StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Governance and compliance

Practice question 91 of 400 · easy

A security team wants to discover noncompliant configurations before blocking new deployments. Which policy effect is the best starting point?

Choose the single best answer.

  1. A.Deny.
  2. B.Modify as a guarantee that every resource is only observed.
  3. C.Audit.
  4. D.DeployIfNotExists as a universal nonrepairing observation mode.
Show the answer and explanation

✓ Correct answer

  • Audit.

Audit reports noncompliance without blocking or repairing. Deny blocks violating operations. DeployIfNotExists can deploy supported related configuration, and modify changes supported properties; neither is a universal observation-only substitute. Source: AZ-305 Study Guide.pdf, PDF page(s) 19.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.