Exam AB-100 Topic 1 Question 31 Discussion

Comprehensive and Detailed Explanation From Agentic AI Business Solutions Topics:
The correct answer is B. Azure Policy .
This scenario is about governance for data residency and data movement compliance across regions. The agents use Azure OpenAI resources and are deployed in both the United States and Europe , so the organization needs a control that can enforce where resources are deployed and help ensure they stay within approved geographic boundaries.
Why B is correct
Azure Policy is the correct recommendation because it is the Azure-native governance service used to enforce organizational rules on resource deployment and configuration .
For data residency and movement regulations, Azure Policy can be used to:
* restrict deployments to approved Azure regions
* deny creation of resources in nonapproved locations
* enforce configuration standards tied to compliance requirements
* support governance at scale across subscriptions and resource groups
From an AI business solutions perspective, this matters because data residency rules are often enforced through where the AI resources and related services are allowed to run . If the agents and their grounding services must remain in specific geographies, Azure Policy is the most direct preventive control.
This is especially relevant in multinational AI deployments where:
* European data may need to remain in Europe
* US workloads may need to remain in US-approved regions
* grounding data access patterns must align with regional governance rules
* organizations need automated enforcement rather than manual review
Azure Policy helps operationalize those governance requirements consistently.
Why the other options are incorrect
A). Microsoft Defender for Cloud
Defender for Cloud is excellent for security posture management , recommendations, and continuous compliance visibility, but it is not the primary service for enforcing regional deployment restrictions related to residency.
C). Azure Monitor
Azure Monitor is for telemetry, metrics, and logs . It can help observe activity, but it does not enforce data residency or deployment-region governance.
D). Microsoft Purview
Microsoft Purview is important for data governance, classification, compliance, and auditing , but this question is centered on adhering to residency and movement regulations for deployed AI resources and grounding data. The most direct Azure governance mechanism for that is Azure Policy , because it can enforce location and configuration controls.
Expert reasoning
Use this exam shortcut:
* Need to enforce where Azure resources can be deployed # Azure Policy
* Need telemetry/monitoring # Azure Monitor
* Need security posture/compliance visibility # Defender for Cloud
* Need data classification and governance cataloging # Microsoft Purview