AZ-900 Practice Test: 10 Free Azure Fundamentals Questions

Booking the exam is easy; walking in confident is the harder part. The best way to close that gap is to sit a realistic AZ-900 practice test and find out which topics you truly know. Below is a free, no-signup Azure Fundamentals practice test: 10 original questions built to mirror the style and difficulty of the live exam, each with the correct answer and a short explanation. First, here is exactly how the exam is structured, so your practice maps to what Microsoft actually tests.

AZ-900 exam format: questions, time, and passing score

AZ-900 (Microsoft Azure Fundamentals) is the entry point to Microsoft’s Azure certification path, with no prior cloud experience required. Here is what to expect, checked against Microsoft’s official study guide:

• Questions: usually 40–60 items, in a mix of multiple-choice, multiple-response, and yes/no formats. Microsoft doesn’t publish a fixed count, and it can vary between sittings.
• Time: Microsoft allots 45 minutes for the exam; plan for roughly 60 minutes of total seat time once you add the agreement and instructions.
• Passing score: 700 out of 1000, per Microsoft. It is a scaled score, not a raw percentage, so 700 does not mean 70% of questions correct.
• Cost: the fee varies by country or region (commonly around US$99).
• Delivery: online-proctored from home or at a test center, in 13 languages.

The exam draws from three domains. Per Microsoft’s current study guide, they carry these weights:

Architecture and services is the heaviest domain, so weight your studying — and these practice questions — accordingly.

Free AZ-900 practice test: 10 Azure Fundamentals questions

Answer each question before you expand the explanation. These AZ-900 practice questions are spread across the three domains in roughly the same proportion as the real exam. Treat it like the real thing — no peeking.

1. 1. Cloud concepts. In Azure’s shared responsibility model, which responsibility always stays with the customer, whether they use IaaS, PaaS, or SaaS?

   • A. Securing the physical datacenter and hardware
   • B. Patching the physical host servers
   • C. Protecting their own data, accounts, and identities
   • D. Maintaining the physical network cabling
   Reveal answer & explanation

   Correct: C. Per Microsoft, responsibility for data, accounts, and identities always stays with the customer across every service type. The provider is always responsible for the physical datacenter, physical network, and physical hosts. Middle-layer duties such as the operating system shift depending on whether you use IaaS, PaaS, or SaaS.

2. 2. Cloud concepts. A startup wants to avoid buying servers upfront and instead pay only for the compute and storage it uses each month. Which model does this describe?

   • A. A capital expenditure (CapEx) model
   • B. A consumption-based, pay-as-you-go model
   • C. A fixed-capacity licensing model
   • D. An on-premises depreciation model
   Reveal answer & explanation

   Correct: B. The consumption-based model is an operating expense (OpEx): you pay only for the resources you use, with no large upfront hardware purchase. Trading CapEx for flexible OpEx is one of the core economic benefits of cloud computing, per Microsoft.

3. 3. Cloud concepts. Your team wants to deploy a custom web app but does not want to manage or patch the underlying operating system. Which cloud service type fits best?

   • A. Infrastructure as a service (IaaS)
   • B. Platform as a service (PaaS)
   • C. Software as a service (SaaS)
   • D. On-premises hosting
   Reveal answer & explanation

   Correct: B. PaaS (for example, Azure App Service) provides a managed platform where the provider maintains the operating system and runtime while you deploy your own application code. With IaaS you would still manage the OS; SaaS delivers finished software, such as Microsoft 365, that you consume rather than build on.

4. 4. Architecture and services. How does Microsoft define an Azure availability zone?

   • A. Two separate Azure regions paired for disaster recovery
   • B. One or more physically separate datacenters within a region, each with independent power, cooling, and networking
   • C. A logical container used to organize subscriptions
   • D. A global network of edge caching locations
   Reveal answer & explanation

   Correct: B. Per Microsoft, availability zones are physically separate locations within an Azure region, and each zone is made up of one or more datacenters with independent power, cooling, and networking. Option A describes region pairs, and option C describes management groups.

5. 5. Architecture and services. A company needs a private, dedicated connection between its on-premises datacenter and Azure that does not travel over the public internet. Which service should it use?

   • A. Azure VPN Gateway (site-to-site)
   • B. Azure ExpressRoute
   • C. Azure DNS
   • D. Virtual network peering
   Reveal answer & explanation

   Correct: B. ExpressRoute provides a private, dedicated connection to Azure through a connectivity provider, bypassing the public internet for more reliable, consistent throughput. A site-to-site VPN is encrypted but still crosses the public internet; peering links Azure virtual networks to each other; and DNS resolves names.

