I85PREP
⌘ K
AZ Landscape study materials
AZ Landscape study resources

AZ Landscape practice questions

One question at a time. Build your AZ Landscape understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Cloud concepts and the Azure architecture landscape

Which statement best describes Microsoft Azure?

  1. A public cloud platform run by Microsoft Correct answer.
  2. An on-premises virtualization product sold with Windows Server
  3. A desktop productivity suite delivered as a service
  4. A third-party hosting provider that resells Windows licenses

Explanation

Azure is Microsoft's public cloud platform, delivering compute, storage, networking, and many managed services over the internet on a pay-as-you-go basis. It is not an on-premises product, a productivity suite, or a reseller arrangement.

Question 2Cloud concepts and the Azure architecture landscape

What does an Azure region represent?

  1. A billing boundary for a department's spending
  2. A logical grouping of related resources for one app
  3. A geographic area with one or more datacenters Correct answer.
  4. A single physical datacenter shared by multiple customers

Explanation

A region is a geographic area containing one or more datacenters that are networked together with low latency. Customers choose a region to control data residency and proximity to users.

Question 3Cloud concepts and the Azure architecture landscape

Within a single Azure region, what is an availability zone?

  1. A virtual network segment that isolates workloads
  2. A physically separate datacenter with its own power Correct answer.
  3. A logical container used to group resources for billing
  4. A pair of regions linked together for disaster recovery

Explanation

Availability zones are physically separate groups of datacenters within one region, each with independent power, cooling, and networking. Spreading workloads across zones protects them from a single facility failure.

Question 4Cloud concepts and the Azure architecture landscape

Moving from owned on-premises servers to Azure typically changes cost accounting in which way?

  1. Software licensing costs are permanently eliminated
  2. Operational expenses become fixed capital expenses
  3. Capital expenses shift to operational expenses Correct answer.
  4. Costs become entirely unpredictable and unbudgetable

Explanation

Cloud consumption replaces large upfront hardware purchases with recurring usage-based charges, so spending moves from capital expense to operational expense. Licensing still exists for many products, and costs remain forecastable with the right tooling.

Question 5Cloud concepts and the Azure architecture landscape

Azure's consumption-based pricing model means customers do what?

  1. Prepay for fixed capacity of every service in advance
  2. Buy perpetual licences for every service they enable
  3. Pay only for what they consume Correct answer.
  4. Receive unlimited usage for a single flat monthly fee

Explanation

In a consumption model, metering records actual usage and the customer is billed for that usage, which aligns spend with demand. Some services also offer commitments and reservations, but metered consumption is the baseline.

Question 6Cloud concepts and the Azure architecture landscape

Which characteristic defines a public cloud deployment?

  1. Resources run only on hardware inside the customer's building
  2. Resources are owned by a provider and shared over the internet Correct answer.
  3. Resources are dedicated to one organization in its own datacenter
  4. Resources are split between two providers under one contract

Explanation

In a public cloud, a provider owns and operates the infrastructure and makes multitenant resources available to customers over the internet. The customer does not manage the underlying hardware.

Question 7Cloud concepts and the Azure architecture landscape

What is the purpose of an Azure resource group?

  1. To define the physical datacenter that hosts a virtual machine
  2. To hold related resources so they can be managed as a unit Correct answer.
  3. To provide identity and authentication for end users
  4. To set the maximum spending allowed across all subscriptions

Explanation

A resource group is a logical container holding resources that share a lifecycle, so they can be deployed, updated, and deleted together. It does not control the physical location of hardware.

Question 8Cloud concepts and the Azure architecture landscape

An Azure subscription primarily serves which purpose?

  1. It provides a billing and access-management boundary Correct answer.
  2. It groups datacenters into a single geographic region
  3. It defines the network topology between virtual networks
  4. It stores virtual machine images for repeated deployment

Explanation

A subscription is the unit for billing and for applying access control and policy limits. Resources are always created inside a subscription, and cost reports are generated per subscription.

Question 9Cloud concepts and the Azure architecture landscape

A company keeps its database on-premises but moves its web front end to Azure, connecting both over a VPN. Which cloud model is this?

