Your company has an Azure subscription that contains resources in several regions.
You need to ensure that administrators can only create resources in those regions.
What should you use?
A. a read-only lock
B. an Azure policy
C. a management group
D. a reservation
Top comment
Community votes:B · 8 (100%)
Tecatero2001▲ 25Highly votedMay 16, 2022 11:37 pm
Correct!!!
2 more highly voted comments
RaviBanavath▲ 15Highly votedMarch 06, 2024 09:36 am
To ensure that administrators can only create resources in specific regions, you should use Azure Policy. Azure Policy is a service in Azure that you use to create, assign, and manage policies. These policies enforce different rules and effects over your resources, so those resources stay compliant with your corporate standards and service level agreements. You can use Azure Policy to enforce policies that limit the regions available for resource creation.
Read-only locks are used to prevent users from deleting or modifying a resource. They do not restrict the creation of new resources.
Management groups are used to organize subscriptions and apply governance conditions to them. They do not restrict the creation of new resources.
Reservations are used to prepay for specific services for a defined period of time. They do not restrict the creation of new resources.