AZ-900 Describe Azure management and governance Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Policy Exemption

  Why this is correct

  An Azure Policy exemption is the designated mechanism to exclude a specific scope, such as the Sandbox subscription, from evaluation by an existing policy assignment. It allows the team to avoid compliance reporting for that subscription without modifying or deleting the policy assignment itself. Exemptions can be time-bound and require a justification, and the excluded scope is reported as 'exempt' in compliance results rather than 'non-compliant'.

• ✗

  Policy Remediation

  Why it's wrong here

  Policy Remediation is a feature used to automatically bring non-compliant resources into a compliant state, typically by redeploying resources or applying defined configurations. It does not exclude any subscription from policy evaluation; rather, it actively enforces policies by correcting resources that do not meet the assignment's conditions. Since the goal is to temporarily bypass policy checks for the Sandbox subscription, remediation is the opposite of what is needed.

  When this WOULD be correct

  A company has a policy requiring specific tags on all resources, and an audit reveals many existing resources are non-compliant. The team needs to automatically apply the missing tags to those resources without manual intervention. Policy Remediation would be the correct feature to use.

• ✗

  Policy Exclusion

  Why it's wrong here

  The term 'Policy Exclusion' might sound plausible, but Azure Policy does not expose a feature named 'Exclusion' in its portal, SDK, or REST APIs. The correct and only supported mechanism for excluding a scope from policy assignment evaluation is an 'Exemption,' which has specific properties and implications. Choosing 'Exclusion' would fail because it is not a valid policy operation.

  When this WOULD be correct

  In a scenario where a policy assignment has been applied and non-compliant resources exist, and the team needs to automatically bring those resources into compliance (e.g., by applying required tags), Policy Remediation would be the correct feature.

• ✗

  Policy Override

  Why it's wrong here

  Azure Policy does not include a feature called 'Override' for excluding resources or scopes from policy assignments. While some Azure services use the term 'override' to refer to configuration precedence, policy evaluation does not support overriding an assignment to skip a scope. The only supported way to exclude a scope from policy evaluation is through an exemption, so this option is invalid.

  When this WOULD be correct

  In a scenario where a policy assignment must be bypassed for a specific resource due to an urgent operational need, and the bypass must be documented with an expiration date, Policy Override would be the correct answer if it were a real feature. However, since it doesn't exist, this scenario is hypothetical.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”