Domain 3.2: Governance and Compliance

Which Azure service allows you to create, assign, and manage rules that enforce compliance for your Azure resources (for example, restricting which regions resources can be deployed in)?

An administrator wants to ensure that a critical production database cannot be accidentally deleted by any user, even if the user has Owner permissions. What should they use?

Which service provides a unified data governance solution to help manage and govern your on-premises, multi-cloud, and software-as-a-service (SaaS) data?

Which TWO of the following are valid types of Azure Resource Locks? (Select TWO)

True or False: If you apply a Resource Lock to an Azure Resource Group, all resources inside that group inherit the lock.

Where can a company download Microsoft's independent audit reports (such as ISO or SOC compliance reports) to verify that Azure meets their regulatory requirements?

Which Azure service allows you to create, assign, and manage rules that enforce compliance standards across your Azure resources (e.g., restricting which regions VMs can be deployed in)?

An administrator wants to ensure that a critical production database cannot be accidentally deleted by ANY user, even if they have Owner permissions. What should they apply to the resource?

Which service provides a unified data governance solution to help you manage and govern your on-premises, multi-cloud, and software-as-a-service (SaaS) data?

A compliance officer needs to download Microsoft's independent audit reports (such as ISO or SOC compliance reports) to prove to auditors that Azure is secure. Where can they find these documents?

Which TWO of the following are valid types of Azure Resource Locks? (Select TWO)

True or False: Azure Policy can be configured to automatically remediate (fix) existing resources that do not comply with your rules.