Free AZ-100: Microsoft Azure Infrastructure and Deployment Exam Questions and Answers
Microsoft Azure Infrastructure and Deployment is exam AZ-100, part of Microsoft Certifications. Microsoft exam codes name the solution area rather than the level — AZ for Azure, DP for data, MS for Microsoft 365, PL for Power Platform, SC for security, AI for Azure AI — with one reliable rule: any exam numbered 900 or 901 is Fundamentals. Every technical exam is scored from 1 to 1000 with 700 to pass, a scaled score Microsoft notes is explicitly not 70% of the marks.
If you searched for AZ-100 dumps, an AZ-100 ExamTopics discussion or a free AZ-100 PDF, this is the Microsoft Azure Infrastructure and Deployment question bank: practice questions with verified answers and explanations, a timed AZ-100 practice test and updates whenever Microsoft changes the exam.
Last updated: October 7, 2026
- Exam code
- AZ-100
- Provider
- Microsoft
- Questions in our bank
- 1000+
- Free to read
- First 10, with answers
- Official page
- Official Exam website
- Our test mode duration & pass mark
- 130 mins · 70%
Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.
Question #1
You are planning the move of App1 to Azure. You create a network security group (NSG). You need to recommend a solution to provide users with access to App1. What should you recommend?
Correct answer: C
Explanation
As App1 is public-facing we need an incoming security rule, related to the access of the web servers. Scenario: You have a public-facing application named App1. App1 is comprised of the following three tiers: a SQL database, a web front end, and a processing middle tier. Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.
Continue with AZ-100: Microsoft Azure Infrastructure and Deployment
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-100: Microsoft Azure Infrastructure and Deployment, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #2
You need to implement a backup solution for App1 after the application is moved. What should you create first?
Correct answer: D
Explanation
A Recovery Services vault is a logical container that stores the backup data for each protected resource, such as Azure VMs. When the backup job for a protected resource runs, it creates a recovery point inside the Recovery Services vault. Scenario: There are three application tiers, each with five virtual machines. Move all the virtual machines for App1 to Azure. Ensure that all the virtual machines for App1 are protected by backups. References: https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal
Continue with AZ-100: Microsoft Azure Infrastructure and Deployment
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-100: Microsoft Azure Infrastructure and Deployment, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #3
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates. You need to view the date and time when the resources were created in RG1. Solution: From the RG1 blade, you click Automation script. Does this meet the goal?
Correct answer: B
Explanation
The Automation script blade generates deployment templates; it does not show resource creation dates, which appear in the resource group's deployments history.
Continue with AZ-100: Microsoft Azure Infrastructure and Deployment
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-100: Microsoft Azure Infrastructure and Deployment, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #4
You plan to back up an Azure virtual machine named VM1. You discover that the Backup Pre-Check status displays a status of Warning. What is a possible cause of the Warning status?
Correct answer: A
Explanation
The Warning state indicates one or more issues in VM’s configuration that might lead to backup failures and provides recommended steps to ensure successful backups. Not having the latest VM Agent installed, for example, can cause backups to fail intermittently and falls in this class of issues. References: https://azure.microsoft.com/en-us/blog/azure-vm-backup-pre-checks/
Continue with AZ-100: Microsoft Azure Infrastructure and Deployment
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-100: Microsoft Azure Infrastructure and Deployment, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #5
You have an Active Directory forest named contoso.com. You install and configure Azure AD Connect to use password hash synchronization as the single sign-on (SSO) method. Staging mode is enabled. You review the synchronization results and discover that the Synchronization Service Manager does not display any sync jobs. You need to ensure that the synchronization completes successfully. What should you do?
Correct answer: D
Explanation
Staging mode must be disabled. If the Azure AD Connect server is in staging mode, password hash synchronization is temporarily disabled. References: https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnectsync-troubleshoot-p
Continue with AZ-100: Microsoft Azure Infrastructure and Deployment
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-100: Microsoft Azure Infrastructure and Deployment, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #6
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups. Another administrator plans to create several network security groups (NSGs) in the subscription. You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks. Solution: You create a resource lock, and then you assign the lock to the subscription. Does this meet the goal?
Correct answer: B
Explanation
How can I freeze or lock my production/critical Azure resources from accidental deletion? There is way to do this with both ASM and ARM resources using Azure resource lock. References: https://blogs.msdn.microsoft.com/azureedu/2016/04/27/using-azure-resource-manager-policy-and-azure-lock-to
Continue with AZ-100: Microsoft Azure Infrastructure and Deployment
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-100: Microsoft Azure Infrastructure and Deployment, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #7
You have an Azure subscription that contains the resources in the following table. Subnet1 is associated to VNet1. NIC1 attaches VM1 to Subnet1. You need to apply ASG1 to VM1. What should you do?
