AZ-900 Describe Azure management and governance: 408 practice questions

12 of the 408 Describe Azure management and governance questions in the Certsqill AZ-900 bank, shown in full below. Each one carries an explanation for every option, not just the correct one — the wrong answers are where the marks go.

Preparing for AZ-900? Take the free 5-min readiness check →

1. Microsoft Purview: Which Azure service best matches this requirement?

1. Azure Monitor

   Azure Monitor collects and analyzes operational metrics and logs, rather than cataloging and classifying organizational data assets.
2. Microsoft Purview ✓

   Microsoft Purview supports data discovery, cataloging, classification, and governance across supported organizational data sources.
3. Azure Advisor

   Azure Advisor provides personalized best-practice recommendations, not discovery and classification of data across connected sources.
4. Azure Policy

   Azure Policy evaluates resource configurations against organizational rules, but does not provide a data catalog for source discovery.

Microsoft Purview is designed for data discovery, cataloging, classification, and governance across supported sources.

2. Size and runtime affect compute cost: What can the provider conclude?

1. The larger size establishes the complete invoice regardless of storage or transfer.

   Compute size does not determine storage, networking, region, or other charges that can contribute to the invoice.
2. Size and runtime affect compute cost. ✓

   A virtual machine’s selected size and duration of allocation influence its compute charges, while other resources may add costs.
3. Continuous runtime guarantees a fixed total cost once the virtual machine is created.

   Runtime contributes to cost, but pricing also depends on configuration, region, storage, transfer, and pricing arrangements.
4. The provider can infer the exact invoice from size and runtime alone.

   Exact invoices require additional assumptions, including region, disks, network usage, and applicable pricing arrangements.

Compute size and runtime affect virtual machine compute costs, but they do not establish total spending.

3. Review actual and forecast costs against workload: Which complementary action should the university take befor

1. Open Azure Service Health to confirm whether a regional outage affects the recommendation.

   Service Health reports Azure service issues and maintenance, not whether a cost recommendation fits usage and workload requirements.
2. Apply a resource lock to prevent accidental changes while assessing the recommendation.

   Resource locks protect management-plane operations but do not assess savings or determine whether changing utilization is suitable.
3. Review actual and forecast costs against workload requirements before implementation. ✓

   Cost Management helps examine actual and forecast spending, while workload requirements determine whether the recommendation is appropriate.
4. Use Microsoft Purview to classify the resource data before reviewing the recommendation.

   Purview supports data discovery and classification, but does not validate the financial impact of an Advisor recommendation.

Validate Advisor’s suggestion with actual and forecast spending plus workload requirements before implementation.

4. The Azure portal provides graphical administration: Which comparison is accurate?

1. The Azure portal provides graphical administration; repeatable source-controlled deployments require maintained infrastructure-as-code or automation. ✓

   The Azure portal supports interactive graphical management and inspection. Repeatable deployments require deliberately created and maintained templates, scripts, or other automation in source control.
2. Azure Arc manages supported external resources.

   Azure Arc extends management and governance to supported on-premises and multicloud resources, but that is not the graphical Azure resource interface or automatic source-control solution required here.
3. Azure Policy automatically converts portal changes into versioned infrastructure-as-code deployments and source-control commits.

   Azure Policy evaluates or enforces supported configurations; it does not automatically generate versioned deployment definitions or commit them to source control.
4. Cloud Shell is a graphical resource manager.

   Cloud Shell provides browser-accessible Azure CLI and PowerShell environments; it is not the graphical resource-management interface described.

The portal provides graphical administration; repeatability requires maintained deployment artifacts.

5. Microsoft Purview discovers data assets and supports: Which statement correctly identifies the suitable capabi

1. Microsoft Purview discovers data assets and supports classification and governance across supported sources. ✓

   Microsoft Purview provides data discovery, cataloging, classification, and governance capabilities for supported connected sources.
2. Resource locks preserve classifications by blocking all data changes.

   Resource locks protect management-plane operations, but do not classify data or block every data-plane activity.
3. Azure Policy catalogs sensitive values inside every connected data source.

   Azure Policy evaluates supported Azure resource configurations, rather than cataloging and classifying values across data sources.
4. Network security groups classify sensitive records in transit.

   Network security groups filter network traffic using rules, but do not inspect organizational records or apply data classifications.

Microsoft Purview supports discovering data assets and applying classifications for governance across supported sources.

6. Data transfer between regions: Which cost factor should the clinic examine?

1. Virtual machine guest operating system maintenance

   Guest operating system maintenance is a management responsibility for some compute services, but does not explain inter-region transfer charges.
2. The resource group’s display name

   A resource group organizes resources and provides management scope, but its display name does not determine data transfer pricing.
3. Data transfer between regions ✓

   Moving data between Azure regions can introduce network transfer charges, depending on the services and transfer direction involved.
4. The number of data classifications assigned in Purview

   Purview classifications support governance and discovery, but their count does not determine network transfer charges between regions.

