AZ-900 Describe Azure management and governance Practice Question
Which Azure feature allows an organization to identify resources that do not comply with defined policies and automatically trigger remediation?
⚠ Common exam trap
Many candidates confuse Azure Policy remediation tasks with Azure Automation runbooks or Logic Apps, thinking any automation tool can handle compliance remediation, but Azure Policy provides a native, policy-driven remediation mechanism that is tightly integrated with compliance evaluation and does not require custom code.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Policy remediation tasks
Azure Policy remediation tasks are the correct answer because they are specifically designed to identify non-compliant resources based on policy definitions and automatically trigger remediation actions, such as deploying a required configuration or modifying resource settings. This feature works by using managed identities to execute the 'deployIfNotExists' or 'modify' policy effects, ensuring resources are brought into compliance without manual intervention.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Automation runbooks
Why it's wrong here
Azure Automation runbooks execute scripts on a schedule or via webhooks, often for operational automation like patch management or cleanup. They are not automatically triggered by Azure Policy compliance evaluations unless you explicitly build an integration. In contrast, Azure Policy remediation tasks are the native mechanism that directly applies the required changes (e.g., deployIfNotExists or modify effects) to resources found non-compliant, eliminating the need for custom scripting.
- ✓
Azure Policy remediation tasks
Why this is correct
Azure Policy remediation tasks are the correct answer because they automatically fix resources that violate a policy, specifically when the policy uses the deployIfNotExists or modify effect. When a policy evaluation identifies a non-compliant resource, a remediation task can be triggered manually, on a schedule, or by a policy evaluation event to bring the resource back into conformance. This native, built-in capability directly addresses compliance enforcement without requiring additional services or custom code.
- ✗
Azure Blueprints re-assignment
Why it's wrong here
Azure Blueprints package governance artifacts like policies, role assignments, and resource groups for consistent deployment. Re-assigning a blueprint deploys those artifacts again but does not perform ongoing compliance evaluation or fix resources that have drifted out of compliance after the initial assignment. Azure Policy continuously assesses resources and its remediation tasks handle the automated correction when non-compliant resources are identified, which Blueprints cannot do.
- ✗
Azure Logic Apps compliance workflows
Why it's wrong here
Azure Logic Apps is a cloud service that automates workflows and integrates applications, data, and services. While you could theoretically build a custom workflow to remediate resources, Logic Apps is not natively tied to Azure Policy's compliance evaluation. Azure Policy provides built-in remediation tasks that automatically enforce and fix non-compliant resources, making Logic Apps an unnecessary and indirect alternative.
Go deeper
Related to this question
Learn chapter
Azure Cost Management and Billing
Key term
Trigger
In Azure data services, a trigger is a predefined automatic action that initiates a process when a specific event occurs, such as data arriving or a schedule being met.
Key term
Azure Policy
Azure Policy is a service in Microsoft Azure that lets you create, assign, and manage rules to ensure your resources stay compliant with your company standards and service-level agreements.
About these practice questions
This AZ-900 question is part of Courseiva's 981-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.