exam questions

Exam AZ-305 All Questions

View all questions & answers for the AZ-305 exam

Exam AZ-305 topic 1 question 19 discussion

Actual exam question from Microsoft's AZ-305
Question #: 19
Topic #: 1
[All AZ-305 Questions]

HOTSPOT -
Your company has the divisions shown in the following table.

You plan to deploy a custom application to each subscription. The application will contain the following:
✑ A resource group
✑ An Azure web app
✑ Custom role assignments
✑ An Azure Cosmos DB account
You need to use Azure Blueprints to deploy the application to each subscription.
What is the minimum number of objects required to deploy the application? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Box 1: 2 -
One management group for each Azure AD tenant
Azure management groups provide a level of scope above subscriptions.
All subscriptions within a management group automatically inherit the conditions applied to the management group.
All subscriptions within a single management group must trust the same Azure Active Directory tenant.

Box 2: 1 -
One single blueprint definition can be assigned to different existing management groups or subscriptions.
When creating a blueprint definition, you'll define where the blueprint is saved. Blueprints can be saved to a management group or subscription that you have
Contributor access to. If the location is a management group, the blueprint is available to assign to any child subscription of that management group.

Box 3: 2 -

Blueprint assignment -
Each Published Version of a blueprint can be assigned (with a max name length of 90 characters) to an existing management group or subscription.
Assigning a blueprint definition to a management group means the assignment object exists at the management group. The deployment of artifacts still targets a subscription.
Reference:
https://docs.microsoft.com/en-us/azure/governance/management-groups/overview https://docs.microsoft.com/en-us/azure/governance/blueprints/overview

