AZ-305 Question 43
Select 3Your organization has multiple Azure subscriptions, each owned by different development teams. You need to enforce a consistent resource naming standard, ensure mandatory tags are applied to track costs, and restrict the creation of certain resource SKUs in production. Which of the following Azure services or features should you include to meet these governance requirements?
- A
Azure Policy
- B
Azure Management Groups
- C
Azure Resource Graph
- D
Azure Blueprints
- E
Azure Monitor
Show answer and explanation
Correct answers: A, B, D
Explanation
To implement effective governance in Azure, you should use Azure Management Groups to organize subscriptions, Azure Policy to define and enforce naming and SKU restrictions, and Azure Blueprints to package and deploy these governance items consistently. Each of these services plays a role in maintaining consistent standards, ensuring compliance, and reducing the risk of unintended resource configurations. For more details, refer to Azure governance best practices at https://learn.microsoft.com/azure/governance.
- A. Correct.
Azure Policy is correct. It allows you to define and enforce rules, such as required tags, permissible SKUs, and naming conventions. This enforces compliance across resources in different scopes (subscriptions, resource groups, or management groups).
- B. Correct.
Azure Management Groups is correct. By grouping and organizing subscriptions, you can apply Azure Policy (and other governance configurations) to all subscriptions in a management group, ensuring consistent enforcement at scale.
- C. Incorrect.
Azure Resource Graph is incorrect in this context. It is primarily used to query and explore Azure resources across subscriptions. It does not provide enforcement capabilities but is useful for inventory and reporting.
- D. Correct.
Azure Blueprints is correct. It helps automate the deployment of governance artifacts (including Azure Policy definitions and role assignments) across multiple subscriptions. This helps standardize configuration and ensure compliance from the outset.
- E. Incorrect.
Azure Monitor is incorrect here because it focuses on monitoring metrics, diagnostics, and alerts. While it assists in tracking performance and usage, it does not enforce resource configurations or naming standards.