Azure Admin/Architect Job Profile Interview Questions



1. What is Cloud Computing?

=> It is the use of servers on the internet to “store”, “manage” and “process” data. The difference is, instead of using your own servers, you are using someone else’s servers to do your task, paying them for the amount of time you use it for.

2. What are the different type of services offered in the cloud?

=> The different type of services offered in the cloud are:

    1. IaaS     2. PaaS     3. SaaS


IaaS: In infrastructure as a service, you get the raw hardware from your cloud provider as a service i.e you get a server which you can configure with your own qill.


PaaS: Platform as a Service, gives you a platform to publish without giving the access to the underlying software or OS. For example: Web Apps, Mobile Apps in Azure.


SaaS: You get software as a service in Azure, i.e no infrastructure, no platform, simple software that you can use without purchasing it. For example : when you launch a VM on Azure, you are not buying the OS, you are basically renting it for the time you will be running that instance.


3. What are the different cloud deployment models?

=> Following are the three cloud deployment models:


Public Cloud : The infrastructure is owned by your cloud provider and the server that you are using could be a multi-tenant system.


Private Cloud : The infrastructure is owned by you or your cloud provider gives you that service exclusively. For eg: Hosting your website on your servers, or hosting your website with the cloud provider on a dedicated server.


Hybrid Cloud : When you use both Public Cloud, Private Cloud together, it is called Hybrid Cloud.

For Example: Using your in-house servers for confidential data, and the public cloud for hosting your company’s public facing website. This type of setup would be a hybrid cloud.


4. I have some private servers on my premises, also I have distributed some of my workload on the public cloud, what is this architecture called?

A. Virtual Private Network

B. Private Cloud

C. Virtual Private Cloud

D. Hybrid Cloud


Answer:  D. Hybrid Cloud 


5. What is Microsoft Azure and why is it used?

=> The companies which provide the cloud service are called the Cloud Providers. There are a lot of cloud providers out there, out of them one is Microsoft Azure. It is used for accessing Microsoft’s infrastructure for cloud.

6. Which service in Azure is used to manage resources in Azure?

A. Application Insights

B. Azure Resource Manager

C. Azure Portal

D. Log Analytics


Answer: B. Azure Resource Manager


 Azure Resource Manager is used to “manage” infrastructures which involve a no. of azure services. It can be used to deploy, manage and delete all the resources together using a simple JSON script.

7. Which of the following web applications can be deployed with Azure?




D. All of the mentioned

Answer : D. All of the mentioned

Microsoft also has released SDKs for both Java and Ruby to allow applications written in those languages to place calls to the Azure Service Platform API to the AppFabric Service.


8. What are Roles and why do we use them?

=> Roles are nothing servers in layman terms. These servers are managed, load balanced, Platform as a Service virtual machines that work together to achieve a common goal.

There are 3 types of roles in Microsoft Azure:


● Web Role

● Worker Role

● VM Role


Let’s discuss each of these roles in detail:


Web Role – A web role is basically used to deploy a website, using languages supported by the IIS platform like, PHP, .NET etc. It is configured and customized to run web applications.


Worker Role – A worker role is more like an help to the Web role, it used to execute background processes unlike the Web Role which is used to deploy the website.


VM Role – The VM role is used by a user to schedule tasks and other windows services. This role can be used to customize the machines on which the web and worker role is running.

9. A _____ role is a virtual machine instance running Microsoft IIS Web server that can accept and respond to HTTP or HTTPS requests.


A. Web

B. Server

C. Worker

D. Client


Answer: A. Web

The answer should be Web Roles, there are no roles such as Server or Client roles. Also, Worker roles can only communicate with Azure Storage or through direct connections to clients.


10. Is it possible to create a Virtual Machine using Azure Resource Manager in a Virtual Network that was created using classic deployment?


=> This is not supported. You cannot use Azure Resource Manager to deploy a virtual machine into a virtual network that was created using classic deployment.


