A financial company is organizing its Azure resources for a new customer portal. The portal requires separate environments for development and production, each with distinct compliance requirements and billing lines. The administration team is designing the hierarchy using management groups, subscriptions, and resource groups. Which two statements are true regarding how the team can structure these Azure resources? (Select two.)
- A single resource group can contain resources that reside in different Azure regions than the resource group itself.Answer
- BThe development and production resource groups can be nested inside a parent portal resource group to organize resources hierarchically.
- Subscriptions can be grouped under management groups to apply unified policy definitions and access controls that inherit down to the resources.Answer
- DAll virtual machines and storage accounts in a resource group must be deployed in the same physical region as the resource group's location.
Answer
A single resource group can contain resources that reside in different Azure regions than the resource group itself, and subscriptions can be grouped under management groups to apply unified policy definitions and access controls that inherit down to the resources.
The correct options are that a resource group can contain resources from different regions, and subscriptions can be organized under management groups. In Azure, a resource group's location is only for metadata storage, meaning the actual resources (like virtual machines or databases) can reside in different geographical regions. Additionally, management groups allow administrators to organize multiple subscriptions into a hierarchy, facilitating the inheritance of policies and access controls.
Step-by-Step Solution
Key Concept
Azure resource hierarchy and governance boundaries
Estimated Time:1m 30s