AZ-400 Question 136

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  SMB to Azure FIles is also traffic. It is not encrypted using this setting.

• Chose B1

  Answer is B, but it is silly to use notEquals=true. Better would be to use equals=false

• Chose B1

  The correct answer is: B. ensures that all traffic to new Azure Storage accounts is encrypted Why other options are incorrect: A. prevents all HTTP traffic to existing Azure Storage accounts: Incorrect. The policy applies only to new or modified storage accounts because Azure Policies enforce compliance at the resource creation or modification stage, not retroactively. C. prevents HTTPS traffic to new Azure Storage accounts when the accounts are accessed over the Internet: Incorrect. The policy enforces HTTPS traffic, not prevents it. D. ensures that all data for new Azure Storage accounts is encrypted at rest: Incorrect. The policy only concerns HTTPS traffic, not encryption at rest. Azure Storage accounts encrypt data at rest by default.