Deploy Azure Security Center Policy Definitions: Group Deployment for Multiple Subscriptions

Deploy Azure Security Center Policy Definitions: Group Deployment for Multiple Subscriptions

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You use Azure Security Center for the centralized policy management of three Azure subscriptions.

You use several policy definitions to manage the security of the subscriptions.

You need to deploy the policy definitions as a group to all three subscriptions.

Solution: You create an initiative and an assignment that is scoped to the Tenant Root Group management group.

Does this meet the goal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B.

A

https://docs.microsoft.com/en-us/azure/governance/policy/overview https://4sysops.com/archives/apply-governance-policy-to-multiple-azure-subscriptions-with-management-groups/

Yes, the solution of creating an initiative and an assignment scoped to the Tenant Root Group management group meets the goal of deploying policy definitions as a group to all three Azure subscriptions.

An initiative is a set of policy definitions that are grouped together as a single unit for ease of management and assignment. An assignment is a policy setting that is applied to a specific scope, such as a subscription, resource group, or management group. By creating an initiative and an assignment scoped to the Tenant Root Group management group, the policy definitions within the initiative will be deployed to all subscriptions within the Tenant Root Group, which includes the three subscriptions that need to be managed.

Furthermore, using Azure Security Center for centralized policy management provides a single pane of glass for monitoring and managing the security posture of your Azure environment, which can help to ensure that your environment remains secure and compliant with your organizational policies.

Therefore, the solution of creating an initiative and an assignment scoped to the Tenant Root Group management group meets the goal of deploying policy definitions as a group to all three subscriptions.