AZ-900 Describe Azure management and governance Practice Test 2 — 15 Questions

Question 1

Which Azure feature allows you to set a maximum amount that can be spent on Azure services within a billing period?

Accepted Answer

Azure Spending Limit. Azure Spending Limit is the feature that sets a maximum amount that can be spent on Azure services, acting as a hard cap that disables services when the limit is reached. Azure Budgets, on the other hand, are used for monitoring and alerting on spending, but they do not enforce a maximum spend limit unless you configure automation to take action. Therefore, for a maximum spend cap, the correct answer is Spending Limit.

Answer

Azure Budgets

Answer

Azure Reserved Instances

Answer

Azure Quota limits

Question 2

Which Azure portal feature enables you to manage multiple Azure cloud environments (Azure Commercial, Azure Government, Azure China) from a single location?

Accepted Answer

Azure Arc. Azure Arc is designed to manage hybrid and multi-cloud resources (e.g., on-premises, AWS, GCP) by projecting them as Azure resources in the Azure portal of the cloud where Arc is deployed. It does not bridge between Azure Commercial, Government, and China clouds. There is no portal feature that allows cross-cloud management across sovereign clouds because they are isolated by design.

Answer

Azure Management Groups spanning clouds

Answer

Azure portal with subscription filter

Answer

Azure Cloud Shell multi-tenant mode

Question 3

An organization wants to ensure new Azure subscriptions always have specific resources (policies, RBAC roles, resource groups, and ARM templates) deployed automatically. Which Azure service is BEST suited?

Accepted Answer

Azure Blueprints. Azure Blueprints is the best choice because it is designed to orchestrate the deployment of a complete environment that includes policies, RBAC roles, resource groups, and ARM templates in a repeatable, versioned manner. Unlike individual services, Blueprints packages these components into a single 'blueprint' definition that can be assigned to subscriptions to ensure consistent governance from the start.

Answer

Azure Policy

Answer

ARM templates alone

Answer

Azure DevOps pipelines

Question 4

Sequence the steps to set up Azure Active Directory (Azure AD) single sign-on (SSO) for a SaaS application.

Accepted Answer

Step 1: Register the application in Azure AD. Step 2: Configure single sign-on (e.g., SAML). Step 3: Map user attributes between Azure AD and the SaaS application. Step 4: Assign users and groups to the application. Step 5: Test the SSO configuration.. The correct sequence for setting up Azure AD SSO for a SaaS application begins with registering the application in Azure AD to create a service principal. Next, configure single sign-on (e.g., SAML) to define the SSO settings. Then, map user attributes between Azure AD and the SaaS application as part of the SSO configuration. After mapping, assign users and groups to the application to grant access. Finally, test the SSO configuration to ensure it works. This order ensures that SSO settings and attribute mapping are established before users are assigned.

Answer

Step 1: Register the application in Azure AD. Step 2: Map user attributes between Azure AD and the SaaS application. Step 3: Assign users and groups to the application. Step 4: Configure single sign-on (e.g., SAML). Step 5: Test the SSO configuration.

Answer

Step 1: Assign users and groups to the application. Step 2: Register the application in Azure AD. Step 3: Map user attributes between Azure AD and the SaaS application. Step 4: Configure single sign-on (e.g., SAML). Step 5: Test the SSO configuration.

Answer

Step 1: Configure single sign-on (e.g., SAML). Step 2: Register the application in Azure AD. Step 3: Map user attributes between Azure AD and the SaaS application. Step 4: Assign users and groups to the application. Step 5: Test the SSO configuration.

Question 5

Sequence the steps to deploy a virtual network (VNet) with subnets in Azure.

Accepted Answer

Access Azure Portal, Create Virtual Network, Define Address Space, Add Subnets, Configure DNS, Review and Create. The correct order is: Access Azure Portal → Create Virtual Network → Define Address Space → Add Subnets → Configure DNS → Review and Create. The address space must be defined before adding subnets because each subnet's address range must fall within the virtual network's address space. DNS settings are configured after subnets in the same IP Addresses tab, and Review + create is the final validation and deployment step.

Answer

Access Azure Portal, Create Virtual Network, Add Subnets, Define Address Space, Configure DNS, Review and Create

Answer

Access Azure Portal, Create Virtual Network, Configure DNS, Define Address Space, Add Subnets, Review and Create

Answer

Access Azure Portal, Create Virtual Network, Review and Create, Define Address Space, Add Subnets, Configure DNS

Question 6

A company has multiple Azure subscriptions for different departments. They want to enforce consistent policies across all subscriptions regarding allowed virtual machine sizes and require compliance reporting. Which Azure feature should they use?

Accepted Answer

Azure Policy. Azure Policy is the correct choice because it enables you to create, assign, and manage policies that enforce specific rules (such as allowed VM sizes) across multiple subscriptions. It provides built-in compliance reporting via the Compliance dashboard, showing which resources are non-compliant. Unlike Blueprints or ARM templates, Policy focuses solely on governance rules and does not deploy resources or define the environment's architecture.

Answer

Azure Blueprints

Answer

Azure Resource Manager templates

Answer

Role-Based Access Control (RBAC)

Question 7

A company uses Azure and wants to ensure that their IT team receives alerts when virtual machines are deallocated unexpectedly. Which Azure service should they use to create a rule that triggers an action when a VM is deallocated?

