A preview of 15 of the 40 questions in this set, with full explanations. Take the interactive exam above for the complete set with timer, flagging, and scoring.
Question 1Cloud Concepts
A film studio renders animation frames overnight using 500 VMs, then shuts them all down at dawn. On-premises, this would require owning 500 servers used 8 hours daily. Which cloud principle delivers the saving?
A ✓Pay only for the compute hours actually consumed
BCloud hardware renders faster than physical hardware
CRendering is free at night
DVMs cannot be shut down
Explanation: Consumption pricing: 500 VMs × 8 hours costs one-third of 24/7 ownership, with zero capital outlay. Burst-compute workloads like rendering are canonical cloud economics wins.
Question 2Cloud Concepts
Which BEST defines 'serverless' computing?
A ✓Code runs on servers fully abstracted away — you deploy functions, the platform manages all infrastructure and scales to zero
BComputing without any servers existing anywhere
COnly client-side browser code
DA VM with no operating system
Explanation: Serverless means servers exist but are invisible to you — the platform provisions, scales, and bills per execution. Azure Functions and Logic Apps are serverless; the name describes the developer experience, not physics.
Question 3Cloud Concepts
A company evaluates moving its CRM from a self-hosted application to Dynamics 365 (SaaS). Which responsibilities DISAPPEAR from their IT team's workload?
A ✓Infrastructure, OS patching, application updates, and platform availability
BUser training and data quality
CDeciding who can access customer records
DCompliance with privacy law
Explanation: SaaS transfers the entire stack below the data/identity layer to the provider. The customer still owns user access decisions, data quality, training, and legal compliance — those never transfer.
Question 4Cloud Concepts
An SLA of 99.99% permits approximately how much downtime per year?
A ✓About 52 minutes
BAbout 8.7 hours
CAbout 3.65 days
DZero downtime
Explanation: 99.99% ('four nines') allows ~52.6 minutes of downtime annually. 99.9% allows ~8.8 hours; 99% allows ~3.65 days. Each added nine cuts allowed downtime tenfold — and typically raises architecture cost significantly.
Question 5Cloud Concepts
A grocery chain wants store systems to keep operating during internet outages while syncing to Azure when connected. Devices must run cloud-managed workloads locally. Which computing pattern is this?
A ✓Edge computing (e.g. Azure IoT Edge / Azure Stack family)
BPure public cloud
CMainframe computing
DClient-only computing
Explanation: Edge computing runs cloud-managed workloads on local hardware — surviving connectivity loss, reducing latency, and syncing to Azure when online. Azure IoT Edge and the Azure Stack portfolio serve exactly this pattern.
Question 6Azure Architecture & Services
Which pairing of concept and purpose is CORRECT?
A ✓Availability Zone = datacentre-failure protection within a region; Region pair = regional-disaster protection
BAvailability Zone = regional-disaster protection; Region pair = rack-failure protection
CBoth protect only against single-server failure
DNeither relates to resilience
Explanation: Zones are separated datacentres within a region (datacentre-level protection); region pairs are distance-separated regions (regional-disaster protection). Layering both delivers maximum resilience.
Question 7Azure Architecture & Services
A dev asks why their deleted storage blob was recoverable for 14 days. Which data protection feature enabled the recovery?
A ✓Soft delete — retaining deleted data for a configurable period
BThe blob was never actually deleted
CAzure prohibits deleting blobs
DCDN caching
Explanation: Soft delete keeps deleted blobs (and containers/file shares) recoverable for a configured retention window — protection against accidental or malicious deletion before permanent purge.
Question 8Azure Architecture & Services
Which service provides desktop and application virtualisation, delivering Windows 11 multi-session to users?
A ✓Azure Virtual Desktop
BAzure Container Instances
CAzure DNS
DAzure Queue Storage
Explanation: Azure Virtual Desktop delivers virtualised Windows desktops and apps — including Windows 11 multi-session, unique to Azure — for remote workforces on any device.
Question 9Azure Architecture & Services
A company's application requires 99.99% uptime. A single VM offers a 99.9% SLA. What architectural change reaches the higher SLA target for compute?
A ✓Deploy multiple VM instances across Availability Zones behind a load balancer
BRestart the single VM weekly
CAdd more disk space
DRename the VM
Explanation: Multi-instance, zone-distributed deployments carry higher composite SLAs (99.99% for zone-redundant VM sets) because no single datacentre failure takes the service down. Single instances cap at lower SLA tiers.
Question 10Azure Architecture & Services
Azure Logic Apps is BEST described as:
A ✓A low-code service for automating workflows and integrating apps, data, and services with prebuilt connectors
BA virtual machine type
CA physical network appliance
DA database engine
Explanation: Logic Apps orchestrates workflows visually — hundreds of connectors (Office 365, SQL, Salesforce, custom APIs) chained with triggers and actions, minimal code. It's the integration/automation counterpart to Functions.
Question 11Azure Architecture & Services
An online store wants product searches answered in milliseconds without hammering the SQL database on every request. Which service pattern reduces database load for frequently read data?
A ✓In-memory caching with Azure Cache for Redis
BA second identical SQL database
CStoring products in email
DLarger network cables
Explanation: Redis caches hot data in memory — sub-millisecond reads, dramatic database offload. Cache-aside is the standard pattern: check cache first, fall back to database, populate cache.
Question 12Azure Architecture & Services
Encryption in transit protects data:
A ✓While moving across networks, typically via TLS/HTTPS
BOnly while stored on disks
COnly inside CPU registers
DIt is the same as encryption at rest
Explanation: In-transit encryption (TLS/HTTPS, VPN tunnels) protects data crossing networks from interception. At-rest encryption protects stored data. Complete protection requires both — they address different attack surfaces.
Question 13Azure Architecture & Services
A user reports that MFA prompts stopped appearing when signing in from the office but still appear from home. IT confirms this is intentional. Which feature creates this behaviour?
A ✓Conditional Access with trusted/named locations
BMFA is broken in the office
CPasswords disabled at home
DThe office has no internet
Explanation: Conditional Access policies can treat office IP ranges as trusted named locations — skipping MFA there while enforcing it elsewhere. Context-aware policy, not malfunction.
Question 14Azure Architecture & Services
Which service continuously assesses VMs, containers, databases, and storage for vulnerabilities and misconfigurations across clouds?
A ✓Microsoft Defender for Cloud
BAzure DNS
CAzure Load Balancer
DCost Management
Explanation: Defender for Cloud is the CSPM/CWPP platform — vulnerability assessment, misconfiguration detection, secure score, and active threat protection across Azure, hybrid, and multi-cloud workloads.
Question 15Management & Governance
A global admin left the company. Audit reveals their account had permanent Owner rights on every subscription. Which Entra capability would have limited standing privileged access?
A ✓Privileged Identity Management (PIM) — just-in-time, time-bound, approval-based role activation
BMore permanent admin accounts
CLonger passwords
DRemoving all admins entirely
Explanation: PIM converts standing privilege into just-in-time activation — roles activate for limited windows with approval and full audit. Departed employees hold no永standing access; the attack surface of permanent admin rights disappears.