Exam AZ-500 topic 4 question 82 discussion

It is hard to tell because 1 would oversimplify and reduce flexibility for future scales but it is true that 1 could be the option as well! I hope they can be more precise in the exam

The question is ok. You can apply policies at the upper levels, like the sub or MG. In this case, we need 2 policies at the sub level

A resource can only exist in a single Resource Group which means a single Virtual Network cannot be added to multiple Resource Groups but it does not need to be.

https://learn.microsoft.com/en-us/azure/governance/policy/overview#overview Azure Policy evaluates resources and actions in Azure by comparing the properties of those resources to business rules. These business rules, described in JSON format, are known as policy definitions. To simplify management, several business rules can be grouped together to form a policy initiative (sometimes called a policySet). Once your business rules have been formed, the policy definition or initiative is assigned to any scope of resources that Azure supports, such as management groups, subscriptions, resource groups, or individual resources.

haha.......weird

https://learn.microsoft.com/en-us/azure/defender-for-cloud/tutorial-security-policy You can edit Azure security policies through Defender for Cloud, Azure Policy, via REST API or using PowerShell.