Skip to Content

AZ-500: Optimizing Azure Security Center Policy Management

Enhance your Azure security policy management across multiple subscriptions. Discover the most efficient way to deploy policy definitions to ensure top-notch security.

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You use Azure Security Center for the centralized policy management of three Azure subscriptions.
You use several policy definitions to manage the security of the subscriptions.
You need to deploy the policy definitions as a group to all three subscriptions.
Solution: You create a resource graph and an assignment that is scoped to a management group.
Does this meet the goal?

A. Yes
B. No

Answer

B. No

Explanation

Creating a resource graph and an assignment that is scoped to a management group does not meet the goal of deploying the policy definitions as a group to all three subscriptions. A resource graph is a service that allows you to query information about your Azure resources using the Azure Resource Graph Explorer or the Azure Resource Graph API. A resource graph can help you explore, analyze, and monitor your resources, but it does not allow you to create or assign policy definitions.

A management group is a container that helps you organize your subscriptions and apply governance controls, such as policies, at a large scale. However, creating an assignment that is scoped to a management group does not automatically deploy the policy definitions as a group to the subscriptions within the management group. An assignment is the application of a policy definition or an initiative to a scope, such as a management group, subscription, resource group, or resource. An initiative is a collection of policy definitions that are grouped together towards a specific goal or purpose.

To deploy the policy definitions as a group to all three subscriptions, you need to create an initiative that contains the policy definitions that you want to apply, and then assign the initiative to a management group that contains all three subscriptions. This way, you can deploy the policy definitions as a group to all three subscriptions in one step, and ensure that they are enforced consistently across your resources.

Reference

The latest Microsoft AZ-500 Azure Security Technologies certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Microsoft AZ-500 Azure Security Technologies exam and earn Microsoft AZ-500 Azure Security Technologies certification.

AZ-500 Microsoft Azure Security Technologies Exam Questions and Answers

Alex Lim is a certified IT Technical Support Architect with over 15 years of experience in designing, implementing, and troubleshooting complex IT systems and networks. He has worked for leading IT companies, such as Microsoft, IBM, and Cisco, providing technical support and solutions to clients across various industries and sectors. Alex has a bachelor’s degree in computer science from the National University of Singapore and a master’s degree in information security from the Massachusetts Institute of Technology. He is also the author of several best-selling books on IT technical support, such as The IT Technical Support Handbook and Troubleshooting IT Systems and Networks. Alex lives in Bandar, Johore, Malaysia with his wife and two chilrdren. You can reach him at [email protected] or follow him on Website | Twitter | Facebook

    Ads Blocker Image Powered by Code Help Pro

    Your Support Matters...

    We run an independent site that is committed to delivering valuable content, but it comes with its challenges. Many of our readers use ad blockers, causing our advertising revenue to decline. Unlike some websites, we have not implemented paywalls to restrict access. Your support can make a significant difference. If you find this website useful and choose to support us, it would greatly secure our future. We appreciate your help. If you are currently using an ad blocker, please consider disabling it for our site. Thank you for your understanding and support.