Question

Difficulty: HardAzure Resources, Resource Groups, Subscriptions, and Management Groups

A company plans to deploy a multi-tier web application in Azure. The deployment architecture requires resources to be distributed across different geographical locations for high availability, while keeping billing and administrative access segregated for different departments.

Which two configuration guidelines are valid when designing the Azure resource hierarchy? (Select two)

  1. Deploying resources in different Azure regions than the region of the resource group they belong toAnswer
  2. B
    Nesting database resource groups inside web application resource groups to inherit permission and lock configurations
  3. Using separate subscriptions to enforce distinct billing boundaries and access control limits across departmentsAnswer
  4. D
    Configuring resources to inherit their geographical location automatically from the resource group in which they are placed

Answer

Deploying resources in different Azure regions than the region of the resource group they belong to, and using separate subscriptions to enforce distinct billing boundaries and access control limits across departments.
Deploying resources in different regions than their resource groups is valid because a resource group's location only determines where its metadata is stored. Additionally, using separate subscriptions is a valid configuration as subscriptions represent a billing and access management boundary in Azure.

Step-by-Step Solution

1
Analyze the relationship between Azure resources and resource groups.
Confirm that a resource group's location is for storing metadata and does not restrict the location of the resources it contains, nor do resources inherit the resource group's location.
This evaluates the region and nesting properties of resource groups.
2
Evaluate resource group nesting constraints.
Identify that resource groups cannot be nested inside other resource groups.
This rules out hierarchical nesting solutions for resource groups.
3
Examine the function of Azure subscriptions in the resource hierarchy.
Confirm that subscriptions act as logical boundaries for billing and access control (RBAC).
This determines if subscriptions meet the requirement of segregating billing and administration.

Key Concept

Azure resource groups hold metadata and have no region restrictions on resources, while subscriptions establish logical boundaries for billing and access control.
Rate this question