Microsoft Certified: Azure Fundamentals (AZ-900) Practice Exam

Which Azure service allows you to create, assign, and manage policies to enforce different rules and effects over your resources?

1. Azure Policy

2. Azure Blueprints

3. Azure Security Center

4. Role-based Access Control

The correct answer is: Azure Policy

The correct answer is Azure Policy because it is specifically designed to help organizations manage and enforce compliance across their Azure resources. Azure Policy allows you to define rules, policies, and effects that can be applied to resources, helping ensure they comply with required standards and regulations. With Azure Policy, you can create policies that can either allow or deny specific actions and configurations, track compliance, and automatically remediate resources that are out of compliance. This functionality is essential for governance and maintaining control over resource deployment in Azure, assisting organizations in managing their cloud environment consistently. Other services mentioned, such as Azure Blueprints, are focused on packaging and deploying a set of resources with policies and resource templates but are not primarily intended for ongoing enforcement and management of individual resource policies. Azure Security Center provides security management and threat protection but does not focus specifically on policy enforcement. Role-based Access Control manages permissions and access to Azure resources but does not define policies relating to the configuration and compliance of those resources.