Noos
PT EN
RAN-AZ900-00234
Ranvier · AZ900

Exam AZ900 Topics: management Difficulty: medium

The security team at a manufacturing company must guarantee that no new virtual machine can be created outside the company's approved Azure regions — an attempt to create a VM in another region has to fail. Which effect should the team's policy assignment use?

Options (Reading Mode) Click to filter discussion →
  1. A. Audit, which lets the VM be created and then flags it as noncompliant
  2. B. Deny, which blocks the creation request so the noncompliant VM is never created
  3. C. Modify, which changes the requested region to an approved location before the VM is created
  4. D. AuditIfNotExists, which checks the VM after deployment and logs a noncompliance record
Reveal answer

Correct answer: Deny, which blocks the creation request so the noncompliant VM is never created

Reference: https://learn.microsoft.com/en-us/azure/governance/policy/overview

02 — The Myelin Layer · Canonical Discussion

Where the exam tries to trick you — and how those who passed solved it.

0 Passed

contributed to this question

Answer Distractor Matrix Click an option to filter or open its dissection.
✦ Consolidated Synthesis (Wiki) rev. #1 (baseline) · CC BY-SA 4.0
Start synthesis for this question →

No community synthesis consolidated for this question yet. Below is the verifiable official starting point — if you passed the exam, open the option dissection.

Official Answer (B): Deny, which blocks the creation request so the noncompliant VM is never created

Ranvier · AZ900

Contribute to this Question

Your contribution builds your Orbital Sheath

Peer contributions

No public contribution yet. Be the first who passed to explain why the distractors trick candidates — your contribution builds your Orbital Sheath.