AZ-900 Describe Azure management and governance Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Azure Resource Graph

  Why this is correct

  Azure Resource Graph (ARG) is the correct choice because it is a query service specifically built for resource discovery and inventory across subscriptions and management groups. It uses Kusto Query Language (KQL) to return a consolidated snapshot of all defined resources, including their metadata, tags, and effective policies, at near-real-time speed. ARG indexes resource data from Resource Manager so you can cross-reference properties and build large-scale correlated queries that a simple list API cannot efficiently provide.

• ✗

  Azure Resource Manager

  Why it's wrong here

  Azure Resource Manager (ARM) is wrong because it is the control plane for provisioning and managing Azure resources through APIs, templates, and PowerShell/CLI, not for querying across a fleet of subscriptions. While ARM's REST API exposes resource endpoints, listing resources through these APIs requires paging through each resource type and subscription individually, which is not designed for consolidated discovery. Its role is to handle deployment and state management, so it lacks the optimized query layer of Azure Resource Graph.

  When this WOULD be correct

  A company wants to deploy and manage infrastructure consistently across multiple subscriptions using templates and role-based access control. Azure Resource Manager would be the correct tool for this scenario.

• ✗

  Azure Monitor

  Why it's wrong here

  Azure Monitor is not the right service because its purpose is telemetry collection—metrics, logs, and activity data—to analyze the performance and health of workloads, not to enumerate the configuration and presence of resources themselves. Although Monitor's Log Analytics can store resource-related data if you send it there, that requires explicit ingestion and is not an automatic inventory. Without a direct KQL-capable index of the full ARM resource catalog, Monitor cannot give you the clean consolidated list of all resources across subscriptions that Resource Graph provides.

  When this WOULD be correct

  When the question asks for a tool to collect and analyze performance metrics, logs, and alerts from Azure resources, or to set up monitoring dashboards and alerts based on telemetry data.

• ✗

  Azure Policy

  Why it's wrong here

  Azure Policy is wrong for this scenario because it is a governance engine that evaluates resources against defined rules to enforce compliance (e.g., allowed SKUs, required tags) and can initiate remediation, but it does not produce on-demand aggregated resource lists. Policy itself relies on Azure Resource Graph to gather resource data for compliance evaluation, which shows that ARG is the underlying query layer. Using Policy to discover resources would be a misuse of its design—you would be querying through a policy evaluation result rather than getting a true inventory view.

  When this WOULD be correct

  A company needs to enforce tagging standards across all subscriptions and automatically remediate non-compliant resources. Azure Policy would be the correct tool to define and apply such governance rules.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Go deeper

Related to this question