This chapter covers Azure Advisor, a free, built-in service that provides personalized recommendations to help you optimize your Azure resources for cost, security, reliability, operational excellence, and performance. For the AZ-900 exam, understanding Azure Advisor is part of the 'Azure Management and Governance' domain (15–20% of the exam). You need to know what Advisor does, its five recommendation categories, how to access it, and how it differs from other monitoring tools like Azure Monitor or Security Center. This chapter will give you the depth to confidently answer any Advisor question on the exam.
Jump to a section
Imagine you run a small chain of coffee shops. You have a part-time consultant, Alex, who visits each shop monthly. Alex walks through every area: the espresso machine (your virtual machines), the milk fridge (storage), the Wi-Fi router (networking), and the cash register (database). Alex doesn't change anything himself but gives you a prioritized list of recommendations: "Shop A's espresso machine is idle 40% of the time — downsize to a smaller model to save on electricity. Shop B's milk fridge is set to -2°C, but dairy only needs 4°C — raise the temperature to cut power usage. Shop C's Wi-Fi router is outdated and vulnerable — upgrade to the new model for free from your internet provider." Each recommendation includes the estimated monthly savings and risk level. You decide which to implement. Alex returns next month to check progress and give new advice. Azure Advisor works exactly like Alex: it continuously analyzes your Azure resources, compares them against best practices, and delivers personalized recommendations in five categories: Cost, Security, Reliability, Operational Excellence, and Performance. It doesn't make changes automatically (unless you enable autofix for certain recommendations). It's a free service built into Azure, available in the portal, via CLI, or API. The mechanism is a rules engine that scans your resource configurations and usage telemetry, then scores each recommendation by potential impact.
What is Azure Advisor and What Business Problem Does It Solve?
Azure Advisor is a personalized cloud consultant that continuously analyzes your Azure resources and provides recommendations to follow best practices. The core business problem it solves is the complexity of managing a cloud environment. In on-premises data centers, you had full control but limited visibility into optimization opportunities across hundreds of servers. In the cloud, you can provision resources rapidly, but that leads to sprawl, wasted spend, security gaps, and performance bottlenecks. Advisor automates the analysis of your entire Azure estate and presents actionable insights in a single dashboard.
For example, a company with 50 virtual machines might not realize that 10 of them are consistently underutilized (CPU usage below 5% for 95% of the time). Advisor detects this and recommends downsizing or shutting them down, potentially saving thousands of dollars per month. Similarly, it can identify that a storage account is configured with locally redundant storage (LRS) when the workload requires geo-redundant storage (GRS) for disaster recovery, flagging a reliability risk.
How Does Azure Advisor Work? A Step-by-Step Mechanism
Azure Advisor operates through a continuous, automated analysis engine. Here's the mechanism:
Data Collection: Advisor collects telemetry, configuration data, and usage patterns from your Azure resources. This includes metrics like CPU utilization, memory usage, network throughput, storage transactions, and security configurations. Data is aggregated across your subscriptions.
Rule Evaluation: Advisor applies a set of predefined rules (best practices) to the collected data. These rules are defined by Microsoft based on Azure engineering teams' expertise, customer feedback, and industry standards. Each rule falls into one of five categories: Cost, Security, Reliability, Operational Excellence, or Performance.
Scoring and Prioritization: Each recommendation is scored based on its potential impact (e.g., cost savings amount, risk reduction level). Advisor then ranks recommendations from high to low impact. You can filter by category, resource type, or impact level.
Presentation: Recommendations appear in the Azure Advisor dashboard, accessible via the Azure portal. You can also retrieve them programmatically via Azure CLI, PowerShell, or REST API. Each recommendation includes a description, suggested action, estimated benefit (e.g., cost savings per month), and a link to implement it.
Action and Follow-up: You can apply recommendations directly from the dashboard (e.g., resize a VM, enable backup). Advisor does not make changes automatically by default, but you can enable the 'Automatic recommendations' feature for certain Cost recommendations to automatically apply them. Advisor continues to monitor and will update recommendations as resources change.
Key Components and Recommendation Categories
Azure Advisor organizes recommendations into five categories:
Cost: Recommendations to optimize spending by identifying idle or underutilized resources, right-sizing VMs, reserving instances, and eliminating unprovisioned ExpressRoute circuits. Example: "Resize or shut down underutilized virtual machines" with estimated monthly savings.
Security: Recommendations to improve security posture, such as enabling Azure Defender, applying disk encryption, using network security groups (NSGs), and enabling MFA. Note: Security recommendations are now primarily provided by Microsoft Defender for Cloud, but Advisor still includes them for backward compatibility.
