A municipal CIO wants personalized guidance to improve cost, security, reliability, and operational excellence across the city's Azure subscriptions. Which service provides those recommendation categories?

Azure Advisor analyzes the city's Azure usage and produces personalized recommendations grouped into categories such as cost, security, reliability, and operational excellence. That is exactly the coaching layer a municipal CIO needs when the goal is to improve how existing subscriptions are run rather than to watch platform outages or open remote desktop sessions. Advisor scores and recommendations are tailored to the resources the city actually deploys.

Azure Service Health fails here because it tracks Azure service incidents, planned maintenance, and health history—not multi-category best-practice coaching. Azure Blueprints only fails because Blueprints (and related deployment-governance packaging concepts) are about orchestrating environment deployment and policy artifacts, not the ongoing personalized recommendation engine Advisor provides. Azure Bastion fails because Bastion is a managed PaaS jump host for secure RDP/SSH into VMs without public IPs—it does not recommend cost or reliability improvements across subscriptions.

Exam caveat: Advisor recommends; it does not automatically remediate every finding. The CIO still decides which recommendations to accept and which tools (for example Defender for Cloud) handle deeper security operations.

Operational check: open Advisor in the Azure portal for a municipal subscription, switch among cost, security, reliability, and operational excellence views, and confirm recommendations appear scoped to the city's resources rather than generic global tips.