A team assigns a deployIfNotExists diagnostic-settings policy to a subscription. Existing resources remain noncompliant. What should it check first?

Choose the single best answer.

A.Whether converting the assignment to Audit creates the missing settings
B.Remediation task execution and the assignment identity permissions required to deploy the settings
C.Only whether the original resource creator is Contributor
D.Whether a Deny rule can retroactively deploy the diagnostic settings

Show the answer and explanation

✓ Correct answer

Remediation task execution and the assignment identity permissions required to deploy the settings

Existing-resource remediation requires a task and authorized assignment identity. The creator’s role does not replace the remediation identity, Deny does not deploy missing settings retroactively, and Audit reports without deployment.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.