- A
Azure Policy
Why wrong: Azure Policy is used to enforce compliance rules on existing resources, but it cannot deploy resources like storage accounts or assign RBAC roles. It only manages policy definitions and assignments, not the full set of infrastructure and roles required by the scenario.
- B
Azure Blueprints
Azure Blueprints enables you to define a repeatable set of Azure resources (including policies, roles, and ARM templates) that implement and adhere to your organization's standards. Blueprints are versioned and can be assigned to management groups to automatically provision the environment in all child subscriptions.
- C
Azure Management Groups
Why wrong: Azure Management Groups provide a hierarchical structure for organizing and managing subscriptions, such as applying policies at scale. However, they do not inherently deploy resources or assign roles; they are containers that help with governance but do not provision environments.
- D
Azure Resource Graph
Why wrong: Azure Resource Graph is a service that allows you to query and explore Azure resources across subscriptions. It is used for inventory and discovery, not for provisioning or governance enforcement. It cannot deploy a standardized environment.
Quick Answer
The correct answer is Azure Blueprints because it is the only Azure governance service designed to package a standardized environment deployment as a single, versioned artifact that can include Azure Policy assignments, RBAC role assignments, and resource groups with templates like a storage account configuration. Unlike using Azure Policy alone, which only enforces rules, Azure Blueprints orchestrates the entire landing zone approach by composing these components together and assigning them to a management group or subscription, with built-in versioning to update environments over time as requirements change. On the AZ-900 exam, this question tests your understanding of how Blueprints differs from other governance tools—a common trap is confusing it with Azure Policy, but remember that Blueprints is the “shipping container” that bundles policies, roles, and resources together. For a memory tip, think of Blueprints as a “blueprint for a house”: it includes the rules (policies), the team assignments (RBAC), and the foundation (resource groups) all in one reusable plan.
AZ-900 Describe Azure management and governance Practice Question
This AZ-900 practice question tests your understanding of describe azure management and governance. This is a configuration task: choose the command set that satisfies every stated requirement. Small differences — like 'secret' vs 'password' or 'transport input ssh' vs 'all' — change whether the answer is correct. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A company is adopting a landing zone approach in Azure. The governance team wants to automatically provision a standardized environment for each new Azure subscription. The environment must include: a predefined set of Azure Policy assignments (e.g., enforce resource tagging), specific RBAC role assignments for a central operations team, and a baseline resource group containing a storage account with a specific configuration. The team wants to package all these components into a single, versioned object that can be assigned to a management group and updated over time as requirements change. Which Azure governance service should the team use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Azure Blueprints
Azure Blueprints is the correct service because it is designed to orchestrate the deployment of a repeatable, versioned environment that includes Azure Policy assignments, RBAC role assignments, and resource groups/templates as a single, composable artifact. Unlike Azure Policy alone, Blueprints can package multiple governance components together and assign them to management groups or subscriptions, with versioning support for updates over time.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Policy
Why it's wrong here
Azure Policy is used to enforce compliance rules on existing resources, but it cannot deploy resources like storage accounts or assign RBAC roles. It only manages policy definitions and assignments, not the full set of infrastructure and roles required by the scenario.
- ✓
Azure Blueprints
Why this is correct
Azure Blueprints enables you to define a repeatable set of Azure resources (including policies, roles, and ARM templates) that implement and adhere to your organization's standards. Blueprints are versioned and can be assigned to management groups to automatically provision the environment in all child subscriptions.
Related concept
Read the scenario before looking for a memorised answer.
- ✗
Azure Management Groups
Why it's wrong here
Azure Management Groups provide a hierarchical structure for organizing and managing subscriptions, such as applying policies at scale. However, they do not inherently deploy resources or assign roles; they are containers that help with governance but do not provision environments.
- ✗
Azure Resource Graph
Why it's wrong here
Azure Resource Graph is a service that allows you to query and explore Azure resources across subscriptions. It is used for inventory and discovery, not for provisioning or governance enforcement. It cannot deploy a standardized environment.
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is that candidates often confuse Azure Policy (which only enforces rules) with Azure Blueprints (which packages policies, roles, and resources together), or assume Management Groups can provision environments when they only provide hierarchical scope for management.
Trap categories for this question
Scenario analysis trap
Azure Policy is used to enforce compliance rules on existing resources, but it cannot deploy resources like storage accounts or assign RBAC roles. It only manages policy definitions and assignments, not the full set of infrastructure and roles required by the scenario.
