FirstTry

Exam objective

AZ-900

Describe Azure compute and networking services

This objective sits in Describe Azure architecture and services, which carries 38% of the Azure Fundamentals exam. The questions below are original, written from the official objective title above, and each explanation cites the Microsoft Azure page it rests on.

Objective title verbatim from the official objectives. Microsoft Azure exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

Describe Azure architecture and services

A VM in an Azure virtual network has no public IP and sits behind no load balancer. What outbound internet access does it have?

Outbound connectivity only after a route table is createdAzure routes to the internet by default. Route tables exist to override that routing, not to establish it.
No outbound connectivity until a public IP is assignedA public IP is needed for inbound reachability, not for a VM to reach out. Outbound already works without one.
Outbound connectivity only through a NAT gateway resourceA NAT gateway gives outbound traffic a predictable set of source addresses. It replaces the default path rather than creating it.
Outbound connectivity by default from the virtual networkCorrect · your answerCorrect: nothing has to be added for traffic to leave. The other options manage or replace that default path.
No outbound connectivity until a load balancer fronts itA public load balancer provides inbound distribution and can manage outbound. Neither role is a precondition for outbound access.

Correct.

Checked against learn.microsoft.com, August 2026

Concept

A private address space in Azure is not sealed on the way out. Inbound reachability must be granted deliberately, while outbound traffic leaves unless something is configured to stop it.

Why D

The overview states that all resources in a virtual network can communicate outbound with the internet by default. A public IP, NAT gateway, or public load balancer manages that path or serves inbound traffic, rather than enabling the outbound path in the first place.

Source

All resources in a virtual network can communicate outbound with the internet, by default. You can also use a public IP address, NAT gateway, or public load balancer to manage your outbound connections.

What is Azure Virtual Network?, checked August 2026
#virtual-network#outbound-connectivity#networking

Now you: practice questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

Describe Azure architecture and services

A single user needs to reach a virtual network from one laptop, without changing the corporate network edge. Which connection fits?

Sample question 2 of 3

Describe Azure architecture and services

Two virtual networks in one region are peered, and a security reviewer must document the path traffic takes between them. What is true of peered traffic?

Sample question 3 of 3

Describe Azure architecture and services

Your team worries that peering will slow traffic between two virtual networks in the same region. What does Azure state about that latency?

That’s 3 of the full Azure Fundamentals bank.

Keep going free: 10 questions per certification in bank practice, with no account.

Continue practicing

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Describe Azure architecture and services