A modify policy is updated to make additional supported changes, but remediation fails with authorization errors. What should the architect review first?

Choose the single best answer.

A.Review only the compliance-report reader's role because that user's identity always performs remediation.
B.Review the assignment managed identity's roles against the updated remediation actions.
C.Assume changing a policy definition automatically adds every new role needed by its assignment identity.
D.Switch to an audit effect and treat detection alone as completion of the required property changes.

Show the answer and explanation

✓ Correct answer

Review the assignment managed identity's roles against the updated remediation actions.

The assignment identity performs supported remediation and needs roles for the new actions; definition changes do not automatically update its permissions. The report reader is not necessarily the remediation principal. Audit identifies noncompliance but does not perform the required property changes. Source: AZ-305 Study Guide.pdf, PDF page(s) 20.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.