Medium1 markMultiple Choice
Domain 1.3: GovernanceDomain 1GovernanceAzure Policy

AZ-305 · Question 10 · Domain 1.3: Governance

An organization mandates that every new Azure Virtual Machine must have the Azure Monitor Agent (AMA) installed automatically upon creation to ensure compliance with monitoring standards.

If a developer deploys a VM without the agent, the system should automatically install the agent without blocking the VM deployment process.

Which Azure Policy effect should you use in your policy definition?

Answer options:

A.

Deny

B.

Append

C.

DeployIfNotExists

D.

Modify

How to approach this question

Match the requirement 'automatically install without blocking' to the policy effect that triggers a remediation deployment after the initial resource is created.

Full Answer

C.DeployIfNotExists✓ Correct
The 'DeployIfNotExists' effect executes a template deployment when a specific condition is met. In this scenario, the policy checks if the AMA extension exists on the VM. If it doesn't, the policy triggers a deployment to install it. This ensures compliance automatically without blocking the developer's initial VM deployment (which 'Deny' would do).

Common mistakes

Choosing 'Append' or 'Modify'. These effects alter the JSON payload of the resource being created, but VM extensions are separate child resources that must be deployed.

Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 3

55 questions · hints · full answers · grading

More questions from this exam