az-104 Practice Question 742
Exam: az-104
Domain: Describe Azure management and governance
Topic: Describe features and tools in Azure for governance and compliance
Difficulty: medium
HOTSPOT -
You have an Azure subscription that contains the hierarchy shown in the following exhibit.
You create an Azure Policy definition named Policy1.
To which Azure resources can you assign Policy1 and which Azure resources can you specify as exclusions from Policy1? To answer, select the appropriate options in the answer area.
Answer Options
A
You can assign Policy1 to: Tenant Root Group, ManagementGroup1, Subscription1, RG1, and VM1. You can exclude Policy1 from: ManagementGroup1, Subscription1, RG1, and VM1 only
Correct Answer
A: You can assign Policy1 to: Tenant Root Group, ManagementGroup1, Subscription1, RG1, and VM1. You can exclude Policy1 from: ManagementGroup1, Subscription1, RG1, and VM1 only
Explanation
Box 1: Tenant Root Group, ManagementGroup1, Subscription1, RG1, and VM1
Once your business rules have been formed, the policy definition or initiative is assigned to any scope of resources that Azure supports, such as management groups, subscriptions, resource groups, or individual resources.
Note: Azure provides four levels of scope: management groups, subscriptions, resource groups, and resources. The following image shows an example of these layers.
Box 2: ManagementGroup1, Subscription1, RG1, and VM1
You can exclude a subscope from the assignment.