Reliability: Recommendations to ensure business continuity, such as configuring backups, enabling geo-redundant storage, using availability zones, and avoiding single points of failure. Example: "Enable backup for your virtual machines."
Operational Excellence: Recommendations to improve operational efficiency, such as using managed identities, automating deployments, and following DevOps practices. Example: "Use Azure Policy to enforce tagging."
Performance: Recommendations to improve speed and responsiveness, such as resizing underperforming VMs, using premium storage, and optimizing content delivery with CDN. Example: "Use Azure Premium SSD for your database workloads."
Tiers and Pricing
Azure Advisor is free for all Azure customers. There is no additional cost to use Advisor. However, the recommendations are based on your existing resources, which you do pay for. The service is available in all Azure regions.
Comparison to On-Premises Equivalent
In an on-premises environment, you would need dedicated personnel or third-party tools to manually audit servers for utilization, check for security patches, review backup configurations, and analyze performance. This is time-consuming and often incomplete. Azure Advisor automates this continuous audit, providing a single pane of glass across all resources. It's like having a team of experts constantly reviewing your infrastructure for free.
Azure Portal and CLI Touchpoints
Azure Portal: Navigate to "Advisor" under the "Azure Services" menu. The dashboard shows a summary of recommendations by category. You can click into each category to see details and apply recommendations.
Azure CLI: Use az advisor recommendation list to retrieve recommendations. Example:
az advisor recommendation list --query "[?category=='Cost']" --output tablePowerShell: Use Get-AzAdvisorRecommendation cmdlet.
REST API: Use the Azure Advisor REST API to integrate recommendations into custom tools.
Concrete Business Scenarios
Scenario 1: Cost Optimization for a Startup A startup deploys 20 VMs for development and testing. Over time, usage drops but VMs remain running. Advisor detects that 15 VMs have average CPU usage below 5% for the past 30 days. It recommends shutting them down during off-hours or downsizing to a smaller SKU. The startup implements the recommendations and saves $1,200/month.
Scenario 2: Security Compliance for a Healthcare Company A healthcare company uses Azure for patient data. Advisor (via integration with Defender for Cloud) identifies that 5 VMs have missing critical security updates and 3 storage accounts have public network access enabled. The security team applies the recommendations, reducing the attack surface and helping meet HIPAA compliance.
Scenario 3: Reliability for an E-commerce Site An e-commerce site runs a production database on a single VM without backups. Advisor recommends enabling Azure Backup and configuring geo-redundant storage for the database. The team follows the recommendation. Two months later, a human error causes data corruption; they restore from backup and avoid 48 hours of downtime.
Access Azure Advisor Dashboard
In the Azure portal, sign in and search for 'Advisor' in the top search bar. Click on 'Advisor' to open the dashboard. The dashboard shows a summary of recommendations grouped into the five categories: Cost, Security, Reliability, Operational Excellence, and Performance. Each category tile displays the number of recommendations and the total potential savings or impact. This is the entry point for viewing and managing all Advisor recommendations across your subscriptions.
Filter Recommendations by Category
Click on any category tile (e.g., 'Cost') to see detailed recommendations. You can further filter by subscription, resource group, or impact level (High, Medium, Low). For example, filter to show only high-impact cost recommendations. This helps prioritize actions that deliver the most value. The filter options are available at the top of the recommendations list. You can also use the 'Add filter' button to create custom filters.
Review a Recommendation Detail
Click on a specific recommendation to open its detail pane. Here you see: the resource name, current configuration, recommended action, estimated benefit (e.g., monthly cost savings), risk level, and a description of the issue. For example, a recommendation might say 'Resize virtual machine VM1 from Standard_D2s_v3 to Standard_D1s_v2' with estimated savings of $50/month. The detail also includes a link to directly implement the recommendation, such as a 'Resize' button for VMs.
Apply a Recommendation
From the detail pane, click the 'Apply' or 'Create' button (depending on the recommendation type). For example, for a VM resize recommendation, clicking 'Resize' opens the VM sizing blade with the recommended SKU preselected. You can review and confirm the change. For backup recommendations, clicking 'Enable Backup' opens the Recovery Services vault configuration. Azure Advisor does not apply changes automatically by default; you must manually approve each action. However, you can enable automatic remediation for certain Cost recommendations in the Advisor settings.
Schedule or Dismiss Recommendations
You can snooze or dismiss recommendations. Snoozing hides a recommendation for a specified period (e.g., 7 days, 30 days) if you plan to address it later. Dismissing removes it permanently (unless the issue resurfaces). To snooze or dismiss, open the recommendation's context menu (three dots) and select the appropriate option. This is useful for known exceptions where you intentionally choose not to follow best practices (e.g., keeping a small VM for a legacy app).
