Identify Non-compliant Azure Resources with Policy Definitions
Question
You have an Azure resource group that contains 100 virtual machines.
You have an initiative named Initiative1 that contains multiple policy definitions. Initiative1 is assigned to the resource group.
You need to identify which resources do NOT match the policy definitions.
What should you do?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.B
https://docs.microsoft.com/en-us/azure/governance/policy/how-to/get-compliance-data#portalThe correct answer is D. From the Policy blade of the Azure Active Directory admin center, select Assignments.
Explanation:
Initiative is a set of policies that you can group together as a single unit. You can assign an initiative to a scope, such as a management group, subscription, or resource group. When an initiative is assigned to a scope, all the policies included in the initiative are enforced on the resources within that scope.
To identify which resources do NOT match the policy definitions, you can use the Policy blade in the Azure Active Directory admin center. The Assignments tab in the Policy blade displays all the resources that are assigned to a policy and their compliance status.
To identify non-compliant resources for Initiative1, follow these steps:
Sign in to the Azure portal.
In the left-hand menu, click on Azure Active Directory.
In the Azure Active Directory blade, click on the Policies blade.
In the Policies blade, click on the Assignments tab.
In the Assignments tab, select Initiative1 from the list of initiatives.
The list of resources assigned to the initiative is displayed. The compliance status for each resource is indicated by a color-coded icon. Non-compliant resources are indicated by a red icon.
By reviewing the list of resources and their compliance status, you can identify which resources do not match the policy definitions.
Option A is incorrect because the Regulatory compliance assessment only shows the compliance status of resources against specific regulatory standards.
Option B is incorrect because the Compliance tab in the Policy blade of the Azure Active Directory admin center only shows the compliance status of policies that are related to Azure AD.
Option C is incorrect because the Secure Score in Azure Security Center only shows the overall security posture of your environment and does not provide information about individual policy compliance.
