AZ-305 · Question 10 · Domain 1.3: Governance
A global enterprise has 50 Azure subscriptions organized under a single root Management Group. They have three main business units: North America (NA), Europe (EU), and Asia Pacific (APAC).
Due to strict GDPR compliance, the EU business unit must be absolutely restricted from deploying any resources outside of the 'West Europe' and 'North Europe' Azure regions. The NA and APAC units have no such restrictions.
You need to design a governance solution that enforces this requirement with the least administrative effort. What should you do?
Answer options:
Assign an Azure Policy restricting locations to the root Management Group, and create exclusions for NA and APAC subscriptions.
Create an 'EU' Management Group under the root. Move EU subscriptions to it. Assign an Azure Policy restricting locations to the 'EU' Management Group.
Assign an Azure Policy restricting locations individually to each EU subscription.
Configure Azure Role-Based Access Control (RBAC) on the EU subscriptions to deny deployment to non-EU regions.
55 questions · hints · full answers · grading
Expert