DP-300 Certification Practice Question #274

Question

You have an Azure subscription that contains 50 instances of SQL Server on Azure Virtual Machines. The instances host 500 Azure SQL databases.
You need to ensure that all the databases have the same configuration. The solution must meet the following requirements:
✑ Auditing must be enabled.
✑ Azure Defender must be enabled.
✑ Public network access must be disabled.
✑ Administrative effort must be minimized.
Which two resources should you create in the subscription? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Accepted Answer

To enforce auditing, Microsoft Defender, and disabling public network access across all databases with minimal administrative effort, Azure Policy is the ideal solution. Since Azure already provides built-in policy definitions for these requirements, creating new custom policy definitions (E) is unnecessary. Instead, to minimize administrative effort, you should create a single **Azure Policy initiative** (B) that groups these built-in definitions together and then create an **Azure Policy assignment** (C) to apply the entire initiative to the subscription. This requires only two resources to be created.

More DP-300 practice questions