AZ-900 Describe Azure management and governance Practice Question
Which Azure governance feature allows you to create a repeatable, deployable package of Azure resources, role assignments, and policies for new subscriptions?
⚠ Common exam trap
It's easy for candidates to confuse Azure Blueprints with Azure Policy or ARM templates, but Blueprints is the only service that combines resource deployment, policy enforcement, and role assignment into a single, repeatable package for new subscriptions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Blueprints
Azure Blueprints is the correct answer because it is specifically designed to orchestrate the deployment of a repeatable, deployable package that includes Azure Resource Manager templates, role assignments, and policies. Unlike a single ARM template, Blueprints enables you to define a set of standard Azure resources and governance artifacts that can be applied consistently to new subscriptions, ensuring compliance and organizational standards from the start.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Resource Manager templates
Why it's wrong here
Azure Resource Manager (ARM) templates declaratively deploy Azure infrastructure as JSON code, allowing repeatable and consistent resource deployment. However, they only automate the creation of resources; they do not natively bundle role-based access control (RBAC) assignments, Azure Policy definitions, or produce an auditable linkage of all governance artifacts as a single package. While ARM templates are a component of Blueprints, they are insufficient on their own for full subscription governance setup.
- ✗
Azure Policy
Why it's wrong here
Azure Policy enforces compliance rules by evaluating and auditing resource configurations, and can automatically remediate non-compliant resources. However, Policy focuses solely on compliance rules and does not deploy resource packages, assign RBAC roles, or bundle multiple governance artifacts into a single, auditable, repeatable subscription setup. It is a control mechanism, not a packaging service, so it cannot replace Blueprints for complete subscription initialization.
- ✓
Azure Blueprints
Why this is correct
Azure Blueprints are the correct answer because they orchestrate the deployment of a complete, repeatable subscription setup by bundling ARM template deployments, Azure Policy assignments, RBAC role assignments, and resource groups into a single definable and auditable package. Each blueprint can be versioned, linked to a specific subscription, and tracked for compliance, ensuring that every new subscription receives the same governance baseline. This unique bundling and audit capability distinguishes Blueprints from individual services like Policy or ARM templates.
- ✗
Azure Management Groups
Why it's wrong here
Azure Management Groups provide a hierarchical structure for organizing and managing access, policies, and compliance across multiple Azure subscriptions, but they do not package deployable resources or governance artifacts. They are containers for subscriptions, not a mechanism to deploy a repeatable setup of templates, policies, and RBAC. Therefore, while useful for governance, they do not fulfill the requirement of an auditable, bundled provisioning package.
Go deeper
Related to this question
Learn chapter
Azure Cost Management and Billing
Key term
Role
A role is a named set of permissions that can be assigned to users or groups to control access to resources in an IT environment.
Key term
Azure resource
An Azure resource is a manageable item available through Microsoft Azure, such as a virtual machine, database, or web app.
About these practice questions
Courseiva writes every AZ-900 question from scratch — 981 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.