AZ-104 Certification Practice Question #119

Question

You have an Azure subscription that contains the resources shown in the following table.

The status of VM1 is Running.
You assign an Azure policy as shown in the exhibit. (Click the Exhibit tab.)

You assign the policy by using the following parameters:
Microsoft.ClassicNetwork/virtualNetworks
Microsoft.Network/virtualNetworks
Microsoft.Compute/virtualMachines
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

1. **Moving VNET1 to RG2:** The "Not allowed resource types" policy denies the write/creation of `Microsoft.Network/virtualNetworks` inside `RG2`. Resource moves trigger validation at the destination; hence, Azure Resource Manager blocks this action with a `RequestDisallowedByPolicy` error. Thus, **No**.
2. **State of VM1:** VM1 is currently running. Applying a deny policy on `RG2` does not automatically stop, delete, or deallocate any existing VMs (even if they are non-compliant). It simply flags them. Thus, **No**.
3. **Modifying address space of VNET2:** Because VNET2 is a virtual network (`Microsoft.Network/virtualNetworks`) inside `RG2`, saving changes to its address space is a write operation (PUT) on a blocked resource type. Azure Policy evaluates this write operation and denies it, preventing the modification. Thus, **No**.

More AZ-104 practice questions