AZ-900 Questions 71-80: Governance, Monitoring, and Deployment Tools

0
0
AZ-900Questions 71-80Original PracticeAnswers Hidden

AZ-900 Questions 71-80: Governance, Monitoring, and Deployment Tools

Continue the AZ-900 practice bank with 10 original exam-style questions focused on enterprise management, compliance, monitoring, and deployment. Choose your answer first, then reveal the explanation.

Series position: This continues the AZ-900 sequence after the previous 10-question batch. The goal is a complete, reviewable Microsoft Azure Fundamentals practice bank from Questions 1-100.
Exam code
AZ-900
Question range
71-80
Format
Single-best-answer practice
Status
Original questions, source-grounded
Practice mode: Answers are hidden by default. Decide on A, B, C, or D before opening the reveal panel.

Questions

Question 71

Single answerManagement groups
An enterprise has many Azure subscriptions and wants to apply governance controls above the subscription level. What should it use?
  • A. Management groups
  • B. Availability sets
  • C. Storage containers
  • D. Public IP prefixes
Reveal answer and explanation
Correct answer: A. Management groups
Management groups organize subscriptions and allow governance settings to be applied at scale.
Why the others are wrong: The other resources do not provide governance hierarchy above subscriptions.

Objective: Management groups.

Question 72

Single answerPolicy initiatives
A governance team wants to group multiple Azure Policy definitions into one compliance assignment. What should it create?
  • A. An initiative
  • B. A storage queue
  • C. A virtual network peering
  • D. A service endpoint
Reveal answer and explanation
Correct answer: A. An initiative
An Azure Policy initiative groups multiple policy definitions for assignment and compliance tracking.
Why the others are wrong: The other options are storage or networking features.

Objective: Policy initiatives.

Question 73

Single answerCompliance view
An administrator wants to see which resources are compliant or noncompliant with assigned policies. Where should they look?
  • A. Azure Policy compliance results
  • B. Azure DNS record sets
  • C. Azure Bastion sessions
  • D. Azure Pricing Calculator estimates
Reveal answer and explanation
Correct answer: A. Azure Policy compliance results
Azure Policy provides compliance evaluation for assigned policy definitions and initiatives.
Why the others are wrong: The other tools do not evaluate policy compliance.

Objective: Compliance view.

Question 74

Single answerResource queries
A cloud team wants to query resource metadata across subscriptions using a fast inventory query language. Which tool fits?
  • A. Azure Resource Graph
  • B. Azure Key Vault
  • C. Azure Load Balancer
  • D. Azure DDoS Protection
Reveal answer and explanation
Correct answer: A. Azure Resource Graph
Azure Resource Graph is designed for querying Azure resource metadata at scale.
Why the others are wrong: The other services do not provide cross-resource inventory querying.

Objective: Resource queries.

Question 75

Single answerIaC
A platform team wants declarative infrastructure-as-code using a simpler language that compiles to ARM templates. Which language should they use?
  • A. Bicep
  • B. Kusto Query Language only
  • C. Power BI DAX
  • D. HTML
Reveal answer and explanation
Correct answer: A. Bicep
Bicep is a domain-specific language for deploying Azure resources declaratively.
Why the others are wrong: KQL queries data, DAX models analytics, and HTML structures web pages.

Objective: IaC.

Question 76

Single answerBrowser shell
An admin cannot install tools locally but needs Azure CLI from a browser. Which feature should they use?
  • A. Azure Cloud Shell
  • B. Azure Firewall
  • C. Azure Files snapshots
  • D. Azure Advisor score
Reveal answer and explanation
Correct answer: A. Azure Cloud Shell
Azure Cloud Shell provides browser-based access to Azure CLI and Azure PowerShell.
Why the others are wrong: The other options are unrelated to command-line access.

Objective: Browser shell.

Question 77

Single answerLog workspace
A team wants to run Kusto queries against collected logs from Azure resources. Which workspace is commonly used?
  • A. Log Analytics workspace
  • B. Recovery Services vault only
  • C. Availability set
  • D. Management group only
Reveal answer and explanation
Correct answer: A. Log Analytics workspace
Log Analytics workspaces store logs that can be queried with Kusto Query Language.
Why the others are wrong: Recovery Services vaults store backup/replication data, while availability sets and management groups do not store logs.

Objective: Log workspace.

Question 78

Single answerMetrics alerts
A VM should alert the operations team when CPU stays above a threshold. Which Azure capability fits?
  • A. Azure Monitor alert rule
  • B. Azure Policy exemption
  • C. Azure Marketplace plan
  • D. Microsoft Entra tenant
Reveal answer and explanation
Correct answer: A. Azure Monitor alert rule
Azure Monitor alert rules can notify teams based on metrics or log query conditions.
Why the others are wrong: The other options do not create performance threshold alerts.

Objective: Metrics alerts.

Question 79

Single answerApp telemetry
Developers want request rates, failures, dependencies, and performance telemetry for a web application. Which feature should they use?
  • A. Application Insights
  • B. Azure DDoS Protection
  • C. Azure Private DNS
  • D. Azure Blueprints only
Reveal answer and explanation
Correct answer: A. Application Insights
Application Insights is an application performance monitoring feature of Azure Monitor.
Why the others are wrong: The other tools do not provide app-level telemetry and dependency tracking.

Objective: App telemetry.

Question 80

Single answerCLI choice
A script needs to manage Azure resources from Linux, macOS, or Windows using a cross-platform command-line tool. Which tool fits?
  • A. Azure CLI
  • B. Azure Portal only
  • C. Remote Desktop only
  • D. Service Trust Portal
Reveal answer and explanation
Correct answer: A. Azure CLI
Azure CLI is a cross-platform command-line tool for managing Azure resources.
Why the others are wrong: The portal is graphical, Remote Desktop is for Windows sessions, and Service Trust Portal provides compliance documents.

Objective: CLI choice.

Answer key

Reveal full answer key
QuestionCorrect answerObjective area
71AManagement groups
72APolicy initiatives
73ACompliance view
74AResource queries
75AIaC
76ABrowser shell
77ALog workspace
78AMetrics alerts
79AApp telemetry
80ACLI choice
Exam tip: AZ-900 questions usually reward the simplest Azure service or concept that exactly matches the requirement. Watch for distractors that are real services but solve a different problem.
Next: Continue with AZ-900 Questions 81-90 for cloud concepts and service model review.

Sources

📚 More questions from: AZ-900: Microsoft Azure Fundamentals

Related QuestionMORE FROM AUTHOR