exam questions

Exam AZ-305 All Questions

View all questions & answers for the AZ-305 exam

Exam AZ-305 topic 4 question 47 discussion

Actual exam question from Microsoft's AZ-305
Question #: 47
Topic #: 4
[All AZ-305 Questions]

HOTSPOT -
You plan to create an Azure environment that will contain a root management group and 10 child management groups. Each child management group will contain five Azure subscriptions. You plan to have between 10 and 30 resource groups in each subscription.
You need to design an Azure governance solution. The solution must meet the following requirements:
✑ Use Azure Blueprints to control governance across all the subscriptions and resource groups.
✑ Ensure that Blueprints-based configurations are consistent across all the subscriptions and resource groups.
✑ Minimize the number of blueprint definitions and assignments.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Box 1. The root management group
When creating a blueprint definition, you'll define where the blueprint is saved. Blueprints can be saved to a management group or subscription that you have
Contributor access to. If the location is a management group, the blueprint is available to assign to any child subscription of that management group.
The root management group is built into the hierarchy to have all management groups and subscriptions fold up to it. This root management group allows for global policies and Azure role assignments to be applied at the directory level.
Box 2. The root management group
Reference:
https://docs.microsoft.com/en-us/azure/governance/management-groups/overview https://docs.microsoft.com/en-us/azure/governance/blueprints/overview