Export Advisor Data
You can download Advisor recommendations as a CSV or PDF report for offline analysis or sharing with stakeholders. On the Advisor dashboard, click 'Download as CSV' or 'Download as PDF'. The report includes all recommendations across selected subscriptions. This is helpful for presenting cost-saving opportunities to management or tracking progress over time. You can also use Azure CLI or PowerShell to export recommendations programmatically.
Scenario 1: Cost Optimization for a Large Enterprise
A multinational corporation runs 500+ VMs across multiple subscriptions. Without Azure Advisor, the cloud operations team manually reviews VM utilization quarterly, missing many idle resources between reviews. After enabling Advisor, they discover that 80 VMs have been running 24/7 with average CPU usage below 2%. Advisor recommends shutting them down during non-business hours or downsizing. The team implements a combination of auto-shutdown schedules and rightsizing, saving $40,000 per month. They also use Advisor's 'Cost' category to identify unused ExpressRoute circuits and orphaned public IPs, eliminating $5,000 in monthly charges. The key lesson: Advisor provides continuous, automated cost analysis that manual processes cannot match.
Scenario 2: Security Posture Improvement for a Fintech Startup
A fintech startup handling sensitive financial data must comply with PCI DSS. They use Azure Advisor (integrated with Microsoft Defender for Cloud) to continuously monitor security recommendations. Advisor flags that 10 storage accounts have public blob access enabled, 5 VMs have missing critical security updates, and 2 SQL databases have transparent data encryption (TDE) disabled. The security team applies the recommendations, closing these gaps. Additionally, Advisor recommends enabling Azure Defender for all resources, which they do, gaining advanced threat protection. Without Advisor, these vulnerabilities might have gone unnoticed until an audit or breach. The team now reviews Advisor weekly as part of their security operations.
Scenario 3: Reliability for a SaaS Provider
A SaaS provider runs a multi-tier application on Azure with a SQL Database backend. Advisor identifies that the database is configured with locally redundant storage (LRS), which offers no protection against a regional disaster. It recommends switching to geo-redundant storage (GRS) or enabling active geo-replication. The team implements geo-replication, ensuring failover capability to a secondary region. Later, during a regional outage, they fail over to the secondary region with minimal downtime. Additionally, Advisor recommends enabling backup for their VMs and configuring availability zones for critical workloads. These recommendations prevent a potential catastrophic data loss. The provider now treats Advisor reliability recommendations as mandatory for all production workloads.
Exactly What AZ-900 Tests on This Objective (Objective 3.3)
Objective 3.3 states: "Describe Azure Advisor." The exam expects you to know:
The purpose of Azure Advisor: a free, built-in service that provides recommendations for cost, security, reliability, operational excellence, and performance.
The five categories of recommendations (Cost, Security, Reliability, Operational Excellence, Performance).
That Advisor is personalized based on your resources and usage.
That Advisor does not automatically implement recommendations (unless you enable auto-remediation for specific cost recommendations).
How to access Advisor (Azure portal, CLI, PowerShell, API).
The difference between Advisor and other services like Azure Monitor (monitoring vs. recommendations) or Security Center (security posture vs. broad recommendations).
Common Wrong Answers and Why Candidates Choose Them
"Azure Advisor automatically applies recommendations." This is false. Candidates often confuse Advisor with auto-remediation features in Azure Policy or automation runbooks. Advisor only suggests actions; you must manually approve them (except for a few Cost recommendations if you enable automatic remediation).
"Azure Advisor costs extra." False. Advisor is free. Candidates may think premium features cost extra, but the core recommendations are free.
"Azure Advisor monitors resource health in real time." This is Azure Monitor's job, not Advisor. Advisor analyzes historical telemetry and configurations to give recommendations, not real-time alerts.
"Azure Advisor provides security recommendations only." This is incorrect. Advisor covers five categories, including Cost, Reliability, Performance, and Operational Excellence. Security is just one.
Specific Terms and Values That Appear Verbatim
The five category names: Cost, Security, Reliability, Operational Excellence, Performance.
The phrase "personalized recommendations" is used in official Microsoft documentation.
The term "best practices" is frequently associated with Advisor.
The word "free" is important — Advisor is free for all Azure customers.
Edge Cases and Tricky Distinctions
Advisor vs. Microsoft Defender for Cloud: Both provide security recommendations, but Defender for Cloud focuses exclusively on security and includes advanced threat protection. Advisor includes security as one of five categories and relies on Defender for Cloud for its security recommendations. On the exam, if a question asks about security recommendations, both could be correct, but Advisor is broader.
