Governance, Compliance, Azure Policy and Purview
Governance questions test Microsoft Purview, Azure Policy, policy initiatives, resource locks, compliance evidence, and enforcement boundaries.
How to study for AZ-900
Treat each AZ-900 item as a cloud fit decision: identify the cloud model, Azure service category, responsibility boundary, governance need, or management tool.
Core concepts
Concept 1
Governance, Compliance, Azure Policy and Purview questions reward Azure service selection and responsibility reasoning rather than memorizing portal labels.
Exam cue: Identify whether the item is about cloud concepts, Azure services, or management and governance.
Concept 2
The best answer identifies the cloud model, Azure resource, management boundary, security control, or governance tool that matches the scenario.
Exam cue: Separate Microsoft responsibility from customer configuration and data responsibility.
Concept 3
Eliminate answers that confuse IaaS, PaaS, and SaaS responsibilities or use a monitoring, cost, or governance tool for the wrong job.
Exam cue: Match the Azure tool to the requested outcome: deploy, secure, govern, monitor, or optimize cost.
Risk pitfalls and guardrails
Assuming cloud always removes customer responsibility.
Guardrail: Avoid answers that remove all customer responsibility, use monitoring for pricing estimates, use tags for network security, or confuse Azure Policy with RBAC.
Choosing a named Azure service without checking whether the scenario asks for compute, networking, storage, identity, governance, or monitoring.
Guardrail: Avoid answers that remove all customer responsibility, use monitoring for pricing estimates, use tags for network security, or confuse Azure Policy with RBAC.
Confusing reactive monitoring dashboards with proactive cost alerts or policy enforcement.
Guardrail: Avoid answers that remove all customer responsibility, use monitoring for pricing estimates, use tags for network security, or confuse Azure Policy with RBAC.
Memory anchors
Microsoft Purview
Microsoft Purview helps govern, protect, and manage data across environments.
Azure Policy
Azure Policy evaluates and can enforce resource compliance with organizational rules.
Policy Initiative
A policy initiative groups multiple policy definitions for assignment and tracking.
Resource Lock
A resource lock helps prevent accidental deletion or modification of Azure resources.
Compliance
Compliance features help assess whether resources meet required standards or policies.
Blueprint
Blueprint-style governance packages combine artifacts for repeatable environment setup.
Management Group Scope
Management group scope applies governance across multiple subscriptions.
Tag Policy
Tag policy can require or audit tags used for ownership and cost control.
Deny Effect
A deny effect can block noncompliant resource creation or changes.
Audit Effect
An audit effect reports noncompliance without blocking the resource.
Checkpoint rule
Do the check-up only after you can summarize each concept in one sentence and identify one dangerous pitfall from memory.
Knowledge Check (after reading)
Short check-up to confirm understanding of this module.
Check-up Questions
What is Microsoft Purview used for in Azure environments?
A company wants a searchable catalog showing where sensitive data is stored. Which service fits?
Answer all questions to submit.
Next step personalized recommendations
Continue learning
Move forward only after this module is stable.
What is Pass Harbor?
Completely free exam prep for 317 U.S. exams.
- Practice questions
- Flashcards
- Study guides
- Mock exams
- No registration
- No paywall
- Start instantly
“No more expensive exam prep. Quality study tools should be accessible to everyone.”