Governance and Compliance Flashcards
What is a Tenant
a container within Azure associated with a company or group of people, and a directory is a container
How many subscriptions can a single tenant have
Multiple
How many tenants can a subscription have
Just one
What does a Management Group allow you to do
Organize and manage subscriptions by logically grouping them into management subscriptions
Provides another scope for enfocring governance policy
How many levels are possible in a management group
6
In order to administer the Root management group what must you do first
Global admins must be elevated to User Access Admin of root group
In Azure Policy what is the Policy Definition
Defines the evaluation criteria for compliance, and defines the actions that take place. Either audit or deny should something be outside of compliance
What is a Policy assignment
The scope at which we will assign our policy. The scope could be a management group, subscription, resource group, or resource
What is an Initiative Defintion
A collection of policies that are tailored to achieving a singular high-level goal together. For example, ensuring that VMs meet standards
What is a Tag
A name:value pair
If you apply a Tag to a subscription do the resources also get the tag applied to them by default?
No you must manually apply them
How many tags can a resource have
50
What can you do with tags
Manage resources via tags. For example, shutting down all VMs with a specific tag
What are Resource Locks
Allow you to override permissions to resources
What can you do with Resource Locks
Lock subscriptions, resource groups, or resources
Lock restrictions apply to all users and roles
