AZ-900 Describe Azure management and governance Practice Question
What is the purpose of Azure Resource Manager (ARM)?
⚠ Common exam trap
A common mix-up: candidates confuse ARM with a specific resource type (like a virtual machine) or a monitoring tool, when in fact ARM is the overarching management layer that works across all Azure services.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To provide a unified deployment and management layer for all Azure resources
Azure Resource Manager (ARM) is the native management layer that enables you to deploy, manage, and organize Azure resources as a single logical entity. It provides a consistent management plane for all Azure services through declarative templates (ARM templates), role-based access control (RBAC), and tagging, ensuring that resources are provisioned and governed uniformly across the entire subscription.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To provide virtual machine operating system management
Why it's wrong here
ARM manages Azure resources at the platform level, such as virtual machines, networks, and storage accounts, but it does not interact with the guest OS inside a VM. Operating system updates, application installation, and OS-level configuration are the customer's responsibility, typically handled via Remote Desktop, SSH, or tools like Azure Update Management. ARM's scope ends at the resource boundary, not the OS that runs within it.
- ✓
To provide a unified deployment and management layer for all Azure resources
Why this is correct
Azure Resource Manager (ARM) is the deployment and management service that provides a consistent, unified control plane for all Azure resources. It enables you to deploy, group, tag, and apply access control across resources using templates, the portal, PowerShell, or the CLI. Every management operation in Azure goes through ARM, making it the single source of truth for resource hierarchy and organization.
- ✗
To monitor Azure resource performance
Why it's wrong here
Monitoring Azure resource performance is a function of Azure Monitor, which collects metrics, logs, and alerts for resources. Azure Resource Manager (ARM) is the control plane that handles provisioning, deployment, and configuration of resources, not runtime performance telemetry. ARM's role is to orchestrate the creation and management of resources, while monitoring is a separate data-plane and telemetry service.
- ✗
To replicate data across Azure regions
Why it's wrong here
Data replication across Azure regions is performed by storage services using redundancy options like GRS (geo-redundant storage) or GZRS, and by database services like Azure SQL geo-replication. ARM is a resource management API and does not move or copy data; it only handles the deployment and configuration of the services that may later replicate data. Replication is a data-plane activity, whereas ARM operates on the control plane.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
Learn chapter
Azure Cost Management and Billing
Key term
ARM
ARM stands for Azure Resource Manager, the management layer that enables you to create, update, and delete resources in your Azure account.
Key term
Azure resource
An Azure resource is a manageable item available through Microsoft Azure, such as a virtual machine, database, or web app.
About these practice questions
Courseiva writes every AZ-900 question from scratch — 981 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.