Design Governance AZ-305 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which Azure feature can use resource tags to generate cost reports by department?

   • AAzure Cost Management
   • BAzure Policy
   • CAzure Active Directory
   • DAzure Monitor
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which statement best describes the purpose of an Azure resource group?

   • AIt is a network boundary that defines the IP address range for resources.
   • BIt is a security boundary that isolates resources from other subscriptions.
   • CIt is a billing boundary that separates costs by department.
   • DIt is a logical container for grouping related Azure resources that share a common lifecycle.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A multinational company uses Azure AD (now Microsoft Entra ID) and needs to ensure that access to sensitive applications is reviewed quarterly by the respective business application owners. The company also wants to automatically remove access for users who do not respond to review requests. You need to implement an identity governance solution. What should you do?

   • AConfigure Azure AD access reviews for the sensitive applications, assign business application owners as reviewers, and set the auto-apply results to remove access for non-responding users.
   • BUse Azure AD Privileged Identity Management (PIM) to require quarterly re-activation of access for all users of the sensitive applications.
   • CCreate an Azure Automation runbook that runs quarterly to list all users with access to the applications and sends an email to the application owners asking them to manually remove access.
   • DConfigure conditional access policies to require multi-factor authentication for the sensitive applications and set a session timeout of 90 days.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the primary purpose of applying tags to Azure resources?

   • ATo organize resources for cost tracking and management
   • BTo enforce security policies on resources
   • CTo create a network isolation boundary between resources
   • DTo define the geographic region where a resource is deployed
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A healthcare company must comply with HIPAA and needs to continuously monitor its Azure environment for compliance with regulatory standards. The compliance team wants a centralized dashboard that shows compliance status across all subscriptions, and they want to be alerted when resources fall out of compliance. You need to recommend a solution. What should you recommend?

   • AUse Azure Blueprints to assign policies and RBAC, and rely on manual compliance reviews.
   • BUse Azure Service Health to monitor service incidents and assume compliance is maintained if services are healthy.
   • CUse Azure Policy to audit resources and Azure Security Center (now Microsoft Defender for Cloud) to provide compliance assessments and alerts.
   • DUse Azure Monitor to collect activity logs and set up alerts for any resource creation.
   Reveal Solution Discussion Select an answer first