About This Domain
Domain 3 — Describe Azure Management and Governance — accounts for 30-35% of the AZ-900 certification exam. This domain evaluates your understanding of cost management: pricing calculator, tco calculator, azure cost management, budgets, and tags, governance: azure policy, resource locks, azure blueprints, and microsoft purview, identity: microsoft entra id, authentication, mfa, conditional access, and rbac, and related concepts. Domain 3 covers cost management, governance features, identity and access management, and monitoring tools in Azure. To pass this section you need practical knowledge of how these services and patterns work together in real-world architectures.
What You'll Be Tested On
- Cost management: pricing calculator, TCO calculator, Azure Cost Management, budgets, and tags
- Governance: Azure Policy, resource locks, Azure Blueprints, and Microsoft Purview
- Identity: Microsoft Entra ID, authentication, MFA, Conditional Access, and RBAC
- Security: Microsoft Defender for Cloud, Key Vault, DDoS Protection, and Sentinel
- Monitoring: Azure Monitor, Azure Advisor, Service Health, and Azure Arc
Key Azure Services in This Domain
Study Strategy for Domain 3
At 30-35% of the exam, this is the highest-weighted domain — invest proportionally more study time here. Focus on hands-on labs and scenario-based questions. Aim to answer at least 80% of Domain 3 questions correctly in practice tests before sitting the real exam.
Exam Tips for Domain 3
Azure Policy enforces rules on resources; resource locks prevent accidental deletion or modification.
Microsoft Entra ID is the identity provider for Azure; RBAC controls resource access.
Azure Advisor provides personalized recommendations for reliability, security, performance, cost, and operational excellence.
Know the difference between Delete locks and ReadOnly locks.
Frequently Asked Questions
How many questions on the AZ-900 exam come from Domain 3?
Domain 3 (Describe Azure Management and Governance) makes up 30-35% of the AZ-900 exam. The exam has 65 scored questions, so approximately 20 questions will come from this domain.
What services should I focus on for Domain 3?
The key services for this domain include Identity, Security, Governance, Cost Management, Monitoring. Make sure you understand how each service works, its use cases, and how they integrate with one another.
How should I prepare for Describe Azure Management and Governance questions?
Start by reviewing the key topics listed above, then practice with domain-specific questions. Focus on understanding real-world scenarios rather than memorizing facts. Use our practice quizzes to test your knowledge and review explanations for any questions you get wrong.
What's the best order to study the AZ-900 domains?
Many candidates start with the highest-weighted domains first. For the AZ-900 exam, the domains in order of weight are: Describe Cloud Concepts (25-30%), Describe Azure Architecture and Services (35-40%), Describe Azure Management and Governance (30-35%). However, start with whichever domain aligns best with your existing experience.
Practice Domain 3 Questions
Test your knowledge of Describe Azure Management and Governance with practice questions from our AZ-900 question bank.
Start Practice Quiz →