracks Azure service incidents, planned maintenance, and health advisories specifically affecting the resources you use. It isn't a performance benchmarking tool, a cost tool, or an identity service.
24. Which Azure storage type is best for storing virtual machine disks?
C) Managed Disks
Managed Disks are the block-storage option purpose-built for attaching to Azure Virtual Machines as OS and data disks, with Azure handling the underlying storage management. Blob Storage is for unstructured objects, File Storage provides shared file systems, and Queue Storage holds messages — none are designed as VM disks.
25. What is Azure Bastion?
B) A fully managed PaaS service providing secure RDP/SSH access to VMs without public IP exposure
Azure Bastion is a fully managed PaaS service that provides secure RDP and SSH access to VMs directly through the Azure portal, without needing to assign the VM a public IP address. It isn't a DNS service, load balancer, or CDN.
26. What does the Azure Well-Architected Framework include?
B) Five pillars: Cost Optimisation, Operational Excellence, Performance Efficiency, Reliability, Security
The Azure Well-Architected Framework is organised around five pillars — Cost Optimization, Operational Excellence, Performance Efficiency, Reliability, and Security — that guide how workloads should be designed and run. It isn't billing history, an SLA guarantee, or general service documentation.
27. Which tool provides recommendations to optimise Azure cost, security, reliability, and performance?
B) Azure Advisor
Azure Advisor analyses your deployed resources and gives personalised recommendations across cost, security, reliability, and performance based on Azure best practices. Azure Policy enforces rules rather than recommending, Monitor focuses on telemetry, and Blueprints packages resources for deployment.
28. What is a Management Group in Azure?
B) A container for organising multiple subscriptions with unified policy and access management
A management group is a container that sits above subscriptions in the Azure hierarchy, letting you apply policies and access controls across many subscriptions at once. It isn't a team of people, a storage account type, or a virtual network.
29. What is the purpose of Azure Key Vault?
B) To securely store and manage secrets, keys, and certificates
Azure Key Vault securely stores and manages secrets, encryption keys, and certificates, with tightly controlled access instead of leaving them in application code or config files. It doesn't back up VMs, manage user accounts, or monitor network traffic.
30. Which compliance framework certifies that Microsoft Azure meets international cloud security standards?
B) ISO/IEC 27001
ISO/IEC 27001 is the international standard for information security management systems, and Azure's certification against it is one of the compliance credentials most frequently cited for cloud security. ISO 9001 covers quality management rather than security, and PCI DSS and HIPAA are real Azure compliance offerings too, but they're industry- and region-specific rather than the general international security standard being described.

Curriculum Mapping & Learning Guide

Use this breakdown to identify which skills each question tests and guide post-test review.

Cloud Concepts

Identifying cloud advantages, contrasting PaaS with alternative patterns, and evaluating consumption pricing models.

Azure Architecture

Understanding subscription boundaries, exploring availability zone features, grouping resources, and managing global regions.

Azure Core Services & Storage

Distinguishing container runtimes like AKS, hosting web projects via App Services, and configuring persistent Blob storage folders.

Azure Networking, Identity & Governance

Securing local networks with Security Groups, configuring Identity providers, and creating governance rules via Azure Policy.

Microsoft Azure Fundamentals (AZ-900) Azure units covered

Chapter 1: General Cloud Principles: Migration advantages, comparing service categories, and utility-based billing patterns.
Chapter 2: Physical & Scope Architecture: Geographic regions and availability zones, resource containers, and subscription billing tiers.
Chapter 3: Azure Core Computing & Databases: Virtual machine families, spinning up serverless Functions, and deploying SQL instances.
Chapter 4: Global Networking & Connectivity: Private virtual network connections, load balancers, and content delivery via CDNs.
Chapter 5: Directory Security & Governance: Managing cloud directories, enforcing compliance via Azure Policy, and securing keys with Key Vault.
Chapter 6: Financial Management & Monitoring: Budgeting with the Pricing Calculator, cost optimization advice, and platform status monitoring.

How to use this microsoft azure fundamentals practice test page

1. Click the Start Microsoft Azure Fundamentals Practice Test button to launch the setup.

2. Use the slider to choose your number of questions (from 5 to 30, default is 10).

3. Take your test, submit your answers, and let our AI analyze your performance.

4. Select Practice Weak Areas or Generate More Like This to have the AI create custom, targeted questions just for you.

Explore more for Microsoft Azure Fundamentals (AZ-900)

Move between subjects in the same exam to build a balanced Microsoft Azure Fundamentals (AZ-900) revision routine.