AZ-900 Describe Azure management and governance Practice Question
Which Azure compliance feature allows organizations to understand which standards and regulations Azure services comply with?
⚠ Common exam trap
A common mix-up: candidates confuse Azure Policy (which enforces compliance rules on resources) with the Compliance Documentation/Trust Center (which explains Azure's own compliance with external standards), leading them to select Azure Policy because it sounds compliance-related.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Compliance Documentation / Trust Center
Azure Compliance Documentation (often accessed via the Trust Center) provides detailed information about certifications, attestations, and regulatory standards that Azure services adhere to, such as ISO 27001, SOC 2, and GDPR. This is the dedicated resource for understanding which specific compliance frameworks Azure meets, rather than enforcing or monitoring compliance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Security Center
Why it's wrong here
Azure Security Center (now Microsoft Defender for Cloud) delivers security posture management and threat protection, including secure score, recommendations, and workload protection for hybrid cloud environments. While it includes regulatory compliance dashboard tiles for some standards, these are dynamic assessments of your resources, not the formal documentation of Azure's certifications. To verify which regulatory standards Azure meets, you must consult the Trust Center or compliance documentation, not a security monitoring portal.
- ✓
Azure Compliance Documentation / Trust Center
Why this is correct
The Azure Compliance Documentation and Trust Center are the official Microsoft sources that enumerate Azure's regulatory compliance offerings, including certifications such as ISO/IEC 27001, SOC 1/2/3, HIPAA, GDPR, and FedRAMP. These materials provide detailed whitepapers, audit reports, and attestation letters explaining how Azure meets each standard's requirements. For a question about which standards Azure itself satisfies, the Trust Center is the correct reference.
- ✗
Azure Policy
Why it's wrong here
Azure Policy is an in-platform service that enforces rules over resource configurations, such as requiring specific resource types or tagging conventions, which helps customers maintain internal governance and compliance obligations. Policy can also report on which of your resources comply with certain regulatory frameworks, but it is not a comprehensive collection of Azure's independent audit certifications. The Trust Center provides the official compliance documentation for Azure's own certifications, so Policy does not answer the question.
- ✗
Azure Blueprints
Why it's wrong here
Azure Blueprints orchestrate the deployment of resource groups, policies, role assignments, and Azure Resource Manager templates to create a compliant environment that follows organizational standards. However, Blueprints do not publish or catalog Azure's own third-party certifications and attestations; they are an implementation tool, not a documentation repository. The Trust Center, not Blueprints, is the authoritative source listing the regulatory standards Azure itself meets.
Go deeper
Related to this question
Learn chapter
Azure Cost Management and Billing
Key term
Trust Center
A Trust Center is a centralized portal or collection of resources where an organization publishes its security, compliance, privacy, and data protection policies to build customer and stakeholder confidence.
Key term
Feature
A feature is a distinct unit of functionality that delivers value to the user, often managed and tracked throughout the software development lifecycle.
About these practice questions
This AZ-900 question is part of Courseiva's 981-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.