Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us [email protected]
Menu

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
Microsoft Discussions

Exam AZ-103 topic 4 question 58 discussion

Actual exam question from Microsoft's AZ-103
Question #: 58
Topic #: 4
[All AZ-103 Questions]

You have an Azure subscription that contains the resources shown in the following table.

The Not allowed resource types Azure policy is assigned to RG1 and uses the following parameters:
Microsoft.Network/virtualNetworks
Microsoft.Compute/virtualMachines
In RG1, you need to create a new virtual machine named V2, and then connect VM2 to VNET1.
What should you do first?

  • A. Remove Microsoft.Network/virtualNetworks from the policy.
  • B. Create an Azure Resource Manager template.
  • C. Remove Microsoft.Compute/virtualMachines from the policy.
  • D. Add a subnet to VNET1.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
The Not allowed resource types Azure policy prohibits the deployment of specified resource types. You specify an array of the resource types to block.
Virtual Networks and Virtual Machines are prohibited.
Reference:
https://docs.microsoft.com/en-us/azure/governance/policy/samples/not-allowed-resource-types
by sapien45 at April 1, 2020, 4:29 p.m.

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Submit Cancel
sapien45
Highly Voted 3 years, 8 months ago
Weird question
upvoted 35 times
...
eburgo
Highly Voted 3 years, 6 months ago
The Vnet already exists. You only need to create a new VM and associate it with the existing Vnet. Given answer is correct.
upvoted 13 times
...
SachinBisht009
Most Recent 3 months, 3 weeks ago
C is right answer
upvoted 1 times
...
gerryboy
2 years, 4 months ago
The answer is correct but the explanation was insufficient. I agree with eburgo below , since vnet1 already exists , you only need to remove the VM policy.
upvoted 1 times
...
sajy2k
2 years, 8 months ago
I juts tested. Existing VNET and VM wont be impacted after implementing the policy. But when wan create a new VM in RG1, no options to select the existing VNET for the new VM. It will recommend to create new VNET for the new VM. But during deployment of the VM, due to the new policy.. it will be forbidden and deployment fails.
upvoted 1 times
...
Chris_Munnik
2 years, 10 months ago
Some people are here purely to confuse the rest... Answer is C
upvoted 3 times
...
mikewallace8372
2 years, 10 months ago
given answer is correct
upvoted 2 times
...
Thi
3 years, 1 month ago
C. Remove Microsoft.Compute/virtualMachines from the policy.
upvoted 3 times
...
Shades
3 years, 4 months ago
I think , there is a separate policy for Microsoft.network->NetworkInterface for NIC. In this case we have not denied that. So if we just remove the Microsoft.compute ->Virtual machines ..we should be good
upvoted 1 times
Shades
3 years, 4 months ago
Tried it & it works as long as we remove the not allow for virtual Machine.
upvoted 5 times
...
...
PavanGrandhi
3 years, 6 months ago
guys, small doubt. If we implement new policy, wont it affect the already present resources? If so why won't the policy delete the existing VM1 and VNET1?
upvoted 1 times
macco455
3 years, 6 months ago
policy will only flag it as non compliant and stop new ones from being added. It does not make current resources compliant automatically.
upvoted 4 times
...
...
dwild
3 years, 6 months ago
If you cant create a nic you cant create a VM too... you need to remove that policy completely
upvoted 2 times
BiggusJiggus
3 years, 5 months ago
The Vnet already exists - no need to create new.
upvoted 2 times
...
...
Nhan
3 years, 7 months ago
basically, you are not allowed to create a Microsoft compute/VM in this resource group, therefore you must remove this policy before you can create the VM/computing.
upvoted 11 times
...
aimar047
3 years, 8 months ago
There are 2 actions here: 1. Create a new VM --> Not allowed as policy Not Allowed for managing virtualMachines 2. Run the VM within a VNET --> Action out of scope of both parameters Hence --> C
upvoted 4 times
Sheru
3 years, 7 months ago
Correct, but the question is only focused on the first step :)
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel