Microsoft AZ-900 Azure Governance Compliance Purview Policy And Resource Locks Practice Test

 

Skill 3.2 • 40 original questions

This Microsoft AZ-900 practice test focuses on azure governance compliance purview policy and resource locks through original foundational scenarios aligned to the skills measured as of July 20, 2026. The complete ExamSnap AZ-900 collection covers cloud concepts, Azure architecture and services, and Azure management and governance. For broader exam preparation, review the Microsoft AZ-900 Exam Dumps page.

Instructions: Select the best answer for each question unless the stem says Select TWO. Review the explanation after answering; every option includes a reason it is or is not the best fit for that scenario.

Question 1

During an implementation review at Contoso, the IT operations team needs to choose the most accurate administrative approach for this requirement: describe purpose of microsoft purview in azure. Which approach is the strongest fit when the organization also wants to avoid unnecessary complexity? The implementation should avoid adding a control that does not address the stated constraint.

1. Infrastructure as code defines infrastructure declaratively or programmatically in version-controlled files to improve repeatability, automation, and consistency
2. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
3. Azure Monitor collects and analyzes telemetry; Log Analytics queries log data, alerts trigger actions from conditions, and Application Insights provides application performance monitoring and diagnostics
4. The Azure portal is a browser-based graphical interface for creating, configuring, monitoring, and managing Azure resources and services
5. Cloud Shell provides a browser-accessible shell; Azure CLI offers cross-platform commands, while Azure PowerShell provides PowerShell cmdlets for Azure management

Correct answer: B

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe infrastructure as code IaC. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement. | C: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Monitor Log Analytics alerts and Application Insights. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure portal. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Cloud Shell Azure CLI and Azure PowerShell. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates

Question 2

During an implementation review at Fourth Coffee, the IT operations team needs to implement the skill described by describe purpose of azure policy. Which approach is the strongest fit when the organization also wants to meet the stated compliance requirement? The choice must be defensible in a security and governance review.

1. The Azure portal is a browser-based graphical interface for creating, configuring, monitoring, and managing Azure resources and services
2. Tags are key-value metadata used to organize, report on, automate around, and allocate costs for Azure resources; they do not replace RBAC or Azure Policy
3. Azure Advisor analyzes resource configuration and usage to provide personalized recommendations for reliability, security, performance, operational excellence, and cost
4. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards
5. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Correct answer: D

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe Azure portal. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of tags. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Advisor. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement. | E: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards

Question 3

The application team at Litware is comparing implementation options. They must choose the most accurate administrative approach for this requirement: describe purpose of resource locks. Which option best matches the requirement and the goal to apply the narrowest effective control? The team wants the decision to match the exact control boundary rather than the most feature-rich option.

1. Azure Arc extends Azure management, governance, and selected services to servers, Kubernetes clusters, and other resources outside native Azure environments
2. Azure Service Health provides personalized information about service issues, planned maintenance, and health advisories that can affect Azure resources or regions used by the organization
3. Cloud Shell provides a browser-accessible shell; Azure CLI offers cross-platform commands, while Azure PowerShell provides PowerShell cmdlets for Azure management
4. The Azure portal is a browser-based graphical interface for creating, configuring, monitoring, and managing Azure resources and services
5. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Correct answer: E

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Arc. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Service Health. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Cloud Shell Azure CLI and Azure PowerShell. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure portal. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement.

Learning point: Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Question 4

For an upcoming rollout at Contoso, the security team needs to select an implementation consistent with this objective: describe purpose of microsoft purview in azure. Which response is most appropriate if the solution should also preserve least privilege? The choice must be defensible in a security and governance review.

1. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes
2. Azure Monitor collects and analyzes telemetry; Log Analytics queries log data, alerts trigger actions from conditions, and Application Insights provides application performance monitoring and diagnostics
3. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
4. The Azure portal is a browser-based graphical interface for creating, configuring, monitoring, and managing Azure resources and services
5. Azure Resource Manager is the Azure deployment and management layer; ARM templates declaratively define resources and dependencies for repeatable deployments

Correct answer: C

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Monitor Log Analytics alerts and Application Insights. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure portal. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Resource Manager and ARM templates. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates

Question 5

Contoso is reviewing a production configuration. The cloud adoption team must choose the most accurate administrative approach for this requirement: describe purpose of azure policy. Which choice most directly satisfies the requirement while trying to keep the design manageable at scale? The implementation should avoid adding a control that does not address the stated constraint.

