AZ-900 Azure Management Tools and Solutions 2 — Questions and Answers
Question 1: Which Azure service allows you to enforce organizational standards and assess compliance at scale across your subscriptions?
- Azure Blueprints
- Azure Policy (Correct answer)
- Azure RBAC
- Azure Advisor
Correct answer: Azure Policy
Azure Policy lets you create, assign, and manage policies that enforce rules on Azure resources to ensure they remain compliant with corporate standards.
Question 2: What is the difference between Azure Policy and Azure RBAC?
- Azure Policy controls user actions; RBAC controls resource properties
- Azure Policy focuses on resource properties; RBAC controls user access and actions (Correct answer)
- They are the same service with different names
- Azure Policy is for cost control; RBAC is for security
Correct answer: Azure Policy focuses on resource properties; RBAC controls user access and actions
Azure Policy enforces rules about resource configurations (e.g., allowed locations), while RBAC controls who can perform what actions on which resources.
Question 3: What are Azure Blueprints used for?
- Creating network diagrams of Azure infrastructure
- Packaging governance artifacts (policies, RBAC, ARM templates) to deploy compliant environments at scale (Correct answer)
- Generating cost reports for management
- Monitoring VM health and performance
Correct answer: Packaging governance artifacts (policies, RBAC, ARM templates) to deploy compliant environments at scale
Azure Blueprints enable cloud architects to define a repeatable set of Azure resources, policies, and role assignments that implement organizational standards.
Question 4: Which Azure feature provides a unified view of alerts, health events, and diagnostics across your Azure resources?
- Azure Security Center
- Azure Monitor (Correct answer)
- Azure Sentinel
- Azure Advisor
Correct answer: Azure Monitor
Azure Monitor collects, analyzes, and acts on telemetry data from your cloud and on-premises environments, providing dashboards, alerts, and log analytics.
Question 5: What is the purpose of Management Groups in Azure?
- To group users for email distribution lists
- To organize multiple subscriptions into a hierarchy for applying governance at scale (Correct answer)
- To bundle Azure services into a single billing unit
- To manage virtual machine scale sets
Correct answer: To organize multiple subscriptions into a hierarchy for applying governance at scale
Management Groups allow you to apply policies and RBAC assignments across multiple subscriptions at once by organizing them in a hierarchical structure.
Question 6: Which Azure CLI command format is used to create a resource group in the East US region?
- az group create --name MyRG --location eastus (Correct answer)
- New-AzResourceGroup -Name MyRG -Location eastus
- azure group new --name MyRG --region eastus
- az resource-group add --name MyRG --region eastus
Correct answer: az group create --name MyRG --location eastus
The Azure CLI uses the 'az group create' command with --name and --location parameters to create a new resource group.
AZ-900 Azure Management Tools and Solutions 2
Which Azure service allows you to enforce organizational standards and assess compliance at scale across your subscriptions?