Medium1 markMultiple Choice

AZ-900 · Question 25 · Domain 3.2: Features and Tools for Governance and Compliance

A company wants to ensure that developers can only deploy virtual machines of a specific, low-cost size (e.g., B-series). Which Azure service should they use to enforce this rule?

Answer options:

A.

Azure Role-Based Access Control (RBAC)

B.

Azure Policy

C.

Resource Locks

D.

Azure Advisor

How to approach this question

Look for the service that enforces compliance and organizational standards.

Full Answer

B.Azure Policy✓ Correct
Azure Policy
Azure Policy evaluates your resources for non-compliance with assigned policies. You can use it to restrict resource types, sizes, or locations to ensure compliance with corporate standards.

Common mistakes

Confusing Azure Policy with RBAC. RBAC focuses on user actions; Policy focuses on resource properties.

Practice the full Azure Fundamentals AZ-900 Practice Exam 6

60 questions · hints · full answers · grading

More questions from this exam