Accepted Answer

Azure Monitor. Azure Monitor is the correct service because it provides a unified platform for collecting, analyzing, and acting on telemetry from Azure resources. By creating an alert rule in Azure Monitor with a signal type of 'Administrative' (Azure Activity Log), you can trigger an action group (e.g., email, SMS, webhook) specifically when a virtual machine is deallocated, as this event is logged as an administrative operation in the Activity Log.

Answer

Azure Service Health

Answer

Azure Advisor

Answer

Azure Policy

Question 8

A company needs to track and optimize costs across multiple Azure subscriptions. They want to allocate budgets and receive notifications when spending exceeds forecasted amounts. Which Azure tool should they use?

Accepted Answer

Azure Cost Management. Azure Cost Management is the correct tool because it provides native capabilities to track, analyze, and optimize cloud costs across multiple subscriptions. It allows you to set budgets, configure cost alerts, and receive notifications when actual or forecasted spending exceeds defined thresholds, directly addressing the requirement for budget allocation and proactive spending notifications.

Answer

Azure Advisor

Answer

Azure Policy

Answer

Azure Budgets

Question 9

A global company wants to organize its Azure resources by department and project. They need to enforce cost allocation and apply governance policies consistently across all subscriptions. Which two Azure features should they use together? (Select two.)

Accepted Answer

Management groups. Management groups (B) are correct because they provide a hierarchical structure above subscriptions, enabling consistent governance and policy assignment across multiple subscriptions. Tags (C) are correct because they allow you to attach metadata (e.g., department and project) to resources for cost allocation and organization. Together, management groups enforce policies at scale, while tags enable granular cost tracking and reporting.

Answer

Resource groups

Answer

Azure Policies

Question 10

A company wants to ensure that all new Azure resources in a subscription are automatically tagged with a 'Department' tag. Which Azure service should they use to enforce this requirement?

Accepted Answer

Azure Policy. Azure Policy is correct because it allows you to create, assign, and manage policies that enforce specific rules on your Azure resources. In this scenario, you can use a built-in or custom policy definition to require a 'Department' tag on all new resources, and Azure Policy will automatically evaluate and enforce this rule during resource creation, preventing non-compliant resources from being provisioned.

Answer

Azure Blueprints

Answer

Azure RBAC

Answer

Azure Resource Lock

Question 11

A company has multiple Azure subscriptions for different departments. They want to receive budget alerts when spending in any subscription exceeds 80% of the allocated amount. Which Azure feature enables them to set up these alerts?

Accepted Answer

Azure Cost Management + Billing budgets. Azure Cost Management + Billing budgets allow you to create budget alerts based on actual or forecasted costs. You can set a budget amount and configure alerts to trigger when costs reach a specified percentage (e.g., 80%) of that budget. This directly meets the requirement to receive alerts when spending in any subscription exceeds 80% of the allocated amount.

Answer

Azure Advisor

Answer

Azure Monitor

Answer

Azure Policy

Question 12

A company wants to ensure that whenever a new Azure subscription is created, it automatically inherits a set of baseline policies, role assignments, and resource groups. Which Azure tool should they use to package and deploy these governance components consistently?

Accepted Answer

Azure Blueprints. Azure Blueprints is the correct tool because it is specifically designed to orchestrate the deployment of a repeatable set of Azure resources, policies, role assignments, and resource groups into a new subscription. It packages these governance components into a single blueprint definition that can be assigned to a subscription, ensuring consistent inheritance and compliance from creation.

Answer

Azure Policy

Answer

Azure Management Groups

Answer

Azure Resource Manager templates

Question 13

A company wants to deploy a standardized environment that includes Azure Policy assignments, RBAC roles, and resource group templates. They need to version these components and apply them to multiple subscriptions. Which Azure service should they use?

Accepted Answer

Azure Blueprints. Azure Blueprints is the correct service because it is designed to orchestrate the deployment of a standardized environment by packaging Azure Policy assignments, RBAC roles, and resource group templates into a single, versioned, and repeatable artifact. It allows you to assign these components to multiple subscriptions while maintaining a consistent configuration and tracking changes through versioning.

Answer

Azure Policy

Answer

Azure Resource Manager

Answer

Azure Management Groups

Question 14

A company has multiple Azure subscriptions. The finance team needs to analyze spending trends and create budgets to prevent cost overruns. Which Azure tool should they use to visualize historical spending and set budget alerts?

Accepted Answer

Azure Cost Management + Billing. Azure Cost Management + Billing is the correct tool because it provides native capabilities for analyzing historical spending trends, creating budgets, and setting cost-based alerts. It integrates directly with Azure's billing data to visualize costs across subscriptions and resource groups, and its budget alerts can trigger actions (e.g., email notifications or automation runbooks) when spending exceeds defined thresholds.

Answer

Azure Advisor

Answer

Azure Policy

Answer

Azure Monitor

Question 15

A company uses Azure Policy to enforce that all virtual machines must be from an approved list of SKUs. They want to ensure that any non-compliant VMs that already exist are automatically remediated by changing the VM size to a compliant SKU. Which policy effect should they use?

Accepted Answer

Modify. The Modify effect is correct because it allows Azure Policy to automatically change non-compliant resources to a compliant state during evaluation. In this scenario, it can alter the VM size to an approved SKU without manual intervention, ensuring continuous compliance.

Answer

Deny

Answer

Audit

Answer

Append