Soru

Zorluk: OrtaSecurity, Governance, and Manageability

A company is designing its cloud governance strategy to manage cost and resource compliance. An administrator needs to organize resources and control where developers can deploy virtual machines. Which of the following describes a valid governance or resource organization configuration in the cloud?

  1. A resource group can contain resources located in different regions than the resource group itself, allowing centralized metadata storage in one region while deploying resources globally.Cevap
  2. B
    All resources placed within a resource group must be deployed in the same region as the resource group to inherit its compliance policies.
  3. C
    Resource groups can be nested within other resource groups to inherit region permissions and lock structures from parent groups.
  4. D
    Applying a new 'Deny' policy to a resource group will automatically delete or shut down any existing non-compliant virtual machines in that group.

Cevap

A resource group can contain resources located in different regions than the resource group itself, allowing centralized metadata storage in one region while deploying resources globally.
A resource group's location only determines where the metadata about the resources is stored. The actual resources within that resource group can be located in any supported cloud region, allowing for flexible global deployment and centralized metadata management.

Adım Adım Çözüm

1
Determine the relationship between a resource group's location and the location of the resources it contains.
A resource group's location determines where its metadata is stored, but does not restrict the location of the resources placed inside it.
This establishes that resources can reside in different regions than their containing resource group.
2
Evaluate the architectural limits of resource groups regarding nesting.
Resource groups cannot be nested inside other resource groups.
This rules out organizational structures that assume resource group hierarchy.
3
Evaluate the enforcement behavior of compliance policies on existing resources.
New policy enforcement is not retroactive and does not automatically delete or modify existing resources.
This clarifies how governance rules affect already deployed infrastructure.

Anahtar Kavram

Cloud governance and resource organization properties
Tahmini Süre:1m 0s
Bu soruyu puanla