Microsoft Azure Administrator Associate AZ-104 Practice Question
An organization has compliance requirements that prohibit the deployment of virtual machines in certain regions. What is the BEST method to ensure that users cannot deploy virtual machines in the prohibited regions?
Set up a resource lock to prevent deployment of virtual machines in those regions.
Remove user permissions to create virtual machines in the prohibited regions.
Implement a policy that denies the creation of virtual machines in the specified regions.
Notify users about the compliance requirements and rely on them to comply.