AZ-104 Question #834: Real Exam Question with Answer & Explanation

Question

You have an Azure subscription named Sub1 that contains a resource group named RG1. You need to ensure that all current and future resources in RG1 have a tag of Department=HR applied. What should you do?

Options

• ACreate and assign an Azure policy.
• BApply the Department=HR tag to Sub1.
• CApply the Department=HR tag to each resource in RG1.
• DApply the Department=HR tag directly to RG1.

Explanation

You can enforce this through Azure Policy using the Modify effect with a remediation task to automatically add tags to new and existing resources, ensuring consistent governance and cost management across your environment. How to Enforce Tagging with Azure Policy Create a Policy Definition: Define a policy with a Modify effect to add a specific tag (e.g., CostCenter:Finance) to resources. Assign the Policy: Assign this policy at the Resource Group or Subscription level, scoping it to your target Resource Group. Use a Remediation Task: For existing resources, trigger a remediation task to apply the tag to non-compliant resources within the scope. New Resources: Any new resource deployed into that Resource Group will automatically get the Manual Tagging: Applying tags directly to a resource group only tags the group itself, not its Automation: Use Azure Policy's Modify effect and remediation to automate tag enforcement on current and future resources for strong governance. Simply applying a tag to an Azure Resource Group does not automatically apply it to all current and future resources within. https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/tag-policies

No community discussion yet for this question.