Examkin

Question

Difficulty: EasyAzure Policy

An IT manager wants to ensure that developers cannot create public IP addresses in a development subscription, but they should still be able to create all other resource types. Which Azure feature should be used to enforce this restriction?

  1. Azure PolicyAnswer
  2. B
    Azure Role-Based Access Control (RBAC)
  3. C
    Azure Resource Locks
  4. D
    Azure Service Health

Answer

Azure Policy
Azure Policy is correct because it allows administrators to define rules that enforce resource properties, such as blocking the creation of specific resource types (like public IP addresses) or limiting deployments to allowed SKUs and locations.

Step-by-Step Solution

1
Analyze the requirement to block the creation of a specific resource type (public IP addresses) while allowing other deployments.
Identify that the restriction is based on resource configuration properties rather than user identity.
This helps distinguish between user-based authorization and resource-based compliance.
2
Evaluate the capabilities of Azure Policy and Azure Role-Based Access Control (RBAC).
Determine that RBAC controls 'who' has access, whereas Azure Policy controls 'what' can be created based on resource properties.
This rules out RBAC as it cannot block specific resource types if the user has overall contributor rights.
3
Select the governance feature designed to enforce resource compliance and prevent the creation of non-conforming resources.
Azure Policy is the correct service because it can evaluate resource properties during deployment and deny non-compliant actions.
Azure Policy provides the exact capability needed to enforce resource-level restrictions.

Key Concept

Azure Policy is used to enforce resource compliance and restrict resource properties during deployment.
Rate this question

Topics

Azure Policy

More questions from this topic