AZ-900 Management and Governance Practice Questions

C is correct.

Explanation: Microsoft Purview is a family of data governance, risk, and compliance solutions that gives a unified view of on-premises, multicloud, and SaaS data, and it supports data maps, sensitive-data discovery, secure access, and data-access management at scale.

A is incorrect: Azure Policy creates and manages rules that control resource configurations, so it does not provide a unified view of data across on-premises, multicloud, and SaaS sources.

B is incorrect: Resource locks only prevent accidental changes or deletion of resources, so they do not discover sensitive data or manage data access.

D is incorrect: The Service Trust Portal provides access to documentation about Microsoft security, privacy, and compliance practices, not a view of your own data estate.

B is correct.

Explanation: The Service Trust Portal provides authenticated access to information about Microsoft security, privacy, and compliance practices, and you can search documents and save or pin them in My Library for later use. Some materials require a nondisclosure agreement.

A is incorrect: Microsoft Purview governs your own data across on-premises, multicloud, and SaaS sources rather than publishing Microsoft compliance documentation.

C is incorrect: Azure Policy evaluation reports on resources that do not meet your rules, so it does not supply Microsoft security and privacy documentation.

D is incorrect: Resource locks prevent accidental changes or deletion of resources and provide no compliance documentation.

A is correct.

Explanation: Azure Policy uses policies and initiatives to control resource configurations, can prevent the creation of noncompliant resources, and applies with inheritance from the subscription scope down to resource groups and resources.

B is incorrect: A ReadOnly lock allows only read operations, so it would block valid resource creation and changes rather than enforce configuration standards.

C is incorrect: A Microsoft Purview data map supports data governance across on-premises, multicloud, and SaaS data, not enforcement of Azure resource configuration rules.

D is incorrect: The Service Trust Portal supplies Microsoft security, privacy, and compliance documentation, so it cannot block noncompliant resource creation.

C is correct.

Explanation: Bandwidth charges apply to data that moves out of Azure datacenters, so a workload that streams large volumes of data to internet viewers has costs that scale with outbound data transfer.

A is incorrect: Data ingress and egress are priced differently, so planning around inbound traffic does not account for the cost that grows with viewer downloads.

B is incorrect: Marketplace purchases cover third-party products bought through Azure, which is a separate cost factor from the data transfer generated by streaming.

D is incorrect: Subscription type affects how resources are billed and which offers apply, but it does not change the fact that outbound data transfer is metered as traffic grows.

D is correct.

Explanation: A Delete lock allows read and modification operations but prevents deletion, so staff can still change settings while the resource is protected from removal.

A is incorrect: A ReadOnly lock allows only read operations, so it would also block the configuration changes that staff must make.

B is incorrect: Changing role assignments manages permissions, but a lock prevents the change regardless of the role-based access control permissions a user holds.

C is incorrect: An audit-only policy evaluation highlights noncompliant resources; use a lock when the requirement is to prevent deletion.

B is correct.

Explanation: An Azure savings plan for compute commits you to a fixed hourly amount of spend for one or three years and applies that discount flexibly across eligible compute services, which suits a steady spending baseline with a changing service mix.

A is incorrect: Reservations commit to specific resources and capacity, so they fit stable and predictable workloads rather than a mix of services that changes often.

C is incorrect: Spot Virtual Machines use unused capacity and can be evicted, so they suit fault-tolerant, interruptible workloads and not workloads that cannot accept interruptions.

D is incorrect: Azure Marketplace covers third-party products and services and is a separate cost factor, not a commitment-based discount for eligible compute usage.

A is correct.

Explanation: The Azure Pricing calculator estimates the cost of individual resources or a complete solution and lets you select compute, storage, network, regions, service tiers, and redundancy. The estimates are informational only, so using the calculator does not provision resources or create charges.

B is incorrect: Deploying the solution first creates real resources and real charges, which the team must avoid.

C is incorrect: The Total Cost of Ownership calculator has been retired, so it is not available for this estimate.

D is incorrect: Budgets and cost analysis work with the costs of resources that already exist in a subscription, so they cannot estimate a solution that is not deployed.

B and D are correct.

Explanation: Azure Policy can enforce tagging conventions, such as requiring a costCenter tag when resources are created, and tags must be applied to the individual resources you want to report on because tags are name-value metadata attached to each resource. Together these actions support cost allocation and forecasting for each business unit.

A is incorrect: Tags do not inherit from a subscription to the resources inside it, so subscription-level tags leave the individual resources untagged.

C is incorrect: Tags do not inherit from a resource group to its resources, so resource group tags alone do not produce per-resource cost allocation.

A and C are correct.

Explanation: Locks inherit through resource-group and subscription scopes, so resources in a locked subscription receive the same protection, and a ReadOnly lock restricts users to read operations.

B is incorrect: The lock must be removed before the change is allowed, regardless of the role-based access control permissions a user holds.

D is incorrect: A Delete lock allows reads and modifications and prevents only deletion; use a ReadOnly lock when modifications must also be blocked.

D is correct.

Explanation: Budgets in Microsoft Cost Management set a spending limit for a scope, send alerts as spending approaches that limit, and can trigger automation such as suspending nonproduction resources.

A is incorrect: Cost analysis groups and displays costs by dimensions such as resource group, region, or service, but it does not send alerts or run automation.

B is incorrect: Department spending quota alerts apply to department spending thresholds and do not provide the automation the team needs for its test subscription.

C is incorrect: Credit alerts track remaining Azure credit for commitments and do not enforce a monthly spending target or suspend resources.