Microsoft AZ-900 Exam Dumps, Practice Test Questions

100% Latest & Updated Microsoft AZ-900 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!

Microsoft AZ-900 Premium Bundle
$79.97
$59.98

AZ-900 Premium Bundle

  • Premium File: 482 Questions & Answers. Last update: Nov 5, 2026
  • Training Course: 85 Video Lectures
  • Study Guide: 425 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates

AZ-900 Premium Bundle

Microsoft AZ-900 Premium Bundle
  • Premium File: 482 Questions & Answers. Last update: Nov 5, 2026
  • Training Course: 85 Video Lectures
  • Study Guide: 425 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates
$79.97
$59.98

Microsoft AZ-900 Practice Test 28

Question 270

A data science app needs managed relational storage but keeps its web tier on VMs. Which configuration or operating action most directly puts that decision into practice?

  1. Provision user access to the approved Microsoft 365 applications.
  2. Deploy the compatible custom image as a VM and secure privileged access.
  3. Record which API requirements justify OS control before choosing the service model.
  4. Run web guests as IaaS and use eligible managed database PaaS for data.

Explanation

Correct Answer

D:

Run web guests as IaaS and use eligible managed database PaaS for data. The implementation operationalizes this design choice: Use a mixed service-model architecture where each tier has a justified responsibility boundary. Acceptance should demonstrate: The web team patches guests while the database host is provider-operated.

Incorrect Answers

A:

This setup is relevant to another workload: A sales team wants email, calendars, and collaboration without writing a custom application. The current configuration must instead achieve: The web team patches guests while the database host is provider-operated.

B:

That action implements a different requirement: A graphic-rendering pipeline must run a specific custom OS image under root administrative control. It does not establish the required result in this case: The web team patches guests while the database host is provider-operated.

C:

This change would be appropriate under a different condition: A company compares VM hosting against managed web hosting for a new API. Here it would not validate: The web team patches guests while the database host is provider-operated.

Question 271

A data science app needs managed relational storage but keeps its web tier on VMs. Which observation is the strongest acceptance test for this scenario?

  1. The selected model matches driver and patch-management expectations.
  2. Developers deploy code without administrator access to platform servers.
  3. Developers own function code while provider handles runtime infrastructure.
  4. The web team patches guests while the database host is provider-operated.

Explanation

Correct Answer

D:

The web team patches guests while the database host is provider-operated. That directly tests the stated requirement: A data science app needs managed relational storage but keeps its web tier on VMs. It contrasts with the observed failure: The team assumes all tiers must use one service model.

Incorrect Answers

A:

This observation is evidence for a separate scenario: A company compares VM hosting against managed web hosting for a new API. It does not test the necessary outcome here: The web team patches guests while the database host is provider-operated.

B:

That check tests another control: A web team wants to focus on application code and have Microsoft maintain underlying runtime infrastructure. The decisive result for this workload is: The web team patches guests while the database host is provider-operated.

C:

The test is relevant when a web company uses managed functions but stores data in a customer-controlled database. It cannot establish the specified acceptance result: The web team patches guests while the database host is provider-operated.

Question 272

A data science app needs managed relational storage but keeps its web tier on VMs. The team observes: The team assumes all tiers must use one service model. Which planning or configuration error best accounts for this result?

  1. It imposed a single service category despite distinct tier requirements.
  2. The application was deployed using self-managed VMs instead of eligible PaaS.
  3. The team misclassified managed function execution as SaaS.
  4. A managed application platform was chosen despite a raw-VM requirement.

Explanation

Correct Answer

A:

It imposed a single service category despite distinct tier requirements. That explains the symptom: The team assumes all tiers must use one service model. The targeted corrective action is: Run web guests as IaaS and use eligible managed database PaaS for data.

Incorrect Answers

B:

The alternate mechanism would more directly produce this other failure: Operators log into each server to patch the web runtime manually. The current incident instead involves: The team assumes all tiers must use one service model.

C:

That explanation belongs to a different fault pattern: Security reviews assume Microsoft authors the function's business logic. It does not explain why the team assumes all tiers must use one service model.

D:

This cause is consistent with a different issue: The hosting product does not permit guest OS customization. It does not account for the reported symptom here: The team assumes all tiers must use one service model.

Question 273

A logistics team wants to lift-and-shift an unchanged server before later refactoring. Which Azure or cloud concept most directly matches the requirement?

  1. Choose PaaS hosting that abstracts guest OS and platform patching.
  2. Choose IaaS as a suitable initial landing zone for server migration.
  3. Use a complete education SaaS application if it meets feature needs.
  4. Describe serverless function execution as a managed platform pattern, not a whole application SaaS.

Explanation

Correct Answer

B:

Choose IaaS as a suitable initial landing zone for server migration. The governing requirement is: A logistics team wants to lift-and-shift an unchanged server before later refactoring. This solution specifically supports the outcome that the original server application runs without immediate platform code rewrites.

