az-104 Practice Question 1752

Exam: az-104
Domain: Monitor and maintain Azure resources
Topic: Monitor resources by using Azure Monitor
Difficulty: medium
Contoso Ltd wants to ensure that their Azure resources are secure and compliant with their internal policies. They have enabled Azure Policy but need to monitor compliance across multiple subscriptions. Which tool should they use to manage and monitor Azure Policy assignments and compliance across all subscriptions?

Answer Options

A
Use Azure Monitor to create a log query to check policy compliance.
B
Use Azure Policy to manage and monitor policy assignments and compliance across all subscriptions.
C
Develop a custom script to check policy compliance across all subscriptions.
D
Use Azure Security Center to monitor policy compliance and remediate non-compliant resources.

Correct Answer

B: Use Azure Policy to manage and monitor policy assignments and compliance across all subscriptions.

Explanation

The correct answer is B because Azure Policy can be managed and monitored across multiple subscriptions through the Azure portal or PowerShell. Option A is incorrect as it refers to Azure Monitor, which is used for monitoring metrics and logs but not for managing policy assignments. Option C is incorrect as it suggests using a custom solution, which is not recommended for Azure environments. Option D is incorrect as it mentions Azure Security Center, which focuses on security assessments rather than policy management.