Exam SC-900 topic 1 question 108 discussion

(Y, Y, N) - Correct 1.- Azure Policy supports automatic remediation (Y) R/= When Azure Policy runs the template in the deployIfNotExists policy definition, it does so using a managed identity. Azure Policy creates a managed identity for each assignment, but must have details about what roles to grant the managed identity. If the managed identity is missing roles, an error is displayed during the assignment of the policy or an initiative. When using the portal, Azure Policy automatically grants the managed identity the listed roles once assignment starts. When using SDK, the roles must manually be granted to the managed identity. The location of the managed identity doesn't impact its operation with Azure Policy.

3. N Understand evaluation outcomes Resources are evaluated at specific times during the resource lifecycle, the policy assignment lifecycle, and for regular ongoing compliance evaluation. The following are the times or events that cause a resource to be evaluated: A resource is created, updated, or deleted in a scope with a policy assignment. A policy or initiative is newly assigned to a scope. A policy or initiative already assigned to a scope is updated. During the standard compliance evaluation cycle, which occurs once every 24 hours. For detailed information about when and how policy evaluation happens, see Evaluation triggers.

YYN is the answer. https://learn.microsoft.com/en-us/azure/governance/policy/how-to/remediate-resources?tabs=azure-portal Resources that are non-compliant to policies with deployIfNotExists or modify effects can be put into a compliant state through Remediation. Remediation is accomplished through remediation tasks that deploy the deployIfNotExists template or the modify operations of the assigned policy on your existing resources and subscriptions, whether that assignment is on a management group, subscription, resource group, or individual resource. https://learn.microsoft.com/en-us/azure/governance/policy/overview Azure Policy helps to enforce organizational standards and to assess compliance at-scale. Through its compliance dashboard, it provides an aggregated view to evaluate the overall state of the environment, with the ability to drill down to the per-resource, per-policy granularity. It also helps to bring your resources to compliance through bulk remediation for existing resources and automatic remediation for new resources.

Only > is always no

Appeared on exam 12/07/2022

I think answer is correct as per the link given as well.