AZ-900 Practice Test: How to Take One That Predicts Your Real Score

An AZ-900 practice test predicts your real result only if it is timed, uses questions you have not seen, and is scored by domain. The exam passes at a scaled 700 out of 1,000, not a fixed percentage, so aim for roughly 85 percent on fresh questions, with no weak domain, before you book.

Most people take a practice test, see a number, and either relax too early or panic for no reason. The number alone says little. What matters is how closely the test imitates the real exam, what you did with the questions you missed, and whether the score holds up on a second, different set. This page covers what the real exam looks like, then gives you a ten-question diagnostic to try, then a method to read the result. If you want a bigger pool afterwards, our free AZ-900 practice questions post has a longer timed set, and the AZ-900 practice exam has the full bank.

What does the real AZ-900 exam look like?

Everything below comes from Microsoft's own pages, so it is worth checking against them before exam day. Microsoft updates these pages without notice.

Microsoft does not list the question formats you will meet in advance. Its exam-experience page shows that exams can include multiple choice, drag and drop, hot area, build list and case studies, and it points to the free exam sandbox so you can try the interface. Use the sandbox once. Knowing where the timer, the review screen and the mark-for-review button sit removes a surprising amount of stress. Microsoft also says its own free practice assessment shows the style and difficulty of questions but contains examples, not exam items.

Two details change how you should practice. First, some exam questions are unscored while Microsoft gathers data, and you cannot tell which, so treat every question as live. Second, if you start an unscheduled break, you cannot return to questions you saw before it, which is why a practice routine should finish and review everything in one pass.

What does a score of 700 actually mean?

It means you cleared a standard that Microsoft set by reviewing how hard the questions are. Microsoft's scoring page says a scaled score of 700 "may not equal 70% of the points" and explains that easier question sets need more points to pass while harder sets need fewer. So there is no official percent-correct that passes AZ-900, and anyone who tells you the exact raw percentage is guessing.

The score report also gives only an overall number plus a bar chart per skill area, and the chart cannot be used to work out how many questions you got right in a section. That is why a good practice test should report your result by domain yourself. The score you track in practice is a proxy, and the useful signal is where your misses cluster. Details are on Microsoft's exam scoring and score reports page.

Which AZ-900 domains carry the most weight?

Microsoft's study guide lists the skills measured as of July 20, 2026. The change log marks only minor edits to compute and networking, deployment tools and monitoring. If you studied from older material, read our AZ-900 exam topics breakdown to see what each bullet means.

Weights: Microsoft Exam AZ-900 study guide, skills measured as of July 20, 2026. The last column is our own rounding for building a balanced practice set.

Notice that the middle domain is the largest, and it is also the one with the most separate service names to keep straight. Governance is close behind and is where beginners often lose points on near-identical tools such as Azure Policy, RBAC and resource locks. That is why a flat percentage is misleading: scoring 90% on cloud concepts and 55% on governance averages out to a comfortable-looking number that still fails.

Try a 10-question AZ-900 self-diagnostic

These ten questions are original and each answer was checked against the Microsoft Learn page linked in its explanation. Set a timer for ten minutes, write your answers on paper first, then open each answer. Count your score per domain, not just in total.

1. Question 1 · Cloud concepts

   Contoso runs a line-of-business app on Azure virtual machines (IaaS). Who is responsible for installing operating system security updates on those VMs?

   • A.Microsoft
   • B.Contoso
   • C.Microsoft and Contoso equally
   • D.It depends on the Azure region
   Show answer and explanation

   Answer: B. Contoso

   In IaaS the customer owns the operating system layer. Microsoft takes over the OS only in PaaS and SaaS. Microsoft always keeps the physical hosts, network and datacenter. See the responsibility matrix on Shared responsibility in the cloud.

2. Question 2 · Cloud concepts

   A startup stops buying servers and instead pays Azure for the compute it uses each month. Which change in spending does this describe?

