Exam AZ-305 topic 1 question 19 discussion

Blueprint can be assigned to MG level although the following statement from Azure docs is confusing: "Assigning a blueprint definition to a management group means the assignment object exists at the management group. The deployment of artifacts still targets a subscription" https://docs.microsoft.com/en-us/azure/governance/blueprints/overview so the answer should be 2-2-2

2-2-4 is correct

WRONG 2 2 4 (4 assignment for 4 subscriptions)

On July 11, 2026, Blueprints (Preview) will be deprecated. Migrate your existing blueprint definitions and assignments to Template Specs and Deployment Stacks. Blueprint artifacts are to be converted to ARM JSON templates or Bicep files used to define deployment stacks. To learn how to author an artifact as an ARM resource, see:

WRONG. RIGHT: 2-1-4 Artificial Intelligence: Management Groups Since there are two different Azure AD tenants (one for each division), you would need 2 management groups. Blueprint Definitions You need 1 blueprint definition that can be applied across all subscriptions, as it will include the resource group, Azure web app, custom role assignments, and Azure Cosmos DB account. Blueprint Assignments You need a total of 4 blueprint assignments (one for each subscription in both the East and West divisions). So the minimum number of objects required are: Management groups: 2 Blueprint definitions: 1 Blueprint assignments: 4

2-2-4. Explanation: Management Groups (2): One management group per tenant to organize the subscriptions within each tenant. Blueprint Definitions (2): Since Blueprints are tenant-scoped, you need one Blueprint definition per tenant (East and West). Blueprint Assignments (4): Assign the Blueprint to each subscription individually (Sub1, Sub2, Sub3, Sub4) because resource deployments (resource groups, web apps, Cosmos DB accounts) require subscription-level assignments. Even though you might use the same Blueprint definition within a tenant, you need separate assignments for each subscription to deploy the resources into them.

A single blueprint definition can include multiple artifacts (resource group, web app, role assignments, Cosmos DB account). The same blueprint definition can be used for both divisions since the structure of the resources is the same. That's the answer Chat GPT gives which leads me to 2, 1, 4. But it appears nobody can agree on this answer and one person says it's no longer on the test after Jan. ¯\_(ツ)_/¯

Correct Answer 2-1-4. Management Groups: 2 (one for each division) Blueprint Definitions: 1 (one definition applicable to all subscriptions). (Remember, we literally need 1 definition) Blueprint Assignments: 4 (one for each subscription)

Final Answer: 2-2-2.

I believe after Jan 2024, Blueprint related questions are deprecated

This question has had a lot of exchanges. Blueprints can be assigned at an MG level and I quote: “ The only option to prevent subscription owners from removing a blueprint assignment is to assign the blueprint to a management group. In this scenario, only Owners of the management group have the permissions needed to remove the blueprint assignment.” See: https://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/resource-locking under Assign at management group. So answer should be that at a minimum is 2,2,2 imho

2-2-4 2 Mgmt Group 2 BluePrint Def 4 -Assignment for subcription

It is 2,2,2 Two definitions (since there are two tenants) as the plan is to deploy a custom application to each subscription. With Azure Blueprints, the relationship between the blueprint definition (what should be deployed) and the blueprint assignment (what was deployed) is preserved. https://docs.microsoft.com/en-us/azure/governance/blueprints/overview

The answer is 2-2-2 as multiple subscriptions can be added under single assignment.

Management Groups: You have two divisions (East and West), so you would need at least 2 Management Groups - one for each division. Blueprint Definitions: A blueprint definition packages together the Azure resources, role assignments, and policy assignments that you want to deploy consistently. Given that you’re deploying the same application (with a resource group, an Azure web app, custom role assignments, and an Azure Cosmos DB account) to each subscription, you would need at least 1 Blueprint Definition. Blueprint Assignments: A blueprint assignment is the act of taking the blueprint definition and assigning it to a subscription. Since you have four subscriptions (sub1, sub2, sub3, sub4), you would need at least 4 Blueprint Assignments - one for each subscription So 2-1-4

2,2,4 is the correct answer no need to research further more

2.2.4 As blueprint assignments are created on a subscription, the blueprint assign and unassign permissions must be granted on a subscription scope or be inherited onto a subscription scope.