11. Scenario:- Suppose I have one web server and suddenly my management decide to declare big billion day and on that day almost 1 billion users will be visiting to my web-server which is beyond the capacity of that server and because of that my web server got crash and I unable to do anything in that case. What I could have done earlier in order to avoid this impact?


=> Virtual machine scale sets are Azure compute resource that you can use to deploy and manage a set of identical VMs. With all the VMs configured the same, scale sets are designed to support true autoscale, and no pre-provisioning of VMs is required. So it’s easier to build large-scale services that target big compute, big data, and containerized workloads.

12. Are data disks supported within scale sets?

=>  Yes . A scale set can define an attached data disk configuration that applies to all VMs in the set. Other options for storing data include:

● Azure files (SMB shared drives)

● OS drive

● Temp drive (local, not backed by Azure Storage)

● Azure data service (for example, Azure tables, Azure blobs)

● External data service (for example, remote database)

13. What is an Availability Set?


=> An availability set is a logical grouping of VMs that allows Azure to understand how your application is built to provide redundancy and availability. It is recommended that two or more VMs are created within an availability set to provide for a highly available application and to meet the 99.95% Azure SLA. When a single VM is used with Azure Premium Storage, the Azure SLA applies for unplanned maintenance events. If you want second server in availability set then you have to recreate that VM and put that VM into availability set. There is no option to put VM into availability set if it got created already.


14. What are Fault Domains?


=> A fault domain is a logical group of underlying hardware that share a common power source and network switch, similar to a rack within an on-premise data-centers. As you create VMs within an availability set, the Azure platform automatically distributes your VMs across these fault domains. This approach limits the impact of potential physical hardware failures, network outages, or power interruptions. By default it is FD0 and FD1 i.e only 2 Fault domain exist.

15. What are Update Domains?


=> An update domain is a logical group of underlying hardware that can undergo maintenance or can be rebooted at the same time. As you create VMs within an availability set, the Azure platform automatically distributes your VMs across these update domains. This approach ensures that at least one instance of your application always remains running as the Azure platform undergoes periodic maintenance. The order of update domains being rebooted may not proceed sequentially during planned maintenance, but only one update domain is rebooted at a time. By default it UD0-UD4 i.e 5 update domain exist. Any addition of VM more than count of 5 will not increase the count of update domain.

16. Do scale sets work with Azure availability sets?


=> Yes . A scale set is an implicit availability set with 5 fault domains and 5 update domains. Scale sets of more than 100 VMs span multiple placement groups , which are equivalent to multiple availability sets. An availability set of VMs can exist in the same virtual network as a scale set of VMs. A common configuration is to put control node VMs (which often require unique configuration) in an availability set and put data nodes in the scale set.


17. What are Network Security Groups?

=> A network security group (NSG) contains a list of Access Control List (ACL) rules that allow or deny network traffic to subnets, NICs, or both. NSGs can be associated with either subnets or individual NICs connected to a subnet. When an NSG is associated with a subnet, the ACL rules apply to all the VMs in that subnet. In addition, traffic to an individual NIC can be restricted by associating an NSG directly to a NIC.


18. What is a break-fix issue?


=> Technical problems are called break-fix issue, it is an industry term which refers to “work involved in supporting a technology when it fails in the normal course of its function, which requires intervention by a support organization to be restored to working order”.


19. Why is Azure Active Directory used?


=> Azure Active Directory is an Identity and Access Management system. It is used to grant access to your employees to specific products and services in your network. For example:, twitter etc. Azure AD has some in-built support for applications in its gallery which can be added directly.

20. What happens when you exhaust the maximum failed attempts for authenticating yourself via Azure AD?


=> We use a more sophisticated strategy to lock accounts. This is based on the IP address of the request and the passwords entered. The duration of the lockout also increases based on the likelihood that it is an attack.


21. Where can I find a list of applications that are pre-integrated with Azure AD and their capabilities?


=> Azure AD has around 2600 per-integrated applications. All per-integrated applications support single sign-on (SSO). SSO let you use your organizational credentials to access your apps. Some of the applications also support automated provisioning and de-provisioning.


