Recommended Computer Configuration for Running PowerShell Script

C

Azure policies can be used to define requirements for resource properties during deployment and for already existing resources. Azure Policy controls properties such as the types or locations of resources.

Azure Policy is a service in Azure that you use to create, assign, and manage policies. These policies enforce different rules and effects over your resources, so those resources stay compliant with your corporate standards and service level agreements. Azure Policy meets this need by evaluating your resources for non- compliance with assigned policies. All data stored by Azure Policy is encrypted at rest.

For example, you can have a policy to allow only a certain SKU size of virtual machines in your environment. Once this policy is implemented, new and existing resources are evaluated for compliance. With the right type of policy, existing resources can be brought into compliance.

The underlined text states that "Resource groups provide organizations with the ability to manage the compliance of Azure resources across multiple subscriptions." The question asks if the underlined text is correct, and if not, which answer choice would make the statement correct.

Resource groups are a fundamental construct in Azure that enable the organization and management of resources in a logical way. They are used to group related resources, such as virtual machines, storage accounts, and virtual networks, to manage them as a single entity. Resource groups are created within subscriptions and can contain resources from that subscription or other subscriptions.

However, resource groups do not provide the ability to manage compliance of Azure resources across multiple subscriptions. Instead, this functionality is provided by Management groups, which are used to manage access, policies, and compliance across multiple subscriptions. Management groups provide a hierarchy that can be used to organize subscriptions and apply policies and governance to those subscriptions and resources. Azure Policies can be used to enforce compliance within management groups.

Therefore, the correct answer to this question is B, "Management groups." Resource groups are used to organize and manage resources within a subscription, whereas management groups are used to manage access, policies, and compliance across multiple subscriptions.

Option A, "No change is needed," is incorrect because the underlined text is not correct.

Option C, "Azure policies," is incorrect because while Azure policies can be used to enforce compliance, they are not the construct that enables organizations to manage compliance across multiple subscriptions.

Option D, "Azure App Service plans," is incorrect because App Service plans are a construct used to manage the hosting environment for web apps, mobile app back ends, and RESTful APIs. They are not related to managing compliance of Azure resources across multiple subscriptions.