📋 Azure Governance and Subscriptions - AZ-104 Practice Questions

Manage subscriptions, resource groups, Azure Policy, resource locks, and tagging strategies.

4Questions Available
1Exam Domains

Practice Governance Questions Now

Start a timed practice session focusing on Azure Governance and Subscriptions topics from the AZ-104 question bank.

Start AZ-104 Practice Quiz →

AZ-104 Governance Question Bank (4 Questions)

Browse all 4 practice questions covering Azure Governance and Subscriptions for the AZ-104 certification exam. Answers are intentionally hidden on this page so you can self-test first before checking results in quiz mode.

  1. Question 1Manage Azure identities and governance

    A user is assigned the Reader role at the subscription level. What access does the user have to a resource group within that subscription?

    ANo access to the resource group
    BRead-only access to all resources in the subscription including the resource group
    CFull control of all resources
    DRead-only access only to the subscription level, not resource groups

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start AZ-104 Quiz
  2. Question 2Manage Azure identities and governance

    An organization has 100 subscriptions. How can an administrator apply an Azure Policy to all of them without visiting each subscription?

    AUse a script to assign the policy to each subscription individually
    BOrganize subscriptions under a Management Group and assign the policy at the Management Group level
    CUse Azure Blueprints for each subscription
    DApply the policy at the tenant root resource group

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start AZ-104 Quiz
  3. Question 3Manage Azure identities and governance

    What is the difference between 'Azure subscriptions' and 'Azure management groups' in the governance hierarchy?

    ASubscriptions contain management groups
    BManagement groups organize subscriptions into a hierarchy; subscriptions are billing and access control units containing Azure resources
    CThey are the same level of the hierarchy
    DManagement groups are for billing; subscriptions are for policies

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start AZ-104 Quiz
  4. Question 4Manage Azure identities and governance

    An administrator needs to prevent any resource from being created in a subscription that doesn't have specific tags. Which Azure feature enforces this?

    AResource locks
    BAzure RBAC Contributor role removal
    CAzure Policy with Deny effect requiring specific tags
    DManagement group hierarchy

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start AZ-104 Quiz

Key Governance Concepts for AZ-104

subscriptionresource groupazure policyresource locktagsmanagement groupblueprints

AZ-104 Governance Exam Tips

Azure Governance and Subscriptions questions in AZ-104 are typically scenario-based. Focus on day-to-day Azure administration, identity, network, compute, storage, and monitoring. Priority concepts: subscription, resource group, azure policy, resource lock, tags, management group.

What AZ-104 Expects

  • Anchor your answer in prioritize operationally practical configurations and least-privilege administration.
  • Governance scenarios for AZ-104 are frequently mapped to Domain 1 (20-25%), so read the objective carefully before picking controls or architecture.
  • Expect multi-topic scenarios where Governance interacts with identity, networking, governance, or monitoring patterns rather than appearing as an isolated question.
  • When two options are both technically valid, prefer the choice that best aligns with the exam's operational scope (Associate) and vendor best practices.

High-Value Governance Concepts

  • Know the core Governance building blocks cold: subscription, resource group, azure policy, resource lock.
  • Review the edge-case features and limits for tags, management group; these details are commonly used to differentiate answer choices.
  • Practice service-integration reasoning: how Governance pairs with Entra ID, RBAC, Cost Management in real deployment patterns.
  • For AZ-104, explain why the chosen Governance design meets reliability, security, and cost expectations better than the alternatives.

Common AZ-104 Traps

  • Watch for forgetting scope inheritance and RBAC precedence.
  • Questions in Manage Azure Identities and Governance often include distractors that look correct for Governance but violate least-privilege, compliance, or availability requirements.
  • Avoid picking options purely by feature name; validate data path, failure handling, and governance impact before answering.
  • If the prompt hints at automation or repeatability, eliminate manual-only operational answers first.

Fast Review Checklist

  • Can you compare at least two Governance implementation paths and justify which one best fits the scenario?
  • Can you map the chosen answer back to Manage Azure Identities and Governance (20-25%) outcomes for AZ-104?
  • Can you explain security and access boundaries for Governance without relying on default-open assumptions?
  • Can you describe how Governance integrates with Entra ID and RBAC during failure, scaling, and monitoring events?

Exam Domains Covering Governance

Related Resources

More AZ-104 Study Resources