AZ-900 Describe Azure management and governance Practice Question
A company uses multiple Azure subscriptions for development and production. The finance team wants to set a monthly budget of $1,000 for a specific dev subscription. When the actual cost reaches 80% of the budget, the team wants to receive an email alert. If the cost exceeds 100%, they want to automatically stop a specific virtual machine in that subscription to prevent overspending. Which Azure feature should the team use to automate the stopping of the VM when the budget is exceeded?
⚠ Common exam trap
Test-takers frequently confuse Azure Policy (which enforces compliance at resource creation) with Azure Cost Management + Budgets (which handles reactive cost alerts and automation), leading them to select Azure Policy despite its inability to stop running resources based on cost thresholds.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Cost Management + Budgets with an action group configured to run a Runbook
Azure Cost Management + Budgets allows you to set a budget and configure alerts based on actual or forecasted cost thresholds. When the cost exceeds 100% of the budget, you can trigger an action group that runs an Azure Automation Runbook, which can be scripted to stop a specific virtual machine. This provides automated cost control without manual intervention.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Policy with a Deny effect
Why it's wrong here
Azure Policy with a Deny effect enforces governance rules during resource deployment, such as blocking creation of VMs in non-approved regions or without required tags. It operates at the control plane level and only prevents new deployments; it does not evaluate cumulative costs, existing resources, or budget consumption. Therefore, it cannot react to a budget threshold or automatically stop running VMs to control costs—it only restricts what can be provisioned initially.
When this WOULD be correct
An exam question where the requirement is to prevent deployment of VMs that do not have specific tags or are not in a certain region, and the action should be to deny the creation.
- ✓
Azure Cost Management + Budgets with an action group configured to run a Runbook
Why this is correct
Azure Cost Management + Budgets is the native service for tracking cumulative spending across subscriptions. You can define a budget with a monetary threshold and attach an action group that triggers an Azure Automation Runbook when spending exceeds that threshold. The Runbook can execute PowerShell or Python scripts to deallocate or stop virtual machines, enabling automated, closed-loop cost control based on actual utilization rather than manual intervention.
- ✗
Azure Advisor cost recommendations
Why it's wrong here
Azure Advisor provides proactive recommendations to optimize spending, such as rightsizing underutilized VMs or eliminating idle resources. However, Advisor is purely advisory—it does not monitor budget thresholds, nor can it trigger automated actions like stopping VMs when spending crosses a limit. You must manually review and apply those recommendations, so it cannot serve as a budget-triggered automation mechanism.
When this WOULD be correct
A company wants to receive proactive recommendations to reduce costs on underutilized VMs. Azure Advisor cost recommendations would be the correct feature to identify such VMs and suggest resizing or shutting them down.
- ✗
Azure Resource Graph queries with Azure Monitor alerts
Why it's wrong here
Azure Resource Graph is for querying resources across subscriptions, and Azure Monitor alerts can send notifications. However, this combination does not natively integrate with budget data from Cost Management, and it would require significant custom logic to replicate budget-based automation.
When this WOULD be correct
An exam question asks: 'You need to query all virtual machines across multiple subscriptions that have been running for more than 30 days and send a weekly email report to the operations team.' In this case, Azure Resource Graph queries combined with Azure Monitor alerts (or Logic Apps) would be the correct answer.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Azure Cost Management + Budgets with an action group configured to run a RunbookCorrect answer▾
Why this is correct
Azure Cost Management + Budgets is the native service for tracking cumulative spending across subscriptions. You can define a budget with a monetary threshold and attach an action group that triggers an Azure Automation Runbook when spending exceeds that threshold. The Runbook can execute PowerShell or Python scripts to deallocate or stop virtual machines, enabling automated, closed-loop cost control based on actual utilization rather than manual intervention.
✗Azure Policy with a Deny effectWrong answer — click to see why▾
Why this is wrong here
Azure Policy with a Deny effect prevents non-compliant resources from being created or modified, but it cannot automatically stop an existing VM based on budget thresholds.
★ When this WOULD be the correct answer
An exam question where the requirement is to prevent deployment of VMs that do not have specific tags or are not in a certain region, and the action should be to deny the creation.
Why candidates choose this
Candidates may confuse policy enforcement (denying actions) with automated remediation actions (stopping resources), assuming Azure Policy can trigger VM shutdowns.
✗Azure Advisor cost recommendationsWrong answer — click to see why▾
Why this is wrong here
Azure Advisor provides cost recommendations to optimize spending, but it cannot automatically take actions like stopping a VM when a budget is exceeded. It only offers suggestions, not automated enforcement.
★ When this WOULD be the correct answer
A company wants to receive proactive recommendations to reduce costs on underutilized VMs. Azure Advisor cost recommendations would be the correct feature to identify such VMs and suggest resizing or shutting them down.
Why candidates choose this
Candidates may confuse cost recommendations with automated cost control, assuming Advisor can both suggest and execute actions to prevent overspending.
✗Azure Resource Graph queries with Azure Monitor alertsWrong answer — click to see why▾
Why this is wrong here
Azure Resource Graph queries with Azure Monitor alerts can detect cost anomalies but cannot directly trigger automated actions like stopping a VM; they require additional logic (e.g., Azure Functions or Runbooks) to perform remediation.
★ When this WOULD be the correct answer
An exam question asks: 'You need to query all virtual machines across multiple subscriptions that have been running for more than 30 days and send a weekly email report to the operations team.' In this case, Azure Resource Graph queries combined with Azure Monitor alerts (or Logic Apps) would be the correct answer.
Why candidates choose this
Candidates may think that combining a query tool (Resource Graph) with an alerting service (Monitor) can automate any action, overlooking that the question specifically requires stopping a VM, which needs a runbook or similar automation.
Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Azure Cost Management and Billing
Key term
Feature
A feature is a distinct unit of functionality that delivers value to the user, often managed and tracked throughout the software development lifecycle.
Key term
Trigger
In Azure data services, a trigger is a predefined automatic action that initiates a process when a specific event occurs, such as data arriving or a schedule being met.
About these practice questions
This AZ-900 question is part of Courseiva's 981-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.