AZ-900 Describe Azure management and governance Practice Question
A large enterprise manages hundreds of Azure subscriptions. The compliance team needs to run an on-demand report that shows all virtual machines with their current power state (running or deallocated), operating system, and VM size, filtering by specific resource groups or subscriptions. The team wants to use a native Azure tool that allows querying Azure resources at scale using a Kusto Query Language (KQL) syntax. Which Azure service should they use?
⚠ Common exam trap
Test-takers frequently confuse Azure Monitor Logs (which also uses KQL) with Azure Resource Graph, but Monitor Logs is for telemetry and logs, not for querying resource metadata like VM power state or size across subscriptions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Resource Graph
Azure Resource Graph is the correct choice because it is a native Azure service designed for querying Azure resources at scale using Kusto Query Language (KQL). It allows you to run on-demand, complex queries across multiple subscriptions, resource groups, and resource types, and can return properties such as power state, operating system, and VM size. This directly matches the compliance team's requirement for a scalable, KQL-based query tool that works across hundreds of subscriptions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Azure Resource Graph
Why this is correct
Azure Resource Graph is a service that allows you to query Azure resources across all subscriptions using Kusto Query Language (KQL). It is designed for inventory, governance, and compliance scenarios, enabling you to retrieve information like VM power state, OS, and size efficiently from multiple subscriptions.
- ✗
Azure Monitor Logs
Why it's wrong here
Azure Monitor Logs collects log and telemetry data from Azure resources, applications, and operating systems. It is used for monitoring, alerting, and troubleshooting, but it is not designed for querying resource inventory metadata like VM power state or size across subscriptions.
When this WOULD be correct
An exam question where the compliance team needs to query historical performance metrics or log data (e.g., CPU usage, error logs) across VMs in multiple subscriptions, using KQL, and the data is already being sent to Log Analytics workspaces. In that case, Azure Monitor Logs would be the correct service.
- ✗
Azure Resource Explorer
Why it's wrong here
Azure Resource Explorer is a portal interface that allows you to browse and manage individual Azure resources and their properties. It does not support running custom KQL queries across multiple subscriptions or generating reports on resource metadata at scale.
When this WOULD be correct
A question that asks: 'You need to manually explore the properties and settings of a specific Azure virtual machine in the Azure portal. Which tool should you use?'
- ✗
Azure Advisor
Why it's wrong here
Azure Advisor is a personalized recommendation engine that analyzes your Azure configurations and usage telemetry to suggest best practices for cost, security, reliability, operational excellence, and performance. It does not expose a query interface for retrieving raw resource properties or metadata such as VM power state, OS, or size. Advisor's scope is prescriptive guidance, not inventory or discovery, so it cannot serve as a cross-subscription querying tool for resource attributes.
When this WOULD be correct
An exam question asks: 'Which Azure service provides recommendations to optimize Azure resources for cost, performance, and security?' In that context, Azure Advisor is the correct answer.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Azure Resource GraphCorrect answer▾
Why this is correct
Azure Resource Graph is a service that allows you to query Azure resources across all subscriptions using Kusto Query Language (KQL). It is designed for inventory, governance, and compliance scenarios, enabling you to retrieve information like VM power state, OS, and size efficiently from multiple subscriptions.
✗Azure Monitor LogsWrong answer — click to see why▾
Why this is wrong here
Azure Monitor Logs collects and analyzes telemetry data from Azure resources, but it does not support querying Azure resource inventory (like VM power state, OS, size) across subscriptions using KQL. It is designed for log and performance data, not for resource metadata queries at scale.
★ When this WOULD be the correct answer
An exam question where the compliance team needs to query historical performance metrics or log data (e.g., CPU usage, error logs) across VMs in multiple subscriptions, using KQL, and the data is already being sent to Log Analytics workspaces. In that case, Azure Monitor Logs would be the correct service.
Why candidates choose this
Candidates see 'KQL syntax' and 'querying Azure resources' and mistakenly think Azure Monitor Logs is the right tool because it uses KQL for log queries, but they overlook that the question asks for resource inventory data (power state, OS, size), which is not stored in logs.
✗Azure Resource ExplorerWrong answer — click to see why▾
Why this is wrong here
Azure Resource Explorer is a tool for browsing and managing individual Azure resources, not for running KQL queries across multiple subscriptions or resource groups at scale. It lacks the query language and cross-subscription querying capabilities of Azure Resource Graph.
★ When this WOULD be the correct answer
A question that asks: 'You need to manually explore the properties and settings of a specific Azure virtual machine in the Azure portal. Which tool should you use?'
Why candidates choose this
The name 'Resource Explorer' sounds similar to 'Resource Graph', and candidates may assume it supports querying resources, but it is primarily a management and exploration tool, not a query engine.
✗Azure AdvisorWrong answer — click to see why▾
Why this is wrong here
Azure Advisor provides personalized recommendations for cost, performance, reliability, and security, but it does not support running on-demand KQL queries to report VM power state, OS, and size across subscriptions.
★ When this WOULD be the correct answer
An exam question asks: 'Which Azure service provides recommendations to optimize Azure resources for cost, performance, and security?' In that context, Azure Advisor is the correct answer.
Why candidates choose this
Candidates may confuse Azure Advisor's recommendation capabilities with the ability to query resource data, or they might think 'Advisor' implies a reporting tool for compliance.
Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Azure Cost Management and Billing
Key term
Report
A report in Azure data services is a structured output that summarizes, visualizes, or details data stored in cloud databases or data warehouses, often used for business intelligence and monitoring.
Key term
Azure resource
An Azure resource is a manageable item available through Microsoft Azure, such as a virtual machine, database, or web app.
About these practice questions
One of 981 original AZ-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.