Policy assignments and compliance in Azure - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a policy assignment in Azure Policy?

A policy assignment is when you apply a specific policy or set of policies to a scope, such as a subscription or resource group, to enforce rules and effects on resources.

beginner

What does compliance mean in the context of Azure Policy?

Compliance means how well your resources follow the rules set by the assigned policies. It shows which resources meet or break the policy requirements.

beginner

How can you check the compliance state of your resources in Azure?

You can check compliance by viewing the compliance dashboard in the Azure portal, which shows the percentage of resources compliant or non-compliant with assigned policies.

intermediate

What is the difference between a policy definition and a policy assignment?

A policy definition is the rule or set of rules you want to enforce. A policy assignment is when you apply that definition to a specific scope to make it active.

intermediate

Why is it important to assign policies at the right scope?

Assigning policies at the right scope ensures that only the intended resources are affected, helping to manage compliance efficiently without unintended restrictions.

What is the main purpose of assigning a policy in Azure?

A To backup data automatically

B To create virtual machines

C To monitor network traffic

D To enforce rules on resources

Assigning a policy enforces rules on resources to ensure compliance.

Where can you assign an Azure policy?

A Only on individual resources

B Only at the subscription level

C At management group, subscription, or resource group levels

D Only on virtual networks

Policies can be assigned at management group, subscription, or resource group scopes.

What does a non-compliant resource mean in Azure Policy?

A The resource does not meet the policy rules

B The resource is encrypted

C The resource is offline

D The resource is deleted

Non-compliant means the resource breaks the rules set by the assigned policy.

Which Azure feature shows the overall compliance status of your resources?

A Azure Policy compliance dashboard

B Azure Security Center

C Azure Monitor

D Azure Advisor

The Azure Policy compliance dashboard shows compliance status of resources.

What happens if you assign a policy at a resource group level?

A It applies to all subscriptions

B It applies only to resources in that resource group

C It applies to all resource groups

D It applies only to virtual machines

Policy assignment at resource group scope affects only resources inside that group.

Explain how policy assignments help maintain compliance in Azure.

Think about how applying rules to groups of resources helps keep them following standards.

Describe the steps to check and interpret compliance results in Azure Policy.

Consider how you would find out if your resources follow the rules and what to do if they don't.