AZ-104 Question 46
Single answerYour organization has consolidated multiple Azure subscriptions for different departments. You want to ensure that all subscriptions follow the same security and governance rules while still allowing each department to manage its own resources. Which approach provides a central way to enforce policies across all subscriptions?
- A
Create one top-level Management Group, place all subscriptions under it, and assign the required policies at the Management Group level
- B
Individually assign the same set of policies directly to each subscription
- C
Delegate policy assignment to each department and rely on them to replicate your policies
- D
Set policies at each resource group's level within every subscription
Show answer and explanation
Correct answer: A
Explanation
By placing all subscriptions under a centrally managed Management Group, you can apply policies once at the Management Group level. This approach ensures the same governance and security rules are enforced across all subscriptions while allowing each department to manage its own resources within those inherited policy constraints.
- A. Correct.
Assigning policies at the Management Group level ensures they are automatically inherited by all subscriptions under that group, maintaining consistency and reducing administrative overhead
- B. Incorrect.
Applying policies individually at every subscription is time-consuming and prone to errors if you need to maintain uniform standards
- C. Incorrect.
Relying on departments to duplicate policies increases the chance of inconsistent implementation and misconfigurations
- D. Incorrect.
Setting policies only at the resource group level gives granularity but does not guarantee organization-wide or cross-subscription consistency