Exam AZ-305 All QuestionsBrowse all questions from this exam
Go to Exam
Question 243

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases.

The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region.

You need to recommend a solution to meet the regulatory requirement.

Solution: You recommend using an Azure Policy initiative to enforce the location of resource groups.

Does this meet the goal?

    Correct Answer: B

    The solution proposed does not meet the goal. Enforcing the location of resource groups does not necessarily ensure that the App Service instances and Azure SQL databases will be deployed in the same specific Azure regions. Resources within a resource group can reside in different locations than the resource group itself. To meet the regulatory requirement, you would need to enforce the location policy directly on the resources, not just on the resource groups.

Discussion
marcellovOption: B

It seems like a trick question: "You recommend using an Azure Policy initiative to enforce the location of resource groups". You need to enforce the location of the App Service instances, and not of resource groups. The right answer was in the question #57: "You recommend using an Azure Policy initiative to enforce the location".

maxustermannOption: B

The locaiton of rg has nothing to do with the location of the resources inside the rg. So the answer is no --> B

babakeyfgir

it was a exam Question

Azure2020Option: A

Given answer is correct! Once your business rules have been formed, the policy definition or initiative is assigned to any scope of resources that Azure supports, such as management groups, subscriptions, resource groups, or individual resources. The assignment applies to all resources within the Resource Manager scope of that assignment. https://learn.microsoft.com/en-us/azure/governance/policy/concepts/scope

dejediOption: B

No , should be the location of the resources not the resource groups

cesco1286Option: B

Resources can be created in a region different than the RG's one

GODUSGREATOption: B

tricky question

joesatrianiOption: A

Host stateless web apps with Azure subscriptions = create Azure Traffic Manager profiles Deploy to multiple Azure regions Support rate limiting = Azure Front Door Deploy App Service instances only to specific Azure regions = Azure Policy initiative

23169fdOption: B

Using an Azure Policy initiative to enforce the location of resource groups alone does not guarantee that the resources within those groups (such as Azure App Service instances and Azure SQL databases) will be deployed in the same region as required by the regulatory requirement. Instead, you need to enforce the policy directly on the resources themselves.

LazylinuxOption: B

Given answer A is incorrect The Policy enforcement should target more App services NOT RG

ayadmawlaOption: A

The question is referring to a Policy Initiative that can have multiple policies. Whilst Allowed Location policy does not control RGs, there is another policy for that purpose. Resource groups are excluded from "Allowed locations" policy. If you want to restrict the locations where resource groups can be created, please use "Allowed locations for resource groups" policy. For reference, below is the Description of Allowed locations policy definition: This policy enables you to restrict the locations your organization can specify when deploying resources. Use to enforce your geo-compliance requirements. Excludes resource groups, Microsoft.AzureActiveDirectory/b2cDirectories, and resources that use the 'global' region. See: https://learn.microsoft.com/en-us/answers/questions/1193471/azure-policy-on-location-is-not-effecting-to-resou

TplentyOption: A

The answer is A, it's a repeated question

LavaPupOption: A

Yes. Pretty straight-forward I believe :)

sixlips

Why is this yes? "You recommend using an Azure Policy initiative to enforce the location of resource groups" resources within a resource group can be in a different location which wouldnt met the requirements of the question