ExpertHard1 markMultiple Choice
AZ-305 · Question 10 · Domain 1.3: Design Governance
You are designing a governance strategy for a large enterprise with 150 Azure subscriptions.
The enterprise has the following compliance requirements:
- All resources must be deployed in the 'West Europe' or 'North Europe' regions.
- Every resource group must have a 'CostCenter' tag.
- If a resource is deployed without a 'CostCenter' tag, it should automatically inherit the tag from its parent resource group.
- These rules must be applied centrally and automatically to all new and existing subscriptions.
Which THREE components should you include in your governance design? (Select THREE)
You are designing a governance strategy for a large enterprise with 150 Azure subscriptions.
The enterprise has the following compliance requirements:
- All resources must be deployed in the 'West Europe' or 'North Europe' regions.
- Every resource group must have a 'CostCenter' tag.
- If a resource is deployed without a 'CostCenter' tag, it should automatically inherit the tag from its parent resource group.
- These rules must be applied centrally and automatically to all new and existing subscriptions.
Which THREE components should you include in your governance design? (Select THREE)
Answer options:
A.
Management Groups
B.
Azure Policy
C.
Modify effect in Azure Policy
D.
Azure Blueprints
E.
Azure Resource Graph
F.
Append effect in Azure Policy
How to approach this question
Identify the hierarchy tool (Management Groups), the enforcement engine (Azure Policy), and the specific policy action needed for tag inheritance (Modify effect).
Full Answer
Management Groups, Azure Policy, and Modify effect in Azure Policy.
To manage 150 subscriptions centrally, you must use Management Groups. To enforce region restrictions and tagging rules, you use Azure Policy assigned at the Management Group level. To automatically inherit a tag from a resource group if it's missing, you use an Azure Policy with the 'Modify' effect, which can alter the request during resource creation to add the required tag.
Common mistakes
Selecting Azure Blueprints instead of Management Groups, or selecting the Append effect instead of Modify (Modify is the modern standard for tag remediation).
Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 1
55 questions · hints · full answers · grading
More questions from this exam
Q01Contoso Ltd is a global financial institution with 80 Azure subscriptions spread across 4 managem...MediumQ02Fabrikam Inc. operates a hybrid cloud environment with 500 on-premises VMware virtual machines ru...HardQ03A startup company has a single Azure subscription with a monthly budget of $5,000.
The CFO want...EasyQ04You are designing an Azure Sentinel architecture for a Managed Security Service Provider (MSSP). ...MediumQ05A healthcare enterprise is migrating its infrastructure to Azure. They have strict compliance req...Hard