Microsoft Certification AZ-900 Exam Guide 2025:
Complete Azure Fundamentals Study Plan with Practice
Questions and Cloud Concepts Explained
Scenario 1: This question requires that you evaluate the underlined text to determine if it is
correct.
Statement: -Resource groups- provide organizations with the ability to manage the compliance
of Azure resources across multiple subscriptions.
Instructions: Review the underlined text. If it makes the statement correct, select No change is
needed. If the statement is incorrect, select the answer choice that makes the statement
correct.
A. No change is needed
B. Management groups
C. Azure policies
D. Azure App Service plans
Correct Answer: B. Management groups or C. Azure policies (based on common exam answers
and official documentation context)
Rationale:
The original statement is incorrect because Resource Groups are containers for resources within
a single subscription and do not manage compliance across multiple subscriptions.
Let's evaluate the options for making the statement correct:
• B. Management groups: Management groups are specifically designed to provide a
level of scope above subscriptions. They allow you to organize subscriptions into
containers to apply governance policies (including compliance management) across
those subscriptions. This is a very strong candidate.
• C. Azure policies: Azure Policy is the service that enforces rules and standards
(compliance) over Azure resources. Policies can be applied at various scopes, including
management groups, subscriptions, and resource groups. When applied at the
management group or subscription level, they manage compliance across those scopes.
, So, Azure Policies are the tool used to manage compliance, often leveraging
management groups for scope.
Why both B and C are often seen as correct depending on the exact nuance:
• If the question implies the organizational structure that allows for compliance
management across subscriptions, Management Groups are the answer as they provide
that hierarchical structure.
• If the question implies the mechanism/tool used to enforce and manage that
compliance, Azure Policies are the answer.
Given that the provided correct answer leans towards B. Management groups (most voted) and
C. Azure policies (chosen by ExamTopics), it highlights a common ambiguity. However,
Management Groups are specifically designed as the organizational unit to apply governance
(which includes compliance via policies) across multiple subscriptions. Azure Policies enable this
governance. Without Management Groups, applying policies effectively across many
subscriptions becomes more challenging. Therefore, Management Groups provide the ability
(the structure) to manage compliance across subscriptions, with Azure Policy being the means
to do it. For this type of question, Management Groups are generally the more direct answer for
organizing and managing scope across subscriptions.
Scenario 2: Your company plans to migrate to Azure. The company has several departments. All
the Azure resources used by each department will be managed by a department administrator.
Question: What are two possible techniques to segment Azure for the departments? Each
correct answer presents a complete solution. (Choose two)
A. multiple subscriptions
B. multiple Azure Active Directory (Azure AD) directories
C. multiple regions
D. multiple resource groups
Correct Answers: A. multiple subscriptions AND D. multiple resource groups
Rationale:
• A. multiple subscriptions: Subscriptions serve as a billing boundary and a logical
container for resources. By giving each department its own subscription, you can easily
track costs per department and delegate administrative permissions at a high level. This
, is a common and effective way to segment Azure for different departments, especially
for billing and high-level access control.
• D. multiple resource groups: Resource groups are logical containers for related
resources within a single subscription. You can create multiple resource groups within a
subscription and delegate management permissions to department administrators for
their specific resource groups. This provides a granular level of segmentation and access
control without requiring separate subscriptions for every small departmental unit.
• B. multiple Azure Active Directory (Azure AD) directories: Azure AD directories
(tenants) are distinct identity boundaries. While a single Azure AD tenant can manage
multiple subscriptions, creating multiple Azure AD directories for different departments
is overly complex and unnecessary for simply segmenting Azure resources and
delegating administration. Typically, an organization uses one Azure AD tenant.
• C. multiple regions: Azure regions are geographical locations. While departments might
deploy resources to different regions, using multiple regions is primarily for global
distribution, disaster recovery, or compliance with data residency, not directly for
organizational segmentation and delegated administration.
Scenario 3: For each of the following statements, select Yes if the statement is true. Otherwise,
select No. NOTE: Each correct selection is worth one point.
