What is the purpose of Azure Policy's `AuditIfNotExists` policy effect?

What is the purpose of Azure Policy's `AuditIfNotExists` policy effect?

• A. To create resources in accordance with user settings
• B. To evaluate resources and identify those that do not conform to the policy
• C. To automatically remediate non-compliant resources
• D. To escalate alerts to system administrators

Answer: (B)

The `AuditIfNotExists` policy effect in Azure Policy is designed to evaluate existing resources and identify those that do not conform to specific policy requirements. This mechanism is useful for maintaining compliance with organizational standards by allowing administrators to gain visibility into resources that may not meet governance conditions. When applied, this policy effect checks for the presence of a specific resource or configuration and, if it does not exist, it generates an audit result. This helps organizations ensure that necessary resources are deployed and comply with policy requirements without actively creating or altering resources. The critical function lies in its capability to report on non-compliance rather than enforce changes or empower further action like remediation or alerts, which is where the other choices diverge in function.

The AuditIfNotExists policy effect in Azure Policy is designed to evaluate existing resources and identify those that do not conform to specific policy requirements. This mechanism is useful for maintaining compliance with organizational standards by allowing administrators to gain visibility into resources that may not meet governance conditions.

When applied, this policy effect checks for the presence of a specific resource or configuration and, if it does not exist, it generates an audit result. This helps organizations ensure that necessary resources are deployed and comply with policy requirements without actively creating or altering resources. The critical function lies in its capability to report on non-compliance rather than enforce changes or empower further action like remediation or alerts, which is where the other choices diverge in function.