Microsoft Azure Security Technologies (AZ-500)

To which Azure service should you refer for simplifying security policy management across subscriptions?

1. Azure Policy

2. Azure Security Center

3. Azure Blueprints

4. Azure Sentinel

The correct answer is: Azure Blueprints

The most suitable service for simplifying security policy management across subscriptions is Azure Policy. Azure Policy enables organizations to create, assign, and manage policies that enforce certain rules and effects on resources within Azure. It helps ensure that resources are compliant with specific standards and regulations, making it easier to manage security requirements consistently across multiple subscriptions. With Azure Policy, you can evaluate resources in real time, apply policies across various subscriptions, and enforce rules that meet your organization’s compliance needs. This centralized governance capability improves security posture by allowing you to define specific security requirements and automatically audit resources against those policies. While Azure Blueprints also plays a role in governance by allowing organizations to package together policies, resources, and role assignments, its primary function is to help deploy environments rather than focusing exclusively on the management of security policies across subscriptions. Azure Security Center focuses on threat protection and security posture management but does not handle the broad-reaching policy management aspect. Azure Sentinel, being a security information and event management (SIEM) tool, is oriented towards security analytics and threat intelligence rather than the management of security policies.