What should you do first?

You have an Azure subscription that contains the resources shown in the following table.

The Not allowed resource types Azure policy is assigned to RG1 and uses the following parameters:

§ Microsoft.Network/virtualNetwork

§ Microsoft.Compute/virtualMachines

In RG1, you need to create a new virtual machine named VM2, and then connect VM2 to VNET1.

What should you do first?
A . Remove Microsoft.Network/virtualNetworks from the policy
B . Create an Azure Resource Manager template
C . Remove Microsoft.Compute/virtualMachines from the policy
D . Add a subnet to VNET1

View Answer

Answer: C

Explanation: The Not allowed resource types Azure policy prohibits the deployment of specified

resource types. You specify an array of the resource types to block.

Virtual Networks and Virtual Machines are prohibited.

Reference: https://docs.microsoft.com/en-us/azure/governance/policy/samples/