Your company has an Azure subscription. The company requires that all resource group in the subscription have a tag named organization set to a value of Contoso. You need to implement a policy to meet the tagging requirement. How should you complete the policy? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation: Box 1: " Microsoft.Resources/subscriptions/resourceGroups" Box 2: "Deny", Sample - Enforce tag and its value on resource groups }, "policyRule": { "if": { "allOf": [ { "field": "type", "equals": "Microsoft.Resources/subscriptions/resourceGroups" }, { "not": { "field": "[concat('tags[',parameters('tagName'), ']')]", "equals": "[parameters('tagValue')]" } } ] }, "then": { "effect": "deny" } } } } References: https://docs.microsoft.com/en-us/azure/governance/policy/samples/enforce-tag-on-resource-groups
