Examkin

Question

Difficulty: EasyAzure Resources, Resource Groups, Subscriptions, and Management Groups

An enterprise is designing its Azure governance model. The compliance department requires that a specific security policy be applied to all resources deployed across the company's 12 Azure subscriptions. The IT team wants to apply this policy efficiently without configuring it on each subscription individually. Which Azure management boundary should the IT team use to group these subscriptions and apply the policy?

  1. Management groupsAnswer
  2. B
    Nested resource groups
  3. C
    A single resource group that forces all resources to share its region
  4. D
    Resource tags applied at the subscription level

Answer

Management groups should be used to group the subscriptions and apply the policy, as they provide a governance scope above subscriptions that propagates down via inheritance.
Management groups provide a level of scope above subscriptions. When a policy is assigned to a management group, that policy automatically inherits down to all subscriptions grouped under it, as well as the resource groups and resources within those subscriptions.

Step-by-Step Solution

1
Identify the requirement to apply an Azure Policy across multiple subscriptions simultaneously.
Recognized that individual subscription assignment is inefficient.
The organization wants to manage 12 subscriptions collectively rather than individually.
2
Determine the correct Azure containment hierarchy level that sits above subscriptions.
Identified management groups as the container for subscriptions.
Management groups are specifically designed to group subscriptions and apply policies or access controls that inherit downward.
3
Evaluate and rule out resource groups and tags as containers for subscriptions or policy enforcement boundaries.
Confirmed that resource groups cannot contain subscriptions, cannot be nested, and tags do not enforce policy inheritance.
Eliminating invalid configurations ensures compliance with Azure architectural rules.

Key Concept

Azure Management Groups inheritance and subscription organization hierarchy
Rate this question

Topics

Azure Resources, Resource Groups, Subscriptions, and Management Groups