  1. Public cloud only
  2. Hybrid cloud Correct answer.
  3. Community cloud
  4. Private cloud only

Explanation

A hybrid model combines on-premises infrastructure with public cloud services and connects them, usually through a VPN or dedicated link. Here both environments are in active use, which is the defining feature.

Question 10Cloud concepts and the Azure architecture landscape

Which Azure service is classified as Infrastructure as a Service?

  1. Azure Virtual Machines Correct answer.
  2. Azure App Service
  3. Azure SQL Database
  4. Microsoft 365

Explanation

With virtual machines the customer manages the operating system, middleware, and applications while Microsoft manages the hardware and hypervisor, which is the IaaS pattern. The provider supplies only the virtualized infrastructure.

Question 11Cloud concepts and the Azure architecture landscape

Which offering is an example of Software as a Service?

  1. Azure Blob Storage
  2. Azure Virtual Network
  3. Azure Kubernetes Service
  4. Microsoft 365 Correct answer.

Explanation

SaaS delivers a complete, provider-managed application that users consume directly, and Microsoft 365 fits that description. The customer does not manage servers, platforms, or the application code.

Question 12Cloud concepts and the Azure architecture landscape

Adding more CPU and memory to an existing virtual machine is an example of which approach?

  1. Horizontal scaling out
  2. Load balancing
  3. Geo-replication
  4. Vertical scaling up Correct answer.

Explanation

Changing the size of a single instance to give it more resources is vertical scaling, also called scaling up. Horizontal scaling instead adds or removes whole instances.

Question 13Cloud concepts and the Azure architecture landscape

Placing several virtual machines in one availability set achieves what?

  1. Spreading them across fault domains to limit hardware failure impact Correct answer.
  2. Encrypting traffic between the VMs and the internet
  3. Automatically scaling the VM count when CPU utilization rises
  4. Guaranteeing each VM runs in a different geographic region

Explanation

An availability set distributes VMs across fault domains and update domains inside a single datacenter so that a hardware fault or a planned reboot affects only a subset. It improves resilience without leaving the region.

Question 14Cloud concepts and the Azure architecture landscape

Which statement about Azure region pairs is correct?

  1. Each region is paired with another in the same geography Correct answer.
  2. Both regions in a pair must sit inside one country
  3. Paired regions share the same datacenters to reduce cost
  4. Region pairing applies only to sovereign clouds

Explanation

Most Azure regions are paired with another region in the same geography, typically hundreds of miles apart, so that a large-scale outage is unlikely to affect both. This supports services such as geo-redundant storage and platform updates rolled out one region at a time.

Question 15Cloud concepts and the Azure architecture landscape

Which Azure environment is designed for US federal agencies, with screened personnel and dedicated networks?

  1. Azure Government Correct answer.
  2. Azure Stack Edge
  3. Azure Germany
  4. Azure China 21Vianet

Explanation

Azure Government is a separate instance of Azure for US federal, state, and local agencies, operated by screened US personnel and physically isolated from the commercial cloud. It meets specific government compliance requirements.

Question 16Cloud concepts and the Azure architecture landscape

In the Azure hierarchy, where do management groups sit?

  1. Above subscriptions, applying policy to many at once Correct answer.
  2. At the same level as regions
  3. Below resource groups and above individual resources
  4. Inside a subscription, alongside resource groups

Explanation

Management groups sit above subscriptions so that governance controls such as policy and role assignments can be inherited by many subscriptions at once. The hierarchy runs management group, subscription, resource group, then resource.

Question 17Cloud concepts and the Azure architecture landscape

Within an availability set, what does an update domain represent?

  1. A group of VMs that share the same physical power supply and network switch
  2. A rack of servers located in a different region
  3. A group of VMs rebooted together during planned maintenance Correct answer.
  4. A set of VMs that share the same public IP address

Explanation

Update domains group VMs that the platform restarts together during planned maintenance, so only one group is unavailable at a time. Fault domains, by contrast, group VMs by shared power and network hardware.

Question 18Cloud concepts and the Azure architecture landscape

What role does Azure Resource Manager (ARM) play?

  1. It is a monitoring service that collects log data
  2. It is a code editor for building cloud applications
  3. It provides the graphical portal used to browse resources
  4. It is the deployment and management layer for Azure resources Correct answer.

