AZ104-Q: apply a standard to many subscriptions

New subscriptions for a division must inherit a requirement to use approved locations. Where should the policy be assigned?

  • A) Separately to every future resource.
  • B) To each user account.
  • C) To an NSG.
  • D) To the management group containing those subscriptions. ✓ Answer: D. Management-group scope lets policy inherit into its child subscriptions and resources. Why not the others: The alternatives do not give inherited governance across subscriptions.

management-groups · azure-policy