AZ-304 Exam QuestionsBrowse all questions from this exam

AZ-304 Exam - Question 166


Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases.

The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region.

You need to recommend a solution to meet the regulatory requirement.

Solution: You recommend using the Regulatory compliance dashboard in Azure Security Center.

Does this meet the goal?

Show Answer
Correct Answer: B

The Regulatory compliance dashboard in Azure Security Center is not designed for enforcing regional deployment requirements. It is used to provide an overview of the compliance posture of resources with respect to supported standards, such as Azure CIS, PCI DSS 3.2, ISO 27001, and SOC TSP. To ensure that the App Service instances are deployed only to specific Azure regions and reside in the same region as the Azure SQL databases, Azure Resource Policies should be used. These policies can be applied to enforce rules and effects over resources to ensure they meet organizational standards, such as specific regional deployment requirements.

Discussion

4 comments
Sign in to comment
GabrieleSolieri
Dec 31, 2020

looks like correct

dadageer
Apr 29, 2021

Answer is correct! this can be achieved by forcing a policy.

syu31svc
Oct 5, 2021

Instead use Azure Policy. Azure Policy helps to enforce organizational standards and to assess compliance at-scale. Answer is No

us3rOption: B
Feb 19, 2022

use Azure Policy instead