Microsoft Azure Fundamentals — Question 186

Your company has an Azure subscription that contains resources in several regions.
You need to ensure that administrators can only create resources in those regions.
What should you use?

Answer options

• A. a read-only lock
• B. an Azure policy
• C. a management group
• D. a reservation

Correct answer: B

Explanation

The correct answer is B, an Azure policy, as it allows you to enforce rules about resource creation, including restricting regions. Option A, a read-only lock, only prevents modifications to existing resources but does not restrict where new resources can be created. Option C, a management group, organizes subscriptions but does not enforce policies on resource creation. Option D, a reservation, is related to reserving resources and does not control where resources can be created.