Microsoft SC-100 Exam - Topic 3 Question 74 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 74
Topic #: 3

You have 50 Azure subscriptions.

You need to monitor resource in the subscriptions for compliance with the ISO 27001:2013 standards. The solution must minimize the effort required to modify the list of monitored policy definitions for the subscriptions.

NOTE: Each correct selection is worth one point.

AAssign an initiative to a management group.

BAssign a policy to each subscription.

CAssign a policy to a management group.

DAssign an initiative to each subscription.

EAssign a blueprint to each subscription.

FAssign a blueprint to a management group.

Show Suggested Answer

Suggested Answer: A, F

https://docs.microsoft.com/en-us/azure/governance/management-groups/overview

https://docs.microsoft.com/en-us/azure/governance/blueprints/overview

https://docs.microsoft.com/en-us/azure/governance/policy/samples/iso-27001

https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage

by Estrella at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Altha

4 days ago

F) Assign a blueprint to a management group is a solid choice for compliance!

upvoted 0 times

...

Rory

9 days ago

Wait, can you really manage 50 subscriptions that easily?

upvoted 0 times

...

Ceola

14 days ago

C) Assign a policy to a management group sounds efficient too.

upvoted 0 times

...

Bok

20 days ago

I think B) Assign a policy to each subscription is more straightforward.

upvoted 0 times

...

Eileen

25 days ago

A) Assign an initiative to a management group is the way to go!

upvoted 0 times

...

Johnna

30 days ago

Haha, I bet the exam writers were hoping we'd fall for the "assign an initiative" options. Nice try, but C is the way to go!

upvoted 0 times

...

Adelle

1 month ago

C is the correct answer. Assigning a policy to a management group is the way to minimize effort.

upvoted 0 times

...

Renato

2 months ago

I agree with C. Seems like the most efficient solution for monitoring 50 subscriptions.

upvoted 0 times

...

Evangelina

2 months ago

Definitely C. Assigning a policy to a management group is the way to go for managing multiple subscriptions.

upvoted 0 times

...

Junita

2 months ago

C) Assign a policy to a management group.

upvoted 0 times

...

Valda

2 months ago

I feel like assigning an initiative to each subscription would be too cumbersome, especially if we need to modify policies later.

upvoted 0 times

...

Cordelia

3 months ago

I practiced a similar question where assigning a blueprint to a management group was the right choice. It seems like it could apply here too.

upvoted 0 times

...

Cary

3 months ago

I'm not entirely sure, but I think assigning a policy to each subscription could be a lot of work since there are 50 of them.

upvoted 0 times

...

Rikki

3 months ago

I remember that initiatives are collections of policies, so assigning one to a management group might help manage compliance across all subscriptions more easily.

upvoted 0 times

...

Tonja

3 months ago

I'm not sure about the difference between assigning a policy and assigning an initiative. I think I need to review the documentation on Azure Policy and Initiatives before I can confidently answer this question.

upvoted 0 times

...

Tennie

3 months ago

I'm leaning towards option C, assigning a policy to a management group. That way, we can easily update the policy definitions in the management group and have them apply to all the subscriptions underneath.

upvoted 0 times

...

Freeman

3 months ago

Okay, let me think this through. I'm guessing that assigning a policy to each subscription (option B) would be a lot of work if we have 50 subscriptions. Assigning an initiative to a management group (option A) seems like the most efficient way to manage the policy definitions across all the subscriptions.

upvoted 0 times

...

Val

4 months ago

I'm a bit confused by the wording of the question. It seems like we need to monitor for compliance with ISO 27001:2013 standards, but it's not clear if we need to assign the actual policy definitions or just an initiative that contains them.

upvoted 0 times

...

Carlton

4 months ago

Hmm, this looks like it's testing our understanding of Azure Policy and Initiatives. I think the key here is to find a solution that minimizes the effort required to modify the list of monitored policy definitions.

upvoted 0 times

...