AZ-900: Governance, Security & Tools
Governance, Security & Tools is one of the skill areas tested on the Azure Fundamentals (AZ-900) exam. Below are free AZ-900 practice questions with worked answers and a concept diagram — each with a plain-language explanation. Practice the first 10 questions of AZ-900 free, no signup.
Try a real AZ-900 question
A company is moving to Azure. Each division has its own administrator who should manage only that division's resources, and you want to keep overall administrative effort to a minimum. What is the most appropriate way to segment the environment?
- ✓ Use management groups, subscriptions, and role-based access control (RBAC)
- Create a separate Microsoft Entra ID (formerly Azure AD) tenant for each division
- Create a separate Azure account with different credentials for each division
- Give every administrator the Global Administrator role
Azure is designed to be segmented with a hierarchy of management groups → subscriptions → resource groups, and to grant each administrator only the access they need through role-based access control (RBAC) — all within a single Microsoft Entra ID tenant. Standing up multiple Entra tenants (or separate accounts) fragments identity and multiplies administrative effort, the opposite of the goal. Handing out Global Administrator to everyone violates least privilege.
Practice AZ-900 free
The first 10 questions of every exam are free. No signup, no email wall.
Start practicing →Get a free AZ-900 study plan by email
A short plan to work through AZ-900 by skill area, plus a note when we add new questions. Optional — the practice above stays free. No spam, unsubscribe anytime.