Examkin

Question

Difficulty: MediumAzure Policy

To comply with corporate security standards, a cloud engineering team must implement several compliance requirements across all subscriptions in their organization. These requirements include auditing unencrypted storage accounts, restricting virtual machine deployments to specific regions, and blocking the creation of public IP addresses. To streamline the management and assignment of these multiple compliance rules, which feature of Azure Policy should the team implement?

  1. A
    A management group
  2. B
    A policy definition
  3. A policy initiativeAnswer
  4. D
    A role-based access control (RBAC) role

Answer

A policy initiative
A policy initiative is the correct component because it allows an organization to group multiple policy definitions together. This simplifies the assignment process, as the entire set of rules can be applied to a scope (such as a subscription or management group) in a single operation, and compliance can be tracked collectively.

Step-by-Step Solution

1
Identify that the requirement is to group multiple individual compliance rules (such as auditing, region restrictions, and public IP blocks) into a single administrative unit.
Recognized the need for a grouping mechanism rather than applying individual rules one by one.
This helps in selecting the correct Azure Policy component designed for logical grouping.
2
Recall that Azure Policy uses two main resource components: policy definitions (which define a single rule) and policy initiatives (which group multiple definitions).
Identified that a policy initiative is the container for multiple policy definitions.
This differentiates the single rule definition from the multi-rule grouping concept.
3
Determine that a policy initiative is the correct feature because it acts as a container for multiple policy definitions, allowing them to be assigned and tracked together.
Confirmed that a policy initiative meets all requirements of the scenario.
This completes the selection process by matching the target feature to the business requirement.

Key Concept

Azure Policy Initiatives
Rate this question

Topics

Azure Policy

More questions from this topic