Exam AZ-100: Microsoft Azure Infrastructure and Deployment Practice Test
AZ-100: Microsoft Azure Infrastructure and Deployment covers building and operating Azure infrastructure. The available practice questions sample decisions involving virtual machines, virtual networks, storage services, secrets, data transfer, and automation. These scenarios call for matching workload requirements—such as SMB file access, restricted network traffic, or event-driven execution—to suitable Azure services and configurations.
Exam overview
About the Exam AZ-100: Microsoft Azure Infrastructure and Deployment Exam
Infrastructure work in these scenarios involves distinguishing storage options by access pattern, such as Blob Storage for unstructured objects, Azure Files for SMB shares, and Cosmos DB for globally distributed key-value workloads. Network questions focus on controlling communication between subnets and limiting outbound traffic through appropriate filtering. Deployment decisions also include selecting a Windows VM image for interactive desktop workloads and transferring large files with resumable, parallel command-line operations. Security and operations tasks include retrieving credentials from a managed secrets store rather than embedding them in scripts, and automating resource administration in response to schedules or alerts. Practicing these choices helps build a habit of mapping constraints—protocol, latency, access control, or operational overhead—to the Azure capability that addresses them.
Sample Practice Questions
Review a selection from this exam's published US Practice Tests practice bank.
A workload needs a globally distributed key-value store with low-latency access and multiple consistency choices. Which Azure service is designed for this purpose?
Show answer
Correct answer: AAzure Cosmos DB is a globally distributed database service that supports low-latency access and configurable consistency levels for supported APIs.
A deployment must retrieve a database password without embedding it in a script or configuration file. Which Azure service is intended for storing and controlling access to secrets?
Show answer
Correct answer: AAzure Key Vault is designed to securely store and manage secrets, keys, and certificates. Applications and deployment processes can retrieve secrets using authorized identities rather than hard-coding them.
An administrator needs to transfer a large set of files to Azure Blob Storage over a command-line workflow, with support for parallel transfers and resumable operations. Which tool is purpose-built for this task?
Show answer
Correct answer: AAzCopy is a command-line utility for copying data to, from, and between Azure Storage resources. It supports high-performance transfer workflows; the other tools serve database, editing, or identity synchronization purposes.
An administrator wants to allow a VM in one subnet to communicate with a VM in another subnet only on a required application port. Which configuration provides subnet-level traffic filtering?
Show answer
Correct answer: AA network security group can be associated with a subnet and contain rules that filter inbound or outbound traffic by protocol, port, and address. Storage policies and availability sets do not control network flows between subnets.
A team needs to automate administrative tasks across Azure resources with scripts that can run in response to schedules or alerts, without managing a worker VM. Which service is a suitable option?
Show answer
Correct answer: AAzure Automation supports runbooks for automating operational tasks, including scheduled or event-triggered workflows. The other services provide virtual desktop, application delivery, and container image registry capabilities.
A storage account must provide a shared file system that multiple Windows servers can mount using the SMB protocol. Which Azure storage service should be used?
Show answer
Correct answer: AAzure Files provides managed file shares that can be accessed using SMB, including from multiple Windows servers. Queue and Table Storage serve different data-access patterns, and managed disks are block storage for VMs.
A company wants to store large amounts of unstructured data, such as images and log files, and access it through HTTP-based APIs. Which Azure service is the best fit?
Show answer
Correct answer: AAzure Blob Storage is designed to store large volumes of unstructured object data and provides access through HTTP-based interfaces.
How to use this practice test
The free practice session presents up to 20 random questions from the 50-question bank. Work through each scenario by identifying its key constraint, then compare your results after the session to spot which service-selection or configuration decisions need another pass.
Preparation tips
- For storage scenarios, distinguish object access through HTTP APIs, SMB file shares, and globally distributed key-value data; identify the access pattern before choosing a service.
- Trace network requirements precisely: separate subnet-to-subnet port restrictions from outbound destination and protocol filtering, and select the matching control.
- Practice secure deployment patterns by replacing credentials in scripts or configuration files with retrieval from a managed secrets service.
- Compare administrative automation options by trigger and hosting model, including scheduled or alert-triggered scripts and event-driven code that runs without managing servers.
- For file migration scenarios, note whether the workflow requires parallel transfers and resumable operations, then identify the command-line tool suited to that transfer pattern.