AZ-900 Practice Exam — Azure Fundamentals Questions 2026

In the shared responsibility model the cloud provider is always responsible for the physical datacenter physical network and physical hosts. The customer responsibility varies based on the service type (IaaS PaaS SaaS).

Azure Functions on the Consumption plan is a serverless offering. The platform handles provisioning, scaling, and maintenance of servers, and you are billed only for the memory and CPU consumed while the function code runs. Container services or virtual machine scale sets still incur charges for provisioned infrastructure, and a database service stores data rather than executes arbitrary code.

False. A resource can only belong to a single resource group at a time. However resource groups can contain resources from different regions.

Management Groups in Azure provide a way to organize multiple subscriptions into a hierarchy. This allows you to apply policies, access controls, and compliance settings at the management group level, which then flow down to all associated subscriptions. This simplifies management across large organizations with numerous subscriptions. Resource Groups are used to organize resources within a single subscription, not across multiple subscriptions. Azure Active Directory manages identities and access but does not organize subscriptions. Resource Locks prevent accidental changes or deletion of resources but are not used for organizing subscriptions.

Conditional Access in Microsoft Entra ID enables organizations to create policies that control user access based on various signals like location, device compliance, and risk detection. By using Conditional Access, the company can ensure that access to resources is granted only when specific conditions are met. Privileged Identity Management manages and monitors access to privileged roles but doesn’t enforce access policies based on signals. Azure Information Protection classifies and protects documents and emails, not user access. Multi-Factor Authentication (MFA) adds an extra layer of security but doesn’t provide dynamic access controls based on factors like location or device compliance.

Azure Policy is the optimal tool for enforcing organizational rules by evaluating resources for compliance and automatically correcting non-compliant resources. It allows you to define policies that enforce specific conditions, such as requiring certain tags on resources. Resource locks prevent accidental deletion or modification of Azure resources. Azure Blueprints help with deploying sets of resources, they do not enforce rules on existing resources in the same way Azure Policy does. Azure Monitor is used for collecting and analyzing telemetry data, not for enforcing deployment rules.

Microsoft Purview is the Azure service designed to provide unified data governance across various environments, including on-premises, multi-cloud, and SaaS platforms. It offers capabilities like data discovery, classification of sensitive data, and tracking of data lineage, which help organizations manage and govern their data effectively. Azure Policy is used for enforcing organizational standards and assessing compliance at scale, but it doesn’t provide data asset management across environments. Azure Monitor is for collecting, analyzing, and acting on telemetry data from cloud and on-premises environments, focusing on monitoring performance and availability, not data governance. Azure Arc extends Azure management and services to any infrastructure, but it doesn’t specifically address data governance needs.