AZ-900Questions 21-30Management & GovernanceAnswers Hidden
AZ-900 Questions 21-30: Management, Governance, and Cost Tools
This AZ-900 practice set continues the Microsoft Azure Fundamentals series with original exam-style questions on resource organization, Azure Policy, locks, cost tools, monitoring, Service Health, Advisor, and management interfaces.
Series position: Continue here after AZ-900 Questions 11-20: Azure Compute, Networking, and Storage. This batch moves into the management and governance skills that show up often in fundamentals-level Azure exams.
Exam code
AZ-900: Microsoft Azure Fundamentals
AZ-900: Microsoft Azure Fundamentals
Question range
21-30
21-30
Domain focus
Azure management and governance
Azure management and governance
Practice mode
Choose first, then reveal the answer
Choose first, then reveal the answer
Practice mode: Answers are hidden by default. Pick your answer first, then click Reveal answer and explanation. That small pause is where the learning happens.
Questions
Question 21
A company wants to group related Azure resources so they can be deployed, monitored, and deleted together as one logical unit within a subscription. What should it use?
Reveal answer and explanation
Correct answer: B. Resource group
A resource group is a logical container for Azure resources. It is commonly used to manage resources that share the same lifecycle.
A resource group is a logical container for Azure resources. It is commonly used to manage resources that share the same lifecycle.
Why the others are wrong: Availability zones are physical datacenter locations within a region. Management groups organize subscriptions. Region pairs are used for resiliency and platform update sequencing.
Objective: Describe Azure resources and resource groups.
Question 22
An administrator wants to prevent users from creating resources outside approved Azure regions. Which service should be used to enforce this rule?
Reveal answer and explanation
Correct answer: A. Azure Policy
Azure Policy helps enforce organizational standards and evaluate compliance, including restrictions on allowed locations.
Azure Policy helps enforce organizational standards and evaluate compliance, including restrictions on allowed locations.
Why the others are wrong: Monitor collects and analyzes telemetry. Advisor recommends improvements. Service Health reports Azure service issues that may affect resources.
Objective: Describe features and tools for governance and compliance.
Question 23
A production resource group must not be accidentally deleted, but authorized administrators should still be able to modify resources inside it. Which lock type best matches this requirement?
Reveal answer and explanation
Correct answer: B. Delete lock
A Delete lock, also called CanNotDelete, prevents deletion while still allowing authorized users to read and modify the resource.
A Delete lock, also called CanNotDelete, prevents deletion while still allowing authorized users to read and modify the resource.
Why the others are wrong: ReadOnly prevents modification as well as deletion. CanNotRead and Contributor lock are not Azure resource lock types.
Objective: Describe Azure management and governance features.
Question 24
Before deploying a new solution, an architect wants to estimate the monthly cost of selected Azure services and compare configuration options. Which tool should be used?
Reveal answer and explanation
Correct answer: A. Azure Pricing Calculator
The Azure Pricing Calculator estimates costs for Azure products and configurations before deployment.
The Azure Pricing Calculator estimates costs for Azure products and configurations before deployment.
Why the others are wrong: The TCO Calculator compares on-premises costs with Azure over time. Defender for Cloud improves security posture. Service Health tracks service incidents and maintenance.
Objective: Describe cost management in Azure.
Question 25
A CIO wants a high-level estimate of how much money might be saved by moving existing on-premises workloads to Azure. Which tool is most appropriate?
Reveal answer and explanation
Correct answer: B. Total Cost of Ownership Calculator
The TCO Calculator estimates cost savings by comparing on-premises infrastructure costs with running workloads in Azure.
The TCO Calculator estimates cost savings by comparing on-premises infrastructure costs with running workloads in Azure.
Why the others are wrong: Pricing Calculator estimates Azure service pricing. Monitor collects telemetry. Azure Resource Manager provides the deployment and management layer for Azure resources.
Objective: Describe planning and cost management tools.
Question 26
A finance team wants to report Azure costs by department, application, and environment. What should be applied consistently to resources?
Reveal answer and explanation
Correct answer: A. Tags
Tags are name-value pairs that help organize resources and support cost reporting by metadata such as department or environment.
