Examkin

Question

Difficulty: EasyAzure RBAC and Subscription Governance

Arrange the levels of the Azure resource hierarchy in order from the highest scope (broadest access) to the lowest scope (most granular access).

  1. 1Management Groups
  2. 2Subscriptions
  3. 3Resource Groups
  4. 4Resources

Answer

The correct order of the Azure resource hierarchy from highest to lowest scope is: Management Groups, Subscriptions, Resource Groups, and Resources.
The correct order from broadest to most granular scope is Management Groups, Subscriptions, Resource Groups, and Resources. This structure governs scope inheritance, where permissions and policies assigned at higher scopes are inherited by lower scopes.

Step-by-Step Solution

1
Identify the broadest administrative boundary used for managing multiple subscriptions.
Management Groups represent the highest level.
Management groups allow you to organize subscriptions and apply governance controls at scale.
2
Identify the billing and management boundary beneath Management Groups.
Subscriptions sit below Management Groups.
Subscriptions group resources together and are associated with a single billing account.
3
Determine the logical container within a subscription.
Resource Groups are positioned beneath Subscriptions.
Resource groups organize resources that share the same lifecycle and deployment cycle.
4
Identify the individual instances of Azure services.
Resources sit at the lowest level of the hierarchy.
Resources are the final deployable units (like VMs or storage accounts) inheriting all access and policies from parent scopes.

Key Concept

Azure Resource Hierarchy and Scope Inheritance
Estimated Time:45s
Rate this question

Topics

Azure RBAC and Subscription Governance