Soru

Zorluk: KolayManagement Groups Hierarchies

An organization is designing its Azure Management Group hierarchy to manage multiple subscriptions. Which of the following statements regarding the structure and inheritance behavior of Azure Management Groups are correct? (Select TWO.)

  1. A management group hierarchy supports up to six levels of depth, excluding the root management group and subscriptions.Cevap
  2. Each child management group or subscription can have only one parent management group.Cevap
  3. C
    A Resource Lock applied at a parent management group level does not inherit to child subscriptions or resource groups.
  4. D
    Policies assigned at a parent management group level are not inherited by subscriptions that have custom policies assigned.
  5. E
    A subscription owner can delete the Root Management Group if it contains no custom management groups.

Cevap

A management group hierarchy supports up to six levels of depth, excluding the root management group and subscriptions; and each child management group or subscription can have only one parent management group.
The correct statements are that a management group hierarchy supports up to six levels of depth (excluding the root and subscriptions) and that each child management group or subscription can have only one parent management group. These represent standard structural constraints in Azure resource governance.

Adım Adım Çözüm

1
Analyze the structural rules of Azure Management Group hierarchies.
Determine that the maximum depth of the hierarchy is six levels (excluding the root management group and subscriptions), and the structure is a strict tree where each node has exactly one parent.
This establishes the fundamental layout constraints for management groups.
2
Evaluate the inheritance behavior of resource locks and policies across the hierarchy.
Confirm that both policies and resource locks are inherited down the hierarchy and cannot be bypassed or blocked by lower-level configurations.
This rules out the options claiming that resource locks do not inherit or that policy inheritance can be blocked.
3
Verify the properties and lifecycle of the Root Management Group.
Confirm that the Root Management Group is a system-created, undeletable container that serves as the root of the hierarchy.
This rules out the option stating that the Root Management Group can be deleted.

Anahtar Kavram

Azure Management Groups allow logical grouping of subscriptions and resources in a hierarchical tree structure to apply policies and RBAC roles that inherit down the hierarchy. The hierarchy supports up to six levels of depth (excluding root and subscriptions), and each child node can have only one parent.
Bu soruyu puanla