A city security baseline must deny creation of public IP addresses in a production subscription. Which Azure capability’s purpose best matches enforcing that resource configuration rule?
Select an answer to reveal the explanation.
Short Explanation
Want to stop someone from hanging a public IP on a city server? That is Azure Policy—rules about what resources are allowed to look like. Tags label; they do not deny. Purview is data, not NIC rules.
Full Explanation
Azure Policy evaluates Azure resources against defined rules and can deny or otherwise govern noncompliant configurations—such as blocking public IP creation. Tags provide metadata but do not themselves enforce deny effects. Purview and Advisor address data governance and recommendations respectively, not this resource-configuration enforcement scenario.