🔥 40% Off Crucial Exams Memberships — This Week Only

6 hours, 6 minutes remaining!
Crucial Exams

Microsoft Azure Security Engineer Associate AZ-500 Practice Question

Your team assigns the built-in policy "Deploy Diagnostic Settings for Storage Accounts to Log Analytics workspace," which uses the DeployIfNotExists effect. After 24 hours the assignment lists 80 storage accounts as non-compliant, and every remediation task created from the assignment fails with the status Unauthorized. What is the most likely reason the remediation tasks cannot complete?

  • The policy assignment was created without a managed identity that has sufficient write permissions on the targeted storage accounts.

  • The policy assignment scope needs to be a management group rather than a subscription for remediation to succeed.

  • The policy definition must be changed to use the Modify effect instead of DeployIfNotExists.

  • Remediation tasks cannot run until the policy's overall compliance reaches 100 percent.

Microsoft Azure Security Engineer Associate AZ-500
Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot