ExpertMedium1 markMultiple Choice
AZ-305 · Question 10 · Domain 1.3: Governance
An enterprise has 100 Azure subscriptions across 5 business units. You need to ensure that all storage accounts created in any subscription are restricted to the 'Standard_GRS' SKU. The solution must automatically apply to any new subscriptions created in the future. What is the most efficient way to design this governance strategy?
An enterprise has 100 Azure subscriptions across 5 business units. You need to ensure that all storage accounts created in any subscription are restricted to the 'Standard_GRS' SKU. The solution must automatically apply to any new subscriptions created in the future. What is the most efficient way to design this governance strategy?
Answer options:
A.
Assign an Azure Policy at the root Management Group level.
B.
Create an Azure Blueprint and assign it to each subscription.
C.
Assign an Azure Policy to each of the 100 subscriptions.
D.
Use Azure Resource Graph to monitor and delete non-compliant resources.
How to approach this question
Identify the hierarchical structure used to manage policies across multiple subscriptions.
Full Answer
A.Assign an Azure Policy at the root Management Group level.✓ Correct
Assign an Azure Policy at the root Management Group level.
Management Groups provide a governance scope above subscriptions. Applying an Azure Policy at the root Management Group ensures all current and future subscriptions inherit the rule.
Common mistakes
Choosing Blueprints, which are being deprecated in favor of Template Specs and Policy.
Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 6
55 questions · hints · full answers · grading
More questions from this exam
Q01Contoso Ltd is a global manufacturing company with 50,000 employees. They operate a mix of on-pre...MediumQ02A financial institution has 500 Windows Server VMs on-premises and 200 VMs in Azure. They need to...HardQ03An enterprise uses Azure Sentinel and Log Analytics. They ingest 500 GB of logs daily. The IT bud...HardQ04You are designing a monitoring strategy for a new Azure deployment consisting of App Service, Azu...EasyQ05A healthcare company uses Microsoft Entra ID (Azure AD). They need to implement a security policy...Medium