1. Azure Service Health provides personalized information about service issues, planned maintenance, and health advisories that can affect Azure resources or regions used by the organization
2. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards
3. Infrastructure as code defines infrastructure declaratively or programmatically in version-controlled files to improve repeatability, automation, and consistency
4. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes
5. Azure Monitor collects and analyzes telemetry; Log Analytics queries log data, alerts trigger actions from conditions, and Application Insights provides application performance monitoring and diagnostics

Correct answer: B

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Service Health. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement. | C: This is the control, feature, or practice that directly implements the stated skill: Describe infrastructure as code IaC. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Monitor Log Analytics alerts and Application Insights. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards

Question 6

During an implementation review at Adventure Works, the application team needs to choose the most accurate administrative approach for this requirement: describe purpose of resource locks. Which approach is the strongest fit when the organization also wants to reduce user disruption? The administrator must distinguish the requested feature from adjacent controls that solve a different problem.

1. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
2. Use the Azure Pricing Calculator to estimate expected Azure service costs based on configurable resource assumptions before deployment
3. Microsoft Cost Management supports cost analysis, budgets, alerts, allocation, recommendations, and reporting across supported billing scopes
4. Azure Service Health provides personalized information about service issues, planned maintenance, and health advisories that can affect Azure resources or regions used by the organization
5. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Correct answer: E

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Explore Azure Pricing Calculator. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe Azure cost management capabilities. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Service Health. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement.

Learning point: Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Question 7

For an upcoming rollout at Fourth Coffee, the cloud adoption team needs to make a decision that correctly reflects this requirement: describe purpose of microsoft purview in azure. Which response is most appropriate if the solution should also minimize operational overhead? The choice must be defensible in a security and governance review.

1. Tags are key-value metadata used to organize, report on, automate around, and allocate costs for Azure resources; they do not replace RBAC or Azure Policy
2. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
3. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards
4. Azure Arc extends Azure management, governance, and selected services to servers, Kubernetes clusters, and other resources outside native Azure environments
5. Use the Azure Pricing Calculator to estimate expected Azure service costs based on configurable resource assumptions before deployment

Correct answer: B

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of tags. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Arc. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Explore Azure Pricing Calculator. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates

Question 8

Northwind Traders is reviewing a production configuration. The application team must select an implementation consistent with this objective: describe purpose of azure policy. Which choice most directly satisfies the requirement while trying to preserve least privilege? The implementation should avoid adding a control that does not address the stated constraint.

1. Azure cost is influenced by service type, resource size, consumption, region, data transfer, licensing, purchasing model, and architecture choices
2. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards
3. Azure Service Health provides personalized information about service issues, planned maintenance, and health advisories that can affect Azure resources or regions used by the organization
4. Azure Advisor analyzes resource configuration and usage to provide personalized recommendations for reliability, security, performance, operational excellence, and cost
5. The Azure portal is a browser-based graphical interface for creating, configuring, monitoring, and managing Azure resources and services

Correct answer: B

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe factors that affect Azure costs. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement. | C: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Service Health. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Advisor. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe Azure portal. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards

Question 9

The finance team at Litware is comparing implementation options. They must identify the feature or practice that best addresses this need: describe purpose of resource locks. Which option best matches the requirement and the goal to reduce security risk? The team wants the decision to match the exact control boundary rather than the most feature-rich option.

1. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes
2. Azure Resource Manager is the Azure deployment and management layer; ARM templates declaratively define resources and dependencies for repeatable deployments
3. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
4. Infrastructure as code defines infrastructure declaratively or programmatically in version-controlled files to improve repeatability, automation, and consistency
5. Azure Advisor analyzes resource configuration and usage to provide personalized recommendations for reliability, security, performance, operational excellence, and cost

Correct answer: A

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement. | B: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Resource Manager and ARM templates. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe infrastructure as code IaC. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Advisor. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Question 10

For an upcoming rollout at Woodgrove Bank, the cloud adoption team needs to identify the feature or practice that best addresses this need: describe purpose of microsoft purview in azure. Which response is most appropriate if the solution should also reduce user disruption? The implementation should avoid adding a control that does not address the stated constraint.

1. Azure cost is influenced by service type, resource size, consumption, region, data transfer, licensing, purchasing model, and architecture choices
2. Azure Service Health provides personalized information about service issues, planned maintenance, and health advisories that can affect Azure resources or regions used by the organization
3. Azure Monitor collects and analyzes telemetry; Log Analytics queries log data, alerts trigger actions from conditions, and Application Insights provides application performance monitoring and diagnostics
4. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
5. Tags are key-value metadata used to organize, report on, automate around, and allocate costs for Azure resources; they do not replace RBAC or Azure Policy

Correct answer: D

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe factors that affect Azure costs. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Service Health. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Monitor Log Analytics alerts and Application Insights. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement. | E: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of tags. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates

Question 11

For an upcoming rollout at Northwind Traders, the cloud adoption team needs to identify the feature or practice that best addresses this need: describe purpose of azure policy. Which response is most appropriate if the solution should also apply the narrowest effective control? The team will validate the decision with operational evidence after rollout.

