Free AZ-900 sample questions with answers

Updated September 28, 2026

Here are five free AZ-900 sample questions covering all three skill areas, with the answer and the reasoning behind it. Try each one before opening the answer. These are original scenario questions written against the official skills outline, not questions from the real exam.

Question 1. A company moves its customer database from its own servers to a platform-as-a-service database on Azure. Which responsibility stays with the company in every cloud service type?

  • A. Physical security of the datacenter
  • B. The data stored in the database and who can access it
  • C. Patching the operating system of the database server
  • D. Maintaining the database engine software
Show answer

Answer: B

Under the shared responsibility model, the customer always remains responsible for its data, the devices that access it, and the accounts and identities it manages. Physical datacenter security moves to Microsoft in every cloud model. Patching the operating system and maintaining the database engine move to Microsoft once you use PaaS.

Want more questions like this? Full AZ-900 practice tests →

Question 2. An application runs on two virtual machines in one Azure region. It must keep running if an entire datacenter in that region fails. What should you use?

  • A. An availability set
  • B. A region pair
  • C. Availability zones
  • D. A separate resource group for each virtual machine
Show answer

Answer: C

Availability zones are physically separate locations within a region, each with independent power, cooling and networking. Placing the VMs in different zones protects against the loss of one datacenter. An availability set spreads VMs across racks inside one datacenter. Region pairs protect against the loss of a whole region, which is more than required. A resource group is only a logical container.

Want more questions like this? Full AZ-900 practice tests →

Question 3. A storage account holds backup files. The data must survive the loss of an entire Azure region, and there is no requirement to read it from the secondary region. Which redundancy option is the lowest-cost choice that meets the requirement?

  • A. Geo-redundant storage (GRS)
  • B. Read-access geo-redundant storage (RA-GRS)
  • C. Zone-redundant storage (ZRS)
  • D. Locally redundant storage (LRS)
Show answer

Answer: A

Geo-redundant storage (GRS) copies data to a secondary region, so it survives a regional outage. Read-access GRS adds the ability to read from the secondary, which is not needed and costs more. LRS and ZRS keep all copies within one region, so a regional outage would affect every copy.

Want more questions like this? Full AZ-900 practice tests →

Question 4. Your organisation must ensure that no one can create resources outside two approved Azure regions, across all subscriptions. What should you use?

  • A. Azure role-based access control
  • B. A resource lock set to read-only
  • C. A tag named region on every resource group
  • D. An Azure Policy assignment with an allowed locations rule at the management group
Show answer

Answer: D

Azure Policy evaluates resources against rules such as allowed locations and can deny creation of non-compliant resources. Assigning it at a management group applies it to every subscription beneath. RBAC controls who can act, not which settings are allowed. Resource locks prevent deletion or changes to existing resources. Tags only label resources.

Want more questions like this? Full AZ-900 practice tests →

Question 5. Before migrating, a finance team wants an estimate of the monthly cost of several virtual machines, a storage account and a database that do not exist yet. Which tool should they use?

  • A. Microsoft Cost Management
  • B. The Azure pricing calculator
  • C. Azure Advisor
  • D. Azure Service Health
Show answer

Answer: B

The pricing calculator estimates the cost of Azure services you plan to deploy, based on the configuration you enter. Cost Management analyses and budgets spending on resources that already exist. Azure Advisor recommends improvements for deployed resources. Service Health reports on Azure incidents and maintenance.

Want more questions like this? Full AZ-900 practice tests →

How did you do?

Question 2 and question 4 are the classic AZ-900 traps: two similar features, one answer. If you hesitated on availability sets versus zones, read the architecture and services guide. If Azure Policy versus RBAC slowed you down, the management and governance guide covers it.

For a longer check, take the 20-question practice test.