Exam AZ-500 topic 5 question 16 discussion

Actual exam question from Microsoft's AZ-500

Question #: 16
Topic #: 5

From the Azure portal, you are configuring an Azure policy.
You plan to assign policies that use the DeployIfNotExist, AuditIfNotExist, Append, and Deny effects.
Which effect requires a managed identity for the assignment?

A. AuditIfNotExist
B. Append
C. DeployIfNotExist
D. Deny

Show Suggested Answer

Suggested Answer: C 🗳️
When Azure Policy runs the template in the deployIfNotExists policy definition, it does so using a managed identity.
Reference:
https://docs.microsoft.com/bs-latn-ba/azure/governance/policy/how-to/remediate-resources

by AS007 at April 21, 2020, 3:28 a.m.

Comments

Submit Cancel

AS007

Highly Voted 4 years, 1 month ago

Correct

upvoted 20 times

...

kdkdk

Highly Voted 3 years, 5 months ago

in the exams

upvoted 14 times

tuta

3 years, 5 months ago

any more pointers ? seating exam next week skimming though for last minute hints

upvoted 2 times

deegadaze1

3 years, 4 months ago

When Azure Policy runs the template in the deployIfNotExists policy definition, it does so using a managed identity. Azure Policy creates a managed identity for each assignment, but must have details about what roles to grant the managed identity.

upvoted 4 times

...

ITFranz

Most Recent 7 months, 1 week ago

When Azure Policy starts a template deployment when evaluating deployIfNotExists policies or modifies a resource when evaluating modify policies, it does so using a managed identity that is associated with the policy assignment. https://learn.microsoft.com/en-us/azure/governance/policy/how-to/remediate-resources?tabs=azure-portal Answer = C. DeployIfNotExist

upvoted 1 times

...