6. 6. Architecture and services. Your data must survive a complete outage of an entire Azure region. Which storage redundancy option meets this requirement?

   • A. Locally redundant storage (LRS)
   • B. Geo-redundant storage (GRS)
   • C. A single premium managed disk
   • D. A read-only snapshot in the same datacenter
   Reveal answer & explanation

   Correct: B. Per Microsoft, LRS keeps three copies of your data within a single region and protects only against rack- and drive-level failures. GRS copies your data to a secondary region hundreds of miles away (six copies in total), so it can survive a full regional outage. LRS on its own cannot.

7. 7. Architecture and services. Which Azure feature lets you grant a user permission to manage virtual machines in one resource group, without giving them access to the rest of the subscription?

   • A. Azure Policy
   • B. Azure role-based access control (RBAC)
   • C. A resource lock
   • D. Microsoft Purview
   Reveal answer & explanation

   Correct: B. Azure RBAC is the authorization system that controls who can perform which actions and at what scope — management group, subscription, resource group, or individual resource. Assigning a role at the resource-group scope grants access there only. Azure Policy governs resource compliance, a lock prevents changes or deletion, and Purview handles data governance.

8. 8. Management and governance. An organization wants to automatically require that all new storage accounts are created only in European regions, and flag any that are not compliant. Which tool should it use?

   • A. Azure role-based access control (RBAC)
   • B. Azure Policy
   • C. Azure Advisor
   • D. A resource lock
   Reveal answer & explanation

   Correct: B. Azure Policy enforces organizational standards and assesses compliance at scale; it can audit or deny resources that break rules such as allowed locations. RBAC controls who has access, not which properties a resource may have; Advisor gives best-practice recommendations; and a lock only blocks deletion or modification.

9. 9. Management and governance. A resource lock set to CanNotDelete lets authorized users read and modify a resource but prevents them from deleting it. Is this statement correct?

   • Yes
   • No
   Reveal answer & explanation

   Correct: Yes. Per Microsoft, a CanNotDelete lock allows authorized users to read and modify a resource but blocks deletion. A ReadOnly lock is stricter — it permits reading only and prevents both modification and deletion. Locks apply on top of, and regardless of, a user’s RBAC permissions.

10. 10. Management and governance. Which Azure service provides personalized recommendations across five categories — reliability, security, cost, operational excellence, and performance?

    • A. Azure Monitor
    • B. Azure Service Health
    • C. Azure Advisor
    • D. Azure Policy
    Reveal answer & explanation

    Correct: C. Per Microsoft, Azure Advisor analyzes your resource configuration and usage, then recommends improvements across five categories: reliability, security, cost, operational excellence, and performance. Azure Monitor collects telemetry, Service Health reports on Azure incidents, and Azure Policy enforces compliance rules.

How to study for the AZ-900 (and use these practice questions)

A focused week or two is enough for most people with some IT exposure. Here is an efficient approach:

• Start with Microsoft Learn. The free official learning paths for Azure Fundamentals map directly to the exam domains and are the most reliable source of truth.
• Take Microsoft’s free Practice Assessment. It mirrors the real question style; use it alongside these free AZ-900 questions to find weak spots.
• Weight your time by domain. Architecture and services is 35–40% of the exam, so spend the most time on regions, compute, networking, storage, and identity.
• Master the “which service” decisions. Many questions ask you to pick the right tool: VPN vs ExpressRoute, LRS vs GRS, Azure Policy vs RBAC, or Advisor vs Monitor. Write a one-line summary of each.
• Get hands-on in a free account. Creating a resource group, a virtual machine, and a storage account makes the concepts stick far better than reading alone.
• Read each question twice. Watch for words like “always,” “private,” or “region-wide,” which usually point to one specific correct answer.

Aim to score 85% or higher across all three domains on practice questions before you book.

Ready to pass the AZ-900 on your first try?

Practice questions show you where you stand; structured training gets you across the line. Boost eLearning’s Microsoft Azure Fundamentals (AZ-900) course pairs plain-English lessons with hands-on Live Labs in a real Azure environment, so you practice the “which service” decisions instead of just memorizing them. Every course is backed by our money-back Pass Guarantee, and you can take it online self-paced, live virtual with an instructor, or on-site for your team. If you want to certify quickly and confidently, explore the full Microsoft Azure Fundamentals (AZ-900) course and choose the format that fits you.

AZ-900 practice test FAQ