AZ-500 Question #62: Real Exam Question with Answer & Explanation

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You use Azure Security Center for the centralized policy management of three Azure subscriptions. You use several policy definitions to manage the security of the subscriptions. You need to deploy the policy definitions as a group to all three subscriptions. Solution: You create a policy definition and assignments that are scoped to resource groups. Does this meet the goal?

Options

• AYes
• BNo

Explanation

Option B (No) is correct because the goal requires deploying multiple policy definitions as a group to all three subscriptions, which is exactly what an Azure Policy Initiative (policy set) is designed for - it bundles multiple policy definitions together and can be scoped at the subscription or management group level.

Why the proposed solution fails: Creating individual policy definitions scoped to resource groups does not satisfy either requirement. First, scoping to resource groups limits coverage to specific resource groups rather than entire subscriptions. Second, individual policy definitions are not "deployed as a group" - that functionality belongs to policy initiatives (policy sets), not standalone definitions.

Why Option A is wrong: Assigning policies at the resource group level would miss resources in other resource groups and wouldn't apply uniformly across all three subscriptions, falling short of the stated goal.

Memory Tip: Think of it this way - Initiative = Group of policies. Whenever an exam question mentions deploying policy definitions as a group, the answer almost always involves a Policy Initiative, scoped at the subscription or management group level (not resource group level). If the solution doesn't mention initiatives and uses resource group scope, it's almost certainly No.

No community discussion yet for this question.