Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…

Question

Options

• AYes
• BNo

• A
  23% (5)
• B
  77% (17)

Explanation

Option B (No) is correct because scoping the policy initiative assignments to resource groups is too narrow - the requirement is to deploy the policy definitions as a group to all three subscriptions, meaning the assignments must be scoped at the subscription level (or management group level) to cover all resources across each subscription.

Why Option A (Yes) is wrong: Scoping assignments to resource groups would only apply the policies to specific resource groups within the subscriptions, not to the subscriptions in their entirety. This means resources outside those resource groups would be left unprotected, failing to meet the goal of full subscription coverage.

The correct solution would be to create a policy initiative and assign it with scope set to each of the three subscriptions (or ideally a management group containing all three), ensuring uniform policy enforcement across all resources.

Memory tip: Think of scope as a "coverage umbrella" - if you need to cover three subscriptions, your umbrella must be at least subscription-sized or larger (management group). A resource group scope is like a small umbrella that only covers part of the subscription, leaving gaps in your security policy enforcement.

No community discussion yet for this question.