Courseiva
Describe Azure management and governancemediumMultiple ChoiceObjective-mapped

AZ-900 Describe Azure management and governance Practice Question

Which Azure service provides a centralized console for monitoring the health, performance, and security of your entire Azure environment?

⚠ Common exam trap

Candidates often confuse Azure Service Health (which monitors Azure's own services) with Azure Monitor (which monitors your resources), or they assume a security-focused tool like Sentinel or Security Center covers all monitoring needs, when in fact Azure Monitor is the overarching service for health, performance, and security telemetry.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Azure Monitor

Azure Monitor is the correct answer because it provides a centralized, unified console for collecting, analyzing, and acting on telemetry data from your entire Azure environment. It covers health, performance, and security metrics, logs, and alerts across resources, enabling proactive monitoring and troubleshooting. Unlike specialized services, Azure Monitor aggregates data from multiple sources into a single pane of glass.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Azure Service Health

    Why it's wrong here

    Azure Service Health provides personalized alerts and status about Azure service incidents, planned maintenance, and health advisories affecting the entire Azure platform, not your deployed custom application metrics. It does not ingest VM performance counters, application traces, or custom logs. Because the question is about monitoring your own resources' operational telemetry, this service is incorrect.

  • Azure Monitor

    Why this is correct

    Azure Monitor is the central observability platform that collects metrics, logs, and traces from Azure resources, virtual machines, and applications into a unified telemetry store. With features like Application Insights, Log Analytics, alerts, and workbooks, it supports full-stack operational monitoring and troubleshooting. This makes it the correct choice for the general monitoring scenario described in the question.

  • Microsoft Sentinel

    Why it's wrong here

    Microsoft Sentinel is a cloud-native security information and event management (SIEM) and security orchestration, automation, and response (SOAR) solution. Its focus is on detecting, investigating, and responding to security threats across the enterprise, using security logs, threat intelligence, and analytics rules. Operational resource health and performance metrics are out of scope for Sentinel, so it is not the right answer.

  • Azure Security Center

    Why it's wrong here

    Azure Security Center (now Microsoft Defender for Cloud) is a security management and threat protection service that provides vulnerability assessments, secure score, and regulatory compliance recommendations. It evaluates your security posture across workloads, but it does not monitor general operational telemetry such as CPU utilization, request rates, or application errors. This narrow security focus is why it is an incorrect option for the monitoring task.

About these practice questions

Courseiva writes every AZ-900 question from scratch — 981 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.