22. How can I use applications with Azure AD that I’m using on-premises?

=> Azure AD gives you an easy and secure way to connect to the web applications you choose . You can access these applications in the same way you access your SaaS apps in Azure AD, no need for a VPN to change your network infrastructure.


23. What is Azure Service Fabric?

=> Azure Service Fabric is a distributed systems platform that makes it easy to package, deploy, and manage scalable and reliable micro-services. Service Fabric also addresses the significant challenges in developing and managing cloud applications. Developers and administrators can avoid complex infrastructure problems and focus on implementing mission-critical, demanding workloads that are scalable, reliable, and manageable. Service Fabric represents the next-generation middle ware platform for building and managing these enterprise-class, tier-1, cloud-scale applications.


24. What isa VNet?


=> VNet is a representation of your own network in the cloud. It logically isolates your instances launched in the cloud, from the rest of your resources.


25. What are the differences between Subscription Administrator and Directory Administrator?


By default, one is assigned the Subscription Administrator role when he/she signs up for Azure. A subscription admin can use either a Microsoft account or a work or school account from the directory that the Azure subscription is associated with. This role is authorized to manage services in the Azure portal. If others need to sign in and access services by using the same subscription, you can add them as co-admins.

    Azure AD has a different set of admin roles to manage the directory and identity-related features. These admins will have access to various features in the Azure portal or the Azure classic portal. The admin’s role determines what they can do, like create or edit users, assign administrative roles to others, reset user passwords, manage user licenses, or manage domains.


26. Are there any scale limitations for customers using managed disks?

Managed Disks eliminates the limits associated with storage accounts. However, the number of managed disks per subscription is limited to 2000 by default.


27. What is the difference between Service Bus Queues and Storage Queues?


=> The Azure Storage Queue is simple and the developer experience is quite good. It uses the local Azure Storage Emulator and debugging is made quite easy. The tooling for Azure Storage Queues allows you to easily peek at the top 32 messages and if the messages are in XML or Json, you’re able to visualize their contents directly from Visual Studio Furthermore, these queues can be purged of their contents, which is especially useful during development and QA efforts.


        The Azure Service Bus Queues are evolved and surrounded by many useful mechanisms that make it enterprise worthy! They are built into the Service Bus and are able to forward messages to other Queues and Topics. They have a built-in dead-letter queue and messages have a time to live that you control, hence messages don’t automatically disappear after 7 days.


        Further  more, Azure Service Bus Queues have the ability of deleting themselves after a configurable amount of idle time. This feature is very practical when you create Queues for each user, because if a user hasn’t interacted with a Queue for the past month, it automatically gets clean it up. Its also a great way to drive costs down. You shouldn’t have to pay for storage that you don’t need. These Queues are limited to a maximum of 80gb. Once you’ve reached this limit your application will start receiving exceptions.


28. What is Azure Redis Cache?


=> Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache and message broker. Azure Redis Cache is based on the popular open-source Redis cache. It gives you access to a secure, dedicated Redis cache, managed by Microsoft, and accessible from any application within Azure. It supports data structures such as strings, hashes, lists, sets, sorted sets with range queries, bitmaps, hyperloglogs and geospatial indexes with radius queries.

        Apart from this Azure Interview Questions Blog, if you want to get trained from professionals on this technology, you can opt for a structured training from edureka! Click below to know more.

29. Why doesn’t Azure Redis Cache have an MSDN class library reference like some of the other Azure services?

=> Microsoft Azure Redis Cache is based on the popular open source Redis Cache and can be accessed by a wide variety of Redis clients for many programming languages. Each client has its own API that makes calls to the Redis cache instance using Redis commands.


            Because each client is different, there is not one centralized class reference on MSDN, and each client maintains its own reference documentation. In addition to the reference documentation, there are several tutorials showing how to get started with Azure Redis Cache using different languages and cache clients. To access these tutorials, see How to use Azure Redis Cache and click the desired language from the language switcher at the top of the article.


