AZ-900 Practice Question 43: Security Governance Benefit

This is the documented benefit, stated carefully. Tools such as templates help ensure that deployed resources meet your technical standards and regulatory requirements, and as those standards change you can update resources at scale. Cloud-based auditing helps flag resources that are out of compliance with your baseline and provides mitigation strategies. Cloud providers are also typically well placed to absorb things like DDoS attacks.

Option A is contradicted by the shared responsibility model: your data, your endpoints, and your accounts and identities never transfer to the provider. Option C over-generalizes; whether patches are applied for you depends on the service model, since IaaS leaves the operating system and installed software to you while PaaS and SaaS take patching and maintenance off your hands. Option D is the most dangerous kind of wrong answer: Azure gives you the tools and certifications to *build* a compliant workload, but a misconfigured resource in a compliant datacenter is still non-compliant, and it is the customer who configures and audits.

Reference: Describe the benefits of security and governance in the cloud