Examkin

Question

Difficulty: EasyAzure Policy

An organization wants to control costs by restricting the virtual machine sizes (SKUs) that users can deploy in their environment. Is it true that Azure Policy can be used to block the creation of virtual machines that do not match the allowed sizes?

Answer: Answer

Answer

True
The statement is true because Azure Policy is designed to enforce resource properties. A built-in policy can restrict virtual machine SKUs and block (deny) the deployment of any sizes not explicitly permitted.

Step-by-Step Solution

1
Identify the core requirement: restricting resource properties (specifically virtual machine size SKUs) and blocking non-compliant deployments.
The goal is to enforce resource compliance and prevent the creation of resources that violate specific properties.
Understanding the requirement helps select the appropriate Azure management or governance tool.
2
Recall the purpose and capabilities of Azure Policy.
Azure Policy evaluates resource properties against rules and can actively block deployment using the 'Deny' effect.
This confirms whether Azure Policy can perform the exact action described in the statement.

Key Concept

Azure Policy enforces organizational standards and assesses compliance at scale by evaluating resource properties and blocking non-compliant deployments.
Estimated Time:45s
Rate this question

Topics

Azure Policy

More questions from this topic