30. What are Redis databases?

=>  Redis Databases are just a logical separation of data within the same Redis instance. The cache memory is shared between all the databases and actual memory consumption of a given database depends on the keys/values stored in that database. For example, a C6 cache has 53 GB of memory. You can choose to put all 53 GB into one database or you can split it up between multiple databases

31. Is it possible to add an existing VM to an availability set?

=> No. If you want your VM to be part of an availability set, you need to create the VM within the set. There currently no way to add a VM to an availability set after it has been created.


32. What are the username requirements when creating a VM?

=> Usernames can be a maximum of 20 characters in length and cannot end in a period (“.”). The following usernames are not allowed:

33. What are the password requirements when creating a VM?


Passwords must be 12 – 123 characters in length and meet 3 out of the following 4 complexity requirements:

● Have lower characters

● Have upper characters

● Have a digit

● Have a special character (Regex match [\W_])


34. How much storage can I use with a virtual machine?


=> Each data disk can be up to 1 TB. The number of data disks which you can use depends on the size of the virtual machine.

Azure Managed Disks are the new and recommended disk storage offerings for use with Azure Virtual Machines for persistent storage of data. You can use multiple Managed Disks with each Virtual Machine. Managed Disks offer two types of durable storage options: Premium and Standard Managed Disks.


 Azure storage accounts can also provide storage for the operating system disk and any data disks. Each disk is a .vhd file stored as a page blob.


35. How can one create a Virtual Machine in Powershell?


Visit Official Document


Visit Official Document


36. How to create a Network Security Group and a Network Security Group Rule?


Visit Official Document



37. How to create a new storage account and container using Power Shell?



Visit Official Link


38. How can you stop a VM using Power Shell?


=> Stop-AzureRmVM -ResourceGroupName myResourceGroupVM -Name " myVM " -Force

39. Why was my client disconnected from the cache?


=>  The following are some common reason for a cache disconnect.


Client-side causes

o The client application was redeployed.

o The client application performed a scaling operation.

o In the case of Cloud Services or Web Apps, this may be due to auto-scaling.

o The networking layer on the client side changed.

o Transient errors occurred in the client or in the network nodes between the client and the


o The bandwidth threshold limits were reached.

o CPU bound operations took too long to complete.


Server-side causes

o On the standard cache offering, the Azure Redis Cache service initiated a fail-over from

the primary node to the secondary node.

o Azure was patching the instance where the cache was deployed o This can be for Redis server updates or general VM maintenance.


40. What is Azure Search?


=> Azure Search is a cloud search-as-a-service solution that delegates server and infrastructure management to Microsoft, leaving you with a ready-to-use service that you can populate with your data and then use to add search to your web or mobile application. Azure Search allows you to easily add a robust search experience to your applications using a simple REST API or .NET SDK without managing search infrastructure or becoming an expert in search.



41. My web app still uses an old Docker container image after I’ve updated the image on Docker Hub. Does Azure support continuous integration/deployment of custom containers?

  =>  Yes, it does. F or private registries, you can update the container by stopping and then re-starting your web app. Alternatively, you can also change or add a dummy application setting to force an update of your container.



42. How are Azure Marketplace subscriptions priced?


=> Pricing will vary based on product types. ISV software charges and Azure infrastructure costs are charged separately through your Azure subscription. Pricing models include:


BYOL Model: Bring-your-own-license. You obtain outside of the Azure Marketplace, the right to access or use the offering and are not charged Azure Marketplace fees for use of the offering in the Azure Marketplace.

Free : Free SKU. Customers are not charged Azure Marketplace fees for use of the offering.

Free Software Trial: Full-featured version of the offer that is promotionally free for a limited period of time. You will not be charged Azure Marketplace fees for use of the offering during a trial period. Upon expiration of the trial period, customers will automatically be charged based on standard rates for use of the offering.


Usage-Based : You are charged or billed based on the extent of your use of the offering. For Virtual Machines Images, you are charged an hourly Azure Marketplace fee. For Data Services, Developer services, and APIs, you are charged per unit of measurement as defined by the offering.


