Examkin

Soru

Zorluk: OrtaAzure Policy Definitions, Initiatives, and Assignments

Your organization is designing an Azure governance strategy to enforce resource compliance. You need to map the operational requirements to the appropriate Azure Policy effects. Match each operational requirement on the left to its corresponding Azure Policy effect on the right.

  • Automatically deploy a dependency resource, such as diagnostic settings, when a resource is created or updated.DeployIfNotExists
  • Prevent resource creation or update requests that violate configuration standards.Deny
  • Add or update specific properties or tags on a resource during creation or update.Modify
  • Log a non-compliance warning event in the activity log without blocking resource deployment.Audit

Cevap

DeployIfNotExists matches deploying diagnostic settings; Deny matches blocking resource creation; Modify matches adding or updating tags; Audit matches logging compliance warnings without blocking.
Each requirement is mapped to its correct Azure Policy effect based on their evaluation behavior: DeployIfNotExists handles nested deployment templates; Deny blocks the resource creation; Modify alters resource tags or properties during creation/update; Audit logs compliance warnings without altering the deployment flow.

Adım Adım Çözüm

1
Analyze the operational requirement to deploy a dependency resource like diagnostic settings.
Identify that DeployIfNotExists is the policy effect designed to run a template deployment to create sub-resources or dependencies if they do not exist.
This matches the requirement for automatic remediation of sub-resources.
2
Analyze the requirement to prevent creation or update of resources that violate policies.
Identify that the Deny effect intercepts the resource provider request and fails the deployment immediately.
This satisfies the requirement to block non-compliant resource creation.
3
Analyze the requirement to add or update specific properties or tags during creation/update.
Identify that Modify is the modern policy effect used to alter tags or properties during the evaluation phase.
This allows updating or inserting tags on resources dynamically.
4
Analyze the requirement to log warning events without blocking.
Identify that the Audit effect evaluates the resource compliance and generates a warning event in the activity log without stopping the deployment.
This provides non-intrusive auditing.

Anahtar Kavram

Azure Policy effects define the behavior of resource compliance evaluation and enforcement.
Bu soruyu puanla

Konular

Azure Policy Definitions, Initiatives, and Assignments