AZ-204 Implement Azure security Practice Question
Your organization uses Azure Policy to enforce compliance. You need to ensure that all Azure SQL databases have Advanced Data Security (ADS) enabled. What type of Azure Policy effect should you use to automatically enable ADS if it is not already enabled?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
DeployIfNotExists
DeployIfNotExists effect can automatically enable Advanced Data Security (ADS) on Azure SQL databases if it is not already enabled, by deploying the necessary configuration. Option A (Audit) only audits compliance but does not remediate. Option B (Modify) is typically used for tags and not for enabling ADS. Option C (Deny) blocks creation of non-compliant resources but does not automatically enable ADS on existing resources. Therefore, D is correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Audit
Why it's wrong here
Audit only logs compliance, does not enable ADS automatically.
- ✗
Modify
Why it's wrong here
Modify can change existing resources but typically requires a remediation task; DeployIfNotExists is more common for this scenario.
- ✗
Deny
Why it's wrong here
Deny prevents creation of databases without ADS but does not enable it on existing ones.
- ✓
DeployIfNotExists
Why this is correct
Deploys the ADS configuration if missing, ensuring automatic remediation.
Go deeper
Related to this question
About these practice questions
Courseiva writes every AZ-204 question from scratch — 881 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-204 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-204 exam.