Security Policies Quiz

What you'll be asked

1. Which Azure service is primarily used to enforce organizational standards and assess compliance at scale across your Azure resources?
2. When configuring an Azure Policy to restrict the types of virtual machines that can be deployed in a subscription, what kind of policy effect would you most likely use?
3. You need to automatically remediate non-compliant resources by adding a missing tag. Which Azure Policy effect should you configure?
4. A security administrator wants to ensure that all new storage accounts deployed within a specific resource group are configured with 'https' traffic only. Which Azure Policy assignment would be the most effective way to enforce this rule for future deployments and existing resources?
5. You are designing a strategy to deploy compliant infrastructure for multiple environments (dev, test, prod) across several subscriptions. You need a repeatable way to define and deploy a set of Azure resources, including policies and role assignments, that adheres to organizational standards. Which Azure service is specifically designed for this purpose?

Answers and explanations come after you submit.