Exam objective

AZ-900

Describe the core architectural components of Azure

This objective sits in Describe Azure architecture and services, which carries 38% of the Azure Fundamentals exam. The questions below are original, written from the official objective title above, and each explanation cites the Microsoft Azure page it rests on.

Objective title verbatim from the official objectives. Microsoft Azure exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

Describe Azure architecture and services

Deployments submitted through the Azure portal, the CLI, PowerShell and the REST API are all authenticated and authorized in one place before reaching the target service. Which service does that?

A resource group, the container used only to organize related resourcesA resource group only groups related resources for management; it does not authenticate requests.
An ARM template, the JSON file that declares resources to be deployedAn ARM template defines resources to deploy but plays no role in authenticating incoming requests.
Microsoft Entra ID, the identity service used to sign users into AzureMicrosoft Entra ID handles identity, but the request-forwarding role described belongs to Resource Manager.
Azure Resource Manager, the deployment and management layer for all requestsCorrect · your answerCorrect: this is the layer that handles authentication and forwarding for all Azure requests.

Correct.

Checked against learn.microsoft.com, July 2026

Concept

Every request to create or change something in Azure arrives through one control plane, whatever tool sent it. That single entry point is where authentication, authorization and consistent behavior across tools come from.

Why D

Resource Manager is explicitly described as the service that receives requests from any API, tool, or SDK, authenticates and authorizes them, then forwards them to the appropriate Azure service.

Source

When you send a request through any of the Azure APIs, tools, or SDKs, Resource Manager receives the request. It authenticates and authorizes the request before forwarding it to the appropriate Azure service.

Azure Resource Manager overview, checked July 2026
#azure-resource-manager#core-architecture#recall

Now you: practice questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

Describe Azure architecture and services

A tenant administrator wants a security team to have read access to every subscription in the organization, without scripting a separate role assignment on each subscription individually. What should the administrator do?

Sample question 2 of 3

Describe Azure architecture and servicesChoose 4

Which of the following are core Azure management scope levels described in Azure Resource Manager documentation? (Select all that apply.)

Sample question 3 of 3

Describe Azure architecture and services

A team creates a brand-new Azure subscription and has not yet assigned it to any custom management group. Where does Azure place this subscription by default?

That’s 3 of the full Azure Fundamentals bank.

Keep going free: 10 questions per certification in bank practice, with no account.

Continue practicing

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Describe Azure architecture and services