Free AZ-900 full-length practice exam: sit the real thing

The real AZ-900 gives you about 60 minutes for roughly 50 questions — about a minute each, mixed across all three domains. Here are 10 to feel the format. 2026 edition.

Try 10 free AZ-900 questions in the exam's own timed style, mixed across all three domains — every answer explained, no sign-up — and feel what a full-length exam is like.

Straight to the 10 free questions ↓

The real AZ-900 is about 50 questions in roughly 60 minutes, mixed across all three domains, with interactive formats — standard multiple choice, true/false, and drag-and-drop — alongside plain single-answer questions. A full-length practice exam recreates that: the pacing, the domain switching, the stamina of sitting the whole thing without stopping. These ten questions are a free sample of that format, so you can feel it before you commit to a full run.

What a full-length run trains that drills don’t

Topic drills test knowledge one subject at a time. A full-length exam adds two things on top: pacing and mixed-domain switching. At about one minute per question the AZ-900 is not a sprint, but a full sitting still exposes habits a short quiz hides — second-guessing right answers, drifting in the last stretch, or sinking three minutes into a question that deserved forty seconds. And because the questions jump between Cloud Concepts, Azure Architecture and Services, and Azure Management and Governance, you practise resetting your mind from a pricing question to a networking one to a policy one — the real rhythm of exam day.

The domain mix

The blueprint weights each domain as a range: Cloud Concepts 25–30%, Azure Architecture and Services 35–40%, and Azure Management and Governance 30–35%. The diagram above shows that spread laid out along a single 60-minute strip, ending in a readiness-check flag. This sample of ten deliberately reaches across all three — from framework ideas like Well-Architected and Cloud Adoption, through services like Azure Virtual Desktop, storage redundancy, and the CDN, to governance guardrails like resource locks, security defaults, and Microsoft Purview. If a name here is new to you, that is the sample doing its job: showing a gap while it is still cheap to close.

How to sit it, and how to read the result

Sit a full-length exam under real conditions: no notes, no pausing, one timer. Answer every question — there is no penalty for a wrong guess, so never leave a blank. Flag the ones you are unsure of and move on rather than stalling.

Then read the result properly. The score matters, but two other signals matter more. First, pacing: did you finish with time to spare, or run out? Second, your explanations: for every question you got right, could you say why the other three options were wrong? If you cannot, that answer was a lucky guess, and luck does not repeat on exam day.

Diagnostic first, full-length near the end

Do not confuse the two. The 50-question diagnostic is where you start — it surfaces your weak domains early so your study time goes where it counts. A full-length exam is where you finish — a readiness check that confirms you can hold pace and accuracy across the whole blueprint. When you can clear a full timed run comfortably and explain your wrong answers, you are ready. The exam-day notes cover the rest of the logistics.

Answer each question below before you reveal the explanation, and when you miss, read past the correct option to why the others fail.

A timed AZ-900 exam strip: roughly 50 questions in about 60 minutes, near a minute each, mixed across the three weighted domains — Cloud Concepts 25 to 30 percent, Azure Architecture and Services 35 to 40 percent, and Azure Management and Governance 30 to 35 percent — ending in a readiness-check flag. The ten free questions here sample that format.

10 free AZ-900 practice questions

Answers and explanations — no email wall

AZ-900 Question 1 of 10

An architecture review board wants a common set of design principles — reliability, security, cost, operational excellence, and performance — to judge every new Azure workload against. Which Microsoft framework provides those five pillars?

Answer: A — The Azure Well-Architected Framework

The Azure Well-Architected Framework defines five pillars — Reliability, Security, Cost Optimization, Operational Excellence, and Performance Efficiency — for judging the design quality of a single workload. Why not the others: the Cloud Adoption Framework guides the whole move to the cloud, not per-workload design; Advisor gives live recommendations on resources you already run; Policy enforces configuration rules. Pro tip: Well-Architected = design one workload well; Cloud Adoption = adopt the cloud overall.

AZ-900 Question 2 of 10

A student asks why Microsoft Azure can offer computing power more cheaply than most companies could running their own servers. Microsoft buys hardware and electricity at enormous volume and passes some of the savings on. Which cloud benefit is this?

Answer: A — Economies of scale

Buying at massive volume lowers the cost per unit, and the cloud provider shares those savings — that is economies of scale. Why not the others: high availability is about staying online; elasticity is scaling capacity up and down with demand; fault tolerance is surviving a component failure. 'Cheaper because it is huge' is economies of scale.

AZ-900 Question 3 of 10

A company is planning its entire move to Microsoft Azure — strategy, planning, landing zones, migration, and ongoing governance — and wants end-to-end guidance for that journey rather than a score for one workload's design. Which framework fits?

Answer: A — The Microsoft Cloud Adoption Framework (CAF)

The Cloud Adoption Framework is Microsoft's guidance across the whole adoption lifecycle — strategy, plan, ready, migrate, govern. Why not the others: the Well-Architected Framework scores an individual workload's design; Azure Blueprints packaged artifacts to deploy an environment (and is being retired); Microsoft Learn is training content. Pro tip: 'journey/adoption' points to CAF; 'one workload's quality' points to Well-Architected.

AZ-900 Question 4 of 10

A firm wants staff to sign in from personal laptops and get a full Windows desktop and their apps hosted in Azure, with nothing sensitive left on the local device. Which Azure service delivers cloud-hosted desktops?

