Question

Difficulty: MediumAzure Resources, Resource Groups, Subscriptions, and Management Groups

A software development team is setting up a multi-tier application in Azure. They have created a resource group named App-RG in the North Europe region. The project requirements specify:
1. A database must be deployed in the West Europe region to comply with data residency guidelines.
2. A set of storage accounts must be grouped in a nested sub-resource group inside App-RG to isolate administrative permissions.

Which of the following describes the correct deployment approach for these requirements?

  1. Deploy the database in the West Europe region within App-RG, and create a separate, standard resource group for the storage accounts.Answer
  2. B
    Deploy the database in the West Europe region within App-RG, and create a nested resource group inside App-RG to host the storage accounts.
  3. C
    Deploy the database in the North Europe region to match the region of App-RG, and create a separate, standard resource group for the storage accounts.
  4. D
    Deploy the database in the North Europe region to match the region of App-RG, and create a nested resource group inside App-RG to host the storage accounts.

Answer

Deploy the database in the West Europe region within App-RG, and create a separate, standard resource group for the storage accounts.
The correct answer correctly identifies that resources are not restricted to their resource group's location, allowing a West Europe database to reside in a North Europe resource group. It also correctly notes that because resource groups cannot be nested in Azure, a separate resource group must be created to isolate the storage accounts' permissions.

Step-by-Step Solution

1
Evaluate the database region requirement.
The database can be successfully deployed in West Europe inside a resource group that is located in North Europe.
An Azure resource group only stores metadata in its designated region. The resources inside the group can reside in any supported Azure region.
2
Evaluate the nested resource group requirement.
A nested resource group cannot be created.
Azure does not support nesting resource groups; all resource groups are flat, top-level administrative containers under an Azure subscription.
3
Identify the compliant deployment strategy.
The database is placed in the West Europe region within the existing App-RG, while a new, separate resource group is created to isolate permissions for the storage accounts.
This is the only strategy that respects both the region flexibility of resources and the non-nested model of Azure resource groups.

Key Concept

Azure Resource Groups boundaries, location independence, and non-nesting rules.
Estimated Time:1m 30s
Rate this question