   • A.From capital expenditure (CapEx) to operational expenditure (OpEx)
   • B.From operational expenditure to capital expenditure
   • C.From variable costs to a fixed annual license
   • D.From usage-based billing to hardware depreciation
   Show answer and explanation

   Answer: A. From capital expenditure (CapEx) to operational expenditure (OpEx)

   The consumption-based model replaces large up-front hardware purchases with pay-for-what-you-use charges, which accountants treat as OpEx. It is covered in the Describe cloud computing module on Microsoft Learn.

3. Question 3 · Cloud concepts

   A team wants to publish a web application without managing virtual machines or operating systems. Which cloud service type are they choosing?

   • A.Infrastructure as a service (IaaS)
   • B.Software as a service (SaaS)
   • C.Platform as a service (PaaS)
   • D.A private cloud
   Show answer and explanation

   Answer: C. Platform as a service (PaaS)

   PaaS lets you deploy your own code without managing VMs or the OS. Microsoft Learn lists Azure App Service as a PaaS example. SaaS would be a finished application you only use, such as Microsoft 365 (same shared responsibility page).

4. Question 4 · Architecture and services

   Which Azure feature protects a workload from the failure of a single datacenter by spreading it across physically separate locations in one region, each with independent power, cooling and networking?

   • A.Region pairs
   • B.Resource groups
   • C.Azure Advisor
   • D.Availability zones
   Show answer and explanation

   Answer: D. Availability zones

   Availability zones are separated groups of datacenters inside a region with independent power, cooling and networking, so one zone failing does not take the others down. See What are Azure availability zones? Zones do not protect against a full-region outage.

5. Question 5 · Architecture and services

   An organization has 12 Azure subscriptions and wants to assign one Azure RBAC role once so that it applies to all of them. What should it use?

   • A.A resource group
   • B.A management group
   • C.A tag
   • D.A resource lock
   Show answer and explanation

   Answer: B. A management group

   Management groups sit above subscriptions, and a role assignment on one inherits down to every subscription beneath it. A resource group only scopes resources inside a single subscription. Source: Organize your resources with management groups.

6. Question 6 · Architecture and services

   A storage account must keep its data durable even if an entire Azure region becomes unavailable. Which redundancy option meets the requirement?

   • A.Geo-redundant storage (GRS)
   • B.Locally redundant storage (LRS)
   • C.Zone-redundant storage (ZRS)
   • D.The archive access tier
   Show answer and explanation

   Answer: A. Geo-redundant storage (GRS)

   GRS copies data to a secondary region hundreds of miles away. LRS and ZRS keep all copies in the primary region, so a region-wide outage defeats them. The archive tier is an access tier (cost and latency), not a redundancy setting. See Data redundancy in Azure Storage.

7. Question 7 · Architecture and services

   Users should be asked for multifactor authentication only when they sign in from outside the corporate network. Which service should you configure?

   • A.Azure Policy
   • B.Azure role-based access control (RBAC)
   • C.Microsoft Entra Conditional Access
   • D.Resource locks
   Show answer and explanation

   Answer: C. Microsoft Entra Conditional Access

   Conditional Access is an if-then policy engine: if a sign-in matches signals such as user, location or device, then require an action such as MFA. RBAC decides what a signed-in user may do, not how they authenticate. See Microsoft Entra Conditional Access.

8. Question 8 · Management and governance

   A company wants to guarantee that resources can only be deployed to approved Azure regions, no matter who performs the deployment. Which service should it use?

   • A.Azure RBAC with the Reader role
   • B.Resource tags
   • C.A CanNotDelete lock
   • D.Azure Policy
   Show answer and explanation

   Answer: D. Azure Policy

   Azure Policy evaluates resource properties against rules, and the built-in Allowed Locations definition uses a Deny effect to block deployments outside the list. Tags only label resources, and locks stop deletion or modification, not placement. See Overview of Azure Policy.

9. Question 9 · Management and governance

   An administrator wants authorized users to keep changing the settings of a production resource but never be able to delete it. Which should be applied?

