Secure, monitor, and optimize data storage and data processing →mediumMultiple ChoiceObjective-mapped

DP-203 Practice Question: Secure, monitor, and optimize data storage and data processing

Exhibit

Refer to the exhibit.

{
  "properties": {
    "policyRule": {
      "if": {
        "field": "type",
        "equals": "Microsoft.Storage/storageAccounts"
      },
      "then": {
        "effect": "deny",
        "details": {
          "field": "Microsoft.Storage/storageAccounts/networkAcls.defaultAction",
          "equals": "Allow"
        }
      }
    }
  }
}

You are an Azure administrator. You apply the Azure Policy shown in the exhibit to a management group. What is the outcome of this policy?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

It denies storage accounts that allow public network access.

The policy denies the creation of storage accounts that allow public network access. Therefore, Option B is correct. Option A is incorrect because the policy does not require a firewall rule; it denies public access entirely. Option C is incorrect because the policy does not address HTTPS enforcement. Option D is incorrect because the policy only denies storage accounts that allow public network access, not all storage accounts.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
It allows storage accounts only if they have a firewall rule.
Why it's wrong here
The policy checks defaultAction, not firewall rules.
✓
It denies storage accounts that allow public network access.
Why this is correct
The policy denies when defaultAction equals Allow, meaning public access is allowed.
✗
It requires all storage accounts to use HTTPS only.
Why it's wrong here
HTTPS enforcement is a different policy.
✗
It denies the creation of any new storage account.
Why it's wrong here
The policy only denies if defaultAction is Allow, not all storage accounts.

Go deeper

DP-203 Practice Question: Secure, monitor, and optimize data storage and data processing

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question