1. Azure cost is influenced by service type, resource size, consumption, region, data transfer, licensing, purchasing model, and architecture choices
2. Azure Advisor analyzes resource configuration and usage to provide personalized recommendations for reliability, security, performance, operational excellence, and cost
3. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards
4. Tags are key-value metadata used to organize, report on, automate around, and allocate costs for Azure resources; they do not replace RBAC or Azure Policy
5. Azure Arc extends Azure management, governance, and selected services to servers, Kubernetes clusters, and other resources outside native Azure environments

Correct answer: C

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe factors that affect Azure costs. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Advisor. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of tags. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Arc. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards

Question 12

An administration ticket for Northwind Traders states: implement the skill described by describe purpose of resource locks. Which decision should the application team make to apply the narrowest effective control? The implementation should avoid adding a control that does not address the stated constraint.

1. Azure Monitor collects and analyzes telemetry; Log Analytics queries log data, alerts trigger actions from conditions, and Application Insights provides application performance monitoring and diagnostics
2. Cloud Shell provides a browser-accessible shell; Azure CLI offers cross-platform commands, while Azure PowerShell provides PowerShell cmdlets for Azure management
3. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes
4. Tags are key-value metadata used to organize, report on, automate around, and allocate costs for Azure resources; they do not replace RBAC or Azure Policy
5. Azure Service Health provides personalized information about service issues, planned maintenance, and health advisories that can affect Azure resources or regions used by the organization

Correct answer: C

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Monitor Log Analytics alerts and Application Insights. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Cloud Shell Azure CLI and Azure PowerShell. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of tags. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Service Health. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Question 13

For an upcoming rollout at Woodgrove Bank, the finance team needs to select an implementation consistent with this objective: describe purpose of microsoft purview in azure. Which response is most appropriate if the solution should also improve auditability? The team will validate the decision with operational evidence after rollout.

1. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
2. Azure Monitor collects and analyzes telemetry; Log Analytics queries log data, alerts trigger actions from conditions, and Application Insights provides application performance monitoring and diagnostics
3. Azure Service Health provides personalized information about service issues, planned maintenance, and health advisories that can affect Azure resources or regions used by the organization
4. Azure Arc extends Azure management, governance, and selected services to servers, Kubernetes clusters, and other resources outside native Azure environments
5. Infrastructure as code defines infrastructure declaratively or programmatically in version-controlled files to improve repeatability, automation, and consistency

Correct answer: A

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement. | B: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Monitor Log Analytics alerts and Application Insights. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Service Health. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Arc. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe infrastructure as code IaC. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates

Question 14

For an upcoming rollout at Adventure Works, the application team needs to implement the skill described by describe purpose of azure policy. Which response is most appropriate if the solution should also apply the narrowest effective control? The implementation should avoid adding a control that does not address the stated constraint.

1. Azure Arc extends Azure management, governance, and selected services to servers, Kubernetes clusters, and other resources outside native Azure environments
2. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards
3. Tags are key-value metadata used to organize, report on, automate around, and allocate costs for Azure resources; they do not replace RBAC or Azure Policy
4. Use the Azure Pricing Calculator to estimate expected Azure service costs based on configurable resource assumptions before deployment
5. Cloud Shell provides a browser-accessible shell; Azure CLI offers cross-platform commands, while Azure PowerShell provides PowerShell cmdlets for Azure management

Correct answer: B

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Arc. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of tags. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Explore Azure Pricing Calculator. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Cloud Shell Azure CLI and Azure PowerShell. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards

Question 15

During an implementation review at Wingtip Toys, the governance team needs to make a decision that correctly reflects this requirement: describe purpose of resource locks. Which approach is the strongest fit when the organization also wants to preserve least privilege? The choice must be defensible in a security and governance review.

1. Azure Monitor collects and analyzes telemetry; Log Analytics queries log data, alerts trigger actions from conditions, and Application Insights provides application performance monitoring and diagnostics
2. Infrastructure as code defines infrastructure declaratively or programmatically in version-controlled files to improve repeatability, automation, and consistency
3. Microsoft Cost Management supports cost analysis, budgets, alerts, allocation, recommendations, and reporting across supported billing scopes
4. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards
5. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Correct answer: E

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Monitor Log Analytics alerts and Application Insights. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe infrastructure as code IaC. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe Azure cost management capabilities. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement.

