Examkin

Question

Difficulty: MediumAzure Policy Definitions, Initiatives, and Assignments

Your organization is designing an Azure governance strategy to enforce resource compliance. You need to map the operational requirements to the appropriate Azure Policy effects. Match each operational requirement on the left to its corresponding Azure Policy effect on the right.

  • Automatically deploy a dependency resource, such as diagnostic settings, when a resource is created or updated.DeployIfNotExists
  • Prevent resource creation or update requests that violate configuration standards.Deny
  • Add or update specific properties or tags on a resource during creation or update.Modify
  • Log a non-compliance warning event in the activity log without blocking resource deployment.Audit

Answer

DeployIfNotExists matches deploying diagnostic settings; Deny matches blocking resource creation; Modify matches adding or updating tags; Audit matches logging compliance warnings without blocking.
Each requirement is mapped to its correct Azure Policy effect based on their evaluation behavior: DeployIfNotExists handles nested deployment templates; Deny blocks the resource creation; Modify alters resource tags or properties during creation/update; Audit logs compliance warnings without altering the deployment flow.

Step-by-Step Solution

1
Analyze the operational requirement to deploy a dependency resource like diagnostic settings.
Identify that DeployIfNotExists is the policy effect designed to run a template deployment to create sub-resources or dependencies if they do not exist.
This matches the requirement for automatic remediation of sub-resources.
2
Analyze the requirement to prevent creation or update of resources that violate policies.
Identify that the Deny effect intercepts the resource provider request and fails the deployment immediately.
This satisfies the requirement to block non-compliant resource creation.
3
Analyze the requirement to add or update specific properties or tags during creation/update.
Identify that Modify is the modern policy effect used to alter tags or properties during the evaluation phase.
This allows updating or inserting tags on resources dynamically.
4
Analyze the requirement to log warning events without blocking.
Identify that the Audit effect evaluates the resource compliance and generates a warning event in the activity log without stopping the deployment.
This provides non-intrusive auditing.

Key Concept

Azure Policy effects define the behavior of resource compliance evaluation and enforcement.
Rate this question

Topics

Azure Policy Definitions, Initiatives, and Assignments