Microsoft Azure Security Engineer Associate AZ-500 Practice Question

The Modify effect is designed to alter the properties of an existing resource so that it becomes compliant with the policy rule. When the policy evaluates a storage account that allows HTTP traffic, the Modify effect can update the corresponding setting to require HTTPS, achieving remediation without deploying a new resource. DeployIfNotExists remediates by creating or deploying a separate resource, which is unnecessary and unsuitable for changing an existing property. Audit only flags the non-compliant resources and does not remediate them, and Deny blocks the creation or update but does not correct already-existing resources.