az-900 Practice Question 1871
Exam: az-900
Domain: Describe Azure management and governance
Topic: Describe features and tools in Azure for governance and compliance
Difficulty: medium
In a scenario where you need to ensure that no new virtual machines are created in a specific resource group without approval from a senior administrator, which Azure feature should you use to enforce this policy?
Answer Options
A
Resource Locks
B
Azure Policy
C
Service Trust Portal
D
Azure Monitor
Correct Answer
B: Azure Policy
Explanation
Azure Policy can be used to create and enforce policies that define the desired state for resources. By creating a policy that denies the creation of new virtual machines unless approved by a senior administrator, you can ensure compliance with organizational standards. Resource locks prevent accidental deletion or modification of resources but do not control the creation of new resources. The Service Trust Portal is used for viewing third-party audits and certifications, not for enforcing policies.