Examkin

Soru

Zorluk: OrtaAzure Policy

An organization wants to prevent users from deploying virtual machines of specific sizes within a production resource group. Additionally, the IT team wants to identify any existing virtual machines in that resource group that do not meet these size constraints without modifying them.

Which Azure feature or service should the organization use?

  1. A
    Azure Policy, which blocks non-compliant resource deployments and automatically updates existing resources to make them compliant.
  2. Azure Policy, which blocks non-compliant resource deployments and reports compliance status for existing resources.Cevap
  3. C
    Azure Role-Based Access Control (RBAC), which restricts the allowed resource properties and configurations for deployed resources.
  4. D
    Azure Role-Based Access Control (RBAC), which prevents the creation of non-compliant resources based on the user's role-based permissions.

Cevap

Azure Policy, which blocks non-compliant resource deployments and reports compliance status for existing resources.
The correct answer is Azure Policy, which blocks non-compliant resource deployments and reports compliance status for existing resources. Azure Policy is designed to enforce rules and compliance standards on resources, preventing deployments that violate those rules (such as VM sizes) while auditing existing resources to show compliance status without altering them.

Adım Adım Çözüm

1
Identify the requirement to block deployments of virtual machines that do not meet specific size configurations.
This requires enforcing resource properties during creation, which is a key capability of Azure Policy (using a Deny effect).
Azure Policy is designed to evaluate resource properties during deployment to ensure alignment with defined rules.
2
Identify the requirement to audit existing virtual machines without altering them.
Azure Policy evaluates existing resources against newly assigned policies and marks non-compliant resources in its dashboard, leaving them intact.
This satisfies the compliance reporting requirement without causing disruptive changes to running infrastructure.
3
Differentiate between the roles of Azure Policy and Azure Role-Based Access Control (RBAC).
Azure RBAC manages user access permissions (who can manage a resource), whereas Azure Policy controls the properties of the resources (what properties are allowed).
This rules out RBAC-based solutions as they do not govern resource configuration details like VM sizes.

Anahtar Kavram

Azure Policy is used to enforce organizational standards, prevent the creation of non-compliant resources, and assess compliance of existing resources without modifying them.
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Azure Policy

Bu konudan daha fazla soru