Describe Azure management and governance

AZ-900 · 100 questions

• A county IT lead is sizing a new virtual machine for the assessor's after-hours batch job and notices larger VM families list higher hourly rates. Which cost factor is the lead primarily recognizing?
• A city planner wants the same web app footprint in two Azure regions and asks why the estimated monthly bill differs even when SKUs match. Which cost factor explains that difference?
• A municipal communications office streams town-hall video to citizens from Azure Blob Storage and sees rising charges tied to data leaving Azure toward the public internet. Which cost factor is primarily at work?
• A town finance committee expects a library app's VMs to run continuously for three years and wants lower compute rates than month-to-month pay-as-you-go. Which cost factor are they evaluating?
• After a parks pilot ends, a city engineer leaves unattached managed disks and unused public IP addresses in the subscription. Why can those leftovers still increase the Azure bill?
• A county GIS team doubles the hours its analysis VMs run and triples the gigabytes stored for parcel maps. Which cost factor describes what is driving the higher bill?
• A municipal records office stores the same archive dataset but switches from standard storage to a premium performance tier for faster access. Which cost factor does that change highlight?
• Before deploying a new 311 citizen-request stack, a city architect needs an approximate monthly Azure cost for proposed VMs, App Service, and storage. Which tool is designed for that pre-deployment estimate?
• A finance analyst treats an Azure pricing calculator worksheet as the city's official invoice for last month's Azure usage. What distinction should the cloud lead correct?
• For a grant proposal, a county cloud team must show one estimate that includes virtual machines, storage capacity, and outbound bandwidth together. How does the Azure pricing calculator support that need?
• A disaster-recovery plan for the water utility needs a cost comparison of the same proposed resources in two Azure regions before choosing a secondary site. Which pricing calculator capability fits that task?
• A municipal CIO wants finance reviewers to open the same Azure cost estimate the architects built, without rebuilding every line item. Which pricing calculator purpose does sharing an estimate link support?
• After the city clerk's office deploys its Azure resources, a manager asks which tool shows actual spend analysis versus which tool was only for the pre-build estimate. Which statement is accurate?
• A town council asks for a rough Azure spend figure before approving a new citizen-portal project. Which Azure tool should the project lead use for that what-if cost estimate?
• The parks department wants an email when its Azure subscription spend approaches a monthly limit. Which Azure Cost Management capability addresses that need?
• A city controller asks which resource group spent the most on Azure last month so departments can explain their cloud use. Which Cost Management capability answers that question?
• County finance needs Azure cost figures loaded into its ERP for month-end close. Which Cost Management theme best describes exporting cost data for that workflow?
• A municipal cloud office already deployed production resources and now needs ongoing visibility and control of Azure spend. Why is the pricing calculator alone insufficient?
• Cost reviews show a city's non-production lab VMs run twenty-four hours a day though staff only work weekdays. Which cost-control practice follows from that Cost Management insight?
• A city wants each department to pay for its own Azure usage and needs spend broken out by agreed scopes. Which Cost Management capability theme supports that chargeback goal?
• A new hire claims Azure Cost Management stops all overspend automatically with no budgets, alerts, or reviews configured. Which statement correctly describes the purpose of those tools?
• A parks department applies Department=Parks and CostCenter=4410 on its Azure resources so finance can attribute cloud spend. What is the purpose of those tags?
• Operations wants Cost Management views that show only resources tagged Environment=Prod for the transit agency. How do tags help?
• A help-desk technician says applying the tag Owner=Library both locks the resource from deletion and grants the library staff Contributor rights. Which clarification is correct?
• A city Azure estate uses different spellings and keys for the same ideas across departments, which breaks cost reports. What tagging practice improves governance and reporting?
• A city finance office cannot allocate Azure spend back to parks, utilities, and public works because many resources have no CostCenter label. Why do resource tags matter for municipal chargeback?
• A county IT operations lead wants tags that help on-call staff find the right owner and application, not only finance codes. Which statement best describes the purpose breadth of Azure resource tags?
• A municipal data office needs one place to catalog datasets, sensitivity labels, and governance visibility across Azure data estates. Which service’s purpose in Azure best matches that need?
• A city architect says Microsoft Purview will stop staff from creating untagged resource groups the way Azure Policy does. What distinction should the team correct?
• Compliance staff need to discover where citizen personally identifiable information datasets live across many Azure subscriptions. Which Purview-oriented purpose best describes that goal?
• City compliance officers want classification and lineage themes for civic datasets stored in Azure. At fundamentals depth, which purpose of Microsoft Purview addresses that request?
