AZ-900 Practice Question 60: Policy Initiative
Microsoft Azure Fundamentals (AZ-900) · Test 6 · question 10 of 10
A governance team maintains nine separate Azure Policy definitions that together implement one compliance standard. They are tired of making nine assignments at every scope, and they want to be able to add a tenth rule later without creating another assignment. What should they do?
Show answer and explanation
Answer:
An initiative, also called a policy set, exists for this problem: initiatives let you group several related policy definitions to simplify assignment and management, because you work with the group as a single item, and rather than assigning each policy individually you apply the initiative. It also answers the second requirement, because policy definitions added to an initiative later automatically become part of that initiative's existing assignments. That is why Microsoft recommends creating and assigning an initiative even when you are starting with just one definition.
Option B is not how Azure Policy is structured: a policy definition carries one policy rule and one effect, so nine distinct behaviours cannot be folded into a single definition. Option C reduces the number of *scopes* but not the number of *assignments*; it is still nine of them, and it pushes every rule onto every subscription in the tenant whether or not that is intended. Option D confuses two different controls entirely: resource locks prevent deletion or modification of existing resources and cannot express a configuration standard at all.
Reference: Details of the Azure Policy initiative definition structure