AZ-104 Certification Practice Question #73

Question

You have an Azure subscription named Sub1 that contains the Azure resources shown in the following table.

You assign an Azure policy that has the following settings:
✑ Scope: Sub1
✑ Exclusions: Sub1/RG1/VNET1
✑ Policy definition: Append a tag and its value to resources
✑ Policy enforcement: Enabled
✑ Tag name: Tag4
✑ Tag value: value4
You assign tags to the resources as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

1. **RG1:** The policy "Append a tag and its value to resources" targets resources and explicitly *does not apply to resource groups*. Therefore, RG1 is unaffected by the policy and only retains the manually assigned tag `Tag2: IT` (Statement 1 is **Yes**).
2. **storage1:** Resources *do not inherit tags* from subscriptions (Tag1) or resource groups (Tag2). When storage1 is updated with `Tag3: value1`, the policy evaluates it and appends `Tag4: value4`. Hence, it has `Tag3: value1` and `Tag4: value4` only, not Tag1 or Tag2 (Statement 2 is **No**).
3. **VNET1:** VNET1 is explicitly excluded via the exclusion path `Sub1/RG1/VNET1`. It does not inherit `Tag2: IT` from its resource group, and the policy does not append `Tag4: value4` because of the exclusion. It only has the manually assigned `Tag3: value2` (Statement 3 is **No**).

More AZ-104 practice questions