Microsoft Azure Administrator Associate AZ-104 Practice Question
You are an Azure Administrator for a company that must comply with data sovereignty regulations. You need to ensure that all resources are deployed only in the 'East US' or 'West US' Azure regions. You need to enforce this requirement across your Azure subscriptions, preventing users from deploying resources in other regions. Which of the following should you do to achieve this requirement?
Use Azure RBAC to limit user permissions to specific regions.
Set up resource locks on regions to prevent resource creation.
Implement tagging to enforce resource deployment in allowed regions.
Create a custom policy definition to restrict locations and assign it to the subscription.
Creating and assigning a custom Azure Policy definition to restrict allowed locations ensures that resources can only be deployed in the specified regions. When this policy is assigned to a subscription, it automatically blocks the creation of resources in any other region, enforcing compliance with data sovereignty regulations. Azure Role-Based Access Control (RBAC) manages permissions for resource actions but does not restrict resource locations. Resource locks prevent accidental deletion or modification of resources but do not control where resources can be created. Tags are metadata for organizing resources and do not enforce deployment constraints.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Azure Policy and how does it work?
Open an interactive chat with Bash
What are data sovereignty regulations?
Open an interactive chat with Bash
What is Azure RBAC and how is it different from Azure Policy?
Open an interactive chat with Bash
Microsoft Azure Administrator Associate AZ-104
Manage Azure identities and governance
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access