Examkin

Soru

Zorluk: OrtaAzure Policy

An administrator assigns an Azure Policy definition to an Azure subscription. The policy is configured to deny the deployment of virtual machines that do not have a tag named 'Department'. At the time of assignment, the subscription already contains several virtual machines that do not have this tag. What will happen to the existing virtual machines after the policy is assigned?

  1. The existing virtual machines continue to run without interruption but are flagged as non-compliant in the compliance dashboard.Cevap
  2. B
    The existing virtual machines are automatically stopped until the 'Department' tag is applied.
  3. C
    The existing virtual machines are automatically deleted to ensure compliance with the subscription guidelines.
  4. D
    The user permissions for the existing virtual machines are revoked, preventing standard users from accessing them.

Cevap

The existing virtual machines continue to run without interruption but are flagged as non-compliant in the compliance dashboard.
The correct answer is correct because Azure Policy is designed to evaluate compliance. When a policy is assigned, any pre-existing resources that violate the policy are not deleted, stopped, or altered; instead, they are simply flagged as non-compliant in the compliance dashboard so administrators can address them manually.

Adım Adım Çözüm

1
Analyze the scope and target of the Azure Policy assignment.
The policy is assigned to the subscription to deny new virtual machines without the 'Department' tag.
Understanding the policy's rule helps identify its primary target (new resource deployments).
2
Determine the impact of the policy on existing resources that do not meet the criteria.
Existing resources are evaluated during the policy compliance scan but are not modified, stopped, or deleted.
Azure Policy is non-destructive for existing resources; it only reports their compliance state.
3
Identify the correct outcome for the virtual machines currently in the subscription.
The virtual machines will continue running normally and will be flagged as non-compliant in the Azure Policy compliance reports.
This matches the evaluation behavior of Azure Policy.

Anahtar Kavram

Azure Policy compliance evaluation behavior on existing resources
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Azure Policy

Bu konudan daha fazla soru