Incorrect Answers

A:

This design is appropriate for a different requirement: A web team wants to focus on application code and have Microsoft maintain underlying runtime infrastructure. Here the decisive outcome must instead be: The original server application runs without immediate platform code rewrites.

C:

This option solves a different planning problem: A school wants instructors to access an online learning application without installing server software. The current acceptance criterion is specific: The original server application runs without immediate platform code rewrites.

D:

This design is appropriate for a different requirement: A web company uses managed functions but stores data in a customer-controlled database. Here the decisive outcome must instead be: The original server application runs without immediate platform code rewrites.

Question 274

A logistics team wants to lift-and-shift an unchanged server before later refactoring. Which implementation step would best fulfill the stated requirement?

  1. Deploy the API to an App Service with supported runtime and configuration.
  2. Create Azure VM resources matching the app's verified OS and dependency needs.
  3. Provision instructors and class permissions in the subscribed service.
  4. Define runtime execution and customer data access roles separately.

Explanation

Correct Answer

B:

Create Azure VM resources matching the app's verified OS and dependency needs. The implementation operationalizes this design choice: Choose IaaS as a suitable initial landing zone for server migration. Acceptance should demonstrate: The original server application runs without immediate platform code rewrites.

Incorrect Answers

A:

This setup is relevant to another workload: A small company wants to publish a web API while avoiding OS patch management. The current configuration must instead achieve: The original server application runs without immediate platform code rewrites.

C:

This change would be appropriate under a different condition: A school wants instructors to access an online learning application without installing server software. Here it would not validate: The original server application runs without immediate platform code rewrites.

D:

This setup is relevant to another workload: A web company uses managed functions but stores data in a customer-controlled database. The current configuration must instead achieve: The original server application runs without immediate platform code rewrites.

Question 275

A logistics team wants to lift-and-shift an unchanged server before later refactoring. Which result would best demonstrate successful implementation?

  1. Lessons are delivered through ready-made application functionality.
  2. The responsibility matrix leaves provider platform patching separate from app security.
  3. The original server application runs without immediate platform code rewrites.
  4. The selected model matches driver and patch-management expectations.

Explanation

Correct Answer

C:

The original server application runs without immediate platform code rewrites. That directly tests the stated requirement: A logistics team wants to lift-and-shift an unchanged server before later refactoring. It contrasts with the observed failure: The migration plan insists on rewriting the entire app into SaaS first.

Incorrect Answers

A:

This observation is evidence for a separate scenario: A school wants instructors to access an online learning application without installing server software. It does not test the necessary outcome here: The original server application runs without immediate platform code rewrites.

B:

That check tests another control: A customer expects Azure PaaS to remove all application security duties. The decisive result for this workload is: The original server application runs without immediate platform code rewrites.

D:

This observation is evidence for a separate scenario: A company compares VM hosting against managed web hosting for a new API. It does not test the necessary outcome here: The original server application runs without immediate platform code rewrites.

Question 276

A logistics team wants to lift-and-shift an unchanged server before later refactoring. The team observes: The migration plan insists on rewriting the entire app into SaaS first. What should the team identify as the primary mechanism behind the problem?

  1. It selected a service model inconsistent with the lift-and-shift requirement.
  2. The application was deployed as a tenant-managed VM rather than managed PaaS.
  3. It chose PaaS rather than a ready-to-use SaaS application.
  4. It imposed a single service category despite distinct tier requirements.

Explanation

Correct Answer

A:

It selected a service model inconsistent with the lift-and-shift requirement. That explains the symptom: The migration plan insists on rewriting the entire app into SaaS first. The targeted corrective action is: Create Azure VM resources matching the app's verified OS and dependency needs.

Incorrect Answers

B:

The alternate mechanism would more directly produce this other failure: Engineers keep scheduling host OS patches for the app runtime. The current incident instead involves: The migration plan insists on rewriting the entire app into SaaS first.

C:

That explanation belongs to a different fault pattern: The selected Azure service provides only a code runtime and no payroll features. It does not explain why the migration plan insists on rewriting the entire app into SaaS first.

D:

This cause is consistent with a different issue: The team assumes all tiers must use one service model. It does not account for the reported symptom here: The migration plan insists on rewriting the entire app into SaaS first.

Question 277

A customer expects Azure PaaS to remove all application security duties. Which design choice best fits the stated business constraint?

  1. Use a complete education SaaS application if it meets feature needs.
  2. Use a mixed service-model architecture where each tier has a justified responsibility boundary.
  3. Recognize customer responsibility for application code, data and permissions on PaaS.
  4. Describe serverless function execution as a managed platform pattern, not a whole application SaaS.

