AZ-900 Describe Azure architecture and services Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Resource groups

  Why this is correct

  Resource groups are Azure's logical containers that group related resources for unified deployment, management, and monitoring. They act as the primary scope for RBAC permissions, policy assignments, and cost reporting, enabling you to treat a set of resources as a single administrative unit. Because they are purpose-built for organizing resources by lifecycle, security, or cost center, resource groups are the correct construct for logical grouping.

• ✗

  Availability sets

  Why it's wrong here

  Availability sets are a high-availability feature specifically for virtual machines, distributing VM instances across fault domains and update domains to minimize downtime during hardware failures or maintenance. They do not provide any logical grouping mechanism for management, RBAC, or policy enforcement, and they apply only to VMs, not to other Azure resources. Therefore, an availability set is an infrastructure resilience construct, not a general-purpose organizational grouping.

  When this WOULD be correct

  A question asks: 'Which Azure feature should be used to ensure that at least one virtual machine remains available during planned maintenance or unplanned hardware failures?' In that context, Availability sets are the correct answer.

• ✗

  Virtual networks

  Why it's wrong here

  Virtual networks (VNets) provide private IP addressing, subnets, and network isolation in Azure, allowing you to segment traffic between resources. While a VNet groups resources at the network layer, it is not a management or governance container: it does not inherently scope RBAC, policies, or lifecycle operations for the resources inside it. VNets are about connectivity and security boundaries, not logical organization for administrative purposes.

  When this WOULD be correct

  A question that asks: 'Which Azure construct provides network isolation and allows you to define private IP address spaces, subnets, and connect to on-premises networks?' would have Virtual networks as the correct answer.

• ✗

  Subscriptions

  Why it's wrong here

  Subscriptions are billing and access-control boundaries in Azure, defining a payment method, service limits, and a top-level scope for RBAC assignments. They aggregate resources for cost allocation and administrative isolation, but they are too coarse-grained to serve as the primary logical grouping for related resources. Within a subscription, resource groups provide the finer-grained organization needed for managing resources together, making subscriptions an incomplete answer.

  When this WOULD be correct

  A company wants to separate billing and cost tracking for different departments or projects, and also needs to apply different administrative policies (e.g., region restrictions) at a high level. Subscriptions would be the correct construct to use.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”