Home › Azure AZ-900 › cloudcomputing › azuremanagement › Which Azure service is designed to enforce organ…
Which Azure service is designed to enforce organisational rules — for example, "all storage accounts must require HTTPS" — and to audit or block deployments that violate them?
AAzure Policy
BAzure Monitor
CMicrosoft Defender for Endpoint
DAzure Data Box
Answer & Solution
Correct answer: A. Azure Policy
Azure Policy defines and enforces rules across subscriptions — it can audit, deny, or auto-remediate non-compliant resources at deploy time. Monitor collects telemetry, Defender for Endpoint is anti-malware on endpoints, Data Box is offline data shipping.
Related questions
An Azure subscription is best described as:Which Azure feature gives you tenant-level, personalised information about service issues,Which Azure tool gives you a browser-based shell with the Azure CLI and Azure PowerShell aAn organisation needs centralised data discovery, classification, and lineage tracking acrWhich Azure service extends Azure-style management — policy, RBAC, monitoring — to resourcWhat is Azure Monitor's primary role in an Azure environment?Which Azure tool lets you write and apply infrastructure as code declaratively (defining VAzure resource locks at the "CanNotDelete" level do which of the following?