Examkin

Question

Difficulty: HardAzure Resources, Resource Groups, Subscriptions, and Management Groups

An organization is planning to restructure its Azure environment to improve resource management and governance. The IT administrator proposes the following three configurations:

* Statement 1: Place two separate Azure subscriptions under a single custom Management Group to apply a unified Azure Policy.
* Statement 2: Deploy an Azure SQL Database in the West Europe region and place it in a Resource Group that is located in the East US region.
* Statement 3: Create a Resource Group named Prod-DB-RG inside an existing Resource Group named Prod-App-RG to establish a nested parent-child relationship.

Which of these configurations are supported in Azure?

  1. Only Statement 1 and Statement 2Answer
  2. B
    Only Statement 1 and Statement 3
  3. C
    Only Statement 1
  4. D
    All three statements

Answer

Only Statement 1 and Statement 2 are supported.
The configuration described in Statement 1 is supported because Management Groups are specifically designed to organize multiple subscriptions and apply unified governance policies. The configuration described in Statement 2 is supported because resources do not need to share the same region as their parent Resource Group; the Resource Group location only determines where the metadata is stored. Statement 3 is unsupported because Azure does not permit nesting one Resource Group inside another.

Step-by-Step Solution

1
Analyze Statement 1 regarding Management Groups and Subscriptions.
Management Groups can contain multiple subscriptions, and policies applied at the Management Group level are inherited by all child subscriptions. This statement is supported.
Management Groups are designed to manage access, policy, and compliance across multiple subscriptions efficiently.
2
Analyze Statement 2 regarding resource and Resource Group locations.
Resources can be deployed in any supported region, regardless of the region where the parent Resource Group is located. This statement is supported.
A Resource Group is a logical container that stores metadata about resources; the metadata itself resides in the Resource Group's location, but the resources themselves run in their designated regions.
3
Analyze Statement 3 regarding Resource Group nesting.
Resource Groups cannot be nested inside other Resource Groups. This statement is unsupported.
Azure resource hierarchy is strict: Management Groups contain Subscriptions, Subscriptions contain Resource Groups, and Resource Groups contain Resources. Resource Groups cannot contain other Resource Groups.

Key Concept

Azure resource hierarchy rules including Management Groups, Subscriptions, and Resource Groups.
Rate this question

Topics

Azure Resources, Resource Groups, Subscriptions, and Management Groups