Question

Difficulty: HardAzure Subscription Management and Cost Control

Your company has an Azure environment with a management group named `MG-Corp` and two subscriptions named `Sub-App` and `Sub-Shared`. `Sub-Shared` contains a resource group named `RG-Monitoring` which hosts a storage account named `saexportdata`.

You need to configure Azure Cost Management to meet the following requirements:
- Automatically export daily cost data of `Sub-App` to the `saexportdata` storage account.
- Trigger an automated runbook located in `Sub-Shared` to stop non-production workloads when the monthly costs of `Sub-App` exceed 10,00010,000 USD.

Which two actions should you perform? (Select two.)

  1. In `Sub-App`, create a budget and configure an alert threshold associated with an action group that targets the runbook.Answer
  2. B
    In `Sub-App`, create a budget with a limit of 10,00010,000 USD and associate the action group directly to the budget scope without defining alert thresholds.
  3. In `Sub-App`, configure a Cost Management export that targets the `saexportdata` storage account.Answer
  4. D
    Apply a `ReadOnly` lock to `RG-Monitoring` to prevent accidental deletion of `saexportdata` while permitting the daily export.

Answer

The correct actions are: (1) In the source subscription, create a budget and configure an alert threshold associated with an action group that targets the runbook; and (2) In the source subscription, configure a Cost Management export that targets the storage account.
To meet the requirements, you must perform two actions. First, to automatically export daily cost data of one subscription to a storage account in another subscription within the same tenant, you can configure a Cost Management export in the source subscription pointing to the target storage account. Second, to trigger an automated runbook when the monthly cost exceeds a threshold, you must create a budget in the source subscription and configure an alert threshold (such as 100%100\%) linked to an action group that targets the runbook.

Step-by-Step Solution

1
Identify the mechanism to automate actions based on cost limits.
Determine that Azure Budgets can trigger Action Groups, which can execute Automation runbooks.
This is necessary to satisfy the requirement of stopping non-production workloads when costs exceed a threshold.
2
Determine the configuration requirements for budget alerts.
Confirm that an alert threshold must be defined to associate the budget with an Action Group.
Simply creating a budget limit without alert thresholds will not trigger any automated action.
3
Analyze how to export daily cost data to a storage account in a different subscription.
Verify that Azure Cost Management exports support cross-subscription destinations within the same Microsoft Entra tenant.
This allows exporting `Sub-App` cost data directly to `saexportdata` in `Sub-Shared`.
4
Evaluate the effect of resource locks on the storage account's resource group.
Recognize that a `ReadOnly` lock blocks `listKeys` (a POST operation) which is required for the export to write data.
This shows that applying a `ReadOnly` lock on the destination resource group will cause the export to fail.

Key Concept

Azure Cost Management budgets require alert thresholds to trigger action groups. Cost exports can target storage accounts in different subscriptions within the same tenant, but control-plane blocking configurations like `ReadOnly` locks will prevent the export from writing data by blocking key retrieval.
Rate this question