Advisor vs. Azure Monitor: Monitor collects metrics and logs and can alert in real time. Advisor analyzes historical data and gives recommendations. They are complementary.
Advisor vs. Azure Policy: Policy enforces rules (e.g., deny creation of unencrypted disks). Advisor suggests best practices but does not enforce.
Advisor vs. Azure Service Health: Service Health informs about service issues and planned maintenance. Advisor is about optimizing your existing resources.
Memory Trick
Use the acronym C-S-R-O-P (Cost, Security, Reliability, Operational Excellence, Performance) — think "CSROP" as "See Slop" (visualize a messy desk that Advisor helps clean up). Or remember the word 'COST' plus 'SR' for Security and Reliability, then 'OP' for Operational Excellence and Performance — but that's messy. Instead, remember the phrase: "Can Someone Really Optimize Performance?" — each capital letter stands for a category.
Azure Advisor is a free, built-in service that provides personalized recommendations for your Azure resources.
Advisor recommendations are grouped into five categories: Cost, Security, Reliability, Operational Excellence, and Performance.
Advisor does not automatically apply recommendations by default; you must manually approve changes.
You can access Advisor via the Azure portal, Azure CLI, PowerShell, or REST API.
Advisor analyzes your resource usage and configuration, not real-time metrics.
Security recommendations in Advisor come from Microsoft Defender for Cloud.
Advisor is available to all Azure customers at no additional cost.
These come up on the exam all the time. Here's how to tell them apart.
Azure Advisor
Provides personalized recommendations for best practices
Analyzes historical telemetry and configurations
Covers Cost, Security, Reliability, Operational Excellence, Performance
Free, built-in service
No real-time alerts; recommendations are periodic
Azure Monitor
Collects metrics, logs, and traces in real time
Enables real-time monitoring, alerting, and dashboards
Focuses on resource performance, health, and diagnostics
Core monitoring is free; additional data retention costs
Can trigger alerts based on thresholds
Mistake
Azure Advisor automatically applies recommendations to your resources.
Correct
By default, Advisor only provides recommendations. You must manually apply them. However, you can enable automatic remediation for certain Cost recommendations in the Advisor settings. This is an opt-in feature, not the default.
Mistake
Azure Advisor is a paid service.
Correct
Azure Advisor is completely free for all Azure customers. There is no additional charge for using Advisor, regardless of how many recommendations you view or apply.
Mistake
Azure Advisor only provides cost-saving recommendations.
Correct
Advisor provides recommendations in five categories: Cost, Security, Reliability, Operational Excellence, and Performance. Cost is just one category.
Mistake
Azure Advisor monitors your resources in real time and sends alerts.
Correct
Advisor analyzes historical usage and configuration data to generate recommendations. It does not provide real-time monitoring or alerts. That is the role of Azure Monitor.
Mistake
Azure Advisor and Microsoft Defender for Cloud are the same service.
Correct
They are different. Defender for Cloud focuses exclusively on security posture and threat protection, while Advisor covers five categories including security. Advisor uses Defender for Cloud for its security recommendations.
Yes, Azure Advisor is completely free for all Azure customers. There is no additional charge to use Advisor. You only pay for the underlying Azure resources you are using. The recommendations themselves cost nothing.
By default, no. Advisor only provides recommendations. You must manually apply them. However, you can enable automatic remediation for certain Cost recommendations (e.g., shutting down idle VMs) in the Advisor settings. This is optional and not enabled by default.
The five categories are: Cost, Security, Reliability, Operational Excellence, and Performance. You can remember them with the acronym C-S-R-O-P. Each category addresses a different aspect of cloud best practices.
You can access Azure Advisor through the Azure portal by searching for 'Advisor' in the search bar. You can also use Azure CLI with the command `az advisor recommendation list`, PowerShell with `Get-AzAdvisorRecommendation`, or the Azure Advisor REST API.
Azure Advisor provides recommendations based on best practices, analyzing historical data. Azure Monitor collects real-time metrics and logs, enabling alerting and dashboards. Advisor tells you what to improve; Monitor tells you what is happening now.
Yes, you can download Advisor recommendations as a CSV or PDF report from the Azure portal. You can also use Azure CLI or PowerShell to export them programmatically. This is useful for sharing with stakeholders or tracking over time.
Yes, Azure Advisor can provide recommendations across all subscriptions you have access to. You can filter the dashboard by subscription to view recommendations for specific ones. It aggregates data from all selected subscriptions.
You've just covered Azure Advisor — now see how well it sticks with free AZ-900 practice questions. Full explanations included, no account needed.
Done with this chapter?