Home › Certifications › Azure AZ-900 Fundamentals › Deployment Tools and Monitoring
43 multiple-choice questions and 6 flashcards on Deployment Tools and Monitoring, about 17% of the Azure AZ-900 Fundamentals bank. Every one carries a written rationale.
Deployment Tools and Monitoring is one of 7 chapters in CoStudy's Azure AZ-900 Fundamentals bank, and it holds 43 of the bank's 251 multiple-choice questions — roughly 17% of the total. That proportion is not arbitrary: chapters follow the certifying body's published exam outline, and the number of questions in each is set by that domain's published weight, so the share of your practice time this chapter takes matches the share of the real exam it accounts for.
Studying by chapter is worth doing once you have a diagnostic score. A single overall percentage tells you whether you are close; it does not tell you which domain is dragging. Working a weak chapter in isolation, and re-testing it in isolation, is the fastest way to move a score that has stalled — and it is why the mock exams in CoStudy report by domain rather than as one number.
10 questions drawn from this chapter, with the full rationale shown — the controlling principle behind the right answer, and why each wrong option tempts and fails.
Azure Resource Manager templates are PRIMARILY used for:
Answer: D — Declarative, idempotent definitions of infrastructure to deploy
D) Correct — a template describes the desired end state, so redeploying it repeatedly converges on the same result. A) Templates are declarative rather than step-by-step. B) That is Azure Key Vault. C) That is the query language used over log data.
Which pairing of Azure Monitor data types is correct?
Answer: A — Metrics are numeric time-series values; logs are queryable records
A) Correct — Azure Monitor collects lightweight numeric metrics suited to near-real-time charting and alerting, plus richer log records analyzed with queries. B) A direct reversal of the two data types, and a very common mix-up. C) They are distinct stores with different shapes, retention and query models. D) Both data types come from a wide range of Azure, hybrid and application sources.
Azure Arc is BEST described as a service that:
Answer: B — Manages servers and Kubernetes clusters outside Azure as ARM resources
B) Correct — Arc projects machines and clusters running elsewhere into Azure Resource Manager so policy, tags and monitoring apply to them. A) That is Azure Migrate. C) That is ExpressRoute. D) That is Azure Virtual Desktop.
Azure Cloud Shell offers:
Answer: B — A browser-hosted shell with Azure CLI and Azure PowerShell installed
B) Correct — Cloud Shell runs an authenticated Bash or PowerShell session in the browser with the tooling already present. A) A local install is the separate CLI download. C) That is a storage tier. D) That is a VM series.
A team must find every failed sign-in to a set of servers over the past week and chart the result by hour. Which capability is designed for that analysis?
Answer: D — A log query run against the Log Analytics workspace
D) Correct — record-level questions with filtering, aggregation and time bucketing are precisely what the log query language over collected logs is built for. A) Metric explorer handles pre-aggregated numeric series and cannot filter on the detail inside individual event records. B) Advisor produces recommendations rather than answering ad hoc analytical questions. C) Service Health reports platform incidents affecting your subscription, not guest sign-in events.
Which description of the Azure CLI is MOST accurate?
Answer: D — A cross-platform command-line tool using az <group> <command>
D) Correct — the CLI is cross-platform and follows the az noun-verb command structure, which makes it easy to script from Linux, macOS or Windows. B) It is neither Windows-only nor graphical; that description leans on an outdated mental model. C) Declarative desired-state description is what ARM templates do; the CLI is imperative. A) No such record-and-replay extension exists, so this is an invented capability.
An engineer is working from a locked-down laptop where installing software is prohibited, but must run a short script against Azure. Which option is the MOST practical?
Answer: C — Launch Cloud Shell from the browser and run the script there
C) Correct — Cloud Shell exists for exactly this case: an authenticated shell with tooling already present, reachable from a browser with no local install. A) The portal's template editor deploys declarative templates and cannot run an arbitrary script. B) Rewriting an imperative script as a template is a large detour that changes the tool rather than solving the constraint. D) Running a container is still installing software on a machine where installs are prohibited.
A regional Azure storage incident is affecting a customer's application. Which service gives the customer a personalized view of the incident and its impact on their resources?
Answer: C — Azure Service Health events
C) Correct — Service Health tailors service issues, planned maintenance and health advisories to the subscriptions and regions the customer actually uses. A) Application Insights shows how the application itself is behaving but attributes nothing to an Azure platform incident. B) Advisor offers best-practice recommendations and is not an incident feed. D) Policy reports configuration compliance and has no awareness of platform outages.
Azure Advisor provides:
Answer: A — Personalised recommendations across five improvement categories
A) Correct — Advisor analyses your configuration and usage, then recommends improvements across cost, security, reliability, performance and operational excellence. B) Cost is only one of its categories. C) That is Service Health. D) That is Azure Update Manager.
Which statement about Azure Resource Manager is MOST accurate?
Answer: A — It is the management layer that handles resource requests
A) Correct — Resource Manager is the consistent management layer through which the portal, CLI, PowerShell and SDKs all create, update and delete resources. B) Telemetry storage and analysis is Azure Monitor's role. C) Charges are calculated by the commerce platform and surfaced through cost management, not by Resource Manager. D) Authentication is handled by Microsoft Entra ID, which Resource Manager relies on but does not replace.
3 cards from the 6 in this chapter.
Distinguish the Azure portal, Azure Cloud Shell, the Azure CLI and Azure PowerShell.
The portal is a browser-based graphical console for exploring and configuring resources. Cloud Shell is a browser-hosted, authenticated shell requiring no local installation. The Azure CLI is a cross-platform command-line tool with its own command syntax; Azure PowerShell is a set of cmdlets for the PowerShell language. CLI and PowerShell are functionally equivalent — choose by the language your team already uses.
What is a Log Analytics workspace, and how is data queried in it?
It is the store for log and performance data collected by Azure Monitor Logs from Azure, on-premises and other-cloud resources. Data is queried with Kusto Query Language to correlate events, build visualisations and drive alert rules.
What is infrastructure as code, and what makes an ARM template suited to it?
Infrastructure as code defines environments in version-controlled files that are deployed repeatably instead of configured by hand. ARM templates are declarative JSON — you state the desired end result rather than the steps — and Azure Resource Manager applies them idempotently, so redeploying the same template converges the environment to the same state.
These are a sample. The full Deployment Tools and Monitoring chapter runs 49 items with per-chapter progress tracking, on the web and in the iOS app.
Open Azure AZ-900 Fundamentals in CoStudy →