Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceEasy
A global consulting firm uses Azure to host various client projects. They need to ensure that resources deployed within specific subscriptions adhere to a set of predefined security and compliance standards, automatically remediating any non-compliant resources. Which Azure governance feature should they use?
- AAzure Cost Management + Billing
- BAzure Advisor
- CAzure Sentinel
- DAzure Policy
Show answer & explanationAnswer & explanation
Correct answer: D. Azure Policy
Azure Policy is used to create, assign, and manage policies that enforce rules over your Azure resources. It can automatically remediate non-compliant resources, which is ideal for enforcing security and compliance standards across subscriptions.
Why the other options are wrong
- A. Azure Cost Management + Billing helps analyze spending, create budgets, and manage invoices, but does not enforce compliance rules on resources.
- B. Azure Advisor provides recommendations for cost, security, reliability, operational excellence, and performance, but does not enforce policies or remediate non-compliant resources.
- C. Azure Sentinel is a Security Information and Event Management (SIEM) solution that provides security analytics and threat intelligence, not policy enforcement or remediation.
Azure Policy
A service in Azure that helps to enforce organizational standards and to assess compliance at scale. It ensures that resources stay compliant with corporate standards.
- Defines rules for Azure resources.
- Can audit, deny, or modify resources.
- Supports automatic remediation for non-compliant resources.
Memory trick: Govern your cloud, enforce the rules, ensure compliance.