Question 770 A data analyst finds an inconsistent glossary definition for net revenue. What action supports trustworthy governance? Turn off source audit logs while revising metadata Update only a catalog glossary term and assume source database values change automatically Review the definition with business owners and align it with actual source logic Change the glossary text without consulting dataset owners Explanation Correct Answer C:A glossary term needs stewardship and implementation traceability. Incorrect Answers A:Losing evidence doesn't validate calculations. B:A business glossary describes terms; it does not modify the underlying production data on its own. D:Unreviewed definitions can stay misleading.
Question 771 An organization buys Purview and assumes Microsoft will decide every department's data retention and access rules. What remains with the organization? The data owner becomes the Azure datacenter operator Purview replaces account authentication on every application Define its own policies, classifications, owners and appropriate enforcement All data becomes unregulated once cataloged Explanation Correct Answer C:A governance platform supplies tools but cannot infer all legal and business decisions. Incorrect Answers A:Using Purview doesn't transfer facility management. B:Identity controls remain necessary. D:Cataloging doesn't remove legal requirements.
Question 772 A platform team wants Azure deployments to follow organization-wide configuration requirements automatically. Which service is designed for that? Azure Virtual Desktop Use Azure Advisor recommendations as mandatory deployment-deny rules Azure Policy Azure Data Box Explanation Correct Answer C:Policy assesses and can enforce compliance rules over supported Azure resources. Incorrect Answers A:Desktop access isn't a resource compliance service. B:Advisor provides advice; Azure Policy evaluates and can enforce specified Azure resource constraints. D:Offline migration doesn't govern future resource configurations.
Question 773 An organization permits new resources only in approved Azure regions. Which Azure governance tool supports that? A VM availability set Azure Policy with an appropriate allowed-locations rule Azure Service Health A resource tag named Europe Explanation Correct Answer B:Policy can prevent noncompliant resource locations at deployment. Incorrect Answers A:Fault-domain placement isn't an organization-wide location policy. C:Incident notifications don't enforce deployment geography. D:Metadata labels alone don't deny unsupported regions.
Question 774 A financial control requires only approved VM sizes across one subscription. Which policy rule is relevant? An allowed-VM-SKU Azure Policy assignment An Entra SSO session Use a cost budget alert to block an unsupported new VM SKU Only a cost analysis chart Explanation Correct Answer A:A deny policy can block disallowed VM size selections. Incorrect Answers B:Authentication doesn't determine approved VM families. C:A budget warns about spend; it is not a resource-creation policy that restricts allowed SKUs. D:Reports do not enforce the chosen SKU list.
Question 775 A company wants every supported resource to carry a Department tag. What governance mechanism can check or apply this? Azure Price Calculator An Azure VPN Gateway route An Azure Policy definition with an appropriate tag effect A VM scale-set image label alone Explanation Correct Answer C:Policy effects can audit, deny or modify supported resource metadata. Incorrect Answers A:A quote doesn't enforce metadata on deployments. B:A private network path doesn't enforce ARM tags. D:Image metadata isn't a general resource-tag rule.
Question 776 An IT department wants to report VMs that violate a configuration requirement without blocking deployments initially. Which Azure Policy effect fits? Audit or auditIfNotExists, depending on the rule Resource lock CanNotDelete Deny for every request Assign subscription Owner to all users Explanation Correct Answer A:Audit-oriented effects flag noncompliant resources for review without the same deny behavior. Incorrect Answers B:A lock doesn't assess policy compliance against VM configuration. C:Deny would block targeted noncompliant actions rather than only report them. D:Broad access isn't a compliance report.
Question 777 A cloud governance group must block deployments that violate an approved region list. Which Azure Policy effect most directly does that? Append unrelated metadata only Audit Disabled Deny Explanation Correct Answer D:A deny effect rejects matching noncompliant ARM requests. Incorrect Answers A:Appending tags doesn't necessarily prevent deployment to an excluded region. B:Audit identifies noncompliance but doesn't ordinarily block. C:A disabled effect doesn't enforce the rule.
Question 778 Existing supported resources are missing a standard ownership tag. Which policy effect type might be used with proper identity and remediation setup? Deny on all read requests Resource lock ReadOnly Audit alone with no remediation Modify, where supported Explanation Correct Answer D:Modify can update eligible resource properties with configured permissions and operations. Incorrect Answers A:Blocking reads doesn't repair metadata. B:A lock restricts modifications rather than filling tag values. C:Audit reports findings but doesn't add the tag.
Question 779 A compliance requirement says supported resources should have a required companion configuration deployed if missing. Which Azure Policy effect family is relevant? Deny as a substitute for deploying configuration A resource tag by itself DeployIfNotExists with required assignment identity and deployment details Audit alone as a deployment action Explanation Correct Answer C:The effect can create associated resources after conditions are evaluated. Incorrect Answers A:Deny blocks requests but doesn't create a companion resource. B:Metadata doesn't provision infrastructure. D:Audit reports missing state.
Question 780 An enterprise wants to assign several related security policy definitions as one compliance package. Which Azure Policy construct supports this? A VM availability set Create independent role assignments and assume they form a Policy initiative A policy initiative (policy set definition) A Blob container Explanation Correct Answer C:An initiative groups related definitions under a common assignment. Incorrect Answers A:Compute placement doesn't group policy definitions. B:RBAC grants access, whereas an initiative groups related policy definitions for coordinated evaluation. D:Object storage isn't the policy set type.
