Examkin

Question

Difficulty: HardAzure Policy

A company implements Azure Policy to ensure that resources deployed to their main subscription comply with corporate security standards. The company needs to prevent a specific development resource group from being evaluated by a newly assigned policy.

Is the following statement true or false: Azure Policy allows you to exclude specific resource groups or individual resources from a policy assignment scope?

Answer: Answer

Answer

The statement is true because Azure Policy allows exclusions to be configured at granular scopes, including resource groups and individual resources.
The statement is true because Azure Policy supports configuring exclusions (notScopes) at the management group, subscription, resource group, or individual resource level.

Step-by-Step Solution

1
Analyze the statement to identify the core claim regarding Azure Policy exclusion capability.
The statement asserts that Azure Policy allows excluding specific resource groups or individual resources from a policy assignment scope.
To evaluate the truth value of the statement, we must recall the supported scopes for policy exclusions.
2
Recall the configuration options for policy assignments and exclusions (notScopes) in Azure Policy.
Azure Policy assignments support excluding specific scopes, known as notScopes, which can be as granular as a single resource group or an individual resource.
Comparing the recalled Azure capability with the statement's claim determines if the statement is correct.
3
Determine the final truth value based on the alignment between Azure Policy capabilities and the statement.
Since Azure Policy does allow exclusions at these granular levels, the statement is true.
This completes the evaluation process.

Key Concept

Azure Policy Assignment Scopes and Exclusions
Estimated Time:1m 0s
Rate this question

Topics

Azure Policy

More questions from this topic