Microsoft Azure Fundamentals (AZ-900)Describe Azure identity, security, and networkingMedium

A company is implementing a new security policy that requires all Azure resources to be tagged with specific department and cost center information. They need an automated way to enforce this policy and ensure compliance across all subscriptions and resource groups. Which Azure service should they use?

  1. AAzure Resource Health
  2. BAzure Cost Management
  3. CAzure Policy
  4. DAzure Advisor
Show answer & explanation

Correct answer: C. Azure Policy

Azure Policy helps to enforce organizational standards and to assess compliance at scale. It can ensure that all new resources are created with required tags, or audit existing resources for non-compliance.

Why the other options are wrong

  • A. Azure Resource Health provides information about the health of your individual Azure resources.
  • B. Azure Cost Management helps you understand and manage your Azure spending.
  • D. Azure Advisor provides personalized recommendations for best practices.

Azure Policy

Azure Policy is a service in Azure that you use to create, assign, and manage policies. These policies enforce rules and effects over your resources to stay compliant with your corporate standards.

  • Enforces organizational standards
  • Supports auditing, modification, and denial of resource creation
  • Can apply to subscriptions, resource groups, or individual resources
  • Helps achieve governance and compliance

Memory trick: Azure Policy acts as the rulebook, making sure everyone plays by your company's standards.

More Describe Azure identity, security, and networking questions