AZ-104 Question 32
Select 2Your organization has multiple Azure subscriptions, including one used for production. You need to enforce the usage of standardized tags for cost auditing across all subscriptions. Additionally, you want to prevent accidental creation of new resources in the production subscription. Which two actions should you take?
- A
Use Azure Policy to require and automatically append the standard tags to resources.
- B
Enable Azure Monitor alerts for automatic tagging when new resources are created.
- C
Apply a read-only resource lock at the subscription level in the production environment.
- D
Create a budget alert on the production subscription to block resource creation when spending exceeds a threshold.
Show answer and explanation
Correct answers: A, C
Explanation
Azure Policy is the correct choice for enforcing and appending standard tags to resources for cost auditing. To prevent accidental resource creation in the production subscription, a read-only lock at the subscription level stops any new or modified resource deployments. Budget alerts and Monitor alerts can send notifications, but they do not directly enforce governance requirements.
- A. Correct.
Azure Policy can be configured to enforce tags and automatically append missing ones to new or existing resources.
- B. Incorrect.
Azure Monitor alerts can provide notifications, but they cannot enforce resource tags or block resource creation on their own.
- C. Correct.
A read-only resource lock at the subscription level prevents the creation or modification of resources, effectively stopping accidental changes in the production subscription.
- D. Incorrect.
Budget alerts only provide notifications about spending and do not block resource creation or enforce tagging.