A policy initiative is assigned at the Corp management group to enforce allowed locations and required tags. A new subscription is added under Corp later. Which two statements are true? Select two.

The initiative must be copied to every resource group in the new subscription before it takes effect.

A management group assignment already covers the child subscription and its resource groups.

The initiative changes RBAC so users lose read access to the subscription.

Policy does not alter authorization to read or manage resources; RBAC handles access control.

Compliance results are only visible in Activity Log, not in Azure Policy.

Azure Policy has its own compliance views; Activity Log is not the only reporting source.

What does this AZ-104 question test?

Read the scenario before looking for a memorised answer.

What is the correct answer to this question?

The correct answer is: The new subscription is automatically in scope because the assignment is at the management group. — A policy assignment at a management group flows down to child subscriptions, so a later-added subscription is automatically covered. Azure Policy will also show compliance status for existing resources, but it does not silently fix already deployed noncompliant items. Remediation is a separate operational step. This question tests the difference between inherited scope, compliance reporting, and actual resource correction. Why others are wrong: Policy at the management group does not need to be manually duplicated to each resource group. It also does not change RBAC permissions, and compliance visibility is available through Azure Policy dashboards, not only the Activity Log. The key distinction is inheritance plus reporting, not access control.

What should I do if I get this AZ-104 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.