Azure Policies

Question 1

What are Azure Policies?

Answer 1

Azure Policy helps to enforce organizational standards and to assess compliance at-scale

Question 2

What are some common uses with Azure Policies?

Answer 2

Implementing governance for:
Resource consistency
Regulatory compliance
Security
Cost
Management

Question 3

Are Azure Policy Data and Objects encrypted at rest by default, or must be manually enabled?

Answer 3

They are encrypted by default

Question 4

What are Azure Policy Definitions?

Answer 4

Azure Policy evaluates resources in Azure by comparing the properties of those resources to business rules. These business rules, described in JSON format, are known as Policy Definitions

Question 5

What are Policy Initiatives?

Answer 5

It’s a collection of policy definitions that are tailored toward achieving a singular overarching goal. Initiative definitions simplify managing and assigning policy definitions. (sometimes called a policySet)

Question 6

Once your business rules have been formed, the policy definition or initiative is assigned to any scope of resources that Azure supports, such as WHAT?

Answer 6

Management groups
Subscriptions
Resource groups
Individual resources

Question 7

Azure Policy uses WHAT format to form the logic the evaluation uses to determine whether a resource is compliant or not?

Answer 7

JSON Format

Question 8

Resources are evaluated at specific times during the resource lifecycle, the policy assignment lifecycle, and for regular ongoing compliance evaluation. What are the times or events that cause a resource to be evaluated?

Answer 8

A resource is created, updated, or deleted in a scope with a policy assignment.

A policy or initiative is newly assigned to a scope or an existing one updated.

During the standard compliance evaluation cycle, which occurs once every 24 hours.

Question 9

Business rules for handling non-compliant resources vary widely between organizations. Examples of how an organization wants the platform to respond to a non-compliant resource include:

Answer 9

Deny the resource change
Log the change to the resource
Alter the resource before the change
Alter the resource after the change
Deploy related compliant resources

Question 10

What are some key PowerShell Azure Policy Commands?

Answer 10

Get-AZResourceGroup -Name ‘’

New-AZPolicyAssignment -Name ‘’ -DisplayName ‘’ -Scope ‘’

Get-AZResourceDefinition