Learning point: Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Question 16

For an upcoming rollout at Contoso, the governance team needs to select an implementation consistent with this objective: describe purpose of microsoft purview in azure. Which response is most appropriate if the solution should also reduce security risk? The team will validate the decision with operational evidence after rollout.

1. Use the Azure Pricing Calculator to estimate expected Azure service costs based on configurable resource assumptions before deployment
2. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards
3. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
4. The Azure portal is a browser-based graphical interface for creating, configuring, monitoring, and managing Azure resources and services
5. Azure Advisor analyzes resource configuration and usage to provide personalized recommendations for reliability, security, performance, operational excellence, and cost

Correct answer: C

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Explore Azure Pricing Calculator. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure portal. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Advisor. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates

Question 17

The cloud adoption team at Alpine Ski House is comparing implementation options. They must make a decision that correctly reflects this requirement: describe purpose of azure policy. Which option best matches the requirement and the goal to preserve least privilege? The implementation should avoid adding a control that does not address the stated constraint.

1. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
2. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes
3. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards
4. Azure Service Health provides personalized information about service issues, planned maintenance, and health advisories that can affect Azure resources or regions used by the organization
5. Microsoft Cost Management supports cost analysis, budgets, alerts, allocation, recommendations, and reporting across supported billing scopes

Correct answer: C

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Service Health. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe Azure cost management capabilities. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards

Question 18

For an upcoming rollout at Trey Research, the finance team needs to implement the skill described by describe purpose of resource locks. Which response is most appropriate if the solution should also apply the narrowest effective control? The implementation should avoid adding a control that does not address the stated constraint.

1. Azure Resource Manager is the Azure deployment and management layer; ARM templates declaratively define resources and dependencies for repeatable deployments
2. Azure Arc extends Azure management, governance, and selected services to servers, Kubernetes clusters, and other resources outside native Azure environments
3. Cloud Shell provides a browser-accessible shell; Azure CLI offers cross-platform commands, while Azure PowerShell provides PowerShell cmdlets for Azure management
4. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes
5. Azure cost is influenced by service type, resource size, consumption, region, data transfer, licensing, purchasing model, and architecture choices

Correct answer: D

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Resource Manager and ARM templates. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Arc. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Cloud Shell Azure CLI and Azure PowerShell. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement. | E: This is the control, feature, or practice that directly implements the stated skill: Describe factors that affect Azure costs. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Question 19

The security team at Litware is comparing implementation options. They must choose the most accurate administrative approach for this requirement: describe purpose of microsoft purview in azure. Which option best matches the requirement and the goal to meet the stated compliance requirement? The team wants the decision to match the exact control boundary rather than the most feature-rich option.

1. Azure Monitor collects and analyzes telemetry; Log Analytics queries log data, alerts trigger actions from conditions, and Application Insights provides application performance monitoring and diagnostics
2. Tags are key-value metadata used to organize, report on, automate around, and allocate costs for Azure resources; they do not replace RBAC or Azure Policy
3. Azure Arc extends Azure management, governance, and selected services to servers, Kubernetes clusters, and other resources outside native Azure environments
4. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
5. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Correct answer: D

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Monitor Log Analytics alerts and Application Insights. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of tags. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Arc. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement. | E: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates

Question 20

The governance team at Trey Research is comparing implementation options. They must implement the skill described by describe purpose of azure policy. Which option best matches the requirement and the goal to keep the design manageable at scale? The administrator must distinguish the requested feature from adjacent controls that solve a different problem.

1. Azure cost is influenced by service type, resource size, consumption, region, data transfer, licensing, purchasing model, and architecture choices
2. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
3. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards
4. Azure Advisor analyzes resource configuration and usage to provide personalized recommendations for reliability, security, performance, operational excellence, and cost
5. Microsoft Cost Management supports cost analysis, budgets, alerts, allocation, recommendations, and reporting across supported billing scopes

Correct answer: C

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe factors that affect Azure costs. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Advisor. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe Azure cost management capabilities. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards

Question 21

For an upcoming rollout at Alpine Ski House, the finance team needs to make a decision that correctly reflects this requirement: describe purpose of resource locks. Which response is most appropriate if the solution should also meet the stated compliance requirement? The administrator must distinguish the requested feature from adjacent controls that solve a different problem.

