20+ practice questions focused on Describe Azure management and governance — one of the most tested topics on the Microsoft Azure Fundamentals AZ-900 exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Describe Azure management and governance PracticeA company uses Azure Resource Manager templates to deploy and manage infrastructure. They need to ensure that resources are deployed in a consistent, repeatable manner across environments. Which two benefits does using ARM templates provide? (Choose two.)
Explanation: ARM templates use declarative syntax, meaning you define the desired state of your infrastructure rather than scripting the steps to achieve it. This makes deployments idempotent: running the same template multiple times produces the same result, ensuring consistency across environments without side effects. Additionally, ARM templates are JSON files that can be versioned and stored in source control, enabling Infrastructure as Code with change tracking and peer review alongside application code.
A company has multiple Azure subscriptions. The IT team wants to apply common policies and role assignments across all subscriptions automatically when a new subscription is created. Which Azure service should they use?
Explanation: Azure Management Groups is the correct service because policies and role assignments applied at the management group scope are inherited by all subscriptions within that group. When a new subscription is created and placed in the management group, it automatically inherits these assignments, ensuring consistent governance without additional orchestration. Azure Blueprints can also deploy policies and role assignments, but it is primarily used for orchestrating a full environment of resources and artifacts, and it is not the standard mechanism for continuous inheritance across all subscriptions.
A company wants to enforce a naming convention for all Azure resources. For example, all resources must start with 'Contoso-'. They want to automatically audit and deny creation of resources that do not follow the naming convention. Which Azure Policy effect should they use?
Explanation: The Deny effect is correct because it actively prevents the creation of Azure resources that do not match the defined naming convention rule, such as requiring all resources to start with 'Contoso-'. This effect evaluates the resource against the policy rule during deployment and rejects the request with a 403 Forbidden status if the condition is not met, ensuring compliance before the resource is created.
A company wants to ensure a specific resource group cannot be deleted, but they also need to be able to delete it temporarily during maintenance windows. Which approach allows the most granular control?
Explanation: A 'CanNotDelete' resource lock prevents deletion of a resource group and its resources, but it can be removed and reapplied as needed, providing granular control during maintenance windows. This approach allows temporary deletion by removing the lock, performing the deletion, and then reapplying the lock afterward. It is the only option that directly supports the requirement for both protection and temporary removal without permanent configuration changes.
A company has a resource group named 'RG-Prod' that contains critical virtual machines, a SQL database, and a storage account. The infrastructure team needs to ensure that no one can accidentally delete this resource group or any of its resources. However, users must still be able to create, update, and delete individual resources within the group as needed for normal operations. Which type of Azure Resource Lock should the team apply to 'RG-Prod'?
Explanation: To allow creation, update, and deletion of individual resources while protecting the resource group itself, you should not apply a resource lock at the resource group level. Instead, apply CanNotDelete locks to each critical resource individually, or use role-based access control (RBAC) to restrict deletion of the resource group. Since none of the provided options describes this correct approach, no option is valid as stated.
+15 more Describe Azure management and governance questions available
Practice all Describe Azure management and governance questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Describe Azure management and governance. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Describe Azure management and governance questions on the AZ-900 frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Describe Azure management and governance is tested as part of the Microsoft Azure Fundamentals AZ-900 blueprint. Practicing with targeted Describe Azure management and governance questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free AZ-900 practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Describe Azure management and governance is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Describe Azure management and governance practice session with instant scoring and detailed explanations.
Start Describe Azure management and governance Practice →