AZ-900: Core Azure Architecture

Core Azure Architecture is one of the skill areas tested on the Azure Fundamentals (AZ-900) exam. Below are free AZ-900 practice questions with worked answers and a concept diagram — each with a plain-language explanation. Practice the first 10 questions of AZ-900 free, no signup.

2 free AZ-900 Core Azure Architecture questions

Sample AZ-900 question

You must run a critical line-of-business application on Azure virtual machines with a guaranteed 99.99% availability SLA, using as few virtual machines and availability zones as possible. What is the minimum configuration that achieves the 99.99% SLA?

  • Two or more virtual machines spread across two availability zones
  • Two virtual machines in a single availability zone
  • One virtual machine that uses Premium SSD managed disks
  • Two virtual machines in a single availability set
Explanation

Azure only guarantees the 99.99% virtual-machine SLA when you run two or more VMs across two or more availability zones — physically separate locations within a region, so a whole-datacenter failure can't take the app down. Two VMs in one zone offer no protection if that zone fails, a single premium-disk VM is guaranteed 99.9%, and two VMs in one availability set reach 99.95% — all short of 99.99%.

Sample AZ-900 question

Your team is designing an Azure deployment that will run several front-end web servers and several back-end database servers. A requirement is that the types of network connections permitted between the web tier and the database tier can be filtered and restricted. You propose adding network security groups (NSGs) to the design to satisfy this requirement. Evaluate whether the statement below is correct.

  • Using network security groups (NSGs) can satisfy the requirement to control the connection types between the web servers and the database servers.Yes
Explanation

A network security group holds a prioritized list of security rules that allow or deny inbound and outbound traffic based on source, destination, port, and protocol. By attaching NSGs to the subnets or network interfaces of the web and database tiers, you can filter exactly which connections are permitted between them, so the proposed solution meets the requirement. This is why the statement is correct rather than false.

Practice AZ-900 free

The first 10 questions of every exam are free. No signup, no email wall.

Start practicing →

Get a free AZ-900 study plan by email

A short plan to work through AZ-900 by skill area, plus a note when we add new questions. Optional — the practice above stays free. No spam, unsubscribe anytime.

More AZ-900 skill areas