1. Infrastructure as code defines infrastructure declaratively or programmatically in version-controlled files to improve repeatability, automation, and consistency
2. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes
3. The Azure portal is a browser-based graphical interface for creating, configuring, monitoring, and managing Azure resources and services
4. Microsoft Cost Management supports cost analysis, budgets, alerts, allocation, recommendations, and reporting across supported billing scopes
5. Azure cost is influenced by service type, resource size, consumption, region, data transfer, licensing, purchasing model, and architecture choices

Correct answer: B

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe infrastructure as code IaC. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement. | C: This is the control, feature, or practice that directly implements the stated skill: Describe Azure portal. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure cost management capabilities. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe factors that affect Azure costs. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Question 22

Contoso is reviewing a production configuration. The cloud adoption team must make a decision that correctly reflects this requirement: describe purpose of microsoft purview in azure. Which choice most directly satisfies the requirement while trying to reduce user disruption? The choice must be defensible in a security and governance review.

1. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
2. Use the Azure Pricing Calculator to estimate expected Azure service costs based on configurable resource assumptions before deployment
3. Azure cost is influenced by service type, resource size, consumption, region, data transfer, licensing, purchasing model, and architecture choices
4. Azure Resource Manager is the Azure deployment and management layer; ARM templates declaratively define resources and dependencies for repeatable deployments
5. The Azure portal is a browser-based graphical interface for creating, configuring, monitoring, and managing Azure resources and services

Correct answer: A

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement. | B: This is the control, feature, or practice that directly implements the stated skill: Explore Azure Pricing Calculator. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe factors that affect Azure costs. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Resource Manager and ARM templates. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe Azure portal. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates

Question 23

Northwind Traders is reviewing a production configuration. The cloud adoption team must choose the most accurate administrative approach for this requirement: describe purpose of azure policy. Which choice most directly satisfies the requirement while trying to improve auditability? The implementation should avoid adding a control that does not address the stated constraint.

1. Cloud Shell provides a browser-accessible shell; Azure CLI offers cross-platform commands, while Azure PowerShell provides PowerShell cmdlets for Azure management
2. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards
3. Azure Service Health provides personalized information about service issues, planned maintenance, and health advisories that can affect Azure resources or regions used by the organization
4. Infrastructure as code defines infrastructure declaratively or programmatically in version-controlled files to improve repeatability, automation, and consistency
5. Azure Resource Manager is the Azure deployment and management layer; ARM templates declaratively define resources and dependencies for repeatable deployments

Correct answer: B

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Cloud Shell Azure CLI and Azure PowerShell. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement. | C: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Service Health. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe infrastructure as code IaC. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Resource Manager and ARM templates. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards

Question 24

A change request at Litware has one non-negotiable requirement: implement the skill described by describe purpose of resource locks. What should the security team choose if the priority is to improve auditability? The implementation should avoid adding a control that does not address the stated constraint.

1. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes
2. Microsoft Cost Management supports cost analysis, budgets, alerts, allocation, recommendations, and reporting across supported billing scopes
3. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards
4. Azure Monitor collects and analyzes telemetry; Log Analytics queries log data, alerts trigger actions from conditions, and Application Insights provides application performance monitoring and diagnostics
5. Use the Azure Pricing Calculator to estimate expected Azure service costs based on configurable resource assumptions before deployment

Correct answer: A

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement. | B: This is the control, feature, or practice that directly implements the stated skill: Describe Azure cost management capabilities. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Monitor Log Analytics alerts and Application Insights. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Explore Azure Pricing Calculator. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Question 25

During an implementation review at Litware, the security team needs to identify the feature or practice that best addresses this need: describe purpose of microsoft purview in azure. Which approach is the strongest fit when the organization also wants to reduce security risk? The administrator must distinguish the requested feature from adjacent controls that solve a different problem.

1. Azure Service Health provides personalized information about service issues, planned maintenance, and health advisories that can affect Azure resources or regions used by the organization
2. Azure cost is influenced by service type, resource size, consumption, region, data transfer, licensing, purchasing model, and architecture choices
3. Use the Azure Pricing Calculator to estimate expected Azure service costs based on configurable resource assumptions before deployment
4. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
5. Microsoft Cost Management supports cost analysis, budgets, alerts, allocation, recommendations, and reporting across supported billing scopes

Correct answer: D

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Service Health. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe factors that affect Azure costs. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Explore Azure Pricing Calculator. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement. | E: This is the control, feature, or practice that directly implements the stated skill: Describe Azure cost management capabilities. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates

Question 26

During an implementation review at Woodgrove Bank, the IT operations team needs to select an implementation consistent with this objective: describe purpose of azure policy. Which approach is the strongest fit when the organization also wants to support repeatable administration? The team will validate the decision with operational evidence after rollout.

