Microsoft Azure Inteview Top 5 QA
Microsoft Azure
Intermediate
1. Explain the Difference Between Azure Virtual Machines, Azure App Service, and Azure Functions. When Would You Use Each?
Answer:
These three Azure compute services are designed for different workloads.
Azure Virtual Machines (VMs):
Infrastructure as a Service (IaaS).
Provides full control over the operating system.
Suitable for legacy applications, custom software, and applications requiring complete server access.
Azure App Service:
Platform as a Service (PaaS).
Used for hosting web applications, REST APIs, and mobile backends.
Microsoft manages infrastructure, patching, scaling, and availability.
Azure Functions:
Serverless computing service.
Executes code only when triggered by events.
Ideal for lightweight APIs, scheduled tasks, file processing, and event-driven integrations.
Example:
ERP hosted on Windows Server → Azure VM
ASP.NET Core Web API → Azure App Service
Send email when a Dataverse record is created → Azure Function
2. What is the Difference Between Azure Storage Services?
Answer:
Azure Storage provides multiple storage options depending on business needs.
Storage Type Purpose
Blob Storage Store images, videos, backups, documents
File Storage SMB shared folders
Queue Storage Messaging between applications
Table Storage NoSQL key-value storage
Disk Storage Virtual machine disks
Common Use Cases
Blob Storage → Images uploaded by users
Queue Storage → Background processing
File Share → Shared department documents
Managed Disks → Azure Virtual Machines
3. What is Azure Active Directory (Microsoft Entra ID) and Why Is It Important?
Answer:
Microsoft Entra ID (formerly Azure Active Directory) is Microsoft's cloud identity and access management service.
Features
User Authentication
Single Sign-On (SSO)
Multi-Factor Authentication (MFA)
Conditional Access
Role-Based Access Control (RBAC)
Application Registration
OAuth 2.0 and OpenID Connect support
Example
A company has:
Dynamics 365
Power Apps
Microsoft Teams
Outlook
Employees sign in once using Microsoft Entra ID and securely access all services without separate credentials.
4. What is the Difference Between Azure Service Bus, Event Grid, and Event Hub?
Answer:
These services support different messaging patterns.
Service Best For
Azure Service Bus Reliable enterprise messaging
Azure Event Grid Event-driven architecture
Azure Event Hub Big data and telemetry streaming
Azure Service Bus
Guaranteed message delivery
Queues and Topics
FIFO support
Dead-letter queue
Enterprise integrations
Azure Event Grid
Publish/Subscribe model
Near real-time event notifications
Storage events
Resource events
Custom events
Azure Event Hub
Millions of events per second
IoT devices
Log collection
Telemetry
Streaming analytics
Example
Order Processing → Service Bus
File Uploaded → Event Grid
IoT Sensors → Event Hub
5. How Do You Secure an Azure Application?
Answer:
Azure provides multiple security services to protect applications and data.
Best Practices
Use Microsoft Entra ID for authentication.
Implement Role-Based Access Control (RBAC).
Store secrets in Azure Key Vault.
Enable Managed Identity instead of storing credentials.
Secure APIs with OAuth 2.0.
Restrict access using Network Security Groups (NSGs) and Private Endpoints.
Enable HTTPS and TLS encryption.
Monitor security using Azure Monitor and Microsoft Defender for Cloud.
Example
An ASP.NET Core application hosted on Azure App Service:
Authenticates users through Microsoft Entra ID.
Retrieves database connection strings from Azure Key Vault.
Uses Managed Identity to access Azure Storage.
Sends diagnostics to Azure Monitor.
Protects APIs with OAuth 2.0 and RBAC.