Quick Answer
The answer is Azure Policy, the correct choice because it enables you to create and assign rules that enforce compliance across your Azure environment. By defining a policy that restricts allowed locations to 'West Europe' and assigning it to the subscription scope, Azure Policy will deny or audit any resource deployment that does not meet this geographic restriction, effectively controlling where resources can be created. On the AZ-900 exam, this scenario tests your understanding of governance features, often appearing as a question about enforcing organizational standards across multiple subscriptions. A common trap is confusing Azure Policy with Azure Blueprints or RBAC—remember that Policy enforces rules on resource properties like region, while Blueprints packages templates and RBAC controls who can act. For a quick memory tip, think “Policy polices the location” to recall that it governs where resources can be deployed.
This AZ-900 practice question tests your understanding of describe azure management and governance. Match the stated requirement to the specific cloud service, access model, or configuration option — many options are valid in isolation but not for this scenario. A key principle to apply: azure Policy enforces organizational standards and assesses compliance.. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A company has multiple Azure subscriptions for different departments. The IT team wants to ensure that all resources in a specific subscription are only deployed in the 'West Europe' region. Which Azure feature should they use to enforce this restriction?
Azure Policy
Azure Policy can enforce rules like allowed resource locations across a subscription or resource group.
Azure RBAC
Why wrong: Azure RBAC manages access to resources, not region restrictions.
Azure Blueprints
Why wrong: Blueprints define a repeatable set of resources but do not directly enforce location restrictions.
Azure Resource Graph
Why wrong: Resource Graph is for querying resources, not governance enforcement.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Azure Policy
Azure Policy is correct because it allows you to create, assign, and manage policies that enforce specific rules or effects on your resources. By defining a policy that restricts allowed locations to 'West Europe' and assigning it to the subscription scope, Azure Policy will deny or audit any resource deployment that does not comply with this geographic restriction.
Key principle: Azure Policy enforces organizational standards and assesses compliance.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Azure Policy
Why this is correct
Azure Policy can enforce rules like allowed resource locations across a subscription or resource group.
Related concept
Azure Policy enforces organizational standards and assesses compliance.
Azure RBAC
Why it's wrong here
Azure RBAC manages access to resources, not region restrictions.
Azure Blueprints
Why it's wrong here
Blueprints define a repeatable set of resources but do not directly enforce location restrictions.
Azure Resource Graph
Why it's wrong here
Resource Graph is for querying resources, not governance enforcement.
Common exam traps
The trap here is that candidates often confuse Azure Policy with Azure RBAC, mistakenly thinking that assigning a role like 'Contributor' can restrict deployment regions, when in fact RBAC only controls permissions and not resource configuration or compliance.
Detailed technical explanation
Azure Policy uses a JSON-based policy definition that includes an 'if-then' condition, such as checking the 'location' property of a resource against an allowed list, and an effect like 'Deny' or 'Audit'. When a policy with the 'Deny' effect is assigned at the subscription scope, Azure Resource Manager evaluates it during resource creation or update, blocking any request that specifies a region outside 'West Europe' before the resource is provisioned. This evaluation happens at the control plane level, ensuring compliance without requiring post-deployment remediation.
Key takeaway
Azure Policy enforces organizational standards and assesses compliance.
Real-world example
A company's IT admin needs to give a contractor read-only access to production logs without sharing account credentials. Using role-based access control (RBAC) and temporary scoped permissions — not a permanent shared password — is the correct pattern. Questions like this test whether you can apply least-privilege access across cloud identity services.
What to study next
Review azure Policy enforces organizational standards and assesses compliance., then practise related AZ-900 questions on the same topic to reinforce the concept.
Describe Azure management and governance — study guide chapter
Learn the concepts, then practise the questions
Describe Azure management and governance practice questions
Targeted practice on this topic area only
All AZ-900 questions
1,031 questions across all exam domains
Microsoft Azure Fundamentals AZ-900 study guide
Full concept coverage aligned to exam objectives
AZ-900 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Practise AZ-900 questions linked to Describe cloud concepts.
Practise AZ-900 questions linked to Describe Azure architecture and services.
Practise AZ-900 questions linked to Describe Azure management and governance.
Practise AZ-900 questions linked to AZ-900 Azure services.
Practise AZ-900 questions linked to AZ-900 pricing and support.
Practise AZ-900 questions linked to AZ-900 security and compliance.
Practise AZ-900 questions linked to AZ-900 governance.
Practice this exam
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Describe Azure management and governance — This question tests Describe Azure management and governance — Azure Policy enforces organizational standards and assesses compliance..
The correct answer is: Azure Policy — Azure Policy is correct because it allows you to create, assign, and manage policies that enforce specific rules or effects on your resources. By defining a policy that restricts allowed locations to 'West Europe' and assigning it to the subscription scope, Azure Policy will deny or audit any resource deployment that does not comply with this geographic restriction.
Review azure Policy enforces organizational standards and assesses compliance., then practise related AZ-900 questions on the same topic to reinforce the concept.
Azure Policy enforces organizational standards and assesses compliance.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company has a regulatory requirement that all Azure resources must be deployed only in the West Europe region. The governance team needs to automatically prevent any user or application from creating resources in any other region. The team must also ensure that this restriction is applied to all existing and future subscriptions within the tenant. Which Azure service should the governance team use?
mediumWhy A: Azure Policy is correct because it enforces organizational standards by evaluating resources for compliance with defined rules, such as restricting allowed regions. By creating a policy definition that denies resource creation outside West Europe and assigning it at the management group scope, the restriction applies to all existing and future subscriptions within the tenant automatically.
Last reviewed: Jun 11, 2026
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.