What specific topics are tested in AZ-900 Describe Azure Management and Governance (30–35%)?

Azure Policy – creating and assigning policies to enforce compliance rules

What else is tested in the Describe Azure Management and Governance (30–35%) domain?

Role-Based Access Control (RBAC) – assigning roles like Owner, Contributor, Reader to users/groups

What else is tested in the Describe Azure Management and Governance (30–35%) domain?

Resource locks – preventing accidental deletion or modification of resources

What else is tested in the Describe Azure Management and Governance (30–35%) domain?

Tags – organizing resources with metadata for cost tracking and management

What are common mistakes on AZ-900 Describe Azure Management and Governance (30–35%) questions?

Confusing Azure Policy with Azure RBAC: Policy enforces rules on resources (e.g., 'must have a tag'), while RBAC controls who can access resources

What trap questions appear in the Describe Azure Management and Governance (30–35%) domain?

Thinking resource locks prevent all changes: Read-only lock prevents modification but not deletion; Delete lock prevents deletion but allows modification

Courseiva

Knowledge + Practice

AZ-900Exam Domain

Describe Azure Management and Governance (30–35%)AZ-900 Study Guide

30 chapters

~750 min total

Free — no signup required

Quick Answer

Azure Management and Governance covers the tools and practices for organizing, securing, and controlling Azure resources, including Azure Policy, RBAC, resource locks, tags, cost management, and the Cloud Adoption Framework.

Azure Management and Governance is the domain that covers how to organize, secure, and control your Azure resources at scale. Think of it as the 'operating system' for your cloud environment—it includes tools for managing multiple subscriptions, applying policies to enforce compliance, tracking costs, and ensuring your cloud stays secure and well-organized. For example, you might use Azure Policy to automatically block the creation of virtual machines in certain regions, or Azure Cost Management to set budgets and get alerts when spending exceeds a threshold. This domain is crucial because without proper governance, cloud environments can quickly become chaotic, expensive, and insecure. In real-world IT, a company might have hundreds of subscriptions and thousands of resources; governance tools help administrators maintain control, meet regulatory requirements, and optimize costs. On the AZ-900 exam, this domain tests your understanding of these management and governance services, not their deep technical implementation. You'll need to know what each service does, when to use it, and how they relate to each other. Common topics include Azure Blueprints, Azure Policy, Role-Based Access Control (RBAC), resource locks, tags, Azure Cost Management, and the Microsoft Cloud Adoption Framework. To study effectively, focus on the purpose and use cases of each service rather than memorizing steps. Use Microsoft's free documentation and the Azure portal to explore these tools in a trial subscription. Create a resource group, apply a policy, set up a budget, and assign roles—this hands-on practice will solidify your understanding and help you answer scenario-based questions on the exam.

What the exam tests

Azure Policy – creating and assigning policies to enforce compliance rules
Role-Based Access Control (RBAC) – assigning roles like Owner, Contributor, Reader to users/groups
Resource locks – preventing accidental deletion or modification of resources
Tags – organizing resources with metadata for cost tracking and management
Azure Cost Management – setting budgets, analyzing costs, and using pricing calculator
Azure Blueprints – packaging policies, RBAC, and resource groups for repeatable deployments

Common exam traps

Confusing Azure Policy with Azure RBAC: Policy enforces rules on resources (e.g., 'must have a tag'), while RBAC controls who can access resources
Thinking resource locks prevent all changes: Read-only lock prevents modification but not deletion; Delete lock prevents deletion but allows modification
Assuming tags are inherited by default: Tags are not automatically inherited from resource groups to resources; you must apply them explicitly or use Azure Policy to enforce inheritance

Describe Azure Management and Governance (30–35%) Chapters

Azure Cost Management and Billing

Objective 3.1 · Azure Management Governance

Describe Azure Management and Governance (30–35%) Chapters

Other AZ-900 Domains

Test your Describe Azure Management and Governance (30–35%) knowledge