SC-100 Question 65

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  You need to enforce and automatic remediation.

• Chose A5

  Azure Blueprints is excellent for deploying a consistent set of resources, policies, and role assignments, but it does not continuously enforce compliance or provide automatic remediation on its own. Azure Policy provides the ongoing enforcement and remediation capabilities needed to ensure that resources remain compliant with ISO 27001:2013 standards. Therefore, while Azure Blueprints can be used to initially deploy the necessary compliance infrastructure, Azure Policy is the tool that ensures continuous compliance and automatic remediation.

• Chose B2

  I would go with Blueprint because it contains Policies, and RBAC and customised configuration. Once Blueprint is used it maintains its link to configuration to ensure automated compliance. See the table here: https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/manage/azure-management-guide/operational-compliance?tabs=UpdateManagement%2CAzurePolicy%2CAzureBlueprints See the differences here: https://k21academy.com/az-305/azure-rbac-vs-azure-policies-vs-azure-blueprints/