Home › Certifications › Azure AZ-900 Fundamentals › Compute and Networking Services
30 multiple-choice questions and 20 flashcards on Compute and Networking Services, about 12% of the Azure AZ-900 Fundamentals bank. Every one carries a written rationale.
Compute and Networking Services is one of 7 chapters in CoStudy's Azure AZ-900 Fundamentals bank, and it holds 30 of the bank's 251 multiple-choice questions — roughly 12% of the total. That proportion is not arbitrary: chapters follow the certifying body's published exam outline, and the number of questions in each is set by that domain's published weight, so the share of your practice time this chapter takes matches the share of the real exam it accounts for.
Studying by chapter is worth doing once you have a diagnostic score. A single overall percentage tells you whether you are close; it does not tell you which domain is dragging. Working a weak chapter in isolation, and re-testing it in isolation, is the fastest way to move a score that has stalled — and it is why the mock exams in CoStudy report by domain rather than as one number.
10 questions drawn from this chapter, with the full rationale shown — the controlling principle behind the right answer, and why each wrong option tempts and fails.
Which service routes traffic globally based on DNS-level decisions?
Answer: D — Traffic Manager
A) Regional L4 LB. D) Correct — Traffic Manager is DNS-based global routing. C) Regional L7. B) Firewall.
Azure CDN provides:
Answer: C — Caching of content at edge sites close to end users
C) A content delivery network caches static content at points of presence near users, cutting latency and load on the origin. A) Cross-organisation federation is a Microsoft Entra ID capability. B) Disk encryption uses keys held in Key Vault. D) Encrypted site links come from VPN Gateway.
Which networking service connects two Azure VNets privately?
Answer: A — VNet peering
A) Correct — VNet peering connects VNets via Microsoft backbone, private. B) Public IP exposes externally. C) App Gateway is L7 LB. D) Storage is unrelated.
Azure Virtual Machines is which service model?
Answer: A — IaaS
A) Correct — VMs are IaaS. B) PaaS abstracts the OS. C) SaaS is end-user software. D) Different category.
Which Azure service is BEST for a web app that needs autoscaling, SSL, and easy deployment?
Answer: B — Azure App Service
A) VM is IaaS — requires OS management. B) Correct — App Service is PaaS for web apps; built-in autoscale, custom domains, SSL, deployment slots. C) Functions are for event-driven serverless code, not full web apps. D) ACR stores container images.
A company wants a PRIVATE dedicated connection between on-prem and Azure that doesn't traverse the public internet. They should use:
Answer: D — ExpressRoute
A) VPN Gateway is encrypted but uses public internet. D) Correct — ExpressRoute provides dedicated private fiber, bypasses public internet, more reliable/faster. C) Public IP exposes resources. B) NSG is a firewall, not a connection.
An Azure VM Scale Set is BEST used for:
Answer: B — Running identical VMs that scale out behind a load balancer
B) A scale set deploys and manages a group of identical VMs as one resource, adding or removing instances automatically behind a load balancer. A) A single large machine is just a VM. C) Shared file storage is Azure Files or Blob storage. D) Event-driven code with no servers is Azure Functions.
In a hybrid cloud, the on-prem and Azure components typically communicate via:
Answer: C — VPN Gateway or ExpressRoute
A) Public IP is a security risk and not a connectivity solution. C) Correct — site-to-site VPN or ExpressRoute connects on-prem to Azure VNets. C/D) Not connectivity options.
A hospital wants clinicians to reach a Windows desktop and its line-of-business apps from personal tablets, with the desktop image and data staying in Azure. Which service is designed for this?
Answer: D — Azure Virtual Desktop delivering pooled multi-session hosts
D) Correct — it is the managed desktop and app virtualization service, delivering multi-session Windows desktops from Azure to any endpoint while data stays centralized. B) Plain VMs could technically be reached over RDP, but that means exposing management ports and building brokering, profiles and pooling yourself. C) App Service publishes web applications, not full Windows desktops with installed clinical software. A) Container Instances runs containerized workloads; it is not a desktop delivery platform, and naming a session broker image does not change that.
Which compute option charges per execution and scales to zero when idle?
Answer: D — Azure Functions on the consumption plan, billed per run
D) The consumption plan bills executions and resource consumption, and idle apps scale to zero so nothing accrues. A) A running VM bills for its uptime regardless of traffic. B) AKS agent nodes are billed as VMs while they exist. C) A premium App Service plan reserves instances at fixed cost.
4 cards from the 20 in this chapter.
What is virtual network peering, and what does it not provide?
Peering connects two virtual networks so resources communicate privately over the Microsoft backbone using private IP addresses, as if they were on one network. It is not transitive by default — if A peers with B and B peers with C, A cannot reach C without its own peering or a hub gateway.
Azure VPN Gateway?
Encrypted connection between on-prem network and Azure VNet over public internet.
What do Azure Virtual Machine Scale Sets provide?
A group of identical, load-balanced virtual machines that can be created and managed as one unit, with automatic increase or decrease of instance count based on demand or a schedule. They are the mechanism for horizontal scaling of VM workloads.
Azure Virtual Machine (VM)?
IaaS — full Windows/Linux VM. You manage OS + apps. Provider manages hypervisor/hardware.
These are a sample. The full Compute and Networking Services chapter runs 50 items with per-chapter progress tracking, on the web and in the iOS app.
Open Azure AZ-900 Fundamentals in CoStudy →