Monthly Fee : You are charged or billed a fixed monthly fee for a subscription to the offering (from the date of subscription start for that particular plan). The monthly fee is not prorated for mid-month cancellations or unused services.

43. What is the difference between “price,” “software price,” and “total price” in the cost structure for Virtual Machine offers in the Azure Marketplace?



 => “Price” refers to the cost of the Azure Virtual Machine to run the software. “Software price” refers to the cost of the publisher software running on an Azure Virtual Machine. “Total price” refers to the combined total cost of the Azure Virtual Machine and the publisher software running on an Azure Virtual Machine.

44. What are stateful and stateless microservices for Service Fabric?


=> Service Fabric enables you to build applications that consist of microservices. Stateless microservices (such as protocol gateways and web proxies) do not maintain a mutable state outside a request and its response from the service. Azure Cloud Services worker roles are an example of a stateless service. Stateful microservices (such as user accounts, databases, devices, shopping carts, and queues) maintain a mutable, authoritative state beyond the request and its response. Today’s Internet-scale applications consist of a combination of stateless and stateful microservices.

45. What is the meaning of application partitions?


=> The application partitions are a part of the Active Directory system and having said so, they are directory partitions which are replicated to domain controllers. Usually, domain controllers that are included in the process of directory partitions hold a replica of that directory partition. The attributes and values of application partitions is that you can replicated them to any specific domain controller in a forest, meaning that it could lessen replication traffic. While the domain directory partitions transfer all their data to all of the domains, the application partitions can focus on only one in the domain area. This makes application partitions redundant and more available.

46. What are special Azure Regions?


=> Azure has some special regions that you may wish to use when buildingyour applications for compliance or legal purposes. These special regions include:


● US Gov Virginia and US Gov Iowa

o A physical and logical network-isolated instance of Azure for US government agencies and

partners, operated by screened US persons. Includes additional compliance certifications

such as FedRAMP and DISA .


● China East and China North

o These regions are available through a unique partnership between Microsoft and 21Vianet, whereby Microsoft does not directly maintain the datacenters.


● Germany Central and Germany Northeast


47. How many types of storage are there in Azure?


=>  There are basically five types of storage available in Azure.

a) Azure Blob : A massively scalable object store for text and binary data. Also includes support for big data analytics through Data Lake Storage Gen2.

b) Queue Blob : A messaging store for reliable messaging between application components.


c) File Blob : Managed file shares for cloud or on-premises deployments.


d) TablesBlob : A NoSQL store for schemaless storage of structured data.


e) Disk Blob :  Disk Block-level storage volumes for Azure VMs.


48. In my current set up, I have Two server one in US and another India, User from Australia complaining about slowness or delay in accessing files. What solution can I provide them and which Azure resource will going to help me out?


=>The Azure Content Delivery Network (CDN) caches static web content at strategically placed locations to provide maximum throughput for securely delivering content to users. Akamai and Verizon are two provider.

49. What is Application insight?


=> Application Insights is an extensible Application Performance Management (APM) service for web developers on multiple platforms. Use it to monitor your live web application . ... It works for apps on a wide variety of platforms including .NET, Node.js and J2EE, hosted on-premises

50. Scenario: - Suppose you have one office in NY and some of your remote users who are based out in Washington want to access companies internal websites. What type of configuration you will suggest and what all the steps you are going to follow to enable those. Counter question, Do I need to install VPN client on individual machine. Is there any way to get it installed automatically on all system?


=> A Point-to-Site (P2S) VPN gateway lets you create a secure connection to your virtual network from an individual client computer. Point-to-Site VPN connections are useful when you want to connect to your VNet from a remote location, such when you are telecommuting from home or a conference.




1. Create a virtual network and a Virtual Network gateway

2. Create certificates

2.a Obtain the public key (.cer) for the root certificate

2.b Generate a client certificate

3. Upload the root certificate .cer file

4. Configure the client ( It is required to be install on individual machine, automation can be done

using some API or other toools)

5. Connect to Azure

51. Scenario:- I want to deploy some image compression applications or Real-time bot messaging then can you let me know what type of Azure resources I can use?


