A policy assignment denies storage accounts unless public network access is disabled. One legacy storage account in a pilot resource group must remain publicly reachable for 60 days while the application team remediates dependencies. Compliance reporting must continue to show the policy as enforced everywhere else. What should the administrator do?

Delete the policy assignment and re-create it later

This removes governance entirely and hides the exception from compliance reporting.

Apply a read-only lock to the storage account

A lock prevents modifications but does not override or document the policy exception.

Assign a custom RBAC role to the application team

RBAC changes permissions, but it does not affect policy evaluation or compliance state.

What does this AZ-104 question test?

Static NAT maps one inside address to one outside address.

What is the correct answer to this question?

The correct answer is: Use an Azure Policy exemption for that storage account — Azure Policy exemptions are designed for controlled exceptions without weakening the broader policy posture. In this case, the administrator needs a temporary, documented exception for one storage account while the policy remains active everywhere else. Exemptions preserve the assignment and compliance visibility, which is important for audit and reporting. Removing the policy or changing RBAC would not satisfy the requirement because neither preserves governance reporting in the same way. Why others are wrong: Deleting the assignment would disable governance broadly and eliminate the compliance picture the team wants to keep. A read-only lock does not communicate a policy exception and would interfere with normal management. Changing RBAC does not alter Azure Policy evaluation, so the account would still appear noncompliant. The exemption is the correct mechanism because it scopes the exception precisely and keeps the rest of the environment governed.

What should I do if I get this AZ-104 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.