Skip to content
AZ-104
Manage Azure identities and governance
hard
Question 5 of 48

A management group assignment denies unapproved resource types. One child subscription now needs to allow an additional resource type. What should the administrator do?

ACreate a more permissive allow policy at the subscription without changing the management group assignment
BExclude the child subscription from the denying assignment and assign the needed policy at the child scope
CAssign Reader to the subscription owners
DApply a CanNotDelete lock to the subscription

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion