nerdexam
Microsoft

AZ-900 · Question #103

An organization you work for has to comply with internal compliance goals. The organization must have its Azure resources complaint with company standards. For this, ongoing evaluation of non- complai

The correct answer is A. Azure Policies. Azure Policies are used to enforce organizational standards and assess compliance for Azure resources by defining rules and automatically identifying non-compliant resources.

Submitted by noor.lb· Mar 5, 2026Describe Azure Management and Governance

Question

An organization you work for has to comply with internal compliance goals. The organization must have its Azure resources complaint with company standards. For this, ongoing evaluation of non- complaint resources is required. What would you recommend as a solution to use in this situation?

Options

  • AAzure Policies
  • BAzure Advisor
  • CRole-based access control (RBAC)
  • DAzure Monitor

How the community answered

(26 responses)
  • A
    85% (22)
  • B
    8% (2)
  • C
    4% (1)
  • D
    4% (1)

Why each option

Azure Policies are used to enforce organizational standards and assess compliance for Azure resources by defining rules and automatically identifying non-compliant resources.

AAzure PoliciesCorrect

Azure Policies allow you to define rules and effects for your Azure resources to ensure they comply with your organizational standards, security requirements, and regulatory compliance. They enable ongoing evaluation of resources against these standards and can enforce compliance, identify non-compliant resources, and even remediate them.

BAzure Advisor

Azure Advisor provides recommendations for cost optimization, security, reliability, operational excellence, and performance, but it does not enforce compliance with internal standards or policies directly.

CRole-based access control (RBAC)

Role-based access control (RBAC) manages who can do what on Azure resources but doesn't define or enforce configuration standards or assess compliance of the resources themselves.

DAzure Monitor

Azure Monitor collects, analyzes, and acts on telemetry data from your Azure and on-premises environments, primarily for monitoring performance and health, not for enforcing compliance standards.

Concept tested: Azure Policy for Compliance

Source: https://learn.microsoft.com/en-us/azure/governance/policy/overview

Community Discussion

No community discussion yet for this question.

Full AZ-900 Practice