Answer: A — Azure Virtual Desktop

Azure Virtual Desktop delivers virtualized Windows desktops and apps from Azure, so users work in the cloud and data stays off the endpoint. Why not the others: plain Virtual Machines give you servers to manage, not a managed multi-user desktop experience; App Service hosts web apps and APIs; Bastion provides secure browser-based RDP or SSH to a VM, not a desktop offering.

AZ-900 Question 5 of 10

A team needs the cheapest redundancy for temporary data that is easy to recreate. They only need protection against a single disk or server-rack failure inside one datacenter — no zone or regional protection required. Which storage redundancy option fits?

Answer: A — Locally redundant storage (LRS)

Locally redundant storage keeps three copies within a single datacenter — the cheapest option, protecting only against drive or rack failure. Why not the others: ZRS spreads copies across availability zones in a region (more protection, more cost); GRS and RA-GRS replicate to a second region entirely. Pro tip: cheapest and 'one datacenter is fine' means LRS.

AZ-900 Question 6 of 10

A media site's users worldwide complain that images and video load slowly from the single region where the app is hosted. The team wants those static files cached at edge locations near each user. Which Azure service does this?

Answer: A — Azure Content Delivery Network (CDN)

Azure CDN caches static content at edge nodes close to users, cutting latency for global audiences. Why not the others: Load Balancer spreads traffic across VMs within a region and does no caching; Traffic Manager is DNS-based routing across regions; ExpressRoute is a private connection into Azure. 'Cache files at the edge for speed' is the CDN.

AZ-900 Question 7 of 10

An enterprise running production workloads needs the fastest Microsoft support response, 24x7 technical help, and support for the most urgent cases. Which Azure support plan is the appropriate top-tier choice?

Answer: A — Professional Direct

Professional Direct is the top general support plan — 24x7 coverage with the fastest response commitments for critical production cases. Why not the others: Basic is free and includes no technical case support; Developer suits trial and non-production work during business hours; Standard adds 24x7 but with longer response targets than Professional Direct. Pro tip: learn the order low to high — Basic, Developer, Standard, Professional Direct.

AZ-900 Question 8 of 10

An administrator must ensure a critical production resource group cannot be deleted by accident — even by someone who holds the permission to delete it — without changing anyone's role assignments. Which Azure feature does this?

Answer: A — A CanNotDelete resource lock

A resource lock — CanNotDelete or ReadOnly — blocks the action for everyone regardless of their RBAC role, which is exactly the accidental-deletion guardrail described. Why not the others: Azure Policy governs what can be created or how it is configured, not delete-protection like this; stripping people's RBAC would remove permissions they legitimately need; a tag is only metadata and enforces nothing. Pro tip: a lock overrides permissions — even an Owner is stopped.

AZ-900 Question 9 of 10

A small company with no dedicated security team wants a free, single-switch baseline in Microsoft Entra ID that requires multi-factor authentication for all users and blocks legacy authentication — with no custom policies to build. Which feature should they enable?

Answer: A — Security defaults

Security defaults is a free, tenant-wide baseline you toggle on to enforce MFA and block legacy authentication with no configuration. Why not the others: Conditional Access gives granular, custom rules but requires setup and a premium license; PIM manages just-in-time access to privileged roles; a resource lock protects resources, not sign-ins. 'Free one-switch MFA baseline' is security defaults.

AZ-900 Question 10 of 10

A data team needs to catalog, classify, and govern data spread across Azure, on-premises, and other clouds — knowing where sensitive data lives and who may use it. Which Microsoft service is built for unified data governance?

Answer: A — Microsoft Purview

Microsoft Purview provides unified data governance — discovering, classifying, and cataloging data across the whole estate. Why not the others: Defender for Cloud handles security posture and threat protection; Azure Monitor collects metrics and logs about how resources are performing; Advisor gives best-practice recommendations. 'Govern and classify the data itself' is Purview.

That is exactly how every question in the course works — answer, explanation, why-not. The real set continues in the practice player: 10 free questions, no sign-up.

Continue with the 10 free questions →

Those 10 questions were the start.

The exam does not test whether you recognise a term — it tests whether you can rule out three plausible answers under time pressure. That is what the explanations above are for, and there are 300 more questions built exactly like them.

Collecting questions yourself

Scattered across forums, of unknown age
Answer keys without reasoning
No idea which domain you are weak in

Practising with a system

300 questions in 6 full tests, AZ-900 (2026)
Every option explained — including the wrong ones
Readiness per exam domain, and drills for your weakest

Start free — 10 questions

Straight into the player. No account, no email.

Frequently asked questions

How long is the real AZ-900, and why only ten questions here?

The real AZ-900 gives you about 60 minutes for roughly 50 questions — close to a minute each, mixed across the three domains. These ten are a free sample of that format so you can see the pacing and the mix. The full timed 50-question exams, scored at the end, are in the course.

Should I start with a full-length exam or a diagnostic?

Start with the diagnostic. A diagnostic is for finding gaps early, so you know what to study; a full-length exam is a readiness check you sit near the end, under time, to confirm you can hold pace across all three domains. Diagnose first, then prove readiness.

Are these real exam questions?

No. They are our own questions, written in the style and difficulty of the exam. Reproducing real exam items breaks Microsoft's certification agreement and can get your certification revoked — and a leaked item teaches you nothing about the one you have not seen.

Updated for AZ-900 (July 2026). The sample questions above are our own work in the style of the exam — not real exam items. The exam itself is set and marked by the certification body.