Soru

Zorluk: KolayAzure RBAC and Subscription Governance

You are designing the resource hierarchy for a new department in Azure to ensure proper subscription governance. You need to organize the resources from the top-level management structure down to the individual resources in the correct logical order according to Azure's resource hierarchy. Order the steps required to establish this hierarchy and deploy the resources.

  1. 1Create a child management group under the Tenant Root Group to group resources for the department.
  2. 2Associate a new or existing Azure subscription with the newly created management group.
  3. 3Create a resource group within the associated Azure subscription.
  4. 4Deploy individual resources, such as virtual machines or storage accounts, into the resource group.

Cevap

The correct sequence of steps to establish the resource hierarchy and deploy resources is: first, create a child management group under the Tenant Root Group; second, associate an Azure subscription with the management group; third, create a resource group within that subscription; and finally, deploy individual resources into the resource group.
The correct order follows Azure's resource hierarchy from top to bottom: Management Groups, Subscriptions, Resource Groups, and Resources. You start by creating a management group under the Tenant Root Group, then link the subscription to it, create a resource group in that subscription, and finally deploy the resources inside the resource group.

Adım Adım Çözüm

1
Create a child management group.
A management group is established under the Tenant Root Group to define organizational governance.
Management groups are the highest level container in the hierarchy below the root and apply policies/RBAC to all child subscriptions.
2
Associate an Azure subscription.
The subscription is placed under the management group.
Subscriptions inherit the governance controls applied to the parent management group and act as billing boundaries.
3
Create a resource group.
A resource group is provisioned within the subscription.
Resources cannot be deployed directly to a subscription; they must reside within a resource group.
4
Deploy individual resources.
Resources are deployed into the resource group.
The resource group is the direct deployment container for Azure resources.

Anahtar Kavram

Azure Resource Hierarchy and Governance Scope
Bu soruyu puanla