Azure Policy Flashcards

1
Q

Complete the sentence: Azure Role-Based Access Control ________________________.

A. utilizes business rules to maintain compliance
B. maintains control of user permissions
C. evaluates Azure resources whenever a change is made
D. maintains compliance of resources
E. I don’t know

A

B. maintains control of user permissions

Explanation:
The best way to remember the difference between Azure Policy and Azure Role-Based Access Control is that Azure Policy maintains compliance of resources while Azure Role-Based Access control maintains control of user permissions, with Azure Policy holding the trump card when challenged.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Complete the sentence: The policy rule within the policy definition ______________________.

A. contains a policy initiative
B. contains if and then statements for when to apply a policy definition
C. contains metadata information about the policy definition
D. determines which resource types are evaluated for the policy definition
E. I don’t know

A

B. contains if and then statements for when to apply a policy definition

Explanation:
The policy rule is effectively the condition that specifies when a policy is enforced. It is created using “If and Then” conditional factors, and if the condition is met, the policy is applied.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

In which of the following scenarios does Azure Policy not perform an evaluation?

A. A resource has been created, deleted, or updated in scope with a policy assignment.
B. A policy or an initiative that’s been assigned to a scope is updated.
C. Automatically every 24 hours .
D. A user’s permissions are removed.
E. I don’t know

A

D. A user’s permissions are removed.

Explanation:
Evaluations of those resources are triggered automatically when:

A resource has been created, deleted, or updated in scope with a policy assignment
A policy or an initiative is newly assigned to a scope
A policy or an initiative that's been assigned to a scope is updated
Automatically every 24 hours, which is the standard compliance evaluation cycle
How well did you know this?
1
Not at all
2
3
4
5
Perfectly