1. Use the Azure Pricing Calculator to estimate expected Azure service costs based on configurable resource assumptions before deployment
2. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
3. Azure Arc extends Azure management, governance, and selected services to servers, Kubernetes clusters, and other resources outside native Azure environments
4. Azure Service Health provides personalized information about service issues, planned maintenance, and health advisories that can affect Azure resources or regions used by the organization
5. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards

Correct answer: E

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Explore Azure Pricing Calculator. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Arc. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Service Health. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement.

Learning point: Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards

Question 27

An administration ticket for Trey Research states: implement the skill described by describe purpose of resource locks. Which decision should the IT operations team make to keep the design manageable at scale? The administrator must distinguish the requested feature from adjacent controls that solve a different problem.

1. Microsoft Cost Management supports cost analysis, budgets, alerts, allocation, recommendations, and reporting across supported billing scopes
2. Azure Service Health provides personalized information about service issues, planned maintenance, and health advisories that can affect Azure resources or regions used by the organization
3. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes
4. Azure Monitor collects and analyzes telemetry; Log Analytics queries log data, alerts trigger actions from conditions, and Application Insights provides application performance monitoring and diagnostics
5. The Azure portal is a browser-based graphical interface for creating, configuring, monitoring, and managing Azure resources and services

Correct answer: C

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe Azure cost management capabilities. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Service Health. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Monitor Log Analytics alerts and Application Insights. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe Azure portal. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Question 28

The finance team at Trey Research is comparing implementation options. They must choose the most accurate administrative approach for this requirement: describe purpose of microsoft purview in azure. Which option best matches the requirement and the goal to minimize operational overhead? The team will validate the decision with operational evidence after rollout.

1. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
2. Infrastructure as code defines infrastructure declaratively or programmatically in version-controlled files to improve repeatability, automation, and consistency
3. Azure Arc extends Azure management, governance, and selected services to servers, Kubernetes clusters, and other resources outside native Azure environments
4. Microsoft Cost Management supports cost analysis, budgets, alerts, allocation, recommendations, and reporting across supported billing scopes
5. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Correct answer: A

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement. | B: This is the control, feature, or practice that directly implements the stated skill: Describe infrastructure as code IaC. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Arc. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure cost management capabilities. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates

Question 29

An administration ticket for Contoso states: make a decision that correctly reflects this requirement: describe purpose of azure policy. Which decision should the security team make to improve auditability? The team will validate the decision with operational evidence after rollout.

1. Azure Resource Manager is the Azure deployment and management layer; ARM templates declaratively define resources and dependencies for repeatable deployments
2. Use the Azure Pricing Calculator to estimate expected Azure service costs based on configurable resource assumptions before deployment
3. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards
4. The Azure portal is a browser-based graphical interface for creating, configuring, monitoring, and managing Azure resources and services
5. Infrastructure as code defines infrastructure declaratively or programmatically in version-controlled files to improve repeatability, automation, and consistency

Correct answer: C

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Resource Manager and ARM templates. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Explore Azure Pricing Calculator. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure portal. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe infrastructure as code IaC. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards

Question 30

For an upcoming rollout at Contoso, the IT operations team needs to identify the feature or practice that best addresses this need: describe purpose of resource locks. Which response is most appropriate if the solution should also meet the stated compliance requirement? The choice must be defensible in a security and governance review.

1. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
2. The Azure portal is a browser-based graphical interface for creating, configuring, monitoring, and managing Azure resources and services
3. Cloud Shell provides a browser-accessible shell; Azure CLI offers cross-platform commands, while Azure PowerShell provides PowerShell cmdlets for Azure management
4. Azure cost is influenced by service type, resource size, consumption, region, data transfer, licensing, purchasing model, and architecture choices
5. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Correct answer: E

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe Azure portal. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Cloud Shell Azure CLI and Azure PowerShell. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe factors that affect Azure costs. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement.

Learning point: Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Question 31

Litware is reviewing a production configuration. The governance team must make a decision that correctly reflects this requirement: describe purpose of microsoft purview in azure. Which choice most directly satisfies the requirement while trying to apply the narrowest effective control? The administrator must distinguish the requested feature from adjacent controls that solve a different problem.

1. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards
2. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
3. Cloud Shell provides a browser-accessible shell; Azure CLI offers cross-platform commands, while Azure PowerShell provides PowerShell cmdlets for Azure management
4. Azure Monitor collects and analyzes telemetry; Log Analytics queries log data, alerts trigger actions from conditions, and Application Insights provides application performance monitoring and diagnostics
5. Azure Advisor analyzes resource configuration and usage to provide personalized recommendations for reliability, security, performance, operational excellence, and cost

Correct answer: B

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement. | C: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Cloud Shell Azure CLI and Azure PowerShell. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Monitor Log Analytics alerts and Application Insights. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Advisor. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates

Question 32

During an implementation review at Adventure Works, the finance team needs to select an implementation consistent with this objective: describe purpose of azure policy. Which approach is the strongest fit when the organization also wants to keep the design manageable at scale? The implementation should avoid adding a control that does not address the stated constraint.

1. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards
2. Azure Resource Manager is the Azure deployment and management layer; ARM templates declaratively define resources and dependencies for repeatable deployments
3. Azure Monitor collects and analyzes telemetry; Log Analytics queries log data, alerts trigger actions from conditions, and Application Insights provides application performance monitoring and diagnostics
4. Microsoft Cost Management supports cost analysis, budgets, alerts, allocation, recommendations, and reporting across supported billing scopes
5. Azure cost is influenced by service type, resource size, consumption, region, data transfer, licensing, purchasing model, and architecture choices

Correct answer: A

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement. | B: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Resource Manager and ARM templates. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Monitor Log Analytics alerts and Application Insights. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure cost management capabilities. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe factors that affect Azure costs. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards

Question 33

Tailspin Toys is reviewing a production configuration. The security team must implement the skill described by describe purpose of resource locks. Which choice most directly satisfies the requirement while trying to reduce user disruption? The choice must be defensible in a security and governance review.

1. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes
2. Microsoft Cost Management supports cost analysis, budgets, alerts, allocation, recommendations, and reporting across supported billing scopes
3. Cloud Shell provides a browser-accessible shell; Azure CLI offers cross-platform commands, while Azure PowerShell provides PowerShell cmdlets for Azure management
4. The Azure portal is a browser-based graphical interface for creating, configuring, monitoring, and managing Azure resources and services
5. Azure Monitor collects and analyzes telemetry; Log Analytics queries log data, alerts trigger actions from conditions, and Application Insights provides application performance monitoring and diagnostics

Correct answer: A

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement. | B: This is the control, feature, or practice that directly implements the stated skill: Describe Azure cost management capabilities. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Cloud Shell Azure CLI and Azure PowerShell. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure portal. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Monitor Log Analytics alerts and Application Insights. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Question 34

The security team at Litware is comparing implementation options. They must implement the skill described by describe purpose of microsoft purview in azure. Which option best matches the requirement and the goal to improve auditability? The team wants the decision to match the exact control boundary rather than the most feature-rich option.

1. Microsoft Cost Management supports cost analysis, budgets, alerts, allocation, recommendations, and reporting across supported billing scopes
2. Azure cost is influenced by service type, resource size, consumption, region, data transfer, licensing, purchasing model, and architecture choices
3. Tags are key-value metadata used to organize, report on, automate around, and allocate costs for Azure resources; they do not replace RBAC or Azure Policy
4. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
5. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards

Correct answer: D

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe Azure cost management capabilities. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe factors that affect Azure costs. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of tags. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement. | E: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates

Question 35

Alpine Ski House is reviewing a production configuration. The governance team must identify the feature or practice that best addresses this need: describe purpose of azure policy. Which choice most directly satisfies the requirement while trying to preserve least privilege? The administrator must distinguish the requested feature from adjacent controls that solve a different problem.

1. Microsoft Cost Management supports cost analysis, budgets, alerts, allocation, recommendations, and reporting across supported billing scopes
2. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards
3. Azure Arc extends Azure management, governance, and selected services to servers, Kubernetes clusters, and other resources outside native Azure environments
4. Cloud Shell provides a browser-accessible shell; Azure CLI offers cross-platform commands, while Azure PowerShell provides PowerShell cmdlets for Azure management
5. Azure Advisor analyzes resource configuration and usage to provide personalized recommendations for reliability, security, performance, operational excellence, and cost

Correct answer: B

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe Azure cost management capabilities. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Arc. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Cloud Shell Azure CLI and Azure PowerShell. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Advisor. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards

Question 36

A change request at Trey Research has one non-negotiable requirement: make a decision that correctly reflects this requirement: describe purpose of resource locks. What should the finance team choose if the priority is to support repeatable administration? The team wants the decision to match the exact control boundary rather than the most feature-rich option.

1. Azure cost is influenced by service type, resource size, consumption, region, data transfer, licensing, purchasing model, and architecture choices
2. Microsoft Cost Management supports cost analysis, budgets, alerts, allocation, recommendations, and reporting across supported billing scopes
3. Tags are key-value metadata used to organize, report on, automate around, and allocate costs for Azure resources; they do not replace RBAC or Azure Policy
4. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes
5. Azure Service Health provides personalized information about service issues, planned maintenance, and health advisories that can affect Azure resources or regions used by the organization

Correct answer: D

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe factors that affect Azure costs. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe Azure cost management capabilities. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of tags. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement. | E: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Service Health. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Question 37

During an implementation review at Trey Research, the IT operations team needs to implement the skill described by describe purpose of microsoft purview in azure. Which approach is the strongest fit when the organization also wants to avoid unnecessary complexity? The administrator must distinguish the requested feature from adjacent controls that solve a different problem.

