Free Microsoft Azure Fundamentals AZ-900 Practice Question
A company wants to ensure that all its Azure resources are compliant with their internal security standards, which require that only certain types of virtual machines can be deployed. How can they automate compliance enforcement and create a scalable process for auditing their Azure environment?
They must utilize Azure Advisor to receive recommendations on which types of virtual machines are allowed under the company's security standards.
They should implement Azure Policy, which allows the creation and assignment of policies that dictate what resources can be provisioned.
They need to configure Role-Based Access Control (RBAC) to specify which users can create virtual machines, limiting this to administrators only.
They should use Azure Service Health to ensure the virtual machines comply with the internal security standards.
