Which statement correctly distinguishes Azure Policy from Azure RBAC?
Show answer and explanation
Answer: A
The two services answer different questions. Azure Policy checks what is allowed to exist: it evaluates resource properties and configurations against definitions and can audit, deny, or modify deployments that don't conform. Azure RBAC checks who: it combines a security principal, a role definition, and a scope to decide which actions an identity may perform. Effective governance stacks the two — RBAC for identity, Policy for configuration.
Why the other options are wrong
- B. Neither service has anything to do with passwords or encryption; RBAC grants action rights and Policy checks configuration, nothing more.
- C. Policy and RBAC are not billing or estimation tools at all — invoices come from Cost Management and pricing estimates from the Pricing Calculator.
- D. They are distinct services with distinct mechanics; Policy can even restrict what RBAC-permitted identities are allowed to create.