Microsoft Azure Administrator Associate AZ-104 Practice Question

Implementing a policy that denies the creation of virtual machines in specified regions is the most effective method. Azure Policy allows you to define and enforce rules that govern resource properties during deployment and for already existing resources. This ensures compliance by automatically preventing non-compliant resources from being created. Removing user permissions may not be practical or efficient, as it requires managing permissions for each user. Setting up resource locks does not prevent deployment but rather protects resources from accidental deletion or modification. Relying on users to comply without enforcement does not guarantee adherence to compliance requirements.