Which Azure Policy effect immediately blocks a non-compliant resource deployment from completing?

Question

Microsoft Azure Fundamentals — Hard

Which Azure Policy effect immediately blocks a non-compliant resource deployment from completing?

Accepted Answer

The Azure Policy effect that immediately blocks a non-compliant resource deployment from completing is Deny. When this effect is applied, any attempt to deploy a resource that violates the policy will be stopped. Audit, AuditIfNotExists, and DeployIfNotExists effects do not have the same immediate blocking capability.