AI finds your gaps, picks your next session, and drills only those. No syllabus to decode.
We refund every penny if you do not pass.
280
Practice questions
3
AZ-900 domains
60
Real exam questions
May 2026
Last reviewed
AZ-900 · 60 questions · 65 min · passing score 700/1000
The real reason candidates miss AZ-900
AZ-900 questions often give four answers that all sound cloud-friendly. The exam tests whether you know exactly which responsibility moves to Microsoft and which still stays with you. AnyCert trains that line.
A company moves its web application to a managed PaaS offering. Under the shared responsibility model, which responsibility most likely shifts to the provider?
Patching and securing the platform runtime and underlying host infrastructure, while the customer still secures application code and data.
PaaS moves the runtime and host layer to Microsoft, but not your app logic or your data decisions.
Securing the application code and sensitive data because the provider now owns the full stack.
Classic overreach trap. Managed platform does not mean Microsoft now owns your business logic or data handling.
Managing the customer's internal network segmentation and employee access control policies inside the corporate LAN.
This blurs cloud scope with the customer's own network and workforce controls. That boundary does not move in PaaS.
Taking legal responsibility for compliance reporting and any future data breach involving the workload.
Provider controls support compliance, but accountability does not transfer wholesale.
The pattern
AZ-900 drills boundary questions. Three answers sound modern and managed. Only one respects exactly what shifts under the shared responsibility model.
Sample questions
Every answer review is built to explain the correct choice, the trap answer, and the next study move.
A company uses a cloud‑based email suite. Under the shared responsibility model, who patches the underlying server operating systems?
A. The customer is always responsible for OS patching.
B. The cloud provider is responsible for OS patching.
C. Responsibility is shared, but the customer manages OS patches.
D. It depends on the service level agreement (SLA).
In SaaS, the cloud provider is responsible for OS patching and all underlying infrastructure.
An organization must store petabytes of rarely accessed unstructured data with high durability, low cost, and availability within minutes. Which Blob Storage tier is most cost‑effective?
The Cool tier balances lower storage costs with quick retrieval (minutes), making it ideal for infrequently accessed data that still needs prompt availability.
A company needs to deploy identical development environments to many subscriptions. Each environment must contain a virtual network with predefined subnets, a key vault with specific access policies, and a set of monitoring alerts. They also need to know which version of the deployment package created each environment and be able to roll back if required. Which Azure service should they use?
Azure Blueprints packages artifacts (templates, policies, RBAC) together, supports versioning, tracks which blueprint version was applied, and enables updates or rollbacks across subscriptions.
Full access
The AZ-900 exam is ${examCost}. AnyCert annual is {yearlyPrice} - and if you do not pass, every penny back.
Try it first
$0
Use the readiness diagnostic and sample questions before you commit.
Most flexible
$29.99
Best when you need active prep without a long commitment.
Save 44%
$199.99
Lowest effective cost, full access, and the strongest value if you want margin.
Free
Monthly
Annual
Your plan
Most AZ-900 prep wastes time on broad review. AnyCert turns it into a focused 3-4 week path and keeps the next session obvious.
We’ll route you into a plan sized to the days you actually have — 7-day urgent, 14-day standard, or 4+ weeks.
Compressed: works if you already know the subject and need exam-format training
AI tutor
The tutor keeps the current question, your answer, and the correct explanation in view so follow-up questions stay grounded.
Question 12 - Describe Cloud Computing
A company moves its web application to a managed PaaS offering. Which responsibility shifts to the provider?
Your answer: Microsoft now secures the app code and the data.
Correct: Microsoft secures the platform runtime and host layer.
But if it is managed PaaS, why am I still responsible for the app and the data?
Because PaaS removes server and runtime work, not application ownership. Microsoft runs the platform. You still choose what the app does, who can use it, and how the data is protected.
So what is the quick rule for AZ-900?
Move up the stack, and Microsoft owns more infrastructure. But identity, data, and application behavior stay with you unless the service says otherwise.
Content trust
Foundations exams still punish fuzzy thinking. Here is what is actually in the bank.
Mapped to all 3 AZ-900 domains
Describe Cloud Computing, Describe Azure Architecture and Services, and Describe Azure Management and Governance. The bank stays inside the current fundamentals blueprint.
60-question, 65-minute exam shape
The bank trains the short-stem decisions AZ-900 actually asks: shared responsibility, service models, governance, pricing, and Azure service fit.
280 current practice questions
You get 280 AZ-900 questions with the exact boundaries the exam tests, not a generic Azure glossary.
Why-right / why-wrong explanations
Every explanation names the boundary Microsoft owns and the boundary you still own. That is the judgment the exam checks.
For teams
Cloud onboarding cohort or IT team moving into Azure? Invoiced billing, seat management, and SSO on request - same refund per seat.
The five questions candidates actually ask before buying AZ-900 prep.
Start Session 0 in 5 minutes. No card required.
100% money back if you do not pass.
