Creating and Assigning Azure Policies

What you'll be asked

1. Which of the following is the primary purpose of using Azure Policy within Microsoft Defender for Cloud?
2. When creating a custom Azure Policy definition, which component specifies the condition under which the policy rule is evaluated?
3. An administrator needs to prevent the creation of resources in unauthorized regions. Which policy effect should be used to block the deployment immediately?
4. You have assigned a policy with the 'AuditIfNotExists' effect. Why might a resource show as 'Non-compliant' even if it exists?
5. You need to apply a policy to a subset of resources within a resource group based on specific tags. What is the most efficient way to achieve this using policy assignment?

Answers and explanations come after you submit.