Describe Features and Tools in Azure for Governance and Compliance AZ-900 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   Your team manages a production database that must never be deleted or modified. You need to protect this resource from accidental deletion while still allowing authorized administrators to change its configuration. What should you implement?

   • AAssign an Azure Policy that denies deletion of the database.
   • BApply a CanNotDelete resource lock to the database.
   • CMove the database to a separate resource group and apply a ReadOnly lock.
   • DApply a ReadOnly resource lock to the database.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which Azure resource can have a resource lock applied to it?

   • AA resource group
   • BAn Azure Active Directory tenant
   • CA virtual network's DNS settings
   • DA management group
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   Your organization has data stored in Azure SQL Database, Azure Blob Storage, and on-premises SQL Server. You need to create a unified data catalog that shows data classification and lineage across all these sources. However, your organization also has strict network security requirements that prevent direct internet access from Azure to on-premises. What should you do?

   • AUse Azure Policy to enforce data classification.
   • BUse Azure Monitor to collect data from on-premises.
   • CUse Microsoft Purview with a self-hosted integration runtime to scan on-premises data.
   • DUse Azure Data Factory to copy on-premises data to Azure and then scan with Purview.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   You have assigned an Azure Policy to your subscription that requires all managed disks to use premium storage. You need to see a list of all non-compliant disks. Where should you look?

   • AThe 'Activity log' of the subscription.
   • BThe 'Compliance' blade of the Azure Policy assignment.
   • CThe 'Locks' blade of the managed disks.
   • DThe 'Diagnostic settings' of the managed disks.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   Your organization has assigned an Azure Policy that requires all managed disks to use SSD Premium. You notice that some existing disks are marked as non-compliant. You need to identify which disks are non-compliant and understand why. What should you do?

   • AUse Microsoft Purview to scan the disks and report their compliance status.
   • BUse the Azure Policy compliance dashboard to view the list of non-compliant resources and select a disk to see the reason for non-compliance.
   • CUse Azure Resource Graph to query all disks and manually compare their SKU to the policy requirement.
   • DReassign the policy to the resource group that contains the disks and check the compliance state.
   Reveal Solution Discussion Select an answer first