Microsoft Azure Fundamentals (AZ-900)Describe Azure architecture and servicesMedium
A software development company is migrating its existing applications to Azure. They need a way to ensure consistent security policies, compliance standards, and cost management across multiple subscriptions and resource groups within their organization. Which Azure management tool is designed to provide this centralized governance?
- AAzure Monitor
- BAzure Resource Manager (ARM)
- CAzure Advisor
- DAzure Policy
Show answer & explanationAnswer & explanation
Correct answer: D. Azure Policy
Azure Policy helps enforce organizational standards and assess compliance at scale. It can apply policies to resource groups, subscriptions, and management groups, ensuring consistent configurations and security across the environment.
Why the other options are wrong
- A. Azure Monitor collects and analyzes telemetry data, not for enforcing governance.
- B. Azure Resource Manager is the deployment and management service for Azure, but Azure Policy is the specific tool for governance enforcement.
- C. Azure Advisor provides recommendations for best practices, but doesn't enforce policies.
Azure Policy
Azure Policy is a service in Azure that you use to create, assign, and manage policies. These policies enforce rules over your resources.
- Ensures compliance with corporate standards.
- Can prevent resource creation that violates policies.
- Integrates with Management Groups for widespread application.
Memory trick: Azure Policy is like the rulebook and the referee for your cloud resources.