Deploying Policy Definitions to Multiple Azure Subscriptions
Question
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You use Azure Security Center for the centralized policy management of three Azure subscriptions.
You use several policy definitions to manage the security of the subscriptions.
You need to deploy the policy definitions as a group to all three subscriptions.
Solution: You create an initiative and an assignment that is scoped to a management group.
Does this meet the goal?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B.A
https://docs.microsoft.com/en-us/azure/governance/policy/overviewYes, the solution meets the goal.
Azure Security Center allows you to create policies that you can assign to your resources in Azure. These policies can be used to enforce compliance with regulatory standards or to implement security best practices. Policy definitions are the building blocks of policies in Azure Security Center.
Initiatives in Azure Security Center are a set of policy definitions that are grouped together for ease of management. By using an initiative, you can deploy a set of policy definitions as a group to multiple subscriptions or resource groups.
An assignment is a way to apply a policy to a specific scope, such as a subscription, resource group, or management group. Assignments can be used to ensure that all resources within the scope are compliant with the policy.
In this scenario, the requirement is to deploy policy definitions as a group to all three subscriptions. To achieve this, you can create an initiative that includes all the required policy definitions and then create an assignment that is scoped to a management group. When you assign the initiative to the management group, the policy definitions included in the initiative will be deployed to all the subscriptions within that management group.
Therefore, the solution of creating an initiative and an assignment that is scoped to a management group meets the goal of deploying the policy definitions as a group to all three subscriptions. Answer (A) is correct.