Explanation

ARM is the control-plane service that receives requests from the portal, CLI, SDKs, and templates and then creates, updates, or deletes resources consistently. Every management tool ultimately calls ARM.

Question 19Cloud concepts and the Azure architecture landscape

Deploying an application to regions in Europe and Asia primarily improves which aspect?

  1. The number of administrators who can sign in
  2. Latency for users in those geographic areas Correct answer.
  3. The maximum size of a single virtual machine
  4. The encryption strength of stored data

Explanation

Placing application instances closer to users shortens network round-trip time, which reduces latency. This is the geo-distribution benefit of a global cloud footprint.

Question 20Cloud concepts and the Azure architecture landscape

Which approach reduces cost for a virtual machine that must run continuously for three years?

  1. Moving the VM to a different resource group
  2. Deleting and redeploying the VM each month
  3. Using a pay-as-you-go subscription only
  4. Purchasing a three-year reserved instance Correct answer.

Explanation

Reserved instances let a customer commit to a one- or three-year term in exchange for a significant discount over pay-as-you-go rates, which suits long-running, predictable workloads. Moving or recreating resources does not change the meter.

Question 21Cloud concepts and the Azure architecture landscape

An ARM template is deployed twice with identical parameters and no resources change on the second run. Which property does this illustrate?

  1. Imperative scripting with side effects
  2. Idempotent, declarative deployment Correct answer.
  3. Automatic vertical scaling of resources
  4. Eventual consistency of the control plane

Explanation

A declarative template describes the desired end state, and reapplying it converges to that state without duplicating resources, which is idempotence. The template states what should exist rather than the steps to create it.

Question 22Cloud concepts and the Azure architecture landscape

A regulated workload must keep data at rest inside the European Union while serving EU users with low latency. Which choice satisfies both requirements?

  1. Deploy to the nearest region regardless of geography
  2. Deploy to a US region and replicate to Europe
  3. Deploy to a North Europe or West Europe region Correct answer.
  4. Deploy to a sovereign US government region

Explanation

Choosing an EU region keeps stored data within the required jurisdiction and places compute near the users, addressing residency and latency together. Region selection is the primary control for both concerns.

Question 23Cloud concepts and the Azure architecture landscape

Which service extends Azure management and policy to servers running in other clouds and on-premises?

  1. Azure Advisor
  2. Azure Policy
  3. Azure Arc Correct answer.
  4. Azure Monitor

Explanation

Azure Arc projects non-Azure servers and Kubernetes clusters into Azure Resource Manager so they can be governed with the same policy, RBAC, and monitoring tooling. It is the bridge for hybrid and multicloud estates.

Question 24Cloud concepts and the Azure architecture landscape

Under the shared responsibility model for a PaaS database service, which task always remains the customer's responsibility?

  1. Securing the physical datacenter buildings
  2. Replacing failed server hardware components
  3. Patching the database engine software binaries
  4. Managing data and access permissions Correct answer.

Explanation

In PaaS, Microsoft covers the physical infrastructure, the operating system, and the platform software, while the customer remains accountable for data, identities, and who can reach that data. Responsibility shifts toward the customer as you move from IaaS to SaaS, but data governance never transfers.

Question 25Cloud concepts and the Azure architecture landscape

A service depends on two independent components, each with a 99.9% SLA. What is the approximate composite SLA?

  1. About 99.99%
  2. Exactly 99.9%
  3. About 99.95%
  4. About 99.8% Correct answer.

Explanation

For components chained in series, availability multiplies: 0.999 times 0.999 is roughly 0.998, so the composite is about 99.8%. Adding dependencies therefore lowers the combined SLA rather than preserving the best single figure.

Question 26Cloud concepts and the Azure architecture landscape

A company currently buys its own servers and depreciates them over five years. After migrating to Azure, it is billed monthly for the resources it consumes. Which financial change does this migration represent?

  1. Operating expenditure is replaced by capital expenditure.
  2. Capital expenditure is replaced by operating expenditure. Correct answer.
  3. Total cost of ownership becomes independent of how much the workload is used.
  4. Fixed infrastructure costs become multi-year lease commitments with a guaranteed minimum spend.

