Examkin

Soru

Zorluk: ZorAzure Policy

An organization has an Azure subscription containing several active virtual machines deployed in the East US region. To comply with a new corporate directive, an administrator assigns an Azure Policy to the subscription that restricts resource deployments to the West US region using the 'Deny' effect.

Which of the following describes the outcome of this policy assignment on the resources and deployments?

  1. A
    The existing virtual machines in East US are automatically shut down to enforce compliance, and new virtual machine deployments to East US are blocked.
  2. B
    The existing virtual machines in East US continue to run and remain compliant, and users with the Owner role can continue to deploy new virtual machines to East US.
  3. The existing virtual machines in East US continue to run and are marked as non-compliant, while new virtual machine deployments to East US are blocked.Cevap
  4. D
    The existing virtual machines in East US are automatically migrated to West US, and new virtual machine deployments to East US are redirected to West US.

Cevap

The existing virtual machines in East US continue to run and are marked as non-compliant, while new virtual machine deployments to East US are blocked.
When a new Azure Policy with a Deny effect is assigned, it does not retroactively delete, stop, or modify existing resources that violate the policy. Instead, those existing resources continue to run but are marked as non-compliant in compliance reporting. However, any new attempts to deploy resources that violate the policy parameters (such as deploying to East US instead of the allowed West US region) will be blocked.

Adım Adım Çözüm

1
Identify the effect of the Azure Policy assignment ('Deny').
The policy is configured to block resource deployments that do not match the specified criteria (West US).
Understanding the policy effect helps determine how new deployment requests will be evaluated.
2
Evaluate the impact of the policy on existing resources.
Existing resources in East US continue to run but are marked as non-compliant.
Azure Policy does not retroactively modify, delete, or stop resources that were created prior to the policy assignment.
3
Evaluate the impact of the policy on new resource deployments.
Any new deployments to East US will be blocked by the policy's Deny effect.
The Deny effect prevents the resource provider from creating or updating resources that do not match the policy definition.

Anahtar Kavram

Azure Policy
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Azure Policy

Bu konudan daha fazla soru