SC-100 Certification Practice Question #51

Question

You are evaluating an Azure environment for compliance.
You need to design an Azure Policy implementation that can be used to evaluate compliance without changing any resources.
Which effect should you use in Azure Policy?

Accepted Answer

This is a known flawed examtopics item. The technically correct effect for "evaluate compliance without changing resources" is **Audit**, which is not offered; the evaluate-without-enforcement behavior the question describes actually maps to **enforcementMode = Disabled**, an assignment setting rather than an effect. Among the four listed *effects*, the registered answer and the dominant community vote (Suggested D plus 49 Most-Voted and a 27-👍 Highly-Voted comment) is **D. Disabled**, on the reasoning that Deny would surface matching resources as non-compliant and is more enforcement than pure evaluation. I report D to match the official key, but confidence is held at 74% because MS Learn shows the Disabled *effect* yields a default Compliant state and does not genuinely evaluate compliance — making this a genuinely conflicted question where a strong minority (epomatti, cris_exam) argues A. Deny, and the truly correct option (Audit) is absent.

More SC-100 practice questions