You have 50 Azure subscriptions. You need to monitor resource in the subscriptions for compliance with the ISO 27001:2013 standards. The solution must minimize the effort required to modify the list…

Question

Options

• AAssign an initiative to a management group.
• BAssign a blueprint to each subscription.
• CAssign a policy to each subscription.
• DAssign a blueprint to a management group.
• EAssign an initiative to each subscription.
• FAssign a policy to a management group.

• A
  82% (37)
• B
  9% (4)
• C
  2% (1)
• E
  2% (1)
• F
  4% (2)

Explanation

To monitor 50 subscriptions with minimal effort to modify policy definitions, the solution requires two things: (1) applying governance at the management group level so a single assignment covers all child subscriptions automatically, and (2) using constructs that bundle multiple policy definitions so you only need to update in one place. Assigning an initiative to a management group (A) achieves both - an initiative groups multiple ISO 27001 policy definitions together, and assigning it at the management group level covers all 50 subscriptions at once; updating the initiative propagates changes everywhere automatically. Assigning a blueprint to a management group (D) similarly provides broad coverage with centralized management. Assigning to individual subscriptions (C, E, F) requires 50 separate assignments and 50 updates when changes are needed, violating the 'minimize effort' requirement.

No community discussion yet for this question.