AZ-104 Question 53
Single answerYou are an Azure Administrator for a company that has multiple Azure subscriptions. The company wants to ensure that a new tagging policy is enforced across all subscriptions with minimal administrative overhead. You decide to centralize policy management using Azure Management Groups. What is the most efficient way to implement this configuration?
- A
Create the tagging policy in every Azure subscription separately
- B
Assign the tagging policy at the root management group scope
- C
Place all subscriptions in a single resource group and set policies at that resource group level
- D
Create a tagging policy in Azure Policy and manually replicate it across each resource group
Show answer and explanation
Correct answer: B
Explanation
By assigning the tagging policy at the root management group level, you ensure that all child subscriptions automatically inherit the policy. This approach is both efficient and consistent, providing a centralized point of governance.
- A. Incorrect.
Defining the policy in each subscription would be time-consuming and prone to inconsistencies. This is not the most efficient method.
- B. Correct.
Assigning the policy at the root management group scope automatically applies and inherits the policy across all child management groups and subscriptions, reducing duplication.
- C. Incorrect.
Policies applied at the resource group level do not scale well across multiple subscriptions, and resource groups are not designed to manage enterprise-wide compliance in this way.
- D. Incorrect.
While Azure Policy can enforce tagging, manually replicating the policy across each resource group still results in redundant work and a higher chance of configuration drift.