Question
You are designing a large Azure environment that will contain many subscriptions.
You plan to use Azure Policy as part of a governance solution.
To which three scopes can you assign Azure Policy definitions? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Azure Active Directory (Azure AD) administrative units
- B. Azure Active Directory (Azure AD) tenants
- C. subscriptions Correct
- D. compute resources
- E. resource groups Correct
- F. management groups Correct
Explanation
Azure Policy can be assigned at the scope levels of subscriptions (C), resource groups (E), and management groups (F). These scopes allow for varying degrees of control over resources within your Azure environment, from individual resource groups up to multiple subscriptions managed under a single group.
