Exam SC-100 topic 2 question 36 discussion

Specifically, some useful governance actions you can enforce with Azure Policy include: Ensuring your team deploys Azure resources only to allowed regions, Enforcing the consistent application of taxonomic tags, and Requiring resources to send diagnostic logs to a Log Analytics workspace

Key word here is "enforce". Azure Policy has the capabilities to enforce specific policies/rules in your Azure subscription. Answer is C.

To enforce the governance requirement that resources must be created only in specific Azure regions (West Europe or North Europe), you should recommend using Azure Policy assignments. Azure Policy enables you to create, assign, and manage policies that enforce different rules and effects over your resources. In this case, you can define a policy that restricts the creation of resources to the specified regions, and then assign that policy to the appropriate scope (subscription, resource group, etc.). Therefore, the correct option is: C. Azure Policy assignments.

C is the answer. https://learn.microsoft.com/en-us/azure/governance/policy/overview Azure Policy helps to enforce organizational standards and to assess compliance at-scale. Through its compliance dashboard, it provides an aggregated view to evaluate the overall state of the environment, with the ability to drill down to the per-resource, per-policy granularity. It also helps to bring your resources to compliance through bulk remediation for existing resources and automatic remediation for new resources.

Why not D