New AZ 104 Final Exam Questions and Answers

New AZ 104 Final Exam Questions and Answers What is Azure Policy? Azure Policy is an Azure service you use to create, assign and, manage policies. These policies enforce different rules and effects over your resources so that those resources stay compliant with your corporate standards and service level agreements Can Azure Policy be used with Azure DevOps? You can even integrate Azure Policy with Azure DevOps, by applying any continuous integration and delivery pipeline policies that affect the pre-deployment and post-deployment of your applications. What's the difference between Azure Policy and RBAC? RBAC focuses on user actions at different scopes. You might be added to the contributor role for a resource group, allowing you to make changes to anything in that resource group. Azure Policy focuses on resource properties during deployment and for already-existing resources. Azure Policy controls properties such as the types or locations of resources. Unlike RBAC, Azure Policy is a default-allow-and-explicit-deny system. What steps are required to create an Azure Policy? 1. Create a policy definition 2. Assign a definition to a scope of resources 3. View policy evaluation results What is a policy definition? A policy definition expresses what to evaluate and what action to take. For example, you could ensure all public websites are secured with HTTPS, prevent a particular storage type from being created, or force a specific version of SQL Server to be used. Powershell command to apply an Azure policy? # Get a reference to the resource group that will be the scope of the assignment $rg = Get-AzResourceGroup -Name 'resourceGroupName' # Get a reference to the built-in policy definition that will be assigned $definition = Get-AzPolicyDefinition | Where-Object { $_.Properties.DisplayName -eq 'Audit VMs that do not use managed disks' } # Create the policy assignment with the built-in definition against your resource group New-AzPolicyAssignment -Name 'audit-vm-manageddisks' -DisplayName 'Audit VMs without managed disks Assignment' -Scope $rg.ResourceId -PolicyDefinition $definition How can policy be assigned and are they inherited?