Tags are name-value pairs that help organize resources and support cost reporting by metadata such as department or environment.
Why the others are wrong: Availability sets improve VM availability. NSGs filter network traffic. Region pairs support regional resiliency patterns.
Objective: Describe Azure cost management and governance.
Question 27
A team needs to collect metrics and logs from Azure resources, analyze performance trends, and create alerts. Which Azure service should be used?
Reveal answer and explanation
Correct answer: A. Azure Monitor
Azure Monitor collects, analyzes, and acts on telemetry from cloud and hybrid environments, including metrics, logs, and alerts.
Azure Monitor collects, analyzes, and acts on telemetry from cloud and hybrid environments, including metrics, logs, and alerts.
Why the others are wrong: Azure Policy enforces rules. Azure Blueprints is a governance/deployment packaging concept. ExpressRoute provides private network connectivity.
Objective: Describe monitoring tools in Azure.
Question 28
An administrator wants personalized alerts about Azure service incidents, planned maintenance, and health advisories that may affect the organization’s resources. Which tool should be used?
Reveal answer and explanation
Correct answer: B. Azure Service Health
Azure Service Health provides personalized guidance and alerts for Azure service issues, planned maintenance, and health advisories.
Azure Service Health provides personalized guidance and alerts for Azure service issues, planned maintenance, and health advisories.
Why the others are wrong: Advisor provides best-practice recommendations. Cost Management analyzes spending. Cloud Shell is a browser-based command-line environment.
Objective: Describe Azure Service Health and monitoring tools.
Question 29
A subscription owner wants recommendations to improve cost, security, reliability, operational excellence, and performance for deployed Azure resources. Which tool should they review?
Reveal answer and explanation
Correct answer: A. Azure Advisor
Azure Advisor provides personalized recommendations to optimize Azure deployments across areas such as cost, security, reliability, operational excellence, and performance.
Azure Advisor provides personalized recommendations to optimize Azure deployments across areas such as cost, security, reliability, operational excellence, and performance.
Why the others are wrong: Marketplace provides solutions and services. DNS hosts DNS zones. Bastion provides secure browser-based access to virtual machines.
Objective: Describe Azure Advisor.
Question 30
A user is working in the Azure portal and wants a browser-based command-line environment with Azure CLI and PowerShell already available. Which feature should they open?
Reveal answer and explanation
Correct answer: A. Azure Cloud Shell
Azure Cloud Shell is an authenticated browser-based shell experience that provides access to tools such as Azure CLI and Azure PowerShell.
Azure Cloud Shell is an authenticated browser-based shell experience that provides access to tools such as Azure CLI and Azure PowerShell.
Why the others are wrong: Storage Explorer manages storage resources. Resource Graph Explorer queries resource metadata. The Microsoft Entra admin center manages identity-related configuration.
Objective: Describe tools for managing and deploying Azure resources.
Answer key
Reveal full answer key
| Question | Correct answer | Objective area |
|---|---|---|
| 21 | B | Resource groups |
| 22 | A | Azure Policy |
| 23 | B | Resource locks |
| 24 | A | Pricing Calculator |
| 25 | B | TCO Calculator |
| 26 | A | Tags and cost reporting |
| 27 | A | Azure Monitor |
| 28 | B | Azure Service Health |
| 29 | A | Azure Advisor |
| 30 | A | Azure Cloud Shell |
Watch out: AZ-900 governance questions often include several real Azure tools. Separate enforcement from recommendation from monitoring: Policy enforces, Advisor recommends, Monitor observes, and Service Health reports service-impacting events.
Next in the series: Continue with AZ-900 Questions 31-40 for more management, security, and cloud value scenarios.
Sources
- Microsoft Learn: Study guide for Exam AZ-900
- Microsoft Learn: Manage Azure resource groups
- Microsoft Learn: Azure Policy overview
- Microsoft Learn: Lock resources to prevent changes
- Microsoft Azure Pricing Calculator
- Microsoft Azure TCO Calculator
- Microsoft Learn: Azure Monitor overview
- Microsoft Learn: Azure Service Health overview
- Microsoft Learn: Azure Advisor overview
- Microsoft Learn: Azure Cloud Shell overview
