Microsoft
AZ-305 · Question #324
Hotspot Question You have an Azure subscription that contains 50 Azure SQL databases. You create an Azure Resource Manager (ARM) template named Template1 that enables Transparent Data Encryption (TDE)
Sign in or unlock AZ-305 to reveal the answer and full explanation for question #324. The question stem and answer options stay visible for context.
Submitted by satoshi_tk· Mar 6, 2026Design identity, governance, and monitoring solutions
Question
Hotspot Question You have an Azure subscription that contains 50 Azure SQL databases. You create an Azure Resource Manager (ARM) template named Template1 that enables Transparent Data Encryption (TDE). You need to create an Azure Policy definition named Policy1 that will use Template1 to enable TDE for any noncompliant Azure SQL databases. How should you configure Policy1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:
Exhibit
Answer Area
- Set available effects to:DepoyIfNotExistsEnforceRegoPolicyModify
- Include in the definition:The identity required to perform the remediation taskThe scopes of the policy assignmentsThe role-based access control (RBAC) roles required to perform the remediation task
Unlock AZ-305 to see the answer
You've previewed enough free AZ-305 questions. Unlock AZ-305 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Azure Policy#DeployIfNotExists#Transparent Data Encryption#remediation tasks