Home › Azure AZ-104 › cloudcomputing › az104identitygovernance › Which Azure construct lets administrators enforc…
Which Azure construct lets administrators enforce "all storage accounts must require HTTPS" across every subscription in a folder?
AAzure Policy with the policy applied at the management-group or subscription scope
BAn NSG attached to every storage account
CConditional Access policies in Entra ID
DAzure Cost Management budgets
Answer & Solution
Correct answer: A. Azure Policy with the policy applied at the management-group or subscription scope
Azure Policy defines and enforces rules across scopes — audit or deny based on configuration. NSGs are network firewalls; Conditional Access controls sign-ins; Budgets monitors cost.
Related questions
Which approach satisfies a compliance requirement that admin-level activity on a critical Which Entra ID feature lets you require additional verification for a user the moment theiAn organisation has 50 Azure subscriptions and wants to enforce policy and roll up billingWhich Azure construct lets you enforce a rule that "only resources tagged with a `cost-cenAn admin wants to give a contractor read-only access to ONE specific resource group for 30Which Azure feature lets administrators temporarily revoke all changes to a resource — proWhich Entra ID feature lets an organisation invite external users (partners, contractors) Which combination represents the correct Azure resource hierarchy from highest scope to lo