1. Tags are key-value metadata used to organize, report on, automate around, and allocate costs for Azure resources; they do not replace RBAC or Azure Policy
2. The Azure portal is a browser-based graphical interface for creating, configuring, monitoring, and managing Azure resources and services
3. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
4. Azure Arc extends Azure management, governance, and selected services to servers, Kubernetes clusters, and other resources outside native Azure environments
5. Azure Advisor analyzes resource configuration and usage to provide personalized recommendations for reliability, security, performance, operational excellence, and cost

Correct answer: C

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of tags. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe Azure portal. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Arc. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Advisor. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates

Question 38

For an upcoming rollout at Litware, the IT operations team needs to choose the most accurate administrative approach for this requirement: describe purpose of azure policy. Which response is most appropriate if the solution should also avoid unnecessary complexity? The choice must be defensible in a security and governance review.

1. Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards
2. Azure Arc extends Azure management, governance, and selected services to servers, Kubernetes clusters, and other resources outside native Azure environments
3. Infrastructure as code defines infrastructure declaratively or programmatically in version-controlled files to improve repeatability, automation, and consistency
4. Cloud Shell provides a browser-accessible shell; Azure CLI offers cross-platform commands, while Azure PowerShell provides PowerShell cmdlets for Azure management
5. The Azure portal is a browser-based graphical interface for creating, configuring, monitoring, and managing Azure resources and services

Correct answer: A

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Policy. This directly matches the scenario requirement. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Arc. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe infrastructure as code IaC. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Cloud Shell Azure CLI and Azure PowerShell. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | E: This is the control, feature, or practice that directly implements the stated skill: Describe Azure portal. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Azure Policy evaluates resource configurations against rules and can audit, deny, modify, or remediate resources to enforce governance standards

Question 39

The governance team at Tailspin Toys is comparing implementation options. They must select an implementation consistent with this objective: describe purpose of resource locks. Which option best matches the requirement and the goal to preserve least privilege? The team wants the decision to match the exact control boundary rather than the most feature-rich option.

1. Azure Advisor analyzes resource configuration and usage to provide personalized recommendations for reliability, security, performance, operational excellence, and cost
2. Azure Monitor collects and analyzes telemetry; Log Analytics queries log data, alerts trigger actions from conditions, and Application Insights provides application performance monitoring and diagnostics
3. Tags are key-value metadata used to organize, report on, automate around, and allocate costs for Azure resources; they do not replace RBAC or Azure Policy
4. Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes
5. Use the Azure Pricing Calculator to estimate expected Azure service costs based on configurable resource assumptions before deployment

Correct answer: D

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Advisor. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Monitor Log Analytics alerts and Application Insights. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of tags. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of resource locks. This directly matches the scenario requirement. | E: This is the control, feature, or practice that directly implements the stated skill: Explore Azure Pricing Calculator. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Resource locks help prevent accidental deletion or modification by applying CanNotDelete or ReadOnly restrictions at supported scopes

Question 40

An administration ticket for Northwind Traders states: implement the skill described by describe purpose of microsoft purview in azure. Which decision should the application team make to keep the design manageable at scale? The choice must be defensible in a security and governance review.

1. Azure Arc extends Azure management, governance, and selected services to servers, Kubernetes clusters, and other resources outside native Azure environments
2. Azure Advisor analyzes resource configuration and usage to provide personalized recommendations for reliability, security, performance, operational excellence, and cost
3. The Azure portal is a browser-based graphical interface for creating, configuring, monitoring, and managing Azure resources and services
4. Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates
5. Azure Resource Manager is the Azure deployment and management layer; ARM templates declaratively define resources and dependencies for repeatable deployments

Correct answer: D

Why: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement.

Option review: A: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Arc. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | B: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Azure Advisor. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | C: This is the control, feature, or practice that directly implements the stated skill: Describe Azure portal. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here. | D: This is the control, feature, or practice that directly implements the stated skill: Describe purpose of Microsoft Purview in Azure. This directly matches the scenario requirement. | E: This is the control, feature, or practice that directly implements the stated skill: Describe Azure Resource Manager and ARM templates. It can be appropriate for a different objective, but it does not most directly address the requirement being tested here.

Learning point: Microsoft Purview provides data governance, discovery, classification, compliance, and risk-management capabilities across organizational data estates