- A
Deny
Why wrong: The Deny effect blocks resource creation or update if the resource is non-compliant. This does not meet the requirement because the team wants resources to be created but automatically corrected, not blocked.
- B
Audit
Why wrong: The Audit effect creates a compliance report entry when a resource is non-compliant, but it does not take any action to correct the resource. It only flags the violation.
- C
Append
Why wrong: The Append effect can add additional fields (like tags) to a resource during creation or update, but it cannot modify existing tag values. If a resource already has the 'Environment' tag with a different value, Append will not change it, leaving the resource non-compliant.
- D
Modify
The Modify effect is designed to add, update, or remove properties of a resource to ensure compliance. It can automatically correct tag values (e.g., set 'Environment' to 'Production') even if the user provides a different value, without blocking the resource creation. This matches the requirement exactly.
Quick Answer
The answer is the Modify effect. This is the correct choice because Modify automatically corrects resource tags during creation or update without blocking the operation, unlike Append which can only add tags to new resources but cannot change existing values. On the Microsoft Azure Fundamentals AZ-900 exam, this scenario tests your understanding of Azure Policy effects and their behavioral differences, often appearing as a scenario-based question where you must distinguish between Append, Modify, and Deny. A common trap is choosing Append because it sounds similar, but remember: Append adds only, Modify changes. For the memory tip, think "Modify Mends"—it fixes tags automatically, whether missing or wrong, ensuring every resource in the Production subscription gets the 'Environment' tag set to 'Production' without interrupting deployment.
AZ-900 Describe Azure management and governance Practice Question
This AZ-900 practice question tests your understanding of describe azure management and governance. The scenario asks you to isolate a root cause — eliminate options that address a different problem before choosing. A key principle to apply: the Modify effect can add, update, or remove resource properties.. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A company uses Azure Policy to enforce governance rules across its subscriptions. The governance team wants to ensure that every resource in the 'Production' subscription has a tag named 'Environment' with the value 'Production'. If a resource is created without this tag, or with a different value, the tag must be automatically corrected to 'Production' without blocking the creation of the resource. Which Azure Policy effect should the team configure?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Modify
The Modify effect is correct because it automatically applies the required tag value to resources during creation or update without blocking the operation. Unlike Append, which only adds tags to new resources but cannot change existing values, Modify can alter both new and existing resources to enforce the desired tag value. This ensures that any resource created without the 'Environment' tag or with a different value is automatically corrected to 'Production'.
Key principle: The Modify effect can add, update, or remove resource properties.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Deny
Why it's wrong here
The Deny effect blocks resource creation or update if the resource is non-compliant. This does not meet the requirement because the team wants resources to be created but automatically corrected, not blocked.
- ✗
Audit
Why it's wrong here
The Audit effect creates a compliance report entry when a resource is non-compliant, but it does not take any action to correct the resource. It only flags the violation.
- ✗
Append
Why it's wrong here
The Append effect can add additional fields (like tags) to a resource during creation or update, but it cannot modify existing tag values. If a resource already has the 'Environment' tag with a different value, Append will not change it, leaving the resource non-compliant.
- ✓
Modify
Why this is correct
The Modify effect is designed to add, update, or remove properties of a resource to ensure compliance. It can automatically correct tag values (e.g., set 'Environment' to 'Production') even if the user provides a different value, without blocking the resource creation. This matches the requirement exactly.
Related concept
The Modify effect can add, update, or remove resource properties.
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is confusing Append with Modify: Append only adds missing tags but cannot change existing values, while Modify can both add and change tags, making it the correct choice for enforcing a specific value.
Detailed technical explanation
How to think about this question
The Modify effect uses a 'modify' operation within a policy rule to define the conditions and the correction action, such as setting a tag value. Under the hood, Azure Policy evaluates resources during creation or update and applies the Modify effect as a 'remediation task' that runs automatically, ensuring compliance without manual intervention. In a real-world scenario, this is critical for environments like production where tag-based cost tracking or access control must be enforced without disrupting DevOps pipelines.
KKey Concepts to Remember
- The Modify effect can add, update, or remove resource properties.
- Modify policies can automatically remediate non-compliant resources.
- Modify policies do not block resource creation or updates.
- A managed identity is often required for Modify policies to perform remediation.
TExam Day Tips
- Watch for words such as best, first, most likely and least administrative effort.
- Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
The Modify effect can add, update, or remove resource properties.
Real-world example
How this comes up in practice
A cloud solutions architect for a retail company is evaluating services for a new workload. The correct answer here reflects best practice for the specific scenario described — not a general cloud recommendation. The Modify effect can add, update, or remove resource properties. Cloud exam questions reward reading the constraint carefully: the same technology can be right or wrong depending on the use case.
What to study next
Got this wrong? Here's your next step.
Review the Modify effect can add, update, or remove resource properties., then practise related AZ-900 questions on the same topic to reinforce the concept.
- →
Describe Azure management and governance — study guide chapter
Learn the concepts, then practise the questions
- →
Describe Azure management and governance practice questions
Targeted practice on this topic area only
- →
All AZ-900 questions
1,031 questions across all exam domains
- →
Microsoft Azure Fundamentals AZ-900 study guide
Full concept coverage aligned to exam objectives
- →
AZ-900 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Related AZ-900 practice-question pages
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Describe cloud concepts practice questions
Practise AZ-900 questions linked to Describe cloud concepts.
Describe Azure architecture and services practice questions
Practise AZ-900 questions linked to Describe Azure architecture and services.
Describe Azure management and governance practice questions
Practise AZ-900 questions linked to Describe Azure management and governance.
AZ-900 Azure services practice questions
Practise AZ-900 questions linked to AZ-900 Azure services.
AZ-900 pricing and support practice questions
Practise AZ-900 questions linked to AZ-900 pricing and support.
AZ-900 security and compliance practice questions
Practise AZ-900 questions linked to AZ-900 security and compliance.
AZ-900 governance practice questions
Practise AZ-900 questions linked to AZ-900 governance.
Practice this exam
Start a free AZ-900 practice session
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Questions learners often ask
What does this AZ-900 question test?
Describe Azure management and governance — This question tests Describe Azure management and governance — The Modify effect can add, update, or remove resource properties..
What is the correct answer to this question?
The correct answer is: Modify — The Modify effect is correct because it automatically applies the required tag value to resources during creation or update without blocking the operation. Unlike Append, which only adds tags to new resources but cannot change existing values, Modify can alter both new and existing resources to enforce the desired tag value. This ensures that any resource created without the 'Environment' tag or with a different value is automatically corrected to 'Production'.
What should I do if I get this AZ-900 question wrong?
Review the Modify effect can add, update, or remove resource properties., then practise related AZ-900 questions on the same topic to reinforce the concept.
What is the key concept behind this question?
The Modify effect can add, update, or remove resource properties.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jun 11, 2026
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.