HOTSPOT
You have an Azure subscription.
You need to implement a custom policy that meets the following requirements:
Ensures that each new resource group in the subscription has a tag named organization set to a value of Contoso
Ensures that resource groups can be created from the Azure portal
Ensures that compliance reports in the Azure portal are accruable
How should you complete the policy? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
it should be Append.
The reason why it is Append and not Deny is because the scope is to ensure new resource groups have the tag. If using Deny, existing resource groups cannot be updated if they do not already have the tag.