Skip to content

Architecture and Services practice quiz

Choose the best answer before opening the answer key.

Questions

  1. A company needs 20 web-server VM instances managed as one group that automatically increases and decreases with traffic. Which service fits best?

  2. A. Availability set

  3. B. Virtual Machine Scale Sets
  4. C. Azure Virtual Desktop

  5. D. Azure Functions

  6. Which Azure service provides an isolated private network for resources such as VMs and subnets?

  7. A. Azure DNS

  8. B. ExpressRoute
  9. C. Virtual Network

  10. D. VPN Gateway

  11. A datacenter must connect to Azure over a private dedicated connection that does not use the public internet. Which service fits best?

  12. A. VPN Gateway

  13. B. VNet peering
  14. C. ExpressRoute

  15. D. Private endpoint

  16. A branch office needs an encrypted connection to Azure over the public internet for a pilot project. Which service fits best?

  17. A. ExpressRoute

  18. B. VPN Gateway
  19. C. Azure DNS

  20. D. Blob Storage

  21. A team stores photos, videos, and backup files as unstructured objects. Which storage service fits best?

  22. A. Azure Files

  23. B. Queue Storage
  24. C. Blob Storage

  25. D. Table Storage

  26. A legacy application requires a shared SMB file share in Azure. Which service fits best?

  27. A. Blob Storage

  28. B. Azure Files
  29. C. Queue Storage

  30. D. Archive tier only

  31. Compliance archives are accessed once or twice a year and cost must be minimized. Which blob tier fits best?

  32. A. Hot

  33. B. Cool
  34. C. Archive

  35. D. Premium SSD

  36. A storage account must remain readable from a secondary region if the primary region fails. Which redundancy option fits best?

  37. A. LRS

  38. B. ZRS only
  39. C. RA-GRS

  40. D. Locally redundant with no secondary copy

  41. A company must ship 80 TB of data to Azure because the network link is too slow. Which option fits best?

  42. A. AzCopy over a slow VPN

  43. B. Azure Data Box
  44. C. Azure File Sync

  45. D. Queue Storage

  46. Which tool is best for assessing and migrating on-premises servers into Azure?

    • A. Azure Migrate
    • B. Storage Explorer
    • C. Conditional Access
    • D. Defender for Cloud

  47. Employees need Windows desktops hosted in Azure and delivered to remote devices. Which service fits best?

    • A. Azure Virtual Desktop
    • B. Virtual Machine Scale Sets
    • C. App Service
    • D. Azure DNS

  48. A storage account should be reachable from a VNet using a private IP address rather than a public endpoint. What should you add?

    • A. Service endpoint only
    • B. Private endpoint
    • C. Hot tier
    • D. Availability set

  49. Which service provides the organization's cloud identity directory for users and groups?

    • A. Microsoft Entra ID
    • B. Azure RBAC
    • C. Azure Policy
    • D. Resource group

  50. Sign-ins from untrusted locations must require an authenticator app in addition to a password. Which capability enforces this?

    • A. Azure RBAC
    • B. Conditional Access
    • C. LRS
    • D. VNet peering

  51. A contractor should view resources in one resource group but not modify them or grant access. Which RBAC role fits best?

    • A. Owner
    • B. Contributor
    • C. Reader
    • D. User Access Administrator

  52. An app needs Kerberos and domain join in Azure, but the company does not want to manage domain controller VMs. Which service fits best?

    • A. Microsoft Entra Domain Services
    • B. Blob Storage
    • C. VPN Gateway
    • D. Archive tier

  53. A Node.js web API should run on a managed platform with autoscale and no OS patching. Which service fits best?

    • A. Azure Virtual Machine
    • B. Azure App Service
    • C. Azure Data Box
    • D. ExpressRoute

  54. Which security model uses multiple layers such as identity, network, application, and monitoring?

    • A. Defense in depth
    • B. CapEx
    • C. Archive tier
    • D. Region pair

  55. Which service provides secure score recommendations and threat protection for Azure workloads?

    • A. Microsoft Defender for Cloud
    • B. Azure Files
    • C. Azure DNS
    • D. Table Storage

  56. A blob upload should trigger a short function without the team managing servers. Which compute option fits best?

    • A. Azure Functions
    • B. Virtual Machine Scale Sets
    • C. Azure Virtual Desktop
    • D. ExpressRoute

  57. An Azure VM needs private communication with other resources in a virtual network. Which supporting resource connects the VM to a subnet?

    • A. Network interface (NIC)
    • B. Azure Data Box
    • C. Availability set
    • D. Archive tier