Q37 RBAC Domain 4 · 20–25% of exam

A team enforces that all storage accounts must use HTTPS-only traffic. Which Azure Policy built-in effect ensures existing non-compliant accounts are remediated?

  1. A Audit
  2. B Deny (blocks new ones)
  3. C DeployIfNotExists with a remediation task (correct answer)
  4. D Modify

Shortcut: DeployIfNotExists with a remediation task deploys a linked template to fix existing non-compliant resources. For storage accounts, it can enforce the 'supportsHttpsTrafficOnly' property via remediation.