   • A.A CanNotDelete lock
   • B.A ReadOnly lock
   • C.A resource tag
   • D.A Reader role assignment
   Show answer and explanation

   Answer: A. A CanNotDelete lock

   With CanNotDelete, authorized users can read and modify a resource but cannot delete it. ReadOnly also blocks updates, which is stricter than the requirement. See Lock your Azure resources.

10. Question 10 · Management and governance

    Which service gives you personalized alerts about Azure outages, planned maintenance and health advisories that affect the services and regions you actually use?

    • A.Azure Advisor
    • B.Azure Service Health
    • C.The Azure pricing calculator
    • D.Azure Arc
    Show answer and explanation

    Answer: B. Azure Service Health

    Service Health offers a personalized view of the Azure services and regions you use, with alerts for outages, planned maintenance and advisories. The public Azure status page is global, not personalized. See What is Azure Service Health?

Ten questions is a very small sample. A single question moves your result by ten percentage points, so treat this as a spot check, not a forecast. Its real job is to show you which domain to open next in the AZ-900 study guide or the one-page AZ-900 cheat sheet.

How should I read my AZ-900 practice score?

Microsoft publishes no official conversion from practice percent to exam result, so the thresholds below are our own guidance, built from how the scoring works rather than from any Microsoft figure. They assume a full-length, timed set of questions you have never seen.

Three rules make the number trustworthy. Use a fresh set each time, because a repeated set rewards memory. Check every domain, and do not book while any single domain sits under about 70 percent, since small domains can score zero on the real report. Finally, count a correct answer you guessed as a miss in your notes, because a lucky guess will not repeat on exam day.

What is a good AZ-900 mock exam routine?

1. Simulate the clock. The exam gives 45 minutes, and with 40 to 60 questions that works out to roughly 45 to 65 seconds each. Give yourself the same pace, with no notes, no search and no pausing.
2. First pass: answer everything. There is no guessing penalty, so never leave a blank. Flag anything you would not bet on.
3. Second pass: flagged items only.Reread the stem for qualifiers such as "minimize cost" or "without managing servers", which usually separate IaaS from PaaS and Policy from RBAC.
4. Review untimed, same day. For every miss, write one sentence on why the right answer is right and why your pick was wrong. A miss you cannot explain is a topic, not a question.
5. Tally by domain. Use the table above. Spend the next study block on the lowest domain only.
6. Wait, then retest on fresh questions. A day or two apart works better than back to back. Ready means two clean fresh sets, as in the previous section.

If you are unsure how long to prepare before starting this loop, see how long to study for AZ-900, and for the broader plan around it read how to pass AZ-900 on your first try.

What mistakes make a practice test misleading?

• Retaking the same set. After the second pass you are measuring recall of option letters. Rotate to unseen questions.
• Chasing the total. An 80% total can hide a 50% domain. Always split by domain.
• Skipping the explanations. A test that only gives right or wrong teaches little. The value is in why the distractors fail.
• Treating it as definitions only. The exam describes a small scenario and asks you to pick the right service, as in questions 4, 5 and 9 above. Memorizing glossary entries does not cover that.
• Studying leaked questions. Content changes, and the skills measured were revised again on July 20, 2026. Answers memorized from a dump go stale, while concepts do not.
• Studying on outdated outlines. Check the date on the study guide before trusting any prep source, including ours.

Where can I get more AZ-900 practice questions?

Start with Microsoft's free practice assessment on Learn, which shows the official style. For a longer free set with a full answer key, use our 25-question AZ-900 practice test. When you want unseen questions for each repeat of the routine above, the AZ-900 practice exam page covers all three domains with explanations. The free tier includes 40 questions and the paid bank is 500; the details and current price are on the pricing page.

Not yet sure the certification is worth the effort? Read whether AZ-900 is worth it first, or check how hard AZ-900 really is for a realistic view of the difficulty.

Frequently asked questions