AZ-900 Describe Azure management and governance Practice Question
Which Azure feature allows you to define and enforce naming conventions for Azure resources?
⚠ Common exam trap
Many candidates confuse Azure Policy's ability to enforce naming rules with Azure Blueprints' role as a packaging tool, forgetting that Blueprints rely on underlying policies for actual enforcement.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Policy with naming conditions
Azure Policy includes built-in or custom policy definitions that can enforce naming conventions on resources. When you assign a policy with naming conditions (e.g., requiring a specific prefix or suffix), Azure Policy evaluates all resource creation or update requests and denies or audits those that do not comply. This ensures consistent naming across your subscription without manual intervention.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Resource Manager templates
Why it's wrong here
Azure Resource Manager templates are Infrastructure-as-Code files that define the resources to deploy and can include parameters with allowed values or constraints for those resources' names. However, those constraints are evaluated only during the deployment of that specific template; any resource created directly through the portal, CLI, PowerShell, or other SDKs bypasses the template entirely. Thus, ARM templates are not an enforcement mechanism—they merely define desired configuration for one deployment, not a central governance rule for all resource creation.
- ✓
Azure Policy with naming conditions
Why this is correct
Azure Policy with naming conditions is the correct service because it uses declarative policy definitions to evaluate resource properties—including the 'name' field—against pattern rules such as regex, prefix, or suffix. When the effect is set to Deny, Azure Policy blocks resource creation that violates the naming convention, and when set to Audit it flags non-compliant resources. Because policy assignments can apply to management groups, subscriptions, and resource groups simultaneously, it provides consistent, organization-wide enforcement.
- ✗
Azure RBAC
Why it's wrong here
Azure RBAC governs authorization by controlling what actions a user, group, or service principal can perform on Azure resources through role assignments and scope. It does not evaluate or constrain the attribute values of the resources being created; it only checks identity permissions. If a user has Contributor rights on a resource group, RBAC will allow them to create a resource with any name, so it cannot enforce naming conventions organization-wide.
- ✗
Azure Blueprints
Why it's wrong here
Azure Blueprints are a composition service that bundles ARM templates, Azure Policy definitions, and RBAC assignments into a single assignable artifact. While a blueprint can include a policy definition that enforces a naming pattern, the blueprint itself does not perform any enforcement; it only orchestrates the orderly deployment of those bundled components. Therefore, the naming enforcement you see when using a blueprint is actually the Azure Policy inside it, not the blueprint service itself.
Go deeper
Related to this question
Learn chapter
Azure Cost Management and Billing
Key term
Feature
A feature is a distinct unit of functionality that delivers value to the user, often managed and tracked throughout the software development lifecycle.
Key term
Azure Policy
Azure Policy is a service in Microsoft Azure that lets you create, assign, and manage rules to ensure your resources stay compliant with your company standards and service-level agreements.
About these practice questions
One of 981 original AZ-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.