SC-100 Certification Practice Question #62

Question

You have 50 Azure subscriptions.
You need to monitor the resource in the subscriptions for compliance with the ISO 27001:2013 standards. The solution must minimize the effort required to modify the list of monitored policy definitions for the subscriptions.
What are two ways to achieve the goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

Accepted Answer

The goal is to monitor 50 subscriptions for ISO 27001:2013 compliance while minimizing the effort to maintain the list of monitored policy definitions. Anything assigned at the management-group level (A, C, F) automatically covers all subscriptions beneath it, eliminating per-subscription work (rules out B, D, E). Between the management-group options, an **initiative** is ideal because ISO 27001:2013 is itself a built-in initiative — a maintained collection of policy definitions — so assigning it (A) keeps the monitored set current with minimal effort. A **blueprint** assigned to a management group (F) bundles that initiative/policies into a reusable governed package and is also valid (MS Learn confirms blueprints can target management groups). The official Suggested Answer is F and the top community vote is AF, so AF is the answer. Confidence is held at 80% because the Suggested Answer only names one of the two required selections and a non-trivial AC minority argues a single policy works and that blueprints are being deprecated — a genuine but secondary split.

More SC-100 practice questions