Design governance

7 practice questions under this official exam objective (AZ-305), each with the answer key, an option-by-option explanation and instant feedback.

Questions under this objective

7 total · page 1 of 1
AZ-305 S-grade

How to Verify and Revoke Fabrikam Developer Access to Application1?

Azure AD access reviews are the built-in identity governance feature that periodically asks a reviewer such as the Fabrikam developers' manager to con

34 comments
AZ-305 A-grade

Azure Policy effect for Department tag on new resource groups?

Azure Policy tag enforcement for new resource groups depends on choosing an effect that adds a missing Department value without stopping creation. Thi

2 comments
AZ-305 A-grade

Azure Policy Assignments: How Do PA1, PA2, and PA3 Apply?

This AZ-305 hotspot scenario tests how Azure Policy assignments behave at management group scope, how an assignment resource selector narrows evaluati

2 comments
AZ-305 A-grade

Azure Policy Hierarchy and Exemption Logic

Determines Azure Policy applicability by tracing hierarchy from Management Groups to resources, accounting for subscription boundaries and exemptions.

1 comment
AZ-305 A-grade

Azure Backup Protection Against Compromised Admins

Learn why PIM alone fails to protect Azure Backups from compromised admins and why immutable vaults are the correct solution for AZ-305.

1 comment
AZ-305 A-grade

Minimum Management Groups for Finance and IT Policies?

Azure management groups define the policy and RBAC inheritance boundary for subscriptions. This deployment needs two management groups: one finance sc

1 comment
AZ-305 A-grade

Which Azure Policy effect supports remediation, and what performs it?

Azure Policy remediates non-compliant resources through the DeployIfNotExists and Modify effects, both of which run under a managed identity attached

1 comment