Examkin

Question

Difficulty: EasyAzure Policy

Your company needs to ensure that all newly created storage accounts have 'Secure transfer required' enabled to meet security compliance standards. Which Azure service should you use to enforce this configuration requirement across the subscription?

  1. Azure PolicyAnswer
  2. B
    Azure Role-Based Access Control (RBAC)
  3. C
    Azure Resource Locks
  4. D
    Azure Service Health

Answer

Azure Policy
Azure Policy is the correct service because it allows administrators to define and enforce rules for Azure resources. By using Azure Policy, you can automatically block the deployment of storage accounts that do not have 'Secure transfer required' enabled, or audit them for compliance.

Step-by-Step Solution

1
Identify the requirement
The requirement is to enforce a specific configuration ('Secure transfer required') on all newly created storage accounts across an Azure subscription.
This is a compliance and governance requirement targeting resource properties rather than user access.
2
Evaluate the capabilities of the available Azure management tools
Azure Policy enables the creation and enforcement of policies that mandate resource configurations. Azure RBAC controls access permissions, Resource Locks prevent deletion/modification, and Service Health tracks platform outages.
Selecting the service that specifically handles resource properties and configuration compliance is necessary.

Key Concept

Azure Policy is used to enforce resource properties, ensure compliance with corporate standards, and prevent non-compliant deployments.
Estimated Time:45s
Rate this question

Topics

Azure Policy

More questions from this topic