SC-100 Certification Practice Question #275

Question

You need to recommend a solution to meet the compliance requirements.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

Box 2 is unambiguous across MS Learn and the community: excluding TestRG means setting `notScopes`, which is an assignment property that can be added or updated after creation — so you *update the policy assignment*, not the definition. Box 1 is the genuine split. Because the scenario explicitly wants Azure to *automatically remediate* resources to the HIPAA HITRUST standard, the enforcement mechanism is a policy/initiative remediation task, and those run under a managed identity assigned to the policy — the artifact you "create to enforce compliance." The top combined vote weight (Skippy 14 + ksksilva 12 + supporting comments) and MS Learn's remediation guidance favor "a managed identity" over TheMCT's "a blueprint." Confidence is lowered to 80% because TheMCT's blueprint view is well-reasoned and reasonably popular (25 👍), making this a real community split where MS Learn's remediation-identity requirement is the tiebreaker.

More SC-100 practice questions