Topic 1 · Question 101

I cant even see the underlined text, is anyone else having issues with this. I also chose management groups for this answer

Underlined text “Resource groups”
Key is “to manage the compliance of Azure Resources”
A. “No change is needed” > Not correct because the sentence has no sense.
B. “Management groups” > Manage subscriptions. > Not correct in the context, the sentence is about manage resources.
C. “Azure policies” > CORRECT, the only one valid.
D. “Azure App Service plans” > it has no sense.
Resource group: Resources combination, logical container deployed and managed (web apps, dddbb, and storage accounts).
Management Groups: Help to manage access, policy, and compliance for multiple subscriptions.
Azure policy: Service in Azure that enables you to create, assign, and manage policies that control or audit your resources in the way to get compliance with your business rules.

Azure policies manages only at or below subscription level, not across multiple subscriptions

Azure policies manages only at or below subscription level, not across multiple subscriptions

I think that there is a lot of (justified) confusion around this. Azure Management groups are used only to group subscriptions together (kind of similar to AWS' Organizations). But you apply governance using Azure Policy (either accessing it from within the Management Group, or directly).
Azure Policy can be scoped to either a single Subscription or to a Management Group. Therefore, to manage compliance across multiple subscriptions, you have to create a Policy and then assign it to a Management Group (I've just tried on my account).
You can imagine Azure Management Group simply as a container for Subscriptions. Policies are then assigned to the container using Azure Policy

For what it's worth,, a question from Udemy test:
A company is currently planning on deploying resources to Azure. They want to have the ability to manage the compliance of resources across multiple subscriptions. Which of the following can help you achieve this requirement?

Correct answer - Management Groups
Management Groups. From the Microsoft Documentation: Azure Management Groups are containers for managing access, policies and compliance across multiple Azure subscriptions.

https://docs.microsoft.com/en-us/azure/governance/management-groups/

You're managing the compliance of Azure RESOURCES across the subscriptions, not the subscriptions themselves. So Policies is correct
Policies can be set at the Management Group level, but they are still controlling the compliance, not the Group

If you plan to apply this policy definition to multiple subscriptions, the location must be a management group that contains the subscriptions you assign the policy to. The same is true for an initiative definition.
https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage

If you plan to apply this policy definition to multiple subscriptions, the location must be a management group that contains the subscriptions you assign the policy to. The same is true for an initiative definition.
https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage

Am I the only one that has NEVER seen any UNDERLINED text in any of the questions that involve UNDERLINED text???

If you plan to apply this policy definition to multiple subscriptions, the location must be a management group that contains the subscriptions you assign the policy to. The same is true for an initiative definition.
https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage

I think the answer is correct (C) - the devil is in the details :-) Here is my thinking
If we assume the answer is 'Management groups' the whole sentence would be:
Management groups provide organizations with the ability to manage the compliance of Azure resources across multiple subscriptions.
This simply isn't true. Whereas Management groups allow managing many subscriptions at once they have nothing to do with compliance. It is Azure Policy that manages compliance. And yes, we would most likely apply Azure Policy, to many subscriptions, via a Management group

compliance = key word
Azure Policies, C = Correct

Complaince always possible with policies. Then policies can be applied to RG, used/managed in MgmtGrp etc

Took test on 29th Jan. The questions in here were very outdated. In my case roughly 50% were from these tests. Good thing I studied hard and passed the exam. I see that it has something like 20 new questions added. But it looks like to me that some of those questions are similar to previous so not a big update. Either you need to study hard or look for other page to study questions.

It's B. According to https://docs.microsoft.com/en-us/azure/governance/management-groups/overview: If your organization has many subscriptions, you may need a way to efficiently manage access, policies, and compliance for those subscriptions.