Question 179 of 981
AZ-900 Describe Azure management and governance Practice Question
What is the purpose of Azure Management Groups?
⚠ Common exam trap
Test-takers frequently confuse management groups (which organize subscriptions for governance) with resource groups (which organize resources within a single subscription for lifecycle management).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To organize multiple Azure subscriptions and apply governance policies across them
Azure Management Groups provide a hierarchical structure above subscriptions, enabling you to efficiently manage access, policies, and compliance across multiple Azure subscriptions. By applying Azure Policy or Role-Based Access Control (RBAC) at the management group level, those settings are inherited by all subscriptions within that group, ensuring consistent governance without per-subscription configuration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To group Azure resources within a single subscription for billing purposes
Why it's wrong here
Management Groups operate above the subscription level, so they cannot be used to group resources inside a single subscription. That aggregation is performed by Resource Groups, which act as logical containers for related Azure resources and can be used as a scope for cost reporting. Billing-related grouping across subscriptions is handled by billing profiles and invoice sections in Cost Management, not by Management Groups.
- ✓
To organize multiple Azure subscriptions and apply governance policies across them
Why this is correct
Management Groups create a hierarchy that sits above Azure subscriptions, allowing you to organize multiple subscriptions by business unit, environment, or department. Governance is applied at the management group level through Azure Policy and role-based access control (RBAC), and those assignments are inherited by every subscription and resource within that group. This enables consistent compliance and access control across an entire enterprise without configuring each subscription separately.
- ✗
To manage Kubernetes clusters across multiple regions
Why it's wrong here
Kubernetes cluster management is the domain of Azure Kubernetes Service (AKS), which provides managed control planes, node pools, and scaling for containerized workloads. Management Groups have no role in cluster orchestration; they are purely organizational containers for subscriptions and policies. Mixing these concepts confuses workload management infrastructure with governance hierarchy.
- ✗
To monitor resource health across different Azure services
Why it's wrong here
Resource health telemetry and alerts are delivered by Azure Monitor, Azure Service Health, and Azure Resource Health, which track issues like outages, planned maintenance, and component failures. Management Groups do not collect or report health data; they exist solely to define a governance and policy boundary across subscriptions. Using management groups for monitoring would be like using a corporate organizational chart to watch server uptime.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jun 11, 2026
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.