CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Enforcing Compliance with Azure Policy: AZ-104 Exam Question Walkthrough
Learn how to tackle an AZ-104 exam question on enforcing compliance with Azure Policy and understand the key concepts behind it.
Deciding which Azure service to use for enforcing compliance can trip candidates up. Many confuse similar services, leading to the wrong choice. Let's break it down.
The question
Your company has a requirement to enforce compliance for resource tags across all subscriptions. Which Azure service should you use to ensure this compliance?
- A. Azure Policy
- B. Azure Blueprints
- C. Azure Resource Manager
- D. Azure Cost Management
Think before you scroll
Take a moment to consider what each Azure service does. Understanding the primary purpose of each option is crucial. This will guide you toward the right answer.
The answer
The correct option is A. Azure Policy. Azure Policy is specifically designed to create, assign, and manage policies that enforce compliance for resources. This includes ensuring that tags are consistently applied across subscriptions.
Why the other options lose
- B. Azure Blueprints: This service is focused on packaging and deploying a set of resources together. While it can help with governance, it does not enforce compliance for existing resources or tags directly.
- C. Azure Resource Manager: This is the deployment and management service for Azure. It does not provide compliance enforcement capabilities. It serves as the backbone for managing resources but does not address compliance needs.
- D. Azure Cost Management: This service is aimed at managing and monitoring costs associated with Azure resources. It does not enforce compliance or manage resource tags, making it irrelevant for this requirement.
The concept behind it
The principle here is governance. Azure Policy is the tool for enforcing rules across your Azure environment. It ensures that resources meet compliance requirements, such as mandatory tagging, which helps in organization and cost management.
Exam trap to remember
Remember: Azure Policy is your go-to for compliance enforcement, especially for resource tagging. Always consider what each Azure service is specifically designed to do.