Your organization requires that all new storage accounts be created with the 'Allow blob public access' setting disabled. You need to enforce this requirement across all current and future subscriptions without requiring manual configuration by developers. What should you do?

Create an Azure Policy definition and assign it at the management group level.

Apply a resource lock to each storage account to prevent public access changes.

Configure Azure Blueprints to define the storage account template for developers.

Use Microsoft Purview to classify and restrict public access on storage accounts.

What is the primary purpose of Azure Policy?

To protect Azure resources from distributed denial-of-service (DDoS) attacks

To enforce organizational standards and assess compliance of Azure resources at scale

To monitor the performance and health of Azure resources

To manage user identities and access to Azure resources

What is the primary role of Microsoft Purview in the context of Azure governance?

To enforce resource-level compliance by denying non-compliant resource deployments

To manage data governance by providing data discovery, classification, and lineage across data sources

To automate the deployment of Azure resources using infrastructure as code

To monitor virtual machines for security threats and vulnerabilities

What is the purpose of a resource lock in Azure?

To encrypt data at rest in a storage account

To restrict network access to a virtual machine

To control which users can access a resource

To prevent accidental deletion or modification of Azure resources

Microsoft Certified:Azure Fundamentals

Domain 3Objective 2

Describe Features and Tools in Azure for Governance and Compliance AZ-900 Practice Questions (Page 2)

Part of the Describe Azure management and governance domain, which accounts for 30–35% of the AZ-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~6–11 in this domain), expect 2–3 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

Start Intelligent Quiz

22questions here

5free pages

7concepts

30–35%of the exam

Questions 6–10

6application · medium
Your organization requires that all new storage accounts be created with the 'Allow blob public access' setting disabled. You need to enforce this requirement across all current and future subscriptions without requiring manual configuration by developers. What should you do?
Select an answer first
7foundation · easy
What is the primary purpose of Azure Policy?
Select an answer first
8foundation · easy
What is the primary role of Microsoft Purview in the context of Azure governance?
Select an answer first
9foundation · easy
What is the purpose of a resource lock in Azure?
Select an answer first
10foundation · easy
Which type of resource lock prevents a resource from being deleted but allows all other operations?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-900

Examers app · Pro

You’ve practiced. Now get ready to pass.

Free practice is the warm‑up. The Examers app turns it into a pass — adaptive quizzing, a visual book, and an honest readiness score for AZ-900.

Exam Coach that reads what you have really answered and picks one thing for tonight
Intelligent Quiz that adapts to your weak areas
Split‑screen Visual Book — learn each concept as you practice
Timed sets & full mock exams that mirror the real thing
Readiness score from real evidence — know when you’re ready

Get exam‑ready See what’s inside

Free practice stays free — always.

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-900” is a trademark of its owner, used for identification only.