Exam AZ-500 topic 6 question 1 discussion

Actual exam question from Microsoft's AZ-500

Question #: 1
Topic #: 6

You have an Azure subscription that contains a resource group named RG1 and the network security groups (NSGs) shown in the following table.

You create and assign the Azure policy shown in the following exhibit.

What is the flow log status of NSG1 and NSG2 after the Azure policy is assigned?

A. Flow logs will be enabled for NSG1 only.
B. Flow logs will be enabled for NSG2 only.
C. Flow logs will be enabled for NSG1 and NSG2.
D. Flow logs will be disabled for NSG1 and NSG2.

Show Suggested Answer

Suggested Answer: D 🗳️

by mscertgrind at May 18, 2023, 4:29 p.m.

Comments

Submit Cancel

LHU

1 month, 3 weeks ago

Selected Answer: D

"Audit" means "We'll tell you things are not right here, but we're not going to do anything about it, that's for the user to figure out". Hence, D.

upvoted 1 times

...

ITFranz

1 year, 1 month ago

https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-audit The audit effect is used to create a warning event in the activity log when evaluating a non-compliant resource, but it doesn't stop the request https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-basics Answer = D

upvoted 2 times

...

Pamban

1 year, 3 months ago

Selected Answer: D

Policy is in Audit mode. nothing is changing

upvoted 4 times

...

TheProfessor

1 year, 10 months ago

Selected Answer: D

So this policy is for NSG2 since NSG1 is excluded from the policy. Since the effect is Audit, answer is D.

upvoted 4 times

...

ESAJRR

1 year, 11 months ago

Selected Answer: D

D. Flow logs will be disabled for NSG1 and NSG2.

upvoted 3 times

...

LC_90

2 years, 2 months ago

The Audit effect is used to create a warning event in the activity log when evaluating a non-compliant resource, but it doesn't stop the request. That said, its still D cus there's no remediation task.

upvoted 4 times

...