Get Your CertAZ-900PlayCompete
‹ All AZ-900 questions

AZ-900 Practice Question 50: Resource Manager Control Plane

Microsoft Azure Fundamentals (AZ-900) · Test 5 · question 10 of 10

Azure Management & Governancehard

An engineer notices that anything she can do in the Azure portal she can also do from Azure PowerShell, the Azure CLI, and the REST API, with the same behaviour and the same permission checks every time. Which part of Azure's design guarantees that?

Select one answer
Show answer and explanation

Answer:

  • C. Every request passes through Azure Resource Manager, which authenticates and authorizes it

Azure Resource Manager is the deployment and management service for Azure, and it is described as a consistent management layer. When you send a request through any of the Azure APIs, tools, or SDKs, Resource Manager receives it, authenticates and authorizes it, and only then forwards it to the appropriate Azure service. Because all requests are handled through the same API, you see consistent results and capabilities in all the different tools. It is also why Azure RBAC, which is built on Resource Manager, applies identically no matter which tool sent the request.

Option A inverts cause and effect: the SDKs agree because they all call the same API, and shipping parallel copies of the logic is precisely what would cause them to drift. Option B misunderstands Azure Policy, which evaluates the properties of resources against business rules; it has no view of which client tool issued a request and does not police tooling. Option D describes the wrong layer; Microsoft Entra ID authenticates the principal and issues a token, but a token establishes *who you are*, not what the management API is capable of.

Reference: What is Azure Resource Manager?

Practice Test 5 ›

Study guides for AZ-900

Azure Administrator (AZ-104): jobs, salary and the examAzure administrator role, jobs and pay data, and the AZ-104 exam: five domains, 100 minutes, US$165 / ₹4,865, AZ-900 first or not, and what next.
Free cloud certifications in 2026: which are really freeWhich free cloud certifications are really free in 2026: Oracle's free OCI exams, and the voucher routes for AWS, Microsoft and Google, with prices.
AI-901 exam guide: Azure AI Fundamentals after AI-900AI-901 replaced AI-900: learn what changed, how much Python and Microsoft Foundry you need, exam costs in India, and how to prepare.
Microsoft Fabric certification: DP-700 vs DP-600Microsoft Fabric certification means two exams, DP-600 and DP-700. Their roles, skills, format, cost in India, and which one to take first.
Which cloud certification is best? AWS vs Azure vs GoogleWhich cloud certification is best for a beginner? AWS Cloud Practitioner, AZ-900 and Google Cloud Digital Leader compared: cost, format and which first.
Azure certification path 2026: AZ-900, AZ-104, AZ-305The Azure certification path for 2026 - AZ-900, AZ-104 and AZ-305 in order, what each covers, the AZ-305 prerequisite, renewal and what to skip.
Azure RBAC vs Azure Policy vs Entra roles vs resource locksHow Azure RBAC, Azure Policy, Microsoft Entra roles and resource locks differ, how scope inheritance works, and when deny beats audit.
Azure Storage redundancy - LRS, ZRS, GRS, GZRS and failoverHow LRS, ZRS, GRS, RA-GRS, GZRS and RA-GZRS differ, what failover does to your account, and how access tiers interact with redundancy.