Question

Difficulty: MediumSecurity, Governance, and Manageability

A financial startup is planning its migration to Microsoft Azure. The startup must ensure that developers do not deploy resources outside of Europe to remain compliant with data residency regulations, and that all resources are labeled with a cost center tag.

Evaluate whether the following statement is true or false: Cloud governance capabilities enable the startup to define policies that automatically block the creation of any resource that lacks the required cost center tag or is targeted for deployment outside of the Europe region.

Answer: Answer

Answer

True
Cloud governance tools allow organizations to establish automated guardrails, such as policies that block resource creation if specific requirements (like mandatory tags or approved deployment regions) are not met. This prevents non-compliant resources from being deployed in the first place.

Step-by-Step Solution

1
Analyze the organization's requirements for compliance, which include enforcing mandatory resource tags (cost center) and restricting resource deployment regions (Europe).
Identified the need for proactive compliance enforcement (blocking non-compliant deployments) rather than just passive monitoring.
This establishes the scope of governance needed to meet the startup's regulatory and organizational goals.
2
Evaluate the capabilities of cloud governance tools regarding resource enforcement.
Confirmed that cloud governance platforms provide features (such as Azure Policy) to define and apply rules that evaluate resources during creation and deny/block non-compliant requests.
This matches the startup's requirement to automatically block non-compliant resource creation, proving the statement is true.

Key Concept

Cloud governance benefits and capabilities
Rate this question