Free Microsoft Security SC-900 Actual Exam Questions - Question 12 Discussion

B. Azure Blueprints lets you set up environments repeatedly across subscriptions; it's designed for consistent initial provisioning, not continuous policy enforcement like D.

Makes sense to rule out A and C since they’re more security-focused; B fits provisioning best.

Makes sense to rule out A and C since they’re more about security and monitoring, not provisioning. B fits better because it bundles things for deployment across subscriptions. So, I’d go with B here.

I get why Azure Policy (D) sounds right for enforcement, but it doesn’t handle the actual provisioning setup across subscriptions like Blueprints (B) does. So, isn’t the key difference about deploying resources, not just enforcing rules?

Probably D here, since Azure Policy enforces rules across subscriptions, making sure resources comply everywhere. Blueprints help with setups too, but Policy ensures consistency by controlling what’s allowed.

B imo, since Azure Blueprints lets you package policies, role assignments, and resources together, making it easier to deploy the same setup across subscriptions consistently. Azure Policy is more about enforcing rules rather than provisioning.

This question is tricky because options B and D both deal with governance, but B. Azure Blueprints is actually designed to deploy infrastructure and policies consistently across multiple subscriptions, so that’s the one here. Azure Policy (D) enforces rules within subscriptions but doesn't handle provisioning across them directly.