Explanation

Correct Answer

C:

Recognize customer responsibility for application code, data and permissions on PaaS. The governing requirement is: A customer expects Azure PaaS to remove all application security duties. This solution specifically supports the outcome that the responsibility matrix leaves provider platform patching separate from app security.

Incorrect Answers

A:

This design is appropriate for a different requirement: A school wants instructors to access an online learning application without installing server software. Here the decisive outcome must instead be: The responsibility matrix leaves provider platform patching separate from app security.

B:

That concept addresses this separate situation: A data science app needs managed relational storage but keeps its web tier on VMs. It does not by itself establish the result required here: The responsibility matrix leaves provider platform patching separate from app security.

D:

This design is appropriate for a different requirement: A web company uses managed functions but stores data in a customer-controlled database. Here the decisive outcome must instead be: The responsibility matrix leaves provider platform patching separate from app security.

Question 278

A customer expects Azure PaaS to remove all application security duties. Which Azure setup action best follows from this scenario?

  1. Run web guests as IaaS and use eligible managed database PaaS for data.
  2. Assign secure-code, identity and data-policy controls to the application owner.
  3. Configure employee access and data settings within the licensed service.
  4. Provision a supported Azure VM and manage the guest image and updates.

Explanation

Correct Answer

B:

Assign secure-code, identity and data-policy controls to the application owner. The implementation operationalizes this design choice: Recognize customer responsibility for application code, data and permissions on PaaS. Acceptance should demonstrate: The responsibility matrix leaves provider platform patching separate from app security.

Incorrect Answers

A:

This setup is relevant to another workload: A data science app needs managed relational storage but keeps its web tier on VMs. The current configuration must instead achieve: The responsibility matrix leaves provider platform patching separate from app security.

C:

This change would be appropriate under a different condition: An HR team wants an immediately usable payroll application sold by subscription. Here it would not validate: The responsibility matrix leaves provider platform patching separate from app security.

D:

This setup is relevant to another workload: A startup needs complete control of guest OS settings and kernel-level software. The current configuration must instead achieve: The responsibility matrix leaves provider platform patching separate from app security.

Question 279

A customer expects Azure PaaS to remove all application security duties. Which verification outcome should the team expect from the right design?

  1. The web team patches guests while the database host is provider-operated.
  2. The service binds to the guest environment as required by its licensing rules.
  3. The organization uses complete payroll workflows without building an app.
  4. The responsibility matrix leaves provider platform patching separate from app security.

Explanation

Correct Answer

D:

The responsibility matrix leaves provider platform patching separate from app security. That directly tests the stated requirement: A customer expects Azure PaaS to remove all application security duties. It contrasts with the observed failure: No team owns app authorization because hosting is called PaaS.

Incorrect Answers

A:

This observation is evidence for a separate scenario: A data science app needs managed relational storage but keeps its web tier on VMs. It does not test the necessary outcome here: The responsibility matrix leaves provider platform patching separate from app security.

B:

That check tests another control: An IT team needs a dedicated Linux server for a hard-coded proprietary licensing service. The decisive result for this workload is: The responsibility matrix leaves provider platform patching separate from app security.

C:

The test is relevant when an HR team wants an immediately usable payroll application sold by subscription. It cannot establish the specified acceptance result: The responsibility matrix leaves provider platform patching separate from app security.

Question 280

A customer expects Azure PaaS to remove all application security duties. The team observes: No team owns app authorization because hosting is called PaaS. Which underlying mistake most directly explains the reported symptom?

  1. The assessment ignored service-model differences in control and responsibility.
  2. It chose PaaS rather than a ready-to-use SaaS application.
  3. The shared-responsibility boundary was overextended to customer application security.
  4. The service model lacks required guest-level control.

Explanation

Correct Answer

C:

The shared-responsibility boundary was overextended to customer application security. That explains the symptom: No team owns app authorization because hosting is called PaaS. The targeted corrective action is: Assign secure-code, identity and data-policy controls to the application owner.

Incorrect Answers

A:

This cause is consistent with a different issue: Developers assume a VM and App Service offer identical guest OS privileges. It does not account for the reported symptom here: No team owns app authorization because hosting is called PaaS.

B:

The alternate mechanism would more directly produce this other failure: The selected Azure service provides only a code runtime and no payroll features. The current incident instead involves: No team owns app authorization because hosting is called PaaS.

D:

This cause is consistent with a different issue: A managed app runtime rejects the renderer's OS dependencies. It does not account for the reported symptom here: No team owns app authorization because hosting is called PaaS.

Microsoft Azure Fundamentals (AZ-900) Practice Tests

UP

SPECIAL OFFER: GET 10% OFF

This is ONE TIME OFFER

ExamSnap Discount Offer
Enter Your Email Address to Receive Your 10% Off Discount Code

A confirmation link will be sent to this email address to verify your login. *We value your privacy. We will not rent or sell your email address.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.