Question 446 of 1,031
Describe Azure management and governancemediumMultiple ChoiceObjective-mapped

Quick Answer

The answer is Azure Resource Manager (ARM) templates, because they provide a declarative JSON file for defining and deploying Azure infrastructure consistently across multiple environments. By using ARM templates, the team can specify resources like a virtual network, subnets, and a network security group in a single, version-controlled file that can be redeployed idempotently to dev, test, and prod resource groups—ensuring each deployment produces the exact same configuration. On the AZ-900 exam, this question tests your understanding of declarative vs. imperative deployment methods, often contrasting ARM templates with PowerShell or CLI scripts; a common trap is confusing ARM templates with Azure Blueprints, but remember that Blueprints add policy and role assignments on top of templates. A helpful memory tip: think of ARM templates as a “shopping list” for Azure resources—you write it once, and Azure builds exactly what you ordered every time.

AZ-900 Describe Azure management and governance Practice Question

This AZ-900 practice question tests your understanding of describe azure management and governance. This is a configuration task: choose the command set that satisfies every stated requirement. Small differences — like 'secret' vs 'password' or 'transport input ssh' vs 'all' — change whether the answer is correct. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.

A company needs to deploy a consistent set of Azure resources (a virtual network, two subnets, and a network security group) into multiple environments: dev, test, and prod. The IT operations team wants to define these resources in a declarative file that can be deployed repeatedly and reliably to different resource groups. The team also wants to version control the file and have the ability to update all environments by redeploying the same file. Which Azure feature should the team use?

Question 1mediummultiple choice
Review the full subnetting walkthrough →

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Azure Resource Manager (ARM) templates

Azure Resource Manager (ARM) templates are the correct choice because they provide a declarative JSON-based file that defines the infrastructure and configuration of Azure resources. This allows the team to deploy a consistent set of resources (virtual network, subnets, network security group) repeatedly and reliably across different resource groups and environments (dev, test, prod). ARM templates support version control, idempotent deployments, and can be used to update all environments by simply redeploying the same template file.

Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Azure Resource Manager (ARM) templates

    Why this is correct

    Correct. ARM templates are JSON files that declaratively define Azure resources. They can be deployed repeatedly to different resource groups, support version control, and allow updating environments by redeploying the same file.

    Related concept

    Read the scenario before looking for a memorised answer.

  • Azure Policy

    Why it's wrong here

    Incorrect. Azure Policy is a governance tool used to enforce rules and ensure compliance of existing and new resources, but it does not create or deploy resources.

  • Azure Management Groups

    Why it's wrong here

    Incorrect. Management Groups provide a hierarchical structure to organize Azure subscriptions for governance (e.g., policy and cost management), but they do not deploy resources.

  • Azure Advisor

    Why it's wrong here

    Incorrect. Azure Advisor offers personalized best-practice recommendations for cost, security, reliability, and performance, but it cannot be used to define or deploy infrastructure.

Common exam traps

Common exam trap: answer the scenario, not the keyword

The trap here is that candidates often confuse Azure Policy (a governance tool for enforcing rules) with ARM templates (a deployment tool for defining and provisioning resources), leading them to select Policy when the question explicitly asks for a declarative file to deploy resources.

Detailed technical explanation

How to think about this question

ARM templates are idempotent, meaning redeploying the same template results in the same state, even if resources already exist (it will update them to match the template definition). Under the hood, ARM templates use a declarative syntax that Azure Resource Manager processes to orchestrate resource provider API calls in the correct order, handling dependencies automatically. A real-world scenario is using linked templates to modularize complex deployments, allowing teams to version control each component separately while maintaining repeatability across environments.

KKey Concepts to Remember

  • Read the scenario before looking for a memorised answer.
  • Find the constraint that changes the correct option.
  • Eliminate answers that are true in general but not in this case.

TExam Day Tips

  • Watch for words such as best, first, most likely and least administrative effort.
  • Review why wrong options are wrong, not only why the correct option is correct.

Key takeaway

Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.

Real-world example

How this comes up in practice

A healthcare organisation deploys an application with a public-facing web tier and a private database tier. The database subnet has no public IP and only accepts connections from the web tier's security group. Questions like this test whether you can design cloud network isolation using VNets/VPCs, subnets, and security group rules.

What to study next

Got this wrong? Here's your next step.

Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.

Related practice questions

Related AZ-900 practice-question pages

Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.

Practice this exam

Start a free AZ-900 practice session

Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.

FAQ

Questions learners often ask

What does this AZ-900 question test?

Describe Azure management and governance — This question tests Describe Azure management and governance — Read the scenario before looking for a memorised answer..

What is the correct answer to this question?

The correct answer is: Azure Resource Manager (ARM) templates — Azure Resource Manager (ARM) templates are the correct choice because they provide a declarative JSON-based file that defines the infrastructure and configuration of Azure resources. This allows the team to deploy a consistent set of resources (virtual network, subnets, network security group) repeatedly and reliably across different resource groups and environments (dev, test, prod). ARM templates support version control, idempotent deployments, and can be used to update all environments by simply redeploying the same template file.

What should I do if I get this AZ-900 question wrong?

Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.

What is the key concept behind this question?

Read the scenario before looking for a memorised answer.

About these practice questions

Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Keep practising

More AZ-900 practice questions

Last reviewed: Jun 11, 2026

Question Discussion

Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.

Loading comments…

Sign in to join the discussion.

This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.