Explanation

Buying hardware up front is a capital expense that is depreciated over time, whereas consumption-based cloud billing is an ongoing operating expense charged as the service is used. Moving workloads to Azure therefore shifts spend from CapEx to OpEx and ties cost more closely to actual usage.

Question 27Cloud concepts and the Azure architecture landscape

Which description best matches an Azure availability zone?

  1. A billing boundary that groups subscriptions together for invoicing.
  2. A physically separate group of datacenters within a single region. Correct answer.
  3. A network segment that isolates one virtual network from another.
  4. A separate Azure region that is reserved for the exclusive use of one customer.

Explanation

Availability zones are distinct physical locations inside one region, each with independent power, cooling, and networking, so an outage in one zone need not affect the others. Applications spread VMs across zones to raise resilience within that region.

Question 28Cloud concepts and the Azure architecture landscape

Several virtual machines in one availability set must be prevented from sharing the same physical rack, power source, and network switch. Which concept describes the grouping used to achieve this?

  1. Fault domain Correct answer.
  2. Resource group
  3. Availability zone
  4. Update domain

Explanation

A fault domain is a group of hardware that shares a single point of failure, such as a rack with common power and networking. Availability sets spread their VMs across fault domains so that a hardware failure affects only one group, while update domains govern planned maintenance reboots.

Question 29Cloud concepts and the Azure architecture landscape

An organisation wants to estimate the savings from moving its existing on-premises datacenter to Azure over three years, including power, cooling, and administrative labor. Which tool is designed for this comparison?

  1. The Azure pricing calculator
  2. Azure Advisor cost recommendations
  3. Azure Cost Management + Billing
  4. The Total Cost of Ownership (TCO) Calculator Correct answer.

Explanation

The TCO Calculator compares the cost of an existing on-premises environment with the equivalent Azure cost, factoring in facilities costs such as power, cooling, and IT labor as well as hardware. The pricing calculator, by contrast, estimates the Azure price of specific services without modelling the on-premises side.

Question 30Cloud concepts and the Azure architecture landscape

Which statement correctly describes an Azure geography?

  1. A single datacenter that hosts one availability zone.
  2. A pair of regions linked together for disaster recovery replication.
  3. A data residency and compliance boundary containing one or more regions. Correct answer.
  4. A logical container that groups subscriptions for policy inheritance.

Explanation

A geography is defined by data residency and compliance boundaries, such as a country or group of countries, and it contains one or more Azure regions within those boundaries. This lets organisations select regions that keep data inside a required legal jurisdiction.

Question 31Compute services and application hosting models

Which Azure resource defines the compute capacity, pricing tier, and region that one or more App Service apps run on?

  1. Resource group
  2. Deployment slot
  3. App Service Environment
  4. App Service plan Correct answer.

Explanation

The App Service plan is the billable unit of compute for App Service; the pricing tier chosen on the plan sets the VM size, feature set, and scale limits. Individual apps are placed into a plan and consume its shared capacity. The region is fixed by the plan's location.

Question 32Compute services and application hosting models

Under the Azure Functions Consumption plan, what determines the cost of a function app?

  1. The number of deployment slots kept warm
  2. The number of provisioned VM instances per hour
  3. Executions plus GB-seconds of resource consumption Correct answer.
  4. Reserved capacity units purchased in advance

Explanation

The Consumption plan is serverless billing: you are charged per execution and for memory-time (GB-seconds) consumed while functions run. There is no charge when the app is idle. Provisioned or reserved capacity applies to other hosting options.

Question 33Compute services and application hosting models

Which Azure service runs a single container on demand without requiring you to manage VMs or a cluster?

  1. Azure Kubernetes Service
  2. Azure Container Instances Correct answer.
  3. Azure Batch
  4. Azure App Service

Explanation

Azure Container Instances provides serverless containers with per-second billing and no orchestrator or node management. It is suited to simple, short-lived, or burst workloads. Orchestration and node control are out of scope for ACI.

Question 34Compute services and application hosting models

What does placing virtual machines in an availability set protect them from?

