AZ-900 Azure Resources & Resource
Groups Practice Test 2026–2027 |
Resource Organization, Management &
Detailed Answers
1. An organization is deploying several Azure resources that belong to the
same application lifecycle. The administrator wants to manage their
deployment and deletion as a single logical unit. Which Azure construct
should be used?
A. Availability zone
B. Resource group
C. Management group
D. Subscription
Answer: B. Resource group
Rationale: A resource group is a logical container for Azure resources that allows
related resources to be managed together. Resources in a resource group can
have independent lifecycles, but the group provides a convenient management
boundary.
, 2. A company creates an Azure virtual machine in a resource group named
RG-Production. Where is the VM physically stored?
A. Inside RG-Production
B. Inside the Azure subscription
C. In the Azure region selected for the VM
D. In the management group containing RG-Production
Answer: C. In the Azure region selected for the VM
Rationale: A resource group is a logical management container rather than a
physical storage location. The VM's actual compute resources are deployed to
an Azure region and, where applicable, an availability zone.
3. An administrator wants to deploy an Azure storage account and virtual
network so they can be managed together as part of an application. What
should the administrator create?
A. A resource group
B. An availability set
C. A region pair
D. A management group
Answer: A. A resource group
Rationale: Resource groups are designed to organize related Azure resources
according to an application, workload, environment, or other management
requirement.
4. A resource group contains five Azure resources. An administrator deletes
the resource group. What is the expected result?
A. Only the resource group is deleted
B. Resources become orphaned but remain active
C. The resources in the resource group are also deleted
D. The subscription is deleted
Answer: C. The resources in the resource group are also deleted
,Rationale: Deleting a resource group is a destructive operation that removes the
resources contained within that resource group, subject to service-specific
behavior and protections.
5. A company wants to separate development, testing, and production
resources for administrative purposes. Which approach is most
appropriate?
A. Use one resource group for every Azure region
B. Use separate resource groups for the different environments
C. Put all resources in the management group
D. Create one subscription for every resource
Answer: B. Use separate resource groups for the different environments
Rationale: Separate resource groups provide logical and operational boundaries
that can simplify access control, deployment, monitoring, and lifecycle
management for different environments.
6. Which statement best describes an Azure resource?
A. A physical Azure datacenter
B. A logical container for subscriptions
C. A manageable entity created or deployed in Azure
D. A billing invoice
Answer: C. A manageable entity created or deployed in Azure
Rationale: Azure resources include services and components such as virtual
machines, storage accounts, virtual networks, databases, and web applications
that can be managed through Azure.
7. An administrator needs to apply access permissions to all resources used by
a development team. Which resource-level container is particularly useful
for this purpose?
A. Resource group
B. Availability zone
, C. Region pair
D. Azure datacenter
Answer: A. Resource group
Rationale: Azure role-based access control can be scoped to a resource group,
allowing permissions to be assigned across the resources within that
management boundary.
8. A developer has Contributor access to RG-App. What does this generally
allow the developer to do?
A. Manage resources within RG-App according to the role's permissions
B. Automatically manage all Azure subscriptions
C. Change the Microsoft Entra tenant owner
D. Access every resource in Azure
Answer: A. Manage resources within RG-App according to the role's permissions
Rationale: The Contributor role permits management of Azure resources at the
assigned scope but does not automatically grant permissions to assign Azure
RBAC roles.
9. Which Azure scope is broader than a resource group?
A. Individual resource
B. Subscription
C. Individual property
D. Resource instance
Answer: B. Subscription
Rationale: Azure RBAC scopes can include management groups, subscriptions,
resource groups, and individual resources. A subscription is therefore broader
than a resource group.
10.A company has separate subscriptions for development and production.
Which construct can be used to organize those subscriptions hierarchically?
Groups Practice Test 2026–2027 |
Resource Organization, Management &
Detailed Answers
1. An organization is deploying several Azure resources that belong to the
same application lifecycle. The administrator wants to manage their
deployment and deletion as a single logical unit. Which Azure construct
should be used?
A. Availability zone
B. Resource group
C. Management group
D. Subscription
Answer: B. Resource group
Rationale: A resource group is a logical container for Azure resources that allows
related resources to be managed together. Resources in a resource group can
have independent lifecycles, but the group provides a convenient management
boundary.
, 2. A company creates an Azure virtual machine in a resource group named
RG-Production. Where is the VM physically stored?
A. Inside RG-Production
B. Inside the Azure subscription
C. In the Azure region selected for the VM
D. In the management group containing RG-Production
Answer: C. In the Azure region selected for the VM
Rationale: A resource group is a logical management container rather than a
physical storage location. The VM's actual compute resources are deployed to
an Azure region and, where applicable, an availability zone.
3. An administrator wants to deploy an Azure storage account and virtual
network so they can be managed together as part of an application. What
should the administrator create?
A. A resource group
B. An availability set
C. A region pair
D. A management group
Answer: A. A resource group
Rationale: Resource groups are designed to organize related Azure resources
according to an application, workload, environment, or other management
requirement.
4. A resource group contains five Azure resources. An administrator deletes
the resource group. What is the expected result?
A. Only the resource group is deleted
B. Resources become orphaned but remain active
C. The resources in the resource group are also deleted
D. The subscription is deleted
Answer: C. The resources in the resource group are also deleted
,Rationale: Deleting a resource group is a destructive operation that removes the
resources contained within that resource group, subject to service-specific
behavior and protections.
5. A company wants to separate development, testing, and production
resources for administrative purposes. Which approach is most
appropriate?
A. Use one resource group for every Azure region
B. Use separate resource groups for the different environments
C. Put all resources in the management group
D. Create one subscription for every resource
Answer: B. Use separate resource groups for the different environments
Rationale: Separate resource groups provide logical and operational boundaries
that can simplify access control, deployment, monitoring, and lifecycle
management for different environments.
6. Which statement best describes an Azure resource?
A. A physical Azure datacenter
B. A logical container for subscriptions
C. A manageable entity created or deployed in Azure
D. A billing invoice
Answer: C. A manageable entity created or deployed in Azure
Rationale: Azure resources include services and components such as virtual
machines, storage accounts, virtual networks, databases, and web applications
that can be managed through Azure.
7. An administrator needs to apply access permissions to all resources used by
a development team. Which resource-level container is particularly useful
for this purpose?
A. Resource group
B. Availability zone
, C. Region pair
D. Azure datacenter
Answer: A. Resource group
Rationale: Azure role-based access control can be scoped to a resource group,
allowing permissions to be assigned across the resources within that
management boundary.
8. A developer has Contributor access to RG-App. What does this generally
allow the developer to do?
A. Manage resources within RG-App according to the role's permissions
B. Automatically manage all Azure subscriptions
C. Change the Microsoft Entra tenant owner
D. Access every resource in Azure
Answer: A. Manage resources within RG-App according to the role's permissions
Rationale: The Contributor role permits management of Azure resources at the
assigned scope but does not automatically grant permissions to assign Azure
RBAC roles.
9. Which Azure scope is broader than a resource group?
A. Individual resource
B. Subscription
C. Individual property
D. Resource instance
Answer: B. Subscription
Rationale: Azure RBAC scopes can include management groups, subscriptions,
resource groups, and individual resources. A subscription is therefore broader
than a resource group.
10.A company has separate subscriptions for development and production.
Which construct can be used to organize those subscriptions hierarchically?
