Exam AZ-104 topic 5 question 63 discussion

Correct Answer: A - Yes You need to use a custom policy definition, because there is not a built-in policy. Resource policy definition used by Azure Policy enables you to establish conventions for resources in your organization by describing when the policy is enforced and what effect to take. By defining conventions, you can control costs and more easily manage your resources. Reference: https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition https://docs.microsoft.com/en-us/azure/governance/policy/samples/built-in-policies

given answer is correct

Here's why: Azure Policy Capabilities: While a custom policy can be created to enforce specific conventions and compliance within your Azure environment, it doesn't automatically create or modify network security groups (NSGs) to block TCP port 8080 or any other specific traffic rules between virtual networks. Custom policies can enforce compliance but do not directly manipulate resources like NSGs. Effect of Policies: Policies can audit or deny the creation of resources that do not comply with defined rules. However, for the specific requirement of automatically blocking traffic (like TCP port 8080) between virtual networks, you would still need to implement the NSG rules manually or automate the deployment of NSGs with predefined rules. In summary, a custom policy can help ensure that resources conform to certain standards, but it doesn't automatically configure NSGs to block specific traffic upon their creation. Therefore, the original answer remains unchanged: B. No.

A is correct

A is correct

Today in exam , answer: A -YES

There are several versions of this question. The following are the correct and incorrect answers that can be presented. Correct Answer: Meets the goal. -Solution: You configure a custom policy definition, and then you assign the policy to the subscription. Incorrect Answers: Does not meet the goal. -Solution: You create a resource lock, and then you assign the lock to the subscription. -Solution: From the Resource providers blade, you unregister the Microsoft.ClassicNetwork provider -Solution: You assign a built-in policy definition to the subscription.

Today in exam , is A

Yes custom policy not built

Correct Answer: A You need to use a custom policy definition, because there is not a built-in policy

this question was there on 16/03/2022 with same question and passed with 900 percent

A is the correct answer

I sure won't forget this one, ha!

A is correct!

Answer A. is correct. Custom policy is the key

Correct

Answer is correct