Which AZ-900 topics relate to governance, compliance, and cost control?

AZ-900 includes dedicated coverage for governance, compliance, and cost control, because these topics shape how cloud environments are adopted and managed. The course page breaks this into two modules: identity, governance, privacy, and compliance; and Azure cost management with service-level agreements.On the governance side, the page includes identity services and access control concepts. It explicitly covers authentication versus authorization, and it references Azure Active Directory for identity and access management. It also calls out single sign-on, multifactor authentication, and Conditional Access as controls that influence how users access applications and services.For governance mechanisms, the page includes the Cloud Adoption Framework for Azure as a basis for organizational decision-making. It lists role-based access control as a way to define who can access resources, resource locks to prevent accidental deletion, and tags to describe resource purpose. It also includes Azure Policy as a way to control and audit how resources are created, and Azure Blueprints for enabling governance at scale across multiple subscriptions.Compliance is covered through a review of compliance offerings and regulatory standards, including mention of Azure capabilities specific to government agencies. The page does not list specific regulations, but it frames compliance as a set of offerings and standards that Azure supports.Cost management is handled with named tools and practical concepts. The page references the Total Cost of Ownership Calculator and the Pricing calculator, and it discusses purchasing options and the factors that affect total cost. The SLA segment defines what an SLA is, why it matters, what affects it, and how multiple SLAs can be combined into a composite SLA. The module concludes with the service lifecycle concept in Azure, which influences how you choose and operate services over time.Together, these topics help learners understand how Azure is governed, how compliance and privacy considerations are surfaced, and how cost and service commitments are evaluated.