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Snownoodles
Highly Voted 2 years, 3 months ago
Blueprint can be assigned to MG level although the following statement from Azure docs is confusing: "Assigning a blueprint definition to a management group means the assignment object exists at the management group. The deployment of artifacts still targets a subscription" https://docs.microsoft.com/en-us/azure/governance/blueprints/overview so the answer should be 2-2-2
upvoted 33 times
Sinae
1 week, 5 days ago
It's correct. You can select multiple subscriptions during an assignment.
upvoted 1 times
...
[Removed]
2 years, 2 months ago
Blueprint assignment to MG is possible and it can be done only by REST API, described in the following link. https://docs.microsoft.com/en-us/rest/api/blueprints/assignments/create-or-update?tabs=HTTP However, properties.scope of assignment object is a single subscription, whch means you have to create an assignment respectively for each subscription. https://docs.microsoft.com/en-us/rest/api/blueprints/assignments/create-or-update?tabs=HTTP#assignment So, 4 subscriptions mean 4 assignments.
upvoted 5 times
...
Balaji_c_s
2 years, 2 months ago
Its just saved at MG level and assigned at Subscription Level. So it should be 2-2-4
upvoted 8 times
ronsav80
2 years, 2 months ago
From the article ref'd in the answer " If the location is a management group, the blueprint is available to assign to any child subscription of that management group.". So if saved to the MG, it is available to any subscription under that MG. So to me it is 2-2-2
upvoted 3 times
ronsav80
2 years, 2 months ago
Check that... the key is "available to any subscription under the MG" so while the MG is available, it has to be applied at the subscription level to take affect. So 2-2-4
upvoted 6 times
...
...
...
mufflon
2 years, 2 months ago
I agree, i believe that the answer is 2-2-2. as described in the provided link.
upvoted 6 times
...
...
Hari2017
Highly Voted 2 years, 1 month ago
2-2-4 is correct
upvoted 10 times
...
SeMo0o0o0o
Most Recent 3 weeks, 3 days ago
WRONG 2 2 4 (4 assignment for 4 subscriptions)
upvoted 3 times
...
Thanveer
1 month, 1 week ago
On July 11, 2026, Blueprints (Preview) will be deprecated. Migrate your existing blueprint definitions and assignments to Template Specs and Deployment Stacks. Blueprint artifacts are to be converted to ARM JSON templates or Bicep files used to define deployment stacks. To learn how to author an artifact as an ARM resource, see:
upvoted 1 times
...
MeisAdriano
1 month, 2 weeks ago
WRONG. RIGHT: 2-1-4 Artificial Intelligence: Management Groups Since there are two different Azure AD tenants (one for each division), you would need 2 management groups. Blueprint Definitions You need 1 blueprint definition that can be applied across all subscriptions, as it will include the resource group, Azure web app, custom role assignments, and Azure Cosmos DB account. Blueprint Assignments You need a total of 4 blueprint assignments (one for each subscription in both the East and West divisions). So the minimum number of objects required are: Management groups: 2 Blueprint definitions: 1 Blueprint assignments: 4
upvoted 3 times
...
cosmicT73
1 month, 3 weeks ago
2-2-4. Explanation: Management Groups (2): One management group per tenant to organize the subscriptions within each tenant. Blueprint Definitions (2): Since Blueprints are tenant-scoped, you need one Blueprint definition per tenant (East and West). Blueprint Assignments (4): Assign the Blueprint to each subscription individually (Sub1, Sub2, Sub3, Sub4) because resource deployments (resource groups, web apps, Cosmos DB accounts) require subscription-level assignments. Even though you might use the same Blueprint definition within a tenant, you need separate assignments for each subscription to deploy the resources into them.
upvoted 2 times
...
Sephethus
4 months ago
A single blueprint definition can include multiple artifacts (resource group, web app, role assignments, Cosmos DB account). The same blueprint definition can be used for both divisions since the structure of the resources is the same. That's the answer Chat GPT gives which leads me to 2, 1, 4. But it appears nobody can agree on this answer and one person says it's no longer on the test after Jan. ¯\_(ツ)_/¯
upvoted 1 times
...
23169fd
5 months, 2 weeks ago
Correct Answer 2-1-4. Management Groups: 2 (one for each division) Blueprint Definitions: 1 (one definition applicable to all subscriptions). (Remember, we literally need 1 definition) Blueprint Assignments: 4 (one for each subscription)
upvoted 2 times
23169fd
5 months, 2 weeks ago
2-2-4 should be the answer. We need 2 definitions for each tenant event the definition is identical.
upvoted 3 times
...
...
varinder82
8 months, 1 week ago
Final Answer: 2-2-2.
upvoted 2 times
...
bryant12138
8 months, 3 weeks ago
I believe after Jan 2024, Blueprint related questions are deprecated
upvoted 2 times
...
ayadmawla
11 months, 1 week ago
This question has had a lot of exchanges. Blueprints can be assigned at an MG level and I quote: “ The only option to prevent subscription owners from removing a blueprint assignment is to assign the blueprint to a management group. In this scenario, only Owners of the management group have the permissions needed to remove the blueprint assignment.” See: https://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/resource-locking under Assign at management group. So answer should be that at a minimum is 2,2,2 imho
upvoted 1 times
...
brajen
11 months, 3 weeks ago
2-2-4 2 Mgmt Group 2 BluePrint Def 4 -Assignment for subcription
upvoted 3 times
...
rajeshrj1981
1 year ago
It is 2,2,2 Two definitions (since there are two tenants) as the plan is to deploy a custom application to each subscription. With Azure Blueprints, the relationship between the blueprint definition (what should be deployed) and the blueprint assignment (what was deployed) is preserved. https://docs.microsoft.com/en-us/azure/governance/blueprints/overview
upvoted 1 times
...
Showkat
1 year ago
The answer is 2-2-2 as multiple subscriptions can be added under single assignment.
upvoted 1 times
lukiduc9625
9 months, 1 week ago
Yes, You can select multiple subscriptions during making assignment but in the background there are created one assignment per subscription. Look at Note box in link https://learn.microsoft.com/en-us/azure/governance/blueprints/create-blueprint-portal#assign-a-blueprint
upvoted 1 times
...
...
sunis1
1 year, 1 month ago
Management Groups: You have two divisions (East and West), so you would need at least 2 Management Groups - one for each division. Blueprint Definitions: A blueprint definition packages together the Azure resources, role assignments, and policy assignments that you want to deploy consistently. Given that you’re deploying the same application (with a resource group, an Azure web app, custom role assignments, and an Azure Cosmos DB account) to each subscription, you would need at least 1 Blueprint Definition. Blueprint Assignments: A blueprint assignment is the act of taking the blueprint definition and assigning it to a subscription. Since you have four subscriptions (sub1, sub2, sub3, sub4), you would need at least 4 Blueprint Assignments - one for each subscription So 2-1-4
upvoted 2 times
...
starseed
1 year, 2 months ago
2,2,4 is the correct answer no need to research further more
upvoted 5 times
...
husam421
1 year, 2 months ago
2.2.4 As blueprint assignments are created on a subscription, the blueprint assign and unassign permissions must be granted on a subscription scope or be inherited onto a subscription scope.
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...