You have an Azure subscription named Subscription1 that contains the resources shown in the following table. You need to identify which initiatives and policies you can add to Subscription1 by using…

Question

Exhibits

Options

• APolicy1 and Policy2 only
• BInitiative1 only
• CInitiative1 and Initiative2 only
• DInitiative1, Initiative2, Policy1, and Policy2

• A
  8% (2)
• B
  4% (1)
• C
  4% (1)
• D
  85% (22)

Explanation

Explanation

Option D is correct because Azure Security Center allows you to assign both initiatives and individual policies to a subscription, regardless of their scope or definition level - meaning all available initiatives (Initiative1, Initiative2) and all available policies (Policy1, Policy2) in the subscription's context can be added through Security Center's security policy settings.

Options A, B, and C are wrong because they each artificially restrict what can be assigned: Option A excludes initiatives entirely, Option B limits to only one initiative, and Option C excludes individual policies - none of which reflect how Azure Security Center actually works. Security Center does not limit you to only initiatives or only policies; it supports assigning both types through its policy management interface.

Memory Tip: Think of Azure Security Center as an "all-inclusive" policy manager - it works with both initiatives (groups of policies) AND individual policies. If you see a question asking what Security Center can add, the answer will almost always include everything available (all initiatives + all policies), not a restricted subset. When in doubt, choose the most complete answer.

No community discussion yet for this question.