Describe features and tools in Azure for Governance and Compliance

Question 1

what are azure blueprints?

Answer 1

• helps manage multiple subscriptions
• let you standardize cloud subscription or environment deployements
• can define repeatable settings and policies that are applied as new subs are created
• dev teams can rapidly build and deploy new environments

Question 2

what are artifacts?

Answer 2

• each blueprint definition is known as an artifact
• it is possible for artifacts to have no additional params
• can also contains one or more params that you can configure such as allowed locations for resource deployments

Question 3

what can artifacts include?

Answer 3

• role assignments
• policy assignments
• azure resource manager templates
• resource groups

Question 4

how do azure blueprints help monitor deployments?

Answer 4

• versionable allowing for initial config to be made and then add updates later on and assign a new version to that update
• azure creates record that associates a resource with the blueprint that defines it; helps track and audit deployments

Question 5

what is azure policy?

Answer 5

• service that enables you to create, assign and manage policies that control or audit your resources
• these policies enforce rules across resource configs so that configs stay compliant with corporate standards

Question 6

how does azure policy define policies?

Answer 6

• can define indivual and groups of related policies known as initiatives
• evaluates resources and highlights resources that arent compliant with the policies you’ve created, also prevents noncompliant resources being created
  -can set policies on each level
• policies can be inherited comes with built in policy and initiative for storage, networking, compute, security center and monitoring

Question 7

what are azure policy initiatives?

Answer 7

a way of grouping related policies together

Question 8

what are resource locks?

Answer 8

• prevents resource from being accidentally deleted or changed
• can be applied to individual resources, resource groups or even an entire sub
• inherited, so lock on group will lock all resources within it

Question 9

what are the types of resource locks?

Answer 9

• Delete; authorised users cna read and modify a resource but not delete
• ReadOnly; authorised users can read but not delete or update a resource

Question 10

how do I delete or change a locked resource?

Answer 10

• first remove lock
• apply action

Question 11

what is the service trust portal?

Answer 11

• ## portal that provides access to various content, tools and other resources about security, privacy and compliance practices