Statements:
a. A single Microsoft account can be used to manage multiple Azure subscriptions.
b. Two Azure subscriptions can be merged into a single subscription.
c. A company can use resources from multiple subscriptions.
Correct Answers:
a. YES
b. NO
c. YES
Rationale:
• a. A single Microsoft account can be used to manage multiple Azure subscriptions.
(YES): You can associate multiple Azure subscriptions with the same Microsoft account
, (or more commonly, with the same Azure Active Directory tenant account). This allows a
single user identity to manage resources across various subscriptions.
• b. Two Azure subscriptions can be merged into a single subscription. (NO): Azure
subscriptions cannot be directly "merged" into one. While you can move resources
between subscriptions (within the same Azure AD tenant), the subscriptions themselves
remain distinct billing and logical entities.
• c. A company can use resources from multiple subscriptions. (YES): This is a very
common scenario for organizations. Companies often use multiple subscriptions for
various purposes, such as separating production from development environments,
departmental billing, geographical deployments, or different cost centers. Resources
across these subscriptions can still be interconnected (e.g., via VNet peering, Azure AD
for identity).
Scenario 4: To complete the sentence, select the appropriate option in the answer area.
Statement: You have several virtual machines in an Azure subscription. You create a new
subscription.
Question: The virtual machines:
A. cannot be moved to the new subscription.
B. can be moved to the new subscription.
C. can be moved to the new subscription only if they are all in the same resource group.
D. can be moved to the new subscription only if they run Windows Server 2016.
Correct Answer: B. the virtual machines can be moved to the new subscription.
Rationale:
• B. the virtual machines can be moved to the new subscription: Azure supports moving
resources, including virtual machines, between subscriptions (as long as they are within
the same Azure Active Directory tenant). This is a common operation for organizational
changes, billing adjustments, or consolidation.
• A. "cannot be moved to the new subscription" is incorrect.
• C. "can be moved to the new subscription only if they are all in the same resource
group" is incorrect. Resources can be moved individually or as part of a resource group,
Complete Azure Fundamentals Study Plan with Practice
Questions and Cloud Concepts Explained
Scenario 1: This question requires that you evaluate the underlined text to determine if it is
correct.
Statement: -Resource groups- provide organizations with the ability to manage the compliance
of Azure resources across multiple subscriptions.
Instructions: Review the underlined text. If it makes the statement correct, select No change is
needed. If the statement is incorrect, select the answer choice that makes the statement
correct.
A. No change is needed
B. Management groups
C. Azure policies
D. Azure App Service plans
Correct Answer: B. Management groups or C. Azure policies (based on common exam answers
and official documentation context)
Rationale:
The original statement is incorrect because Resource Groups are containers for resources within
a single subscription and do not manage compliance across multiple subscriptions.
Let's evaluate the options for making the statement correct:
• B. Management groups: Management groups are specifically designed to provide a
level of scope above subscriptions. They allow you to organize subscriptions into
containers to apply governance policies (including compliance management) across
those subscriptions. This is a very strong candidate.
• C. Azure policies: Azure Policy is the service that enforces rules and standards
(compliance) over Azure resources. Policies can be applied at various scopes, including
management groups, subscriptions, and resource groups. When applied at the
management group or subscription level, they manage compliance across those scopes.
, So, Azure Policies are the tool used to manage compliance, often leveraging
management groups for scope.
Why both B and C are often seen as correct depending on the exact nuance:
• If the question implies the organizational structure that allows for compliance
management across subscriptions, Management Groups are the answer as they provide
that hierarchical structure.
• If the question implies the mechanism/tool used to enforce and manage that
compliance, Azure Policies are the answer.
Given that the provided correct answer leans towards B. Management groups (most voted) and
C. Azure policies (chosen by ExamTopics), it highlights a common ambiguity. However,
Management Groups are specifically designed as the organizational unit to apply governance
(which includes compliance via policies) across multiple subscriptions. Azure Policies enable this
governance. Without Management Groups, applying policies effectively across many
subscriptions becomes more challenging. Therefore, Management Groups provide the ability
(the structure) to manage compliance across subscriptions, with Azure Policy being the means
to do it. For this type of question, Management Groups are generally the more direct answer for
organizing and managing scope across subscriptions.
Scenario 2: Your company plans to migrate to Azure. The company has several departments. All
the Azure resources used by each department will be managed by a department administrator.
Question: What are two possible techniques to segment Azure for the departments? Each
correct answer presents a complete solution. (Choose two)
A. multiple subscriptions
B. multiple Azure Active Directory (Azure AD) directories
C. multiple regions
D. multiple resource groups
Correct Answers: A. multiple subscriptions AND D. multiple resource groups
Rationale:
• A. multiple subscriptions: Subscriptions serve as a billing boundary and a logical
container for resources. By giving each department its own subscription, you can easily
track costs per department and delegate administrative permissions at a high level. This
, is a common and effective way to segment Azure for different departments, especially
for billing and high-level access control.
• D. multiple resource groups: Resource groups are logical containers for related
resources within a single subscription. You can create multiple resource groups within a
subscription and delegate management permissions to department administrators for
their specific resource groups. This provides a granular level of segmentation and access
control without requiring separate subscriptions for every small departmental unit.
• B. multiple Azure Active Directory (Azure AD) directories: Azure AD directories
(tenants) are distinct identity boundaries. While a single Azure AD tenant can manage
multiple subscriptions, creating multiple Azure AD directories for different departments
is overly complex and unnecessary for simply segmenting Azure resources and
delegating administration. Typically, an organization uses one Azure AD tenant.
• C. multiple regions: Azure regions are geographical locations. While departments might
deploy resources to different regions, using multiple regions is primarily for global
distribution, disaster recovery, or compliance with data residency, not directly for
organizational segmentation and delegated administration.
Scenario 3: For each of the following statements, select Yes if the statement is true. Otherwise,
select No. NOTE: Each correct selection is worth one point.
Statements:
a. A single Microsoft account can be used to manage multiple Azure subscriptions.
b. Two Azure subscriptions can be merged into a single subscription.
c. A company can use resources from multiple subscriptions.
Correct Answers:
a. YES
b. NO
c. YES
Rationale:
• a. A single Microsoft account can be used to manage multiple Azure subscriptions.
(YES): You can associate multiple Azure subscriptions with the same Microsoft account
, (or more commonly, with the same Azure Active Directory tenant account). This allows a
single user identity to manage resources across various subscriptions.
• b. Two Azure subscriptions can be merged into a single subscription. (NO): Azure
subscriptions cannot be directly "merged" into one. While you can move resources
between subscriptions (within the same Azure AD tenant), the subscriptions themselves
remain distinct billing and logical entities.
• c. A company can use resources from multiple subscriptions. (YES): This is a very
common scenario for organizations. Companies often use multiple subscriptions for
various purposes, such as separating production from development environments,
departmental billing, geographical deployments, or different cost centers. Resources
across these subscriptions can still be interconnected (e.g., via VNet peering, Azure AD
for identity).
Scenario 4: To complete the sentence, select the appropriate option in the answer area.
Statement: You have several virtual machines in an Azure subscription. You create a new
subscription.
Question: The virtual machines:
A. cannot be moved to the new subscription.
B. can be moved to the new subscription.
C. can be moved to the new subscription only if they are all in the same resource group.
D. can be moved to the new subscription only if they run Windows Server 2016.
Correct Answer: B. the virtual machines can be moved to the new subscription.
Rationale:
• B. the virtual machines can be moved to the new subscription: Azure supports moving
resources, including virtual machines, between subscriptions (as long as they are within
the same Azure Active Directory tenant). This is a common operation for organizational
changes, billing adjustments, or consolidation.
• A. "cannot be moved to the new subscription" is incorrect.
• C. "can be moved to the new subscription only if they are all in the same resource
group" is incorrect. Resources can be moved individually or as part of a resource group,
