From the Azure portal, you are configuring an Azure policy. You plan to assign policies that use the DeployIfNotExist, AuditIfNotExist, Append, and Deny effects. Which effect requires a managed identity for the assignment? 

Answer options:

A. AuditIfNotExist
B. Append
C. DeployIfNotExist
D. Deny

C

When Azure Policy runs the template in the deployIfNotExists policy definition, it does so using a managed identity. Reference: https://docs.microsoft.com/bs-latn-ba/azure/governance/policy/how-to/remediate-resources