  1. Failure of an entire Azure region and its paired region
  2. Correlated failures caused by a shared storage account
  3. Faults within a single datacenter Correct answer.
  4. Latency between the app and clients in other regions

Explanation

An availability set spreads VMs across fault domains and update domains inside one datacenter, protecting against hardware failure and planned maintenance. It does not protect against the loss of a whole datacenter; availability zones are used for that.

Question 35Compute services and application hosting models

What is the primary purpose of an Azure Virtual Machine Scale Set?

  1. To provide a managed Kubernetes control plane
  2. To run and autoscale a group of identical VMs Correct answer.
  3. To host web apps without managing infrastructure
  4. To replicate a virtual machine's disks to another region

Explanation

A scale set manages a group of identical VMs from a single model and can change the instance count automatically based on demand. It also supports load balancing and rolling upgrades across the group. Region replication and PaaS web hosting are separate services.

Question 36Compute services and application hosting models

Which Azure service hosts web apps and APIs in a fully managed PaaS environment where you select a pricing tier instead of configuring VMs?

  1. Azure Container Instances
  2. Azure Batch
  3. Azure Virtual Machines
  4. Azure App Service Correct answer.

Explanation

App Service abstracts the underlying compute; you choose a plan tier and Azure handles patching, load balancing, and OS maintenance. It supports multiple language stacks and integrated deployment features. The other options either expose VMs or target different workload shapes.

Question 37Compute services and application hosting models

In Azure Kubernetes Service, what does the managed control plane mean for the customer?

  1. The customer manages only container images and not the nodes
  2. The customer receives root access to the control plane hosts
  3. The customer patches and scales the API server and etcd themselves
  4. Azure runs the API server and etcd; the customer manages nodes Correct answer.

Explanation

AKS provisions and operates the Kubernetes control plane components, including the API server and etcd, at no node-level maintenance burden to the customer. Responsibility for agent nodes, node pools, and workload configuration stays with the customer.

Question 38Compute services and application hosting models

Which Azure service is best suited to building automated workflows that connect SaaS apps and Azure services with minimal code?

  1. Azure Virtual Machine Scale Sets
  2. Azure Kubernetes Service
  3. Azure Logic Apps Correct answer.
  4. Azure Functions

Explanation

Logic Apps is a workflow engine with hundreds of prebuilt connectors that model integration logic declaratively in a designer. It is tuned for orchestration of service-to-service steps rather than general code execution or container hosting.

Question 39Compute services and application hosting models

An app on a Standard App Service plan is CPU-bound and every request is slow. Which action increases the CPU available to each individual instance?

  1. Enable autoscale rules that add instances when CPU is high
  2. Scale out by adding more instances of the same size
  3. Scale up to a larger instance size in a higher tier Correct answer.
  4. Move the app to a different resource group and region

Explanation

Scaling up (vertical scaling) changes the plan to a tier or size with more CPU and memory per instance, which is what a per-request CPU bottleneck needs. Scaling out adds parallel instances that share traffic but do not make any single request faster.

Question 40Compute services and application hosting models

What happens during a deployment slot swap in App Service?

  1. Production is stopped while its files are copied into staging
  2. Only app settings are copied; code stays in each slot
  3. Content and routing are exchanged after the target slot warms up Correct answer.
  4. The staging slot is deleted and recreated from the production slot

Explanation

A swap applies the target slot's configuration and content to the other slot and redirects traffic, after first warming up the incoming site to avoid cold-start errors. The operation is designed to be near-zero downtime. Slot settings and content move as a unit.

Question 41Compute services and application hosting models

A function app needs pre-warmed instances, virtual network integration, and dynamic scaling. Which hosting plan should you choose?

  1. Dedicated App Service plan
  2. App Service Environment v3
  3. Premium plan Correct answer.
  4. Consumption plan

Explanation

The Premium plan keeps pre-warmed workers to avoid cold starts, supports VNet integration, and still scales dynamically (including to zero on some configurations). Consumption lacks pre-warmed instances and VNet integration, while Dedicated and ASE are fixed-capacity models.

Question 42Compute services and application hosting models

Which Durable Functions component maintains workflow state and checkpoints progress in a storage account?

  1. Entity functions
  2. Client functions
  3. Activity functions
  4. Orchestrator functions Correct answer.

Explanation

Orchestrator functions define the workflow sequence and record their progress through checkpointing, so state is persisted and the workflow can resume after a restart. Activity functions do the actual work, and client functions only start or query instances.