• A training lead reminds staff that AZ-900 only needs the purpose of Microsoft Purview—not a Purview administrator lab. Which statement stays at that fundamentals depth?
• A county records manager asks which Azure tool family addresses data governance cataloging across the city’s cloud data estate. Which choice should the cloud lead recommend?
• A parks department analyst asks whether Microsoft Purview is the tool that deploys new virtual machines for seasonal staff. What should the trainer explain?
• A city security baseline must deny creation of public IP addresses in a production subscription. Which Azure capability’s purpose best matches enforcing that resource configuration rule?
• Municipal cloud governance wants to know whether every resource has a required Department tag without immediately blocking deployments. Which Azure Policy theme best fits?
• A new hire confuses Azure Policy with Azure role-based access control. Which contrast is accurate for AZ-900?
• A state agency groups several related Azure Policy definitions so subscriptions can be measured against one compliance set. At describe depth, what does that illustrate about Azure Policy?
• Citizen data residency rules require that Azure resources for a city remain only in an approved list of regions. Which Azure Policy purpose best supports that geo-compliance goal?
• A statewide Azure governance team assigns an Azure Policy at a management group that contains every city subscription. What inheritance behavior should municipal IT expect?
• An intern starts drafting lengthy custom Azure Policy JSON for the fundamentals study group. What should the mentor emphasize for AZ-900?
• The city’s production resource group must not be deleted by accident, but administrators still need to update settings inside it. Which lock purpose fits?
• A court-records configuration in Azure must remain unchanged—no updates and no deletes—until a change window is approved. Which lock type purpose matches?
• Even a subscription Owner cannot delete a locked production vault until the lock is removed. What fundamentals idea about resource locks does that illustrate?
• A utilities clerk asks whether applying a CostCenter tag is enough to stop accidental deletion of a billing API. Which distinction is correct?
• City platform engineers want one control that protects every resource inside the production resource group from accidental deletion. Where should they apply a CanNotDelete lock for that inheritance effect?
• A junior admin nearly deleted the city’s payroll virtual machines during a cleanup. Which governance control is best described as a last-line safeguard against accidental delete?
• A library IT specialist prefers to create a virtual machine by clicking through forms in a browser. Which Azure management interface’s purpose matches that approach?
• Municipal engineers debate whether the Azure portal is the only way to manage Azure. How should a fundamentals trainer describe the portal specifically?
• City operations staff want visual dashboards and blade-style navigation rather than scripting to check service status. Which management experience is designed for that preference?
• A county clerk needs to create a storage account from a shared kiosk PC that has no Azure admin tools installed. Which Azure management experience fits that constraint?
• A city operations lead wants nightly automation for non-production VMs but still needs a clickable place for one-off creates and reviews. How should the team think about the Azure portal?
• A first-time municipal admin needs a friendly place to browse Azure services and start creating a new resource. Which surface is the usual interactive starting point?
• A library IT tech wants a command-line Azure session from a browser with tools already available and authentication already handled for the signed-in account. Which service matches that need?
• A cross-platform city scripting team prefers Bash-style commands to manage Azure resources from terminals and scripts. Which tool fits that preference at fundamentals depth?
• A Windows-oriented municipal admin prefers cmdlets and PowerShell scripts to manage Azure. Which Azure tool matches that skill preference?
• A parks department laptop has limited local installs, but staff still need either Azure CLI or Azure PowerShell in a browser session. What is Cloud Shell’s role in that picture?
• A county wants non-production VMs stopped every night and started each morning without an operator clicking through the portal. Which approach matches that automation goal?
• Two city teams both need to automate Azure resource management; one prefers Bash-style CLI and the other prefers PowerShell cmdlets. What fundamentals statement is accurate?
• A security vendor claims Cloud Shell replaces the need to design Conditional Access policies for the city’s Microsoft Entra ID tenant. What is the accurate fundamentals correction?
• A librarian’s laptop has no Azure CLI or Azure PowerShell installed, yet the librarian must run a few Azure management commands today. What option still works?
• A city keeps servers in its own datacenter and wants those machines visible under Azure-style management and governance alongside cloud resources. Which service theme fits?
• A vendor slide labels “Azure Arc” as if it were simply another Azure region code next to East US. What correction should the municipal architect make?
• A county wants Azure Policy–style governance themes applied to servers that still run in its datacenter. Which Azure approach describes that goal at fundamentals depth?
• A city runs Kubernetes clusters and servers in another public cloud and wants a consistent Azure management theme across that multi-cloud estate. Which service aligns?
