Azure Fundamentals · 35% of the exam

Describe Azure management and governance: free practice questions

5 sample questions from our 20-question bank for this domain — answers and explanations included. These are the same scenario-based style as the real Azure exam.

1. A developer wants to script the creation of 20 storage accounts. They prefer Bash-style syntax and will run the script on macOS. Which tool is the MOST natural fit?

  • A. Azure CLI✓ Correct
  • B. The Azure portal
  • C. ARM template designer only
  • D. Azure Service Health
Explanation

Azure CLI is a cross-platform command-line tool with Bash-friendly syntax (az storage account create ...) that scripts naturally on macOS/Linux. The portal (B) is graphical — clicking 20 times isn't scripting. Option C alone isn't a scripting tool (templates would still need CLI/PowerShell/portal to deploy, and 'designer only' rules that out). Service Health (D) is a monitoring dashboard.

2. A team deployed identical VMs in two different Azure regions and noticed the hourly compute price differs between them. Which factor explains this?

  • A. Azure charges more for VMs created through the portal than the CLI
  • B. Resource prices vary by region due to local infrastructure, energy, and demand costs✓ Correct
  • C. The first VM in any subscription is always free
  • D. Prices only differ when VMs run different operating systems
Explanation

Region is a genuine cost factor in Azure — the same VM size can be priced differently across regions because underlying infrastructure, power, and demand differ. Option A is false; the creation tool never affects pricing. Option C is false — free-tier offers are specific limited services, not 'first VM free'. Option D is misleading: OS licensing affects price, but regional variance exists even for identical images.

3. An organization has 40 subscriptions across departments. Governance wants one place to apply a policy ('allowed regions: Australia East and Australia Southeast') to ALL subscriptions at once, with inheritance downward. What should they use?

  • A. Apply the policy separately in each of the 40 subscriptions
  • B. A management group containing the subscriptions, with the policy assigned at the management-group scope✓ Correct
  • C. A single resource group spanning all subscriptions
  • D. Tags on each subscription
Explanation

Management groups exist precisely for governance at scale: group subscriptions, assign policy (or RBAC) once at the management-group level, and it inherits down to every subscription and resource beneath. Option A works but is 40× the effort and drifts over time. Option C is impossible — resource groups live inside a single subscription. Option D labels subscriptions but enforces nothing.

4. A compliance officer requires that all newly created storage accounts allow only HTTPS traffic, that non-compliant existing resources be identified, and where possible automatically remediated. Which service provides this?

  • A. Azure Advisor
  • B. Azure Policy✓ Correct
  • C. Resource locks
  • D. Azure Service Health
Explanation

Azure Policy defines and enforces organizational rules: it can deny non-compliant deployments, audit existing resources, and auto-remediate (e.g., enforce HTTPS-only on storage). Advisor (A) gives best-practice recommendations but enforces nothing. Locks (C) prevent deletion or changes wholesale — they can't express configuration rules. Service Health (D) reports Azure platform incidents, unrelated to governance.

5. A platform team deploys the same three-tier environment repeatedly. They want deployments to be declarative, repeatable, version-controlled, and idempotent — the same template always produces the same environment. Which approach BEST fits?

  • A. Clicking through the Azure portal using a documented checklist
  • B. Infrastructure as code using ARM templates (or Bicep)✓ Correct
  • C. Manually running individual CLI commands from memory
  • D. Emailing configuration screenshots between engineers
Explanation

ARM templates (and Bicep) are Azure's infrastructure-as-code: declarative JSON/Bicep definitions that are idempotent, repeatable, and storable in source control. Portal checklists (A) and ad-hoc CLI (C) are imperative, error-prone, and drift over time. Option D isn't a deployment method at all — it's how configuration knowledge gets lost.

15 more questions in this domain

Practice the full bank with instant grading, flashcards, and a timed mock exam.

Start practicing free