What should you do first?

You have an Azure subscription that contains the resources shown in the following table.

The Not allowed resources types Azure policy is assigned to RG1 and uses the following parameters:

In RG1, you need to create a new virtual named VM2, and then connected VM2 to VNET1.

What should you do first?
A . Remove Microsoft.Network/virtualNetworks from the policy.
B . Create an Azure Resource Manager template.
C . Remove Microsoft.Compute/virtualMachines from the policy.
D . Add a subnet to VNET1.

View Answer

Answer: C

Explanation:

The Not allowed resource types Azure policy prohibits the deployment of specified resource types. You specify an array of the resource types to block. Virtual Networks and Virtual Machines are prohibited.

Reference: https://docs.microsoft.com/en-us/azure/governance/policy/samples/not-allowed-resource-types