A company is designing a multi-tier application in Azure. The web front-end VMs must be accessible from the internet, while the database VMs must only be reachable from the front-end VMs. The company wants to isolate the tiers and control traffic between them. What should they implement?

Use Azure DNS to isolate the tiers

Create a single subnet and use network security groups on each VM's NIC

Create two separate virtual networks and peer them

Create two subnets in a virtual network and apply network security groups to each subnet

How does an availability set improve the reliability of applications running on Azure virtual machines?

It automatically scales the number of VMs based on demand.

It replicates VMs to a secondary region for disaster recovery.

It ensures that VMs are placed on different physical hardware and updated at different times.

It provides a public IP address for each VM to ensure internet connectivity.

What is the role of a subnet within an Azure virtual network?

To store network security group rules.

To segment the virtual network into smaller address spaces for better organization and security.

To automatically scale resources within the network.

To provide a public IP address to each virtual machine.

A company has an Azure Storage account that contains sensitive data. The storage account currently has a public endpoint, but the company wants to ensure that all access to the storage account occurs over a private connection from a specific virtual network. They also need to maintain access from on-premises systems via a site-to-site VPN. What should they configure?

Use Azure DNS to redirect traffic to a private IP

Use Azure Firewall to block public access

Create a private endpoint for the storage account and disable public network access

Create a service endpoint for the storage account

Microsoft Certified:Azure Fundamentals

Domain 2Objective 2

Describe Azure Compute and Networking Services AZ-900 Practice Questions (Page 4)

Part of the Describe Azure architecture and services domain, which accounts for 35–40% of the AZ-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~7–12 in this domain), expect 2–3 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

Start Intelligent Quiz

47questions here

10free pages

15concepts

35–40%of the exam

Questions 16–20

16foundation · easy
Which Azure resource can be used to provide a public endpoint for a virtual machine?
Select an answer first
17application · medium
A company is designing a multi-tier application in Azure. The web front-end VMs must be accessible from the internet, while the database VMs must only be reachable from the front-end VMs. The company wants to isolate the tiers and control traffic between them. What should they implement?
Select an answer first
18foundation · easy
How does an availability set improve the reliability of applications running on Azure virtual machines?
Select an answer first
19foundation · easy
What is the role of a subnet within an Azure virtual network?
Select an answer first
20expert · hard
A company has an Azure Storage account that contains sensitive data. The storage account currently has a public endpoint, but the company wants to ensure that all access to the storage account occurs over a private connection from a specific virtual network. They also need to maintain access from on-premises systems via a site-to-site VPN. What should they configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-900

Examers app · Pro

You’ve practiced. Now get ready to pass.

Free practice is the warm‑up. The Examers app turns it into a pass — adaptive quizzing, a visual book, and an honest readiness score for AZ-900.

Exam Coach that reads what you have really answered and picks one thing for tonight
Intelligent Quiz that adapts to your weak areas
Split‑screen Visual Book — learn each concept as you practice
Timed sets & full mock exams that mirror the real thing
Readiness score from real evidence — know when you’re ready

Get exam‑ready See what’s inside

Free practice stays free — always.

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-900” is a trademark of its owner, used for identification only.