Examkin

Soru

Zorluk: KolayAzure Policy Definitions, Initiatives, and Assignments

When implementing governance in Microsoft Azure, you must understand the relationship between different Azure Policy components. Match each Azure Policy component on the left with its correct functional description on the right.

  • Azure Policy DefinitionThe JSON file containing the specific rules, conditions, and effects that determine whether resources conform to organizational standards.
  • Azure Policy InitiativeA group of multiple policy definitions that are treated as a single unit to track compliance for a broader goal.
  • Azure Policy AssignmentThe implementation of a policy or initiative at a specific scope, which defines where the compliance rules are enforced.
  • Azure Policy ExclusionA configuration within an assignment that prevents a specific sub-scope from being evaluated by the policy.

Cevap

Azure Policy Definition matches the JSON file containing specific rules. Azure Policy Initiative matches a group of multiple policy definitions. Azure Policy Assignment matches the implementation at a specific scope. Azure Policy Exclusion matches a configuration that prevents a sub-scope from being evaluated.
Matching the policy definition to the JSON rule file, the initiative to the collection of definitions, the assignment to the application at a scope, and the exclusion to bypassing evaluation correctly maps each concept to its functional role in Azure resource governance.

Adım Adım Çözüm

1
Identify the basic building block of Azure Policy that outlines conditions and effects.
Azure Policy Definition contains the core policy logic, conditions, and effects (such as Deny or Audit) written in JSON format.
This establishes that definitions are the individual rules.
2
Determine how multiple policy definitions are consolidated for simplified tracking.
Azure Policy Initiative groups related definitions (such as compliance controls for a framework like PCI-DSS) to track compliance status collectively.
This clarifies the grouping role of initiatives.
3
Explain how policies or initiatives are activated at a specific scope in the resource hierarchy.
Azure Policy Assignment is the act of applying the policy or initiative to a management group, subscription, or resource group.
This explains the application and enforcement mechanism.
4
Differentiate the mechanism for bypassing policy application on sub-resources.
Azure Policy Exclusion allows administrators to omit specific sub-scopes (like a particular resource group) from the active policy assignment.
This details how scoping exceptions are handled.

Anahtar Kavram

Azure Policy Definitions, Initiatives, and Assignments form the core components of Azure governance, allowing administrators to define compliance standards, group them for easier tracking, apply them to scopes, and exclude sub-scopes.
Bu soruyu puanla

Konular

Azure Policy Definitions, Initiatives, and Assignments