Practice question 491 of 498 · hard
A regulated enterprise has deployed an MCSB-related policy initiative. All evaluated Azure resources are compliant, but there is no evidence of operator access review, incident rehearsal, or recovery-key availability. What should an architect report to the board?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- The configuration assessment is useful evidence; validate the unmeasured operational and access controls against the actual obligations
The configuration assessment is useful evidence; validate the unmeasured operational and access controls against the actual obligations: A policy compliance state does not attest to every organizational control or recovery dependency. The compliant policy result is a complete regulatory attestation: The stated evidence gaps prevent that conclusion. Azure Policy has no governance value because it does not evaluate every control: Automated configuration assessment remains valuable within a broader assurance process. Replace the initiative with a reference-architecture diagram and declare assurance complete: A diagram also cannot establish control operation. Give auditors Owner permissions as the primary remedy for all gaps: Broad resource control does not itself validate access review, response, or recovery.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.