az-900 Practice Question 543
Exam: az-900
Domain: Describe cloud concepts
Topic: Describe cloud computing
Difficulty: medium
Your company has an Azure subscription that contains resources in several regions.\nYou need to create the Azure resource that must be used to meet the policy requirement.\nWhat should you create?\nA. a read-only lock\nB. an Azure policy\nC. a management group\nD. a reservation
Answer Options
A
a read-only lock
B
an Azure policy
C
a management group
D
a reservation
Correct Answer
B: an Azure policy
Explanation
Azure policies can be used to define requirements for resource properties during deployment and for already existing resources. Azure Policy\ncontrols properties such as the types or locations of resources.\nAzure Policy is a service in Azure that you use to create, assign, and manage policies. These policies enforce different rules and effects over\nyour resources, so those resources stay compliant with your corporate standards and service level agreements. Azure Policy meets this need by\nevaluating your resources for non- compliance with assigned policies. All data stored by Azure Policy is encrypted at rest.\nAzure Policy offers several built-in policies that are available by default. In this question, we would use the 'Allowed Locations' policy to define\nthe locations where resources can be deployed.