Inter-region movement is a potential data transfer cost factor, alongside service and direction details.

7. Advisor suggests improvements: What is the best interpretation?

1. Advisor applies reliability fixes automatically.

   Advisor provides recommendations; it does not automatically modify the shop's workload.
2. Advisor suggests improvements; Service Health or Resource Health provides status information. ✓

   Advisor recommends improvements, while Service Health reports relevant Azure service issues and Resource Health reports the status of a specific resource.
3. Advisor is the Azure service that reports active platform incidents and planned maintenance.

   Service Health reports relevant Azure service issues and planned maintenance; Advisor provides personalized recommendations.
4. Advisor confirms the shop has no active platform incident.

   An Advisor recommendation does not confirm that there is no active platform incident.

Advisor recommends improvements; Service Health or Resource Health addresses service or resource status.

8. It is available through a browser in the Azure portal: Select TWO statements that correctly describe Azure Clo

Select two. More than one option is correct — every correct one is ticked below.

1. It is available through a browser in the Azure portal. ✓

   Cloud Shell is an authenticated, browser-accessible shell integrated with Azure management experiences.
2. It automatically creates repeatable deployments without scripts or templates.

   Cloud Shell provides command-line tools, but repeatable deployments require explicitly maintained scripts or infrastructure definitions.
3. It provides only graphical administration of Azure.

   Cloud Shell provides command-line environments; graphical administration is provided by interfaces such as the Azure portal.
4. It provides Azure CLI and Azure PowerShell environments. ✓

   Cloud Shell supports Azure administration through both Azure CLI and Azure PowerShell environments.
5. It makes resources created through its commands free.

   Cloud Shell does not remove charges for Azure resources created or used through its commands.

Cloud Shell is browser-accessible and provides authenticated Azure CLI and PowerShell environments; it does not make resources free.

9. Azure RBAC: Which tool primarily grants the deployment permission?

1. Resource locks

   Resource locks restrict selected management operations such as deletion, rather than assigning deployment permissions.
2. Azure RBAC ✓

   Azure RBAC assigns roles to identities, controlling which management operations the development team can perform.
3. Azure Policy

   Azure Policy evaluates resource configurations and can enforce supported requirements, but it does not grant permissions.
4. Azure Advisor

   Azure Advisor provides recommendations about cost, reliability, security, performance, and operational excellence.

RBAC grants permissions; Policy evaluates or enforces resource configuration requirements.

10. Use the pricing calculator with the intended region: Which approach is most suitable?

1. Use Azure Advisor to select the cheapest region automatically.

   Advisor offers recommendations, but it does not automatically select the cheapest region for an unbuilt workload.
2. Use the pricing calculator with the intended region and configuration assumptions. ✓

   The pricing calculator estimates planned costs using selected services, regions, configurations, and stated usage assumptions.
3. Deploy identical resources in every region before comparing their invoices.

   This creates unnecessary resources and management work before the company has selected an appropriate design.
4. Choose the region nearest headquarters because proximity determines Azure service cost.

   Region can influence cost, but headquarters proximity alone does not determine service pricing or availability.

Use the pricing calculator with region and configuration assumptions, while recognizing estimates are not guaranteed invoices.

11. Azure Service Health: Which service should it use?

1. Azure Advisor

   Azure Advisor supplies personalized best-practice recommendations, not notifications about active Azure service incidents.
2. Azure Monitor

   Azure Monitor collects telemetry and supports configured alerts for metrics, logs, and other signals.
3. Azure Service Health ✓

   Azure Service Health provides relevant service issues, planned maintenance, and advisories for Azure customers.
4. Azure Resource Health

   Resource Health reports the status of a specific resource, rather than subscription-relevant Azure service issues broadly.

Service Health reports Azure service issues relevant to a customer’s resources and subscription.

12. The script performed the requested management operations: What does this result establish?

1. The signed-in identity can repeat every future deployment without any authorization changes.

   Future operations still depend on the identity's permissions, scope, context, and applicable controls.
2. The script performed the requested management operations. ✓

   Successful Azure CLI commands show that the requested operations completed under the identity and context used.
3. The deployed resources incur no charges because Azure CLI was used.

   Azure CLI is a management interface; created resources can still incur applicable Azure charges.
4. The script guarantees future deployments will satisfy every governance requirement.

   Successful commands do not guarantee that later deployments satisfy all organizational policies.

Successful CLI execution confirms the requested operations completed, not that permissions, governance, or billing changed.

Other AZ-900 domains

• Describe Azure architecture and services — 456 questions →
• Describe cloud concepts — 336 questions →
• All 1200 AZ-900 questions →
• AZ-900 certification: requirements, cost and exam format →