Practice question 61 of 498 · medium
An architect needs to prevent creation of Azure resources in unapproved regions. Which control most directly matches?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- An Azure Policy deny assignment for the allowed-location requirement
An Azure Policy deny assignment for the allowed-location requirement: Policy can enforce the applicable resource configuration boundary. A Reader role assignment for the deployment identity: Reader limits actions but does not define which regions are allowed for authorized deployers. A billing tag documenting the preferred region: A tag alone does not prevent a deployment. A policy audit assignment with no enforcement change: Audit reports violations without blocking the matching request.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.