AZ-305 · Question 11 · Domain 1.3: Governance
Your company has an Azure environment with 10 subscriptions under a single Management Group named 'MG-Corp'.
To control costs, the finance team requires that developers can only deploy specific, cost-effective Virtual Machine SKUs (e.g., D-series and B-series) across all subscriptions. If a developer attempts to deploy an expensive GPU-optimized VM (e.g., N-series), the deployment must be blocked immediately.
Which governance solution should you implement?
Answer options:
Assign an Azure Policy with an 'Audit' effect at the 'MG-Corp' management group level.
Assign an Azure Policy with a 'Deny' effect at the 'MG-Corp' management group level.
Configure Azure Role-Based Access Control (RBAC) custom roles to remove the 'Microsoft.Compute/virtualMachines/write' permission for N-series VMs.
Implement Azure Resource Locks on all resource groups.
55 questions · hints · full answers · grading
Expert