Microsoft Certified: Azure Fundamentals practice questions

Question 1

An administrator is rolling out the configuration below. A new developer is being asked, during onboarding, what "something you know" specifically refers to among the multifactor authentication factors used by Microsoft Entra. Per the Microsoft Learn MFA overview, which option matches?

Accepted Answer

Something you know, typically a password, is one of the factor categories that Microsoft Entra MFA documents for the multifactor authentication flow.

Answer

Something you know is documented as a biometric fingerprint or face scan that the user holds in physical form and never includes any password-style secret.

Answer

Something you know is documented as a trusted phone or hardware key and excludes any knowledge-based secret such as a password or PIN at sign-in.

Answer

Something you know is documented as a satellite-based geolocation reading and explicitly excludes any user-held secret or knowledge from the sign-in flow.

Question 2

A platform team is being asked to evaluate the design below. An IT director is being asked, in a board readout, to summarize, in two documented statements, why Azure Cloud Shell is positioned as a low-friction tool for managing Azure resources. Per the Microsoft Learn Cloud Shell overview, which TWO options match the documented benefits?

Accepted Answer

Microsoft manages Cloud Shell so you don't have to, so the platform team does not have to patch or maintain the underlying shell host themselves.

Accepted Answer

Cloud Shell automatically securely authenticates for instant access to your resources through the Azure CLI or Azure PowerShell cmdlets.

Answer

Azure Cloud Shell is documented as a customer-managed product that the team must patch and maintain themselves and as explicitly never managed by Microsoft for the customer at any time.

Answer

Azure Cloud Shell is documented as requiring the user to manually enter credentials on every command and as explicitly never auto-authenticating to Azure resources in any documented case.

Question 3

A platform team is being asked to weigh in. A finance lead is being asked, during a budget review, why moving lightweight workloads to Azure Functions is described as both more robust and lower-cost than always-on VMs. Per the Microsoft Learn Azure Functions overview, which option matches?

Accepted Answer

Azure Functions is a serverless solution that allows you to build robust apps while using less code, and with less infrastructure and lower costs.

Answer

Azure Functions is documented as requiring more infrastructure than an always-on VM and as costing strictly more for an identical lightweight workload in production.

Answer

Azure Functions is documented as requiring the customer to operate a parallel always-on VM fleet that mirrors every function, eliminating any cost or infrastructure benefit.

Answer

Azure Functions is documented as offering no robustness benefit, since the platform has no managed runtime and every invocation must rebuild infrastructure manually.

Question 4

An architect is being asked, in a design review, which key scenario from the Azure Virtual Network documentation enables Azure resources to talk to the public internet. Per the Microsoft Learn Azure Virtual Network overview, which option matches the documented scenario?

Accepted Answer

Communication of Azure resources with the internet is one of the key scenarios that you can accomplish with an Azure virtual network in the documented model.

Answer

Azure Virtual Network is documented as explicitly forbidding any communication between Azure resources and the public internet for the duration of the deployment.

Answer

Azure Virtual Network is documented as supporting only outbound mail traffic to the internet and never any other protocol for any other Azure resource.

Answer

Azure Virtual Network is documented as supporting communication with the internet only for a single Azure region and never across multiple regions in the same tenant.

Question 5

A developer is being asked, in onboarding, what an Azure Resource Manager template physically is and how the team writes one for an infrastructure deployment in Azure. Per the Microsoft Learn ARM templates overview, which option matches?

Accepted Answer

The template is a JavaScript Object Notation (JSON) file that defines the infrastructure and configuration for your project for the deployment in Azure.

Answer

An ARM template in Azure is documented as a compiled binary that the team cannot read or edit and as explicitly never expressed as a JSON file in any documented case.

Answer

An ARM template in Azure is documented as a single Python script with no JSON involved and as explicitly never used to define infrastructure or configuration for the project.

Answer

An ARM template in Azure is documented as a per-resource sticker that the team prints and physically attaches to each resource and as explicitly never expressed as a JSON file.

Question 6

A platform team is rolling out a related Azure workload at the same organization. A new developer is being asked, in a design discussion, what the headline benefit of PaaS is for a development team that wants to ship features quickly. Per the Microsoft Learn PaaS overview, which option matches the documented fit?

Accepted Answer

PaaS is well suited to provide a complete development environment without the headache of maintaining all the development infrastructure.

Answer

PaaS is documented as a poor fit for development teams because it requires every developer to operate a private datacenter on the company's own loading dock.

Answer

PaaS is documented as suitable only for offline single-user installations on a developer's personal laptop, with no cloud-hosted infrastructure of any kind.

Answer

PaaS is documented as a billing-only feature with no impact on the development team's day-to-day infrastructure work, which remains fully on-premises.

Question 7

A platform team is being asked, by their compliance officer, to give a concrete example of a policy that a management group can usefully apply across many subscriptions. Per the Microsoft Learn management groups overview, which option matches the documented example?

Accepted Answer

you can apply a policy to a management group that limits the regions available for virtual machine (VM) creation across all associated subscriptions.

Answer

A typical management-group policy example is documented as forcing every workload to run on physical desktop PCs that Microsoft mails to the customer's office.

Answer

A typical management-group policy example is documented as forcing every subscription to bill in a randomly chosen currency on each new billing cycle.

Answer

A typical management-group policy example is documented as disabling every Azure service for the underlying subscriptions for the duration of the policy.

Question 8

An engineer is tasked with confirming the design before sign-off. A FinOps engineer is being asked, by their lead, what shape a tag takes in Azure and how the team uses tag pairs to identify resources for reporting. Per the Microsoft Learn tags overview, which option matches?

Accepted Answer

They are key-value pairs that help you identify resources based on settings that are relevant to your organization across the Azure subscriptions.

