AZ-900 Azure Management and Governance Practice Questions (30–35% of the Exam)

Azure Management and Governance is 30–35% of the exam. It covers cost management and tags, Microsoft Purview, Azure Policy and resource locks, the portal, Cloud Shell, Azure Arc and ARM templates, and Advisor, Service Health and Azure Monitor. Answer these 10 free questions with no signup, written to Microsoft's July 20, 2026 skills outline.

Last updated November 10, 2026.

10 Free AZ-900 Azure Management and Governance Questions with Answers

Question 1: Azure Management and Governance

A finance team wants a planned-spend baseline for a new project so it can get budget approval before anything is deployed. Later it will track actual spending against that figure. Which tool provides the baseline?

  1. Cost analysis in Cost Management
  2. Azure pricing calculator
  3. Credit alerts in Cost Management
  4. Budgets in Microsoft Cost Management

Correct answer: B. B is correct because teams often use a pricing calculator estimate as the baseline for budget approval, then revisit it as the architecture changes. A is incorrect because cost analysis needs actual cost data from deployed resources, so it cannot give a figure before deployment. C is incorrect because credit alerts report consumption of an Enterprise Agreement's Azure Prepayment, not a planned-spend estimate. D is incorrect because a budget tracks actual spending against a limit once resources exist, so it is the later tracking step, not the up-front estimate.

Question 2: Azure Management and Governance

Which statement about managing resource tags is true?

  1. Tags can be managed in the portal, CLI, PowerShell, templates or API
  2. Azure requires every resource to carry the same set of mandatory tags
  3. Tags can be set in the Azure portal but not in Resource Manager templates
  4. Each Azure resource can hold just one tag at any one time

Correct answer: A. A is correct because you can add, modify or delete tags through the Azure portal, PowerShell, the Azure CLI, Resource Manager templates or the REST API. B is incorrect because Azure does not require any tags by default; you choose which tags to apply and can enforce them with Azure Policy. C is incorrect because ARM templates can define tags on resources, along with the portal, CLI, PowerShell and REST API. D is incorrect because a resource can have one or more tags assigned, each with its own name and value.

Question 3: Azure Management and Governance

Two developers each deploy an identical small VM in the same region for a month. One sees no charge for the VM, and the other pays the normal rate. Neither uses reservations or Azure Hybrid Benefit. Which cost factor most likely explains the difference?

  1. Geography
  2. Resource type
  3. Azure Marketplace
  4. Subscription type

Correct answer: D. D is correct because some subscription types, such as an Azure free account, include usage allowances that can cover a resource's cost. A is incorrect because both VMs were deployed in the same region, so regional price differences do not apply. B is incorrect because both developers deployed the same resource type and size, so resource type cannot explain the difference. C is incorrect because Marketplace purchases add a third-party vendor's charges, which would raise a bill rather than remove a charge.

Question 4: Azure Management and Governance

A company wants to limit virtual machines to a list of approved sizes across all the subscriptions in one management group, including subscriptions that are added to the group later. At which scope should the policy be assigned?

  1. Each resource group in those subscriptions
  2. Each existing subscription in the management group
  3. The management group that contains the subscriptions
  4. Each virtual machine as soon as it is created

Correct answer: C. C is correct because an assignment at a management group is inherited by every subscription in it, including subscriptions added later. A is incorrect because assigning per resource group is hard to manage and would miss resource groups and subscriptions created later. B is incorrect because assigning to each existing subscription would miss any subscription added later until someone assigned it again. D is incorrect because assigning to single VMs after creation is too late to control sizes and misses new subscriptions.

Question 5: Azure Management and Governance

Which service focuses on governing the data itself, such as what data exists, where sensitive data is stored and how it flows, rather than on the security posture of the workloads that hold it?

  1. Microsoft Sentinel
  2. Azure Advisor
  3. Microsoft Purview
  4. Microsoft Defender for Cloud

Correct answer: C. C is correct because Microsoft Purview is a family of data governance, risk and compliance solutions that gives a unified view of data, including classification and lineage. A is incorrect because Microsoft Sentinel collects security signals and helps detect and respond to threats, not govern and classify data. B is incorrect because Azure Advisor gives best-practice recommendations for deployed resources and does not govern data. D is incorrect because Defender for Cloud assesses and hardens the security posture of workloads and protects them from threats, rather than governing the data.

