Soru

Zorluk: KolayAzure Policy

Your company needs to ensure that all newly created storage accounts have 'Secure transfer required' enabled to meet security compliance standards. Which Azure service should you use to enforce this configuration requirement across the subscription?

  1. Azure PolicyCevap
  2. B
    Azure Role-Based Access Control (RBAC)
  3. C
    Azure Resource Locks
  4. D
    Azure Service Health

Cevap

Azure Policy
Azure Policy is the correct service because it allows administrators to define and enforce rules for Azure resources. By using Azure Policy, you can automatically block the deployment of storage accounts that do not have 'Secure transfer required' enabled, or audit them for compliance.

Adım Adım Çözüm

1
Identify the requirement
The requirement is to enforce a specific configuration ('Secure transfer required') on all newly created storage accounts across an Azure subscription.
This is a compliance and governance requirement targeting resource properties rather than user access.
2
Evaluate the capabilities of the available Azure management tools
Azure Policy enables the creation and enforcement of policies that mandate resource configurations. Azure RBAC controls access permissions, Resource Locks prevent deletion/modification, and Service Health tracks platform outages.
Selecting the service that specifically handles resource properties and configuration compliance is necessary.

Anahtar Kavram

Azure Policy is used to enforce resource properties, ensure compliance with corporate standards, and prevent non-compliant deployments.
Tahmini Süre:45s
Bu soruyu puanla