AZ-500 Microsoft Azure Security Technologies Practice Questions

Practice Questions
A company currently has three Azure subscriptions. They have defined a set of security policy definitions. They want to ensure that these definitions are deployed across all subscriptions.
You decide to create the security definitions and assignments and scope them at the resource group level.
Would this fulfill the requirement?
A. Yes
B. No
Answer: B
Explanation:
You need to create a management group and then scope the policy at the level of the management group.
https://docs.microsoft.com/en-us/azure/security-center/tutorial-security-policy
A company currently has three Azure subscriptions. They have defined a set of security policy definitions. They want to ensure that these definitions are deployed across all subscriptions.
You decide to create management groups and then scope the policies at the management group level.
Would this fulfill the requirement?
A. Yes
B. No