Medium1 markMultiple Choice
Domain 1.3: Design GovernanceGovernanceTagsAzure Policy

AZ-305 · Question 16 · Domain 1.3: Design Governance

You are designing a resource tagging strategy for your Azure environment.

The finance team requires a 'CostCenter' tag on all Resource Groups. Furthermore, they require that all resources deployed within those Resource Groups automatically inherit the 'CostCenter' tag and its value from the parent Resource Group, without requiring developers to manually add the tag during deployment.

Which Azure governance feature should you use?

Answer options:

A.

Azure Policy with the 'Deny' effect

B.

Azure Policy with the 'Modify' effect

C.

Azure Blueprints

D.

Azure Resource Graph

How to approach this question

Look for the requirement to 'automatically inherit' or change a resource during deployment. This requires a remediation/modification effect in Policy.

Full Answer

B.Azure Policy with the 'Modify' effect✓ Correct
Azure Policy with the 'Modify' effect
Azure Policy with the 'Modify' effect is designed to add, update, or remove properties or tags on a resource during creation or update. A built-in policy exists specifically to 'Inherit a tag from the resource group', which perfectly meets the requirement to automate tagging without developer intervention.

Common mistakes

Selecting 'Deny'. While 'Deny' enforces tagging, it causes deployment failures if the tag is missing, frustrating developers. 'Modify' silently fixes the deployment.

Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 4

55 questions · hints · full answers · grading

More questions from this exam