Microsoft Certified: Azure Fundamentals (AZ-900) Practice Exam

Which Azure service allows you to create and manage policies to enforce compliance with corporate standards?

1. Azure Policy

2. Azure Blueprints

3. Azure Security Center

4. Role-based Access Control

The correct answer is: Azure Policy

Azure Policy is a service that enables organizations to create, assign, and manage policies that enforce compliance with organizational standards and regulations. Through Azure Policy, you can define rules that control and manage the resources within your Azure environment, ensuring that they remain compliant with specific requirements. This service allows you to take proactive actions by auditing resources and applying policies to enforce compliance automatically. For example, you might create a policy that ensures that all virtual machines in your subscription must be of a specific size or deployed within certain regions. By applying an Azure Policy, you can help maintain adherence to governance requirements and security best practices. Additionally, Azure Policy can integrate with Azure Blueprints to bundle and manage policies along with other resources as a comprehensive package for governance. While Azure Security Center focuses on security management and threat protection, and Role-based Access Control manages permissions and access to Azure resources, Azure Policy specifically targets compliance management, making it the most appropriate choice for this question.