Detailed technical explanation
How to think about this question
Azure Blueprints uses a declarative blueprint definition that can include artifacts such as policy assignments, role assignments, ARM templates, and resource groups. When assigned to a management group or subscription, Blueprints creates a read-only, versioned artifact that tracks the deployment state, enabling updates via new blueprint versions that can be applied to existing assignments without manual reconfiguration. This is particularly useful in enterprise-scale landing zones where consistent governance must be maintained across hundreds of subscriptions.
KKey Concepts to Remember
- Read the scenario before looking for a memorised answer.
- Find the constraint that changes the correct option.
- Eliminate answers that are true in general but not in this case.
TExam Day Tips
- Watch for words such as best, first, most likely and least administrative effort.
- Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A media company stores terabytes of video archives that are accessed once a year for audit purposes. Moving these objects to a cold storage tier (Azure Archive, S3 Glacier, or Google Nearline) costs a fraction of hot storage. Questions like this test whether you understand storage tiers, access frequency tradeoffs, and retrieval latency requirements.
What to study next
Got this wrong? Here's your next step.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
- →
Describe Azure management and governance — study guide chapter
Learn the concepts, then practise the questions
- →
Describe Azure management and governance practice questions
Targeted practice on this topic area only
- →
All AZ-900 questions
1,031 questions across all exam domains
- →
Microsoft Azure Fundamentals AZ-900 study guide
Full concept coverage aligned to exam objectives
- →
AZ-900 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Related AZ-900 practice-question pages
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Describe cloud concepts practice questions
Practise AZ-900 questions linked to Describe cloud concepts.
Describe Azure architecture and services practice questions
Practise AZ-900 questions linked to Describe Azure architecture and services.
Describe Azure management and governance practice questions
Practise AZ-900 questions linked to Describe Azure management and governance.
AZ-900 Azure services practice questions
Practise AZ-900 questions linked to AZ-900 Azure services.
AZ-900 pricing and support practice questions
Practise AZ-900 questions linked to AZ-900 pricing and support.
AZ-900 security and compliance practice questions
Practise AZ-900 questions linked to AZ-900 security and compliance.
AZ-900 governance practice questions
Practise AZ-900 questions linked to AZ-900 governance.
Practice this exam
Start a free AZ-900 practice session
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Questions learners often ask
What does this AZ-900 question test?
Describe Azure management and governance — This question tests Describe Azure management and governance — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: Azure Blueprints — Azure Blueprints is the correct service because it is designed to orchestrate the deployment of a repeatable, versioned environment that includes Azure Policy assignments, RBAC role assignments, and resource groups/templates as a single, composable artifact. Unlike Azure Policy alone, Blueprints can package multiple governance components together and assign them to management groups or subscriptions, with versioning support for updates over time.
What should I do if I get this AZ-900 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on AZ-900
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company is adopting Azure and needs to deploy a standardized environment that includes a resource group, a virtual network with specific IP address ranges, and a set of Azure Policy definitions to restrict allowed deployment locations. The environment will be deployed to multiple subscriptions used by different departments. The company requires a repeatable, versioned package that defines the resources, policies, and role assignments as a single item. The solution must allow updates to be managed and enforced over time. Which Azure feature should the company use?
medium- A.Azure Policy
- ✓ B.Azure Blueprints
- C.ARM templates
- D.Management groups
Why B: Azure Blueprints is the correct choice because it enables the orchestrated deployment of a standardized environment—including resource groups, virtual networks, Azure Policy definitions, and role assignments—as a single, versioned, and updatable package. Unlike ARM templates, Blueprints natively supports versioning, policy assignment, and role assignment as first-class artifacts, and it allows the blueprint to be assigned to multiple subscriptions while maintaining a central source of truth for updates and enforcement.
Variation 2. A company is adopting Azure and wants to ensure that every new subscription automatically includes a standard set of governance artifacts: two custom Azure Policy definitions (one for allowed locations, one for resource tagging), a custom Role-Based Access Control (RBAC) assignment for the security team, and an initial resource group with an Azure Resource Manager (ARM) template that sets up a network topology. The company wants to version these artifacts and update them over time, ensuring that new subscriptions always use the latest approved version. Which Azure service should the company use to package and deploy this standardized environment?
medium- A.Azure Management Groups
- B.Azure Policy Initiatives
- ✓ C.Azure Blueprints
- D.Azure Resource Manager (ARM) Templates
Why C: Azure Blueprints is the correct service because it is designed to orchestrate the deployment of a repeatable, versioned environment that includes policies, RBAC assignments, resource groups, and ARM templates. It allows you to define a blueprint with these artifacts, publish versions, and assign the latest approved version to new subscriptions, ensuring consistent governance across the organization.
Last reviewed: Jun 11, 2026
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.