Mock Exam Section 3: Security, Governance, and Cost
Practise questions on Entra ID, Defender for Cloud, Azure Policy, cost management tools, and SLAs — the domains where candidates most commonly lose marks.
Mock Exam: Section 3 Introduction
Welcome to Mock Exam Section 3: Security, Governance, and Cost. This domain accounts for approximately 30–35% of AZ-900 marks and covers Entra ID, Defender for Cloud, Azure Policy, resource locks, cost tools, and SLAs. This is the domain where candidates most commonly lose marks due to service name confusion and subtle distinctions. Give yourself 18–20 minutes for this section. Focus on reading each scenario carefully before answering.
Q1: Security Posture Dashboard
Scenario: A cloud administrator wants a single dashboard showing overall security health across all Azure subscriptions, with prioritised recommendations and a numeric score representing how well the environment follows security best practices. Which Azure service provides this?
A) Microsoft Defender for Cloud (Secure Score) — B) Microsoft Sentinel — C) Azure Policy — D) Azure Advisor
All lessons in this course
- Mock Exam Section 1: Cloud Concepts
- Mock Exam Section 2: Azure Architecture and Services
- Mock Exam Section 3: Security, Governance, and Cost
- Score Review and Weak-Area Remediation