StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Governance and compliance

Practice question 92 of 400 · hard

A policy baseline must create supported diagnostic settings for new resources and remediate existing resources missing those settings. Which two requirements belong in the design? Select 2 answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.A suitable DeployIfNotExists assignment with a managed identity holding required roles.
  2. B.Only a compliance scan, assuming every finding is repaired automatically.
  3. C.A remediation task for existing noncompliant resources.
  4. D.An audit effect with no deployment mechanism.
  5. E.A narrow identity with none of the permissions required to create settings.
Show the answer and explanation

✓ Correct answers

  • A suitable DeployIfNotExists assignment with a managed identity holding required roles.
  • A remediation task for existing noncompliant resources.

DeployIfNotExists can create related configuration using the assignment identity, and existing findings need remediation tasks. A compliance scan reports state rather than automatically repairing every existing resource. Audit does not deploy, and remediation needs the actual permissions to create the settings. Source: AZ-305 Study Guide.pdf, PDF page(s) 19-20.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.