• A network engineer says ExpressRoute and Azure Arc solve the same problem for the city’s hybrid estate. What distinction should the team learn?
• A city will keep some citizen apps on-premises for years but wants one Azure-oriented governance pane for those servers plus cloud resources. Which choice fits?
• A municipal team must stand up matching test and production environments without rebuilding everything through one-off portal clicks. What practice addresses that goal?
• City IT wants reviewers to see how proposed Azure environment definitions changed over time before anything goes live. Which IaC benefit supports that need?
• Two county branch offices keep ending up with slightly different Azure setups after manual portal builds. What IaC idea reduces that configuration drift?
• During training, staff mix up “infrastructure as code” with “ARM templates.” How should the instructor separate the two ideas?
• A DevOps consultant wants the AZ-900 class to author multi-stage release pipelines as the definition of infrastructure as code. What fundamentals-level correction is appropriate?
• A regional library system needs twenty nearly identical Azure environments for branch sites and finds portal-only builds too slow and inconsistent. What approach matches the scale need?
• A city diagram needs a one-line definition of Azure Resource Manager for new staff. Which statement is accurate?
• A municipal engineer asks what an ARM template is at Azure Fundamentals depth. Which description is correct?
• A city IT team deploys a storage account from the Azure portal, then creates a virtual network with Azure CLI, and later updates a resource group with Azure PowerShell. Which Azure capability do all three methods use as the common control plane?
• A civic permitting app must be stood up the same way in test and production, with matching App Service plans, storage, and networking. Which approach best creates that consistent set of resources?
• A municipal cloud architect says an ARM template will block any resource that lacks a required cost-center tag. Which statement correctly separates ARM templates from Azure Policy?
• During AZ-900 review, a county trainee asks what an ARM template is mainly for at the fundamentals level. What is the best description?
• A city DevOps team redeploys the same ARM template to a resource group after a small configuration drift. What benefit of infrastructure as code with ARM does this illustrate?
• A municipal CIO wants personalized guidance to improve cost, security, reliability, and operational excellence across the city's Azure subscriptions. Which service provides those recommendation categories?
• Azure Advisor reports that several city VMs have very low CPU and memory use over time and suggests smaller sizes. What type of guidance is this?
• Citizens report slow access to a permit portal. Staff open Azure Advisor and see only cost-saving tips, not whether Azure itself is having an incident. Which tool should they use for live Azure service issue status?
• A town's security liaison reviews Azure Advisor and finds recommendations such as enabling multifactor authentication and closing exposed management ports. At AZ-900 depth, what does this illustrate?
• Each Monday a city CIO reviews personalized Azure best-practice suggestions to improve the municipal cloud estate. Which tool should the CIO open?
• A department ignores Azure Advisor recommendations for a month. What is the most accurate statement about that choice?
• A municipal cloud team wants to prioritize hygiene work by grouping Azure Advisor tips into themes such as cost and reliability. How does Advisor help with that prioritization?
• An Azure outage in East US is affecting several of a city's applications. Which service should staff use to track Azure platform service issues that impact their subscriptions?
• A county operations lead needs advance notice of planned Azure maintenance for services the county uses. Which Azure capability is intended for that communication?
• A city VM stops responding because a custom application process crashed after a bad code deploy. An admin checks Azure Service Health and finds no platform incident. What does this scenario illustrate?
• A water utility wants an email when an Azure service it depends on degrades or has an incident. Which Service Health capability theme supports that need?
• A parks department needs CPU percentage charts for its own App Service, not Microsoft's platform incident feed. Which pairing correctly contrasts the tools?
• After a platform incident, a city compliance officer wants to review Microsoft's status history and related communications for services the city uses. Which service family supports that describe-level need?
• A municipal ops center wants one Azure platform for collecting and analyzing metrics and logs from resources and applications. Which service is designed for that purpose?
• Analysts for a city need to query logs collected across many Azure resources from a central workspace. Which Azure Monitor-related capability is intended for that log querying and analysis?
• A library IT team wants an email whenever a VM's CPU stays above 90 percent for five minutes. Which Azure capability should they use?
• A city web portal team wants application performance monitoring—request rates, failures, and dependency insights—for their Azure-hosted web app. Which service purpose matches that need at fundamentals depth?
• Which statement best describes Azure Monitor at a fundamentals level for a municipal IT audience?
• An AZ-900 study group argues about whether candidates must write SDK code to wire Application Insights into an app. What is the correct fundamentals-level expectation?
• A municipal ops center needs one place to view resource metrics and configure alert rules for Azure workloads. Which service should they choose?