Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceMedium
A software development company uses Azure DevOps for its CI/CD pipelines. They want to ensure that all virtual machines deployed by these pipelines automatically have specific monitoring agents installed and are tagged correctly for cost allocation. Which Azure governance feature can help automate the deployment of these configurations consistently?
- AAzure Security Center
- BAzure Advisor
- CAzure Blueprints
- DAzure Resource Locks
Show answer & explanationAnswer & explanation
Correct answer: C. Azure Blueprints
Azure Blueprints allow you to define a repeatable set of Azure resources, along with policies, role assignments, and resource groups, that can be consistently deployed. This is ideal for ensuring new VMs automatically include specific extensions (like monitoring agents) and tags.
Why the other options are wrong
- A. Azure Security Center (now Microsoft Defender for Cloud) provides security posture management and threat protection, not for automating general resource configuration and tagging.
- B. Azure Advisor provides recommendations for optimizing existing resources, not for automating initial deployments.
- D. Azure Resource Locks prevent accidental deletion or modification of resources, not for automating initial configuration.
Azure Blueprints
A service that enables the definition and deployment of a repeatable set of Azure resources, policies, and role assignments, ensuring consistency and compliance.
- Defines repeatable environments.
- Combines resource templates, policies, role assignments.
- Ensures consistent deployments.
Memory trick: Blueprints lay out the consistent building blocks for your Azure structures.