BenchMark Quizzes by MDFT Pro

Determine Azure Policy Effect

MDFT Pro has implemented the following Azure policy to secure its educational resources:

{
    "if": {
        "allOf": [
            {
                "field": "type",
                "equals": "Microsoft.Storage/storageAccounts"
            },
            {
                "field": "Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly",
                "notEquals": "true"
            }
        ]
    },
    "then": {
        "effect": "deny"
    }
}

You assign the policy to the Tenant root group. What is the effect of the policy?

Choose the correct answer from the options below.

Explanations for each answer:

Prevents all HTTP traffic to existing Azure Storage accounts is incorrect. This policy doesn't affect existing storage accounts, only new ones at creation time.
Ensures that all traffic to new Azure Storage accounts is encrypted is correct.
Prevents HTTPS traffic to new Azure Storage accounts when the accounts are accessed over the Internet is incorrect. The policy doesn't prevent HTTPS traffic; it actually enforces HTTPS traffic by denying the creation of storage accounts that don't have the 'supportsHttpsTrafficOnly' property set to true.
Ensures that all data for new Azure Storage accounts is encrypted at rest is incorrect. The policy focuses on transport encryption (HTTPS) rather than encryption at rest.

Learn more about Azure Policy:

Azure Policy

Exam Preparation Quiz

Determine Azure Policy Effect