Microsoft Azure Architect Design (AZ-304) Practice Test

When new Azure subscriptions are added to a Microsoft Enterprise Agreement, which solution ensures compliance alerts are applied automatically?

1. Azure Monitor action groups

2. Azure Policy

3. Azure Automation runbooks

4. Azure Resource Manager templates

The correct answer is: Azure Policy

The correct answer, Azure Policy, plays a critical role in ensuring compliance within Azure environments, particularly when new subscriptions are added under a Microsoft Enterprise Agreement. Azure Policy enables the creation, assignment, and management of policies that enforce specific rules and effects over your resources. This means that when a new subscription is added, the policies defined at the management group or subscription level can automatically evaluate and enforce compliance rules on resources within that subscription. By utilizing Azure Policy, you can ensure that resources adhere to specific compliance standards and regulatory requirements, often without manual intervention. For example, if a policy is set to restrict the types of virtual machines that can be deployed or to enforce tagging standards, these rules will automatically be applied to any new resources created in newly added subscriptions, thus providing a consistent compliance framework across the organization. Other options offered do not provide the same level of automation or governance specifically for compliance management of new subscriptions. Azure Monitor action groups are primarily focused on alerting and notifications rather than compliance enforcement. Azure Automation runbooks can automate tasks but do not inherently manage compliance. Azure Resource Manager templates are used for infrastructure deployment and configuration but do not enforce compliance rules. In summary, Azure Policy is specifically designed for automatically applying compliance alerts and enforcing governance across new and existing