Answer

Tags in Azure are documented as single-value attributes with no key portion and explicitly never as key-value pairs for any resource identification purpose.

Answer

Tags in Azure are documented as multi-value lists that the customer cannot rename or query and are explicitly never used for resource identification by the org.

Answer

Tags in Azure are documented as cryptographic hashes generated by Azure and are explicitly opaque to the customer for any identification or reporting use case.

Question 9

A new IT lead is rolling out a customer-facing application on Azure and the project manager is being asked what the first-order availability concern is for any deployment. Per the Microsoft Learn HA and scalability overview, which option matches the documented guidance?

Accepted Answer

When deploying an application, a service, or any IT resources, it's important the resources are available when needed for the workload.

Answer

When deploying an application in Azure, availability does not matter at all and a service can stay offline indefinitely without business impact in any scenario.

Answer

When deploying an application in Azure, the team should make resources available only during scheduled maintenance windows and offline the rest of the time.

Answer

When deploying an application in Azure, availability is the cloud provider's sole responsibility and the customer never has to architect for it in any deployment.

Question 10

A company is migrating workloads to Azure and the team is on the hook. An IT director is being asked, by their CISO, why classic network-perimeter controls are no longer sufficient for an Entra-protected workforce in a hybrid environment. Per the Microsoft Learn Conditional Access overview, which option matches the documented framing?

Accepted Answer

Modern security extends beyond an organization's network perimeter to include user and device identity, so identity-driven controls are required in addition to network.

Answer

Modern security is documented as entirely a network-perimeter problem, with user and device identity excluded as out-of-scope for the documented Conditional Access model.

Answer

Modern security is documented as relying only on the user's home Wi-Fi network, with no role for device identity, user identity, or any other identity-driven signal.

Answer

Modern security is documented as a marketing slogan and explicitly never extends past the legacy network perimeter for any organization's actual workforce in production.

Question 11

A platform team is being asked, by their tech lead, why Microsoft positions infrastructure-as-code as something the team should treat like application code in their source control. Per the Microsoft Learn ARM templates overview, which option matches?

Accepted Answer

Just like application code, store the infrastructure code in a source repository and version it so the team can review and roll back infrastructure changes.

Answer

Infrastructure-as-code in Azure is documented as something the team should never put into version control and as explicitly always stored outside any source repository the team owns.

Answer

Infrastructure-as-code in Azure is documented as something the team should mail to a third-party SaaS vendor for safekeeping and as explicitly never stored in any source repository.

Answer

Infrastructure-as-code in Azure is documented as a one-time printed report that the team files in a paper binder and as explicitly never put into a source repository.

Question 12

A new IT lead is rolling out their first Azure workloads and is being asked, by the architecture review board, how Microsoft categorizes cloud hosting models. Per the Azure compute decision tree, which option matches?

Accepted Answer

For hosting models, cloud services fall into three categories: IaaS, PaaS, and FaaS, each with a different split of customer and provider responsibility.

Answer

Microsoft documents only a single hosting model for cloud services and explicitly forbids any distinction between IaaS, PaaS, and FaaS at the platform level.

Answer

Microsoft documents twelve mutually exclusive hosting tiers for cloud services and rejects any service that maps to more than one of those twelve tiers.

Answer

Microsoft documents hosting models as a billing-only construct that has no impact on whether the workload runs on VMs, on app services, or on functions.

Question 13

A company is migrating workloads to Azure and the team is on the hook. A finance lead is being asked, by their CFO, why running an application on Azure virtual machines can make economic sense when its demand fluctuates over the year. Per the Microsoft Learn Azure virtual machines overview, which option matches?

Accepted Answer

Applications in the cloud – Because demand for your application can fluctuate, it might make economic sense to run it on a virtual machine in Azure when needed.

Answer

Azure virtual machines are documented as a poor economic fit for applications whose demand fluctuates, since every VM bills at a fixed rate regardless of demand.

Answer

Azure virtual machines are documented as forbidden for applications whose demand fluctuates over the year, with on-premises servers documented as the only option.

Answer

Azure virtual machines are documented as billed only when demand is exactly zero, so applications with fluctuating demand cannot use VMs to handle real load.

Question 14

A new IT lead is rolling out infrastructure across datacenters, multiple clouds, and edge sites and is being asked, by the CIO, what Microsoft documents as the underlying organizational problem Azure Arc targets. Per the Microsoft Learn Azure Arc overview, which option matches?

Accepted Answer

Today, companies struggle to control and govern increasingly complex environments that extend across data centers, multiple clouds, and edge in the documented framing.

Answer

Microsoft Azure Arc is documented as solving only a single-datacenter visibility problem and as explicitly excluding any multi-cloud or edge environments from its target use cases.

Answer

Microsoft Azure Arc is documented as a marketing slogan with no documented relationship to control or governance of any multi-cloud or edge environment in the documented framing.

Answer

Microsoft Azure Arc is documented as forbidden for any environment that spans multiple clouds and is explicitly limited to a single Azure subscription in the documented framing.

Question 15

A platform team is being asked, in a vendor selection meeting, which named Azure services Microsoft classifies as PaaS in its compute guidance. Per the Azure compute decision tree, which option matches the documented PaaS examples?

Accepted Answer

App Service and Container Apps are PaaS services on Azure, so teams can pick either to get a managed hosting environment for their applications.

Answer

App Service and Container Apps are documented as IaaS in Azure, requiring the customer to manage the underlying VMs and physical infrastructure themselves.

Answer

App Service and Container Apps are documented as legacy SaaS-only products that customers can no longer use as a hosting model for new applications.

Answer

App Service and Container Apps are documented as out-of-support services that Microsoft has removed from its compute guidance for new deployments.

Microsoft Certified: Azure Fundamentals

Sample questions

Sources

Similar exams