AZ-900 — Frequently Asked Questions
Community-vetted answers to 16 common questions about this exam.
Questions from real practice questions
Each Q&A comes from a specific community question — follow the link for its full analysis.
Shared Responsibility in Azure SaaS
In SaaS, Microsoft handles all platform security, so the customer retains 100% responsibility for their own data governance and classification.
No, operating system updates are fully managed by Microsoft in SaaS. The customer never touches the underlying infrastructure or OS layer.
Accessing Azure Cloud Shell via Web Browser
No. Visual Studio is a local IDE. While it has Azure extensions, it does not host the browser-based Cloud Shell environment directly.
No. ARM is the management plane. You use Cloud Shell (via browser) to deploy and manage resources via ARM templates or CLI commands.
Azure Resource Locks for RG Protection
No, locks must be explicitly applied to each resource. However, applying them to the RG is often used as a management shortcut in exam scenarios.
RBAC allows granular permissions but does not provide a single, immediate 'block all writes' action like a lock does for this specific scenario.
Azure Resource Locks for Storage Containers
Soft Delete retains deleted data for recovery but does not block the deletion operation itself. A Delete lock explicitly blocks the permission to delete.
Yes, locks can be applied to individual resources, but applying it to the storage account covers all its containers automatically.
Creating Azure VMs from Android Tablet
No. The Settings app manages local device configurations and does not have built-in capabilities to interact with Azure infrastructure APIs.
PowerApps is a platform for building business applications, not for managing cloud infrastructure resources like virtual machines.
Lift-and-Shift Migration to Cloud Service Type
PaaS often requires application refactoring to leverage platform services, whereas lift-and-shift aims to move workloads with minimal to no code changes.
It means moving existing on-premises servers or applications to the cloud with little or no modification, typically using IaaS virtual machines.
Microsoft 365 Cloud Service Model Classification
No. Although it runs on Azure infrastructure, the user consumes the finished application, not the platform for building apps. That makes it SaaS.
Azure VMs are IaaS where you manage the OS and apps. M365 is SaaS where Microsoft manages everything and you just use the software.
Azure Cost Optimization with Azure Advisor
No, Azure Advisor provides recommendations that require manual approval and implementation by the user or administrator.
No, the Pricing Calculator estimates costs for new projects. Advisor analyzes existing resources to find waste and suggest reductions.
Ready to practice?
Access 90 AZ-900 questions with instant feedback and detailed explanations.
View AZ-900 Practice Questions →