=> Azure functons Apps

Functions can make development even more productive, and you can use your development language of choice, such as C#, F#, Node.js, Java, or PHP. Pay only for the time your code runs and trust Azure to scale as needed. Azure Functionslets you develop serverless applications on Microsoft Azure

52. Scenario:- I have deployed a virtual machine with in storage location of LRS and now I want to have them work as a web server. What all steps do I required start from VM creation and How I can verify that designed server is working fine as a web server?


=> Steps:-

1) Create Window VM using windows operating system

2) Take RDP session of that created VM.

3) Goto Server Manager and then select Service Role IIS

4) After that IIS will get installed on that server.

5) Try to open that VM ip address from any of your web browser, it should give you IIS home page.


53. what are the types of webapp service plan?


● Premium (P1,P2,P3)

● Standard (S1,S2,S3)

● Basic (B1,B2,B3)

● Free

● Shared

● Isolated

54. How can you enable SSO feature in an application in your Azure evironment? 

=> Steps are :

1) Add application

2) Configure SSO on it

3) Choose type of SSO

4) GOTO user/Group assign that application



55. scenario:- I have placed 4 web server in a availability set and I want that they all should be utilized properly. Which azure resource do I need to deploy and what all perquisite do I need to take care?



1) We need to create Load Balancer and Load balancer are of 2 types External and Internal. 

2) External load balancer/Frontend Load balancer facing directly to the internet.

3) Internal Load Balancer or Backhend pool have their outcomes to the existing VM. 

4) Apply inbound rules on that load balancer so that traffic can reach to the load balancer.

56. What Is The Difference Between Block Blob Vs Page Blob ?


=> Block blobs are comprised of blocks, each of which is identified by a block ID. You create or modify a block blob by uploading a set of blocks and committing them by their block IDs. If you are uploading a block blob that is no more than 64 MB in size, you can also upload it in its entirety with a single Put Blob operation. -Each block can be a maximum of 4 MB in size. The maximum size for a block blob in version 2009-09-19 is 200 GB, or up to 50,000 blocks.


Page blobs are a collection of pages. A page is a range of data that is identified by its offset from the start of the blob. To create a page blob, you initialize the page blob by calling Put Blob and specifying its maximum size. The maximum size for a page blob is 1 TB. A page written to a page blob may be up to 1 TB in size.


57. What Is Azure Diagnostics?


=> Azure Diagnostics is the API that enables you to collect diagnostic data from applications running in Azure. Azure Diagnostics must be enabled for cloud service roles in order for verbose monitoring to be turned on.


58. Scenario:- I want to start my own website in Azure Cloud. What type of service model you will suggest me and why? What all the steps do I required to get it configured in ARM?


=> PAAS is the suggestion, because it is effective and easily to deploy as well as cost saving. steps to create Web apps you can refer to this link.

59. What are the types of Azure Storage Account ?


=> There are five types are there:


  • General-purpose v2 accounts: Basic storage account type for blobs, files, queues, and tables. Recommended for most scenarios using Azure Storage.
  • General-purpose v1 accounts : Legacy account type for blobs, files, queues, and tables. Use general-purpose v2 accounts instead when possible.
  • BlockBlobStorage accounts: Storage accounts with premium performance characteristics for block blobs and append blobs. Recommended for scenarios with high transactions rates, or scenarios that use smaller objects or require consistently low storage latency.
  • FileStorage accounts: Files-only storage accounts with premium performance characteristics. Recommended for enterprise or high performance scale applications.
  • BlobStorage accounts: Legacy Blob-only storage accounts. Use general-purpose v2 accounts instead when possible.

60. What is HUB and spoke configurations in Azure ?


=> Read this


61. What are the types of Access in container of Azure storage?


=> Private Access Container and Blob Access Container

62. Steps to configure Load Balancer ?

=> Read this


63. Migration steps from SQL server to Azure SQL ?

=> Read this


64. What is Cloud Services ?


=> Read this

Post a Comment