Microsoft Azure Architect Design (AZ-304) Practice Test

Which Azure resource allows for the enforcement of compliance rules across subscriptions and resource groups?

1. Azure Policy

2. Azure Role-Based Access Control (RBAC)

3. Azure Monitor

4. Azure Resource Manager

The correct answer is: Azure Policy

Azure Policy is the resource that enables the enforcement of compliance rules across subscriptions and resource groups within Azure. It allows organizations to define specific policies that govern the properties of Azure resources, ensuring they adhere to organizational standards and compliance regulations. By utilizing Azure Policy, administrators can create policies that evaluate existing resources and prevent non-compliant resources from being created or updated. This capacity is vital for maintaining governance at scale across multiple subscriptions and resource groups. With Azure Policy, you can monitor resources for compliance in real time and apply policies automatically, making it a key tool for compliance management in cloud environments. The other options serve different purposes: Role-Based Access Control (RBAC) focuses on managing who can access Azure resources and what actions they can perform, but does not enforce compliance rules. Azure Monitor is geared toward collecting and analyzing telemetry data from your resources to gain insights into their performance and health. Azure Resource Manager is a management layer that enables the deployment, management, and organization of Azure resources but does not inherently enforce compliance rules.