Question 43Compute services and application hosting models

Why would a team configure multiple node pools in an AKS cluster?

  1. To avoid paying for the cluster's managed control plane
  2. To replicate the control plane across availability zones automatically
  3. To run different workload types on different VM sizes Correct answer.
  4. To give each namespace its own API server endpoint

Explanation

Each node pool is a set of nodes with the same VM size and configuration, so separate pools let you place GPU, memory-optimized, or spot workloads appropriately. Scheduling and taints then keep workloads on the intended pool.

Question 44Compute services and application hosting models

In Azure Container Apps, what enables scaling based on the depth of a Service Bus queue?

  1. Dapr components registered in the environment
  2. KEDA scalers defined in the scale rules Correct answer.
  3. The built-in HTTP concurrency trigger
  4. Revision traffic-splitting weights

Explanation

Container Apps uses KEDA scalers to read external metrics such as queue length and translate them into replica counts, including scaling to zero. Dapr handles service invocation and pub/sub but is not the scaling engine. HTTP concurrency is only one built-in trigger.

Question 45Compute services and application hosting models

A web tier must survive the loss of a single Azure datacenter and achieve a 99.99% SLA for its VMs. What should you deploy?

  1. A single VM with premium managed disks
  2. VMs spread across availability zones in one region Correct answer.
  3. Two VMs in the same availability set
  4. VMs in a proximity placement group

Explanation

Availability zones are physically separate datacenters within a region, and spreading VMs across two or more zones raises the VM SLA to 99.99%. Availability sets only protect within one datacenter and carry a lower SLA.

Question 46Compute services and application hosting models

A VM scale set must add instances when average CPU exceeds 70 percent for five minutes. What should you configure?

  1. A scheduled scaling profile for business hours
  2. A rolling upgrade policy on the scale set
  3. Instance protection for the existing VMs
  4. Autoscale rules based on a metric threshold Correct answer.

Explanation

Autoscale on a scale set evaluates metric rules and adjusts the instance count when a threshold and time window are met. A scheduled profile changes capacity at fixed times and cannot react to a live metric.

Question 47Compute services and application hosting models

Which statement describes an App Service Environment?

  1. A slot-swap feature for multi-region deployments
  2. A shared multi-tenant plan that gives each app a dedicated IP address
  3. An isolated, dedicated App Service deployment in a VNet Correct answer.
  4. A container registry that stores App Service images

Explanation

An App Service Environment is a single-tenant, isolated deployment of App Service injected into a customer-controlled virtual network, giving full network control and higher scale limits. It is used when regulatory or network isolation requirements rule out the multi-tenant offering.

Question 48Compute services and application hosting models

Which service is designed to host a prebuilt static front end together with a serverless API and built-in GitHub continuous integration?

  1. Azure Spring Apps
  2. Azure Static Web Apps Correct answer.
  3. Azure Container Apps
  4. Azure App Service

Explanation

Static Web Apps serves static assets from a global distribution and pairs them with an Azure Functions API, with CI driven directly from a GitHub or Azure DevOps repository. It removes the need to manage a web server for the front end.

Question 49Compute services and application hosting models

Which Azure service is intended for scheduling large parallel HPC jobs across a pool of compute nodes?

  1. Azure Logic Apps
  2. Azure Functions
  3. Azure Batch Correct answer.
  4. Azure Container Instances

Explanation

Azure Batch manages pools of compute nodes, queues jobs and tasks, and automatically scales the pool to run large parallel or high-performance workloads. It handles job scheduling, retries, and node lifecycle so the application code stays simple.

Question 50Compute services and application hosting models

A team runs fault-tolerant rendering jobs and wants the lowest compute price, accepting that VMs may be evicted. Which option fits?

  1. Spot virtual machines Correct answer.
  2. Dedicated hosts
  3. Reserved instances on a three-year term
  4. Pay-as-you-go standard VMs

Explanation

Spot VMs use spare Azure capacity at a steep discount, and Azure can evict them when capacity is needed, so they suit interruptible workloads. Reserved instances and dedicated hosts trade discount for commitment or isolation and are not eviction-friendly.