Correct answer: C
Explanation
When you deploy VMs, make them members of the appropriate ASGs. You associate the ASG with a subnet. References: https://azure.microsoft.com/en-us/blog/applicationsecuritygroups/
Continue with AZ-100: Microsoft Azure Infrastructure and Deployment
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-100: Microsoft Azure Infrastructure and Deployment, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #8
You have a Recovery Service vault that you use to test backups. The test backups contain two protected virtual machines. You need to delete the Recovery Services vault. What should you do first?
Correct answer: A
Explanation
You can't delete a Recovery Services vault if it is registered to a server and holds backup data. If you try to delete a vault, but can't, the vault is still configured to receive backup data. Remove vault dependencies and delete vault In the vault dashboard menu, scroll down to the Protected Items section, and click Backup Items. In this menu, you can stop and delete Azure File Servers, SQL Servers in Azure VM, and Azure virtual machines. References: https://docs.microsoft.com/en-us/azure/backup/backup-azure-delete-vault
Continue with AZ-100: Microsoft Azure Infrastructure and Deployment
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-100: Microsoft Azure Infrastructure and Deployment, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #9
You have two subscriptions named Subscription1 and Subscription2. Each subscription is associated to a different Azure AD tenant. Subscription1 contains a virtual network named VNet1.VNet1 contains an Azure virtual machine named VM1 and has an IP address space of 10.0.0.0/16. Subscription2 contains a virtual network named VNet2. VNet2 contains an Azure virtual machine named VM2 and has an IP address space of 10.10.0.0/24. You need to connect VNet1 to VNet2. What should you do first?
Correct answer: C
Explanation
The virtual networks can be in the same or different regions, and from the same or different subscriptions. When connecting VNets from different subscriptions, the subscriptions do not need to be associated with the same Active Directory tenant. Configuring a VNet-to-VNet connection is a good way to easily connect VNets. Connecting a virtual network to another virtual network using the VNet-to-VNet connection type (VNet2VNet) is similar to creating a Site-to-Site IPsec connection to an on-premises location. Both connectivity types use a VPN gateway to provide a secure tunnel using IPsec/IKE, and both function the same way when communicating. The local network gateway for each VNet treats the other VNet as a local site. This lets you specify additional address space for the local network gateway in order to route traffic. References: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal
Continue with AZ-100: Microsoft Azure Infrastructure and Deployment
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-100: Microsoft Azure Infrastructure and Deployment, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #10
You download an Azure Resource Manager template based on an existing virtual machine. The template will be used to deploy 100 virtual machines. You need to modify the template to reference an administrative password. You must prevent the password from being stored in plain text. What should you create to store the password?
Correct answer: C
Explanation
You can use a template that allows you to deploy a simple Windows VM by retrieving the password that is stored in a Key Vault. Therefore the password is never put in plain text in the template parameter file. References: https://azure.microsoft.com/en-us/resources/templates/101-vm-secure-password/
Continue with AZ-100: Microsoft Azure Infrastructure and Deployment
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in AZ-100: Microsoft Azure Infrastructure and Deployment, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Discussion
Explain your reasoning, not just the letterOther Microsoft certifications
- AZ-500: Microsoft Azure Security Technologies (opens in a new tab)
- MS-101: Microsoft 365 Mobility and Security (opens in a new tab)
- MS-102: Microsoft 365 Administrator (beta) (opens in a new tab)
- MS-100: Microsoft 365 Identity and Services (opens in a new tab)
- PL-900: Microsoft Power Platform Fundamentals (opens in a new tab)
- AZ-305: Designing Microsoft Azure Infrastructure Solutions (opens in a new tab)
- MS-900: Microsoft 365 Fundamentals (opens in a new tab)
- AZ-400: Microsoft Azure DevOps Solutions (opens in a new tab)
- AZ-900: Microsoft Azure Fundamentals (opens in a new tab)
- 70-740: Installation, Storage, and Compute with Windows Server 2016 (opens in a new tab)
- MD-102: Endpoint Administrator (beta) (opens in a new tab)
- PL-300: Microsoft Power BI Data Analyst (opens in a new tab)
Reviews
Write a review★★★★★
Exam Practice is worth every penny. The mock exams are realistic, and the feedback helped me focus on key areas.
