An organization is implementing Azure Policy to enforce compliance standards across multiple subscriptions. What is the primary benefit of using management group scope for policy assignment?

  1. Eliminates the need for resource group policies
  2. Improves network performance by consolidating policies
  3. Allows a single policy assignment to apply to all subscriptions within the management group hierarchy ✓
  4. Reduces policy evaluation time across resources

Correct answer: Allows a single policy assignment to apply to all subscriptions within the management group hierarchy

Option C is correct because assigning an Azure Policy at the management group scope causes it to be inherited by every subscription and resource group within that management group hierarchy, enabling uniform compliance enforcement with a single assignment instead of repeating it per subscription. Option A is incorrect because management group policies do not eliminate the need for resource group policies in all cases; granular or resource-group-specific compliance rules may still require lower-scoped assignments. Option B is incorrect because Azure Policy operates on resource metadata and configuration compliance, not on network traffic, so it has no effect on network performance. Option D is incorrect because management group scope does not reduce policy evaluation time; evaluation occurs per resource regardless of the scope at which the policy was assigned.

Topic: · azure, azure-policy, management-groups, governance

Practice Microsoft Azure Solutions Architect (AZ-305) Questions Free