SC-100 Certification Practice Question #80

Question

You have an Azure subscription.

Your company has a governance requirement that resources must be created in the West Europe or North Europe Azure regions.

What should you recommend using to enforce the governance requirement?

Accepted Answer

The requirement is to enforce that resources are created only in West Europe or North Europe. The built-in Azure Policy "Allowed locations" definition with a Deny effect does precisely this — it blocks creation of resources outside the approved region list. MS Learn explicitly lists "Ensure your team deploys Azure resources only to allowed regions" as a core Azure Policy use case. Management groups provide scope but not enforcement; RBAC custom roles govern who can act, not the region of resources; and Defender for Cloud regulatory compliance standards assess and report posture rather than deny non-compliant deployments. Suggested Answer, an overwhelming 11-vote Most Voted, a 7-👍 Highly Voted comment, and MS Learn all converge on C with negligible dissent.

More SC-100 practice questions