Correct Answer: Azure Policy that denys 'Allow Blob public access' property on Storage Accounts
Azure Policy is the most effective way to prevent non-compliant public exposure across the entire organization....
Correct Answer
Azure Policy that denys 'Allow Blob public access' property on Storage Accounts
Why This Answer Is Correct
Azure Policy is the most effective way to prevent non-compliant public exposure across the entire organization.
This question evaluates your knowledge of Scenario Based — a core concept tested in Microsoft Certified: Azure Solutions Architect Expert (AZ-305). Understanding Scenario Based is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
An enterprise wants to implement a centralized governance strategy for their 50+ Azure subscriptions. They want to ensure that every resource group is automatically tagged with a 'Department' name and that no one can create a G-series VM instance due to cost. Which Azure service should they use to enforce these rules?
Scenario: To reduce the cost of an idle development environment, you want to automatically shut down all virtual machines at 6 PM and restart them at 8 AM. Which native Azure feature handles this?
Your application requires a globally distributed database that supports multiple data models (Document, Key-Value, Graph) and provides 'Single-digit millisecond' latency for both reads and writes. Which service fits?
Scenario: To minimize the risk of a single engineer making a catastrophic change, you want to ensure that any change to the production environment's 'Lock' settings requires an approval from a second administrator. Solution ?
An organization wants to run their massive Big Data analytics workload using a managed Apache Spark and Hadoop service. They want a solution that integrates natively with Azure Data Lake Storage Gen2. Which service should they choose?