Microsoft Azure Administrator Associate AZ-104 Practice Question
An organization has compliance requirements that prohibit the deployment of virtual machines in certain regions. What is the BEST method to ensure that users cannot deploy virtual machines in the prohibited regions?
Remove user permissions to create virtual machines in the prohibited regions.
Notify users about the compliance requirements and rely on them to comply.
Set up a resource lock to prevent deployment of virtual machines in those regions.
Implement a policy that denies the creation of virtual machines in the specified regions.
Implementing a policy that denies the creation of virtual machines in specified regions is the most effective method. Azure Policy allows you to define and enforce rules that govern resource properties during deployment and for already existing resources. This ensures compliance by automatically preventing non-compliant resources from being created. Removing user permissions may not be practical or efficient, as it requires managing permissions for each user. Setting up resource locks does not prevent deployment but rather protects resources from accidental deletion or modification. Relying on users to comply without enforcement does not guarantee adherence to compliance requirements.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Azure Policy?
Open an interactive chat with Bash
How do I create an Azure Policy to deny VM creation in a region?
Open an interactive chat with Bash
What are resource locks in Azure?
Open an interactive chat with Bash
Microsoft Azure Administrator Associate AZ-104
Manage Azure identities and governance
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access