Q42 RBAC Domain 4 · 20–25% of exam

Which Azure Policy effect prevents non-compliant resources from being created?

  1. A Audit
  2. B AuditIfNotExists
  3. C Deny (correct answer)
  4. D Modify

Shortcut: Deny effect blocks the resource deployment/modification request if it doesn't comply with the policy. Audit only logs non-compliance. AuditIfNotExists audits resources missing dependent resources.

Deny effect blocks the resource deployment/modification request if it doesn't comply with the policy. Audit only logs non-compliance. AuditIfNotExists audits resources missing dependent resources. Modify remediates properties.