CCSP Cloud Security Operations Practice Question
A company uses Azure Policy with remediation tasks to automatically fix non-compliant resources. Which scenario can be automatically remediated using a built-in policy?
⚠ Common exam trap
The CCSP exam often tests the distinction between policy effects (Audit, Deny, DeployIfNotExists) and which ones support automatic remediation, leading candidates to assume any non-compliance can be auto-fixed if a policy exists, but only DeployIfNotExists and Modify effects enable remediation tasks.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A virtual machine missing the Log Analytics agent
The built-in Azure Policy 'Deploy Log Analytics agent to Windows VMs' includes a remediation task that automatically installs the Log Analytics agent on existing VMs that are missing it. This is a DeployIfNotExists policy effect, which triggers a remediation task to correct non-compliance without manual intervention.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
A virtual machine missing the Log Analytics agent
Why this is correct
Built-in policy can deploy the Log Analytics agent extension automatically.
- ✗
A user creating a new Azure subscription
Why it's wrong here
Subscription creation is not typically remediated by policy.
- ✗
A SQL database with advanced data security disabled
Why it's wrong here
Enabling advanced data security may require manual action or custom remediation.
- ✗
A storage account with public network access enabled
Why it's wrong here
While policies exist, auto-remediation often requires custom Logic Apps; built-in remediation may not directly disable public access.
Go deeper
Related to this question
About these practice questions
One of 964 original CCSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.