Correct Answer: Azure Policy with a 'Deny' effect on storage account creation with the publicAccess property enabled
Azure Policy is the most effective way to prevent non-compliant resources from being created in the first place....
Correct Answer
Azure Policy with a 'Deny' effect on storage account creation with the publicAccess property enabled
Why This Answer Is Correct
Azure Policy is the most effective way to prevent non-compliant resources from being created in the first place.
This question evaluates your knowledge of Scenario Based — a core concept tested in Microsoft Certified: Azure Solutions Architect Expert (AZ-305). Understanding Scenario Based is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
An enterprise wants to implement a centralized governance strategy for their 50+ Azure subscriptions. They want to ensure that every resource group is automatically tagged with a 'Department' name and that no one can create a G-series VM instance due to cost. Which Azure service should they use to enforce these rules?
Scenario: To reduce the cost of an idle development environment, you want to automatically shut down all virtual machines at 6 PM and restart them at 8 AM. Which native Azure feature handles this?
Your application requires a globally distributed database that supports multiple data models (Document, Key-Value, Graph) and provides 'Single-digit millisecond' latency for both reads and writes. Which service fits?
Scenario: To minimize the risk of a single engineer making a catastrophic change, you want to ensure that any change to the production environment's 'Lock' settings requires an approval from a second administrator. Solution ?
An organization wants to run their massive Big Data analytics workload using a managed Apache Spark and Hadoop service. They want a solution that integrates natively with Azure Data Lake Storage Gen2. Which service should they choose?