Examkin

Question

Difficulty: MediumAzure Policy

An organization wants to implement governance controls in Azure to ensure that resources conform to corporate standards. The IT team is deciding whether to use Azure Policy or Azure Role-Based Access Control (RBAC) to enforce these standards. Which of the following statements correctly describes a difference between the function of Azure Policy and Azure RBAC?

  1. Azure Policy focuses on resource properties during deployment and configuration, whereas Azure RBAC focuses on user actions and permissions.Answer
  2. B
    Azure Policy regulates which users and groups have access to manage resources, whereas Azure RBAC regulates the configuration properties of those resources.
  3. C
    Azure Policy retroactively deletes or modifies existing resources to ensure compliance, whereas Azure RBAC prevents unauthorized users from modifying those resources.
  4. D
    Azure Policy is used to assign administrative roles to users, whereas Azure RBAC is used to define the regional locations where resources can be deployed.

Answer

Azure Policy focuses on resource properties during deployment and configuration, whereas Azure RBAC focuses on user actions and permissions.
The correct statement is that Azure Policy focuses on resource properties (such as tags, locations, and SKUs) during deployment and configuration, whereas Azure RBAC focuses on managing user actions and access permissions.

Step-by-Step Solution

1
Analyze the core purpose of Azure Policy.
Azure Policy is designed to enforce organizational standards and assess compliance at-scale by evaluating resource properties (such as allowed VM sizes, allowed regions, or required tags) against defined rules.
This establishes the scope of Azure Policy.
2
Analyze the core purpose of Azure Role-Based Access Control (RBAC).
Azure RBAC manages authorization, determining who (users, groups, service principals) has access to Azure resources and what actions (read, write, delete) they can perform.
This establishes the scope of Azure RBAC.
3
Compare the functions to identify the correct difference.
Azure Policy focuses on the state and configuration of resources, whereas Azure RBAC focuses on user access and permissions.
This identifies the correct statement and eliminates the incorrect options.

Key Concept

Azure Policy vs Azure Role-Based Access Control (RBAC)
Estimated Time:1m 0s
Rate this question

Topics

Azure Policy

More questions from this topic