Azure compute is where AZ-900 turns vocabulary into choices: given a requirement, name the service. The fast way to keep them straight is a single axis — how much you manage versus how much Microsoft manages — and the diagram above lays the main services out on exactly that ladder, most control at the top, least management at the bottom.
The ladder, top to bottom
Azure Virtual Machines sit at the top. This is infrastructure as a service: you get a full operating system, install what you like, and patch on your own schedule. Maximum control, maximum responsibility. The exam tell is any phrase about controlling or patching the operating system — that is a VM.
Azure App Service sits in the middle. It is a managed platform (PaaS) for hosting web apps and APIs. You deploy your code; Microsoft runs the servers, the OS and the patching. The tell is “host a web app without managing servers.”
Azure Functions sits at the bottom. It is serverless and event-driven: your code runs on a trigger, and you pay per execution with nothing charged while idle. The tell is “runs on an event, pay only when it runs.”
That is the whole spine. Move down the ladder and control drops while convenience and cost-efficiency-for-intermittent-work rise.
The containers side note
Containers are a parallel track for portable, consistent deployments, and the exam tests two by name:
- Azure Container Instances (ACI) — run a single container fast, with no cluster to set up. Best for simple or short-lived jobs.
- Azure Kubernetes Service (AKS) — orchestrate many containers across a cluster, with automatic scaling and self-healing. The trigger word is “orchestration at scale.”
One container, no cluster → ACI. Many containers, managed at scale → AKS.
Scaling identical VMs
One more service the exam likes: Virtual Machine Scale Sets. When you need a group of identical VMs behind a load balancer that add and remove instances automatically as demand changes, that is Scale Sets — not a single bigger VM, and not App Service.
How to read a compute question
Almost every compute question is a requirement in disguise. Match the phrase to the service:
- “full control of the OS / install software / patch yourself” → Virtual Machines
- “host a web app, no servers to manage” → App Service
- “runs on a trigger, pay per execution” → Functions
- “a single container, no cluster” → Container Instances
- “orchestrate containers at scale” → Kubernetes Service
- “many identical VMs that scale automatically” → Scale Sets
Use the questions below
Answer each one before you reveal the explanation, and when you miss, read past the correct answer to why the other options are wrong — the distractors here are the right-sounding service for the wrong requirement. Getting the match right, not just the name, is what carries into the exam. For the wider picture, see the Azure Architecture & Services domain and the AZ-900 cheat sheet.
Updated for AZ-900 (July 2026). The sample questions above are our own work
in the style of the exam — not real exam items. The exam itself is set and marked
by the certification body.