AZ-104 · Question #830
Hotspot Question You have the Azure resources shown in the following table. You need to create a custom Azure Policy definition that will use Azure Disk Encryption to automatically encrypt all the vir
The correct answer is The policy should have the 'Effect' configured as 'deployIfNotExists'. = Yes; The policy should have the 'Assignment scope' configured as 'Sub1'. = Yes. The 'deployIfNotExists' effect is the correct choice because it allows Azure Policy to automatically deploy a remediation task (in this case, enabling Azure Disk Encryption) when a virtual machine is found that does not already have encryption enabled - this is the only effect th
Question
Exhibits
Answer Area
- The policy should have the 'Effect' configured as 'deployIfNotExists'.Yes
- The policy should have the 'Assignment scope' configured as 'Sub1'.Yes
Explanation
The 'deployIfNotExists' effect is the correct choice because it allows Azure Policy to automatically deploy a remediation task (in this case, enabling Azure Disk Encryption) when a virtual machine is found that does not already have encryption enabled - this is the only effect that supports automatic deployment of resources. Assigning the policy scope to 'Sub1' ensures the policy only applies to resources within that specific subscription, meeting the requirement to target Sub1 exclusively without affecting other subscriptions or management groups.
Topics
Community Discussion
No community discussion yet for this question.