nerdexam
Microsoft

AZ-305 · Question #90

Your company has an Azure subscription that contains multiple resource groups. You have to design a resource governance solution that would meet the following requirements: - Ensure that all…

The correct answer is C. An Azure Policy at the subscription level that has an exclusion. Here we can add a policy at the subscription level which does not allow the deployment of Azure resources can be deployed to these resource groups. Options A and B are incorrect because RBAC roles are used to provide access to resources Option D is incorrect since this would be…

Submitted by packet_pusher· Mar 6, 2026Design identity, governance, and monitoring solutions

Question

Your company has an Azure subscription that contains multiple resource groups. You have to design a resource governance solution that would meet the following requirements: - Ensure that all ExpressRoute resources are created in a resource - Ensure that creation of ExpressRoute resources is delegated to an - Use the principle of least privilege Which of the following needs to be included in the solution to meet the following requirement?

Options

  • BA custom RBAC role assignment at the subscription level
  • CAn Azure Policy at the subscription level that has an exclusion

How the community answered

(23 responses)
  • B
    17% (4)
  • C
    83% (19)

Explanation

Here we can add a policy at the subscription level which does not allow the deployment of Azure resources can be deployed to these resource groups. Options A and B are incorrect because RBAC roles are used to provide access to resources Option D is incorrect since this would be an in-efficient process to add policies to all resource https://docs.microsoft.com/en-us/azure/governance/policy/overview

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-305 Practice