Question 6: Azure Management and Governance

A team needs to create the same virtual network, two VMs and a storage account in five regions, with identical settings each time. Which should it use?

  1. An Azure Policy
  2. An ARM template
  3. A resource lock
  4. An Azure RBAC role

Correct answer: B. B is correct because an ARM template declares the resources to deploy, so the same template can be deployed repeatedly with consistent results. A is incorrect because Azure Policy evaluates and enforces rules on resources but does not create the environment. C is incorrect because a resource lock prevents deletion or modification of resources and does not deploy anything. D is incorrect because an RBAC role defines what users can do and does not create resources.

Question 7: Azure Management and Governance

A contractor uses a locked-down company laptop on which no software can be installed. He needs to run Azure CLI commands against the company's subscription today. What should he use?

  1. Azure Cloud Shell
  2. Local Azure PowerShell
  3. A portal dashboard
  4. Local Azure CLI

Correct answer: A. A is correct because Cloud Shell is a browser-based shell with the Azure CLI and Azure PowerShell already available, so no local installation or configuration is required. B is incorrect because Azure PowerShell would also need a local installation, and he needs CLI commands. C is incorrect because a dashboard shows a graphical view of resources and cannot run Azure CLI commands. D is incorrect because installing the Azure CLI on the laptop is not allowed in this scenario.

Question 8: Azure Management and Governance

What is the term for managing and provisioning infrastructure through code and templates, rather than through manual configuration?

  1. Lift-and-shift migration
  2. Continuous integration (CI)
  3. Platform as a service (PaaS)
  4. Infrastructure as code (IaC)

Correct answer: D. D is correct because infrastructure as code means managing infrastructure through code and templates instead of manual configuration. A is incorrect because lift-and-shift moves an existing workload to the cloud with minimal changes and is not about defining infrastructure in code. B is incorrect because continuous integration is the practice of building and testing code changes often, not defining infrastructure in code. C is incorrect because PaaS is a cloud service type in which the provider manages the platform, not a way of describing infrastructure in code.

Question 9: Azure Management and Governance

Azure Monitor stores two main kinds of data. Which kind consists of numeric values collected at regular intervals, which makes it suited to near real-time charts and alerts?

  1. Metrics
  2. Logs
  3. Distributed traces
  4. Activity log entries

Correct answer: A. A is correct because metrics are numeric values sampled at regular intervals, which makes them lightweight and suited to near real-time scenarios. B is incorrect because logs are records that can hold text and numbers with different properties, and they are analyzed with queries. C is incorrect because distributed traces follow a request through an application's components rather than sampling numeric values over time. D is incorrect because activity log entries record control-plane events, such as who created or deleted a resource, not regular numeric samples.

Question 10: Azure Management and Governance

A company runs the same VM sizes every day of the year. Azure Advisor suggests buying reservations for this steady usage to lower the bill. Under which Advisor category will the team find this recommendation?

  1. Reliability
  2. Cost
  3. Performance
  4. Operational excellence

Correct answer: B. B is correct because the Cost category identifies ways to reduce Azure spending, such as reservations for consistent usage or shutting down idle resources. A is incorrect because the Reliability category points out configuration risks to availability, not savings opportunities. C is incorrect because the Performance category proposes changes that speed up applications rather than changes that cut spending. D is incorrect because Operational excellence suggests improvements to processes and deployments rather than ways to pay less.

Azure Management and Governance Subsections in Microsoft's Outline

SubsectionSkills outline areaDomainQuestions
3.1Cost managementAzure Management and Governance45
3.2Governance and complianceAzure Management and Governance35
3.3Managing and deploying resourcesAzure Management and Governance50
3.4Monitoring toolsAzure Management and Governance45

More AZ-900 Practice

FlashGenius is not affiliated with or endorsed by Microsoft. Microsoft, Azure and AZ-900 are trademarks of Microsoft. These are original practice questions, not questions from the real exam. Your score here is practice accuracy, not a Microsoft score or a pass prediction.