nerdexam
Microsoft

AZ-500 · Question #102

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…

The correct answer is A. Yes. Explanation Creating an initiative allows you to group multiple policy definitions together into a single logical unit, which directly addresses the requirement to deploy policies "as a group." Scoping the assignment to a management group ensures the initiative automatically…

Submitted by katya_ua· Mar 6, 2026Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You use Azure Security Center for the centralized policy management of three Azure subscriptions. You use several policy definitions to manage the security of the subscriptions. You need to deploy the policy definitions as a group to all three subscriptions. Solution: You create an initiative and an assignment that is scoped to a management group. Does this meet the goal?

Options

  • AYes
  • BNo

How the community answered

(17 responses)
  • A
    76% (13)
  • B
    24% (4)

Explanation

Explanation

Creating an initiative allows you to group multiple policy definitions together into a single logical unit, which directly addresses the requirement to deploy policies "as a group." Scoping the assignment to a management group ensures the initiative automatically applies to all Azure subscriptions nested within that management group, satisfying the requirement to cover all three subscriptions simultaneously without needing separate assignments per subscription.

There is no distractor option (B - "No") that presents a valid counter-argument here, because this solution precisely matches Azure's intended architecture for managing policies at scale: initiatives group policies, and management group scoping cascades assignments downward through the hierarchy.

Memory Tip: Think of it as "Group policies = Initiative, Group subscriptions = Management Group." Whenever an exam question asks you to apply multiple policies across multiple subscriptions at once, the answer almost always involves an initiative (for grouping definitions) scoped to a management group (for broad coverage). If the scope were set to individual subscriptions instead of a management group, you would need three separate assignments - that would be inefficient and would likely be the "No" scenario.

Topics

#Azure Policy#Management Groups#Microsoft Defender for Cloud#Centralized Policy Management

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice