SC-100 Certification Practice Question #126

Question

You have an Azure subscription.

You need to create an Azure policy to ensure that all the resources in the subscription have tags assigned. The solution must ensure that the policy can remediate noncompliant resources automatically.

How should you configure the policy? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

The requirement has two parts — assign tags AND automatically remediate non-compliant resources. Only the `modify` effect supports remediation of existing resources through a remediation task backed by a managed identity, and Microsoft recommends Modify over Append precisely because Append cannot remediate existing resources. The `modify` effect's `details` block must include `roleDefinitionIds` (the RBAC role the remediation identity uses to write the tag); the other property options (`conflictEffect`, `existenceCondition`) are not what authorizes remediation, and `mutate` is not a valid effect. This matches the Highly Voted (6 👍) answer exactly. Confidence is 92% (no official Suggested/Most-Voted marker, but strong MS Learn grounding and a high-vote comment with no dissent).

More SC-100 practice questions