You have an Azure subscription that contains the resources shown in the following table. The Not allowed resource types Azure policy that has policy enforcement enabled is assigned to RG1 and uses…

Question

Options

• AAdd a subnet to VNETI.
• BRemove Microsoft.Network/virtualNetworks from the policy.
• CCreate on Azure Resource Manager template:
• DRemove Microsoft.Compute/virtualMachines from the policy.

• A
  21% (8)
• B
  5% (2)
• C
  13% (5)
• D
  62% (24)

Explanation

Allow vírtual machines to be created again. Note: Disallow resource types in your cloud environment One popular goal of cloud governance is restricting what resource types are allowed in the environment. Businesses have many motivations behind resource type restrictions. For example, resource types might be costly or might go against business standards and strategies. Rather than using many policies for individual resource types, Azure Policy offers two built-in policies to achieve this goal: * Allowed resource types This policy enables you to specify the resource types that your organization can deploy * Not allowed resource types Restrict which resource types can be deployed in your environment. Limiting resource types can reduce the complexity and attack surface of your environment while also helping to manage costs. Compliance results are only shown for non-compliant resources. The first step in disabling resource types is to assign the Not allowed resource types policy https://learn.microsoft.com/en-us/azure/governance/policy/tutorials/disallowed-resources

No community discussion yet for this question.