Amit SharmaVerified buyer
★★★★★
I highly recommend Exam Practice. The feedback after each test helped me improve significantly, and I passed my exams easily.
Oscar NyströmVerified buyer
★★★★★
This platform is a lifesaver. The practice questions and explanations are so detailed. It’s the best study tool I’ve ever used.
Hannah SmithVerified buyer
FAQ
Learn More: https://learn.microsoft.com/en-us/credentials/
- Q1: What is the AZ-100: Microsoft Azure Infrastructure and Deployment exam?
- A: AZ-100: Microsoft Azure Infrastructure and Deployment is a Microsoft certification exam. Judging by the questions in our bank, it concentrates on azure, named, subscription1, subscription and contoso.com.
- Q2: What topics does the AZ-100: Microsoft Azure Infrastructure and Deployment exam cover?
- A: Questions in our AZ-100: Microsoft Azure Infrastructure and Deployment bank cluster around azure, named, subscription1, subscription, contoso.com, series, server1 and zone. Working through the full set is the quickest way to find which of these you are weakest on.
- Q3: How should I prepare for AZ-100: Microsoft Azure Infrastructure and Deployment?
- A: Work through the AZ-100: Microsoft Azure Infrastructure and Deployment practice questions here, checking your answer on each one, then sit the practice test to rehearse the exam under timed conditions before the real thing.
- Q4: Are these real AZ-100: Microsoft Azure Infrastructure and Deployment exam questions?
- A: They are drawn from officially released past questions and from community members who have sat AZ-100: Microsoft Azure Infrastructure and Deployment. Answers are verified and updated weekly.
- Q5: Where do I register for the AZ-100: Microsoft Azure Infrastructure and Deployment exam?
- A: Register through Microsoft directly at https://learn.microsoft.com/en-us/credentials/. Exampractice is not affiliated with Microsoft and does not administer the exam.
- Q6: Is there a free AZ-100: Microsoft Azure Infrastructure and Deployment sample?
- A: Yes. Every AZ-100: Microsoft Azure Infrastructure and Deployment page shows a free sample of real questions. Upgrading opens the full bank and the practice test.
- Q7: What are Microsoft Certification Exams?
- A: Microsoft Certification Exams validate your expertise in using and managing Microsoft’s technologies and solutions, including Azure, Office 365, Windows, and more. These certifications demonstrate your proficiency in deploying, configuring, and optimizing Microsoft products to support business operations and IT infrastructure.
- Q8: Why should I pursue Microsoft Certification?
- A: Microsoft Certification enhances your professional credibility, showcasing your skills and knowledge in Microsoft technologies. This can lead to better job opportunities, higher salaries, and career advancement in IT, cloud computing, software development, and related fields.
- Q9: What are the benefits of Microsoft Certification?
- A: Benefits include recognition as a certified Microsoft professional, improved job performance, access to exclusive resources, continuing education opportunities, and staying current with the latest Microsoft technologies and best practices.
- Q10: Who should take Microsoft Certification Exams?
- A: IT professionals, system administrators, developers, cloud engineers, data analysts, and anyone involved in managing and implementing Microsoft solutions should consider these certifications to validate their expertise and advance their careers.
- Q11: What types of Microsoft Certification Exams are available?
- A: Microsoft offers various certification paths, including:
- Q12: How do I prepare for Microsoft Certification Exams?
- A: Preparation can include official Microsoft training courses, study guides, practice exams, online tutorials, and hands-on experience with Microsoft products and solutions.
- Q13: Where can I take Microsoft Certification Exams?
- A: Microsoft Certification Exams can be taken online with remote proctoring or at authorized Pearson VUE testing centers worldwide, providing flexibility to fit your schedule and location.
- Q14: How do Microsoft Certifications impact my career?
- A: Microsoft Certifications significantly boost your career by demonstrating your expertise to employers, making you a more competitive candidate for advanced roles and promotions in IT, cloud computing, software development, and other tech-related fields.
- Q15: Are there any prerequisites for Microsoft Certification Exams?
- A: Some exams may have prerequisites, such as foundational knowledge or prior experience with Microsoft products. Check the specific requirements for each certification path on the Microsoft Learn website.
- Q16: How often do I need to recertify for Microsoft Certifications?
- A: Microsoft Certifications typically require renewal every year or two, depending on the certification, to ensure that certified professionals stay updated with the latest technologies and industry practices.