Microsoft Azure Fundamentals (AZ-900) — All Questions

An administrator must ensure resources can only be deployed to approved Azure regions across the organization. Which tool enforces this rule?

• a.Azure Monitor
• b.Resource locks
• c.Azure Policy✓
• d.Azure Advisor

Azure Policy enforces organizational rules such as allowed regions and reports on compliance. Azure Monitor observes telemetry, resource locks prevent deletion or modification, and Advisor gives recommendations but does not enforce policy.

In Azure's resource hierarchy, which order is correct from broadest to narrowest scope?

• a.Management group, subscription, resource group, resource✓
• b.Resource, resource group, subscription, management group
• c.Subscription, management group, resource, resource group
• d.Resource group, subscription, management group, resource

Management groups contain subscriptions, which contain resource groups, which contain resources; settings and access inherit downward. The other orderings misplace one or more levels of the hierarchy.

To prevent a critical resource from being accidentally deleted, which feature should an administrator apply?

• a.A tag
• b.A resource lock (CanNotDelete)✓
• c.A network security group
• d.An availability zone

A resource lock set to CanNotDelete prevents accidental deletion while still allowing use. Tags label resources, network security groups filter traffic, and availability zones concern resiliency, not deletion protection.

Which tool provides personalized recommendations to optimize Azure resources across cost, security, reliability, and performance?

• a.Azure Policy
• b.Azure Cloud Shell
• c.Resource groups
• d.Azure Advisor✓

Azure Advisor analyzes your resource usage and configuration and recommends improvements across cost, security, reliability, operational excellence, and performance. Policy enforces rules, Cloud Shell is a command environment, and resource groups organize resources.