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
santi1975
Highly Voted 2 years, 3 months ago
Define: Root Management Groups Assignments: Subscriptons. In the dark MS language: "Assigning a blueprint definition to a management group means the assignment object exists at the management group. The deployment of artifacts still targets a subscription." https://docs.microsoft.com/en-us/azure/governance/blueprints/overview#blueprint-assignment
upvoted 64 times
DeBoer
1 year, 9 months ago
just to support this: "Blueprints can be saved to a management group or subscription that you have Contributor access to. If the location is a management group, the blueprint is available to assign to any child subscription of that management group." https://docs.microsoft.com/en-us/azure/governance/blueprints/overview
upvoted 3 times
MiniLa92
1 year ago
Again to support this, those who are saying that with the Create Or Update REST API we can create assignment on Management group level, if you refer this MS doc for API req/res you will notice that even when creating assignment on Management group level, we have to pass the subscription ID in request body under properties.scope (which means with one API call we can create assignment only for one subscription at a time) https://learn.microsoft.com/en-us/rest/api/blueprints/assignments/create-or-update?view=rest-blueprints-2018-11-01-preview&tabs=HTTP#assignment So For me the answer is : Define: Root Management Groups Assignments: Subscriptons
upvoted 2 times
...
...
...
Davin0406
Highly Voted 2 years, 1 month ago
root management groups and subscriptions. appeared in exam, 10/14/2022. I passed with 946/1000 and there were only 1~2 new questions but others were all from AZ-305 dump.
upvoted 41 times
...
SeMo0o0o0o
Most Recent 3 weeks ago
WRONG 1. The root management group 2. The subscriptions
upvoted 1 times
...
Teerawee
2 months, 2 weeks ago
The root management group The subscriptions
upvoted 1 times
...
varinder82
8 months, 3 weeks ago
Final Answer: Define: Root Management Groups Assignments: Subscriptons.
upvoted 4 times
...
Fidel_104
9 months ago
On a side note, AZ Blueprints are being deprecated, so probably we won't see many questions relating to them in upcoming exams. Source: https://learn.microsoft.com/en-us/azure/governance/blueprints/overview
upvoted 2 times
...
SDiwan
9 months, 2 weeks ago
Define: Root Management Groups Assignments: Subscriptons Tested in lab, while assigning first thing to select is Subscriptions. It is multi-select, so you can choose as many subs as you want. In the example scenario since there are like 100s of subs, i would assume the admin will use CLI or powershell to provide the sub names.
upvoted 1 times
...
randy0077
1 year, 1 month ago
Level at which to define the blueprints: The root management group Level at which to create the blueprint assignments: The child management groups
upvoted 3 times
...
ltson1
1 year, 3 months ago
Seems to be subscription for box 2, management group is assignable but it will not inherit to all subscriptions but just one default: https://learn.microsoft.com/en-us/answers/questions/420039/blueprint-assignment-at-management-group-level
upvoted 3 times
...
NotMeAnyWay
1 year, 5 months ago
1. Level at which to define the blueprints: b. the root management group Defining the blueprints at the root management group level will ensure the blueprints are available to all child management groups and subscriptions, maintaining consistency and minimizing the number of blueprint definitions needed. 2. Level at which to create the blueprint assignments: b. the root management group Assigning the blueprints at the root management group level will apply the blueprints to all child management groups and subscriptions, ensuring a consistent governance structure and minimizing the number of blueprint assignments. (Assigning at the Sub level would mean about 50 assignments which is not what the question asks)
upvoted 7 times
...
alexander_panfilenok
1 year, 5 months ago
Each Published Version of a blueprint can be assigned (with a max name length of 90 characters) to an existing management group or subscription. https://learn.microsoft.com/en-us/azure/governance/blueprints/overview#blueprint-assignment
upvoted 2 times
...
dave22339
1 year, 5 months ago
Each Published Version of a blueprint can be assigned (with a max name length of 90 characters) to an existing management group or subscription (From the link given in the answer). So i think given answer is supported by MS documentation (although I've not tried it to be fair).
upvoted 2 times
...
betterthanlife
1 year, 7 months ago
In my lab with 1 Root MG (duh), 3 Child MGs, each Child MG has 1 Subscription each. - When creating a BP I can only DEFINE it on a SINGLE Child MG, NOT the Root MG (it is greyed out), even if the Root MG has a subscription I still cannot DEFINE the BP on the Root MG. Also, tired in PS & also cannot DEFINE on the Root MG "scope is invalid". NOTE: Once a BP is DEFINED during creation it CANNOT be re-DEFINED (greyed out). Ø A BP CANNOT be DEFINED on the Root MG or on more than a SINGLE Child MG, I need 3 BPs, 1 for each Child MG - During creating of the BP I can optionally DEFINE it on any of the individual Subscriptions (but I don't because I'm pretending my MGs have multiple Subscriptions) - I publish the BP & then can ASSIGN it ONLY to any or all of the Subscriptions below that MG. Ø A BP can ONLY be ASSIGNED to a Subscription(s), a BP cannot be ASSIGNED to MGs
upvoted 1 times
betterthanlife
1 year, 7 months ago
Option 1: Child Management Groups Option 2: The subscriptions https://learn.microsoft.com/en-us/azure/governance/blueprints/create-blueprint-portal https://learn.microsoft.com/en-us/azure/governance/blueprints/create-blueprint-powershell
upvoted 1 times
betterthanlife
1 year, 7 months ago
I WAS WRONG! I hope you can find it in your heart to forgive me for doing all this work for you. Studying back through, checking YOU PEEPS (& myself of course)... you can indeed assign a BP to the Root Management Group, I just did it after granting Contributor to my cloud-only default GA account I'm using on the Root Management Group. However the only option is to assign it to subscriptions, any subordinate to the MG where it is defined, I cannot assign it to other sub management groups (that's just how it is). Option 1: Root Management Groups Option 2: The subscriptions So, thus, therefore, without a doubt, unless MS changes something in the next 24 hours, which is entirely possible.
upvoted 6 times
lvz
1 year, 6 months ago
exactly what i thought, i.e. you need to have GA to work with root management group. thanks for the update though. really helps.
upvoted 2 times
...
...
...
...
azkumar305
1 year, 7 months ago
Got this on 14-Apr-2023
upvoted 6 times
...
steel72
1 year, 8 months ago
I think the provided answer is correct, blueprints can be assigned at management group level: https://learn.microsoft.com/en-us/azure/governance/blueprints/overview#blueprint-assignment
upvoted 1 times
...
zellck
1 year, 9 months ago
1. Root MG 2. Subscriptions https://learn.microsoft.com/en-us/azure/governance/blueprints/overview#blueprint-definition-locations When creating a blueprint definition, you'll define where the blueprint is saved. Blueprints can be saved to a management group or subscription that you have Contributor access to. If the location is a management group, the blueprint is available to assign to any child subscription of that management group. https://learn.microsoft.com/en-us/azure/governance/blueprints/overview#blueprint-assignment Assigning a blueprint definition to a management group means the assignment object exists at the management group. The deployment of artifacts still targets a subscription. https://learn.microsoft.com/en-us/azure/governance/blueprints/overview#permissions-in-azure-blueprints As blueprint assignments are created on a subscription, the blueprint assign and unassign permissions must be granted on a subscription scope or be inherited onto a subscription scope.
upvoted 5 times
Cris13
1 year, 9 months ago
The 2nd question is "The level at which to create the blueprint assignement", so you can assign the blueprint at the management group level but the assignemnts will still be made at the subscription level. You only make 1 assignment but 50 will be visible (1 for each subscription) . At least that is how I see it.
upvoted 1 times
...
...
Jacky_exam
1 year, 9 months ago
ChatGPT: To meet the requirements, you should include the following in the solution: Define the Blueprints at the root management group level to ensure that the configurations are consistent across all the subscriptions and resource groups. Create the blueprint assignments at the child management group level to apply the blueprint to all the subscriptions and resource groups under each child management group. Therefore, you should select: b. The root management group for "Level at which to define the blueprints?" a. The child management groups for "Level at which to create the blueprint assignments?"
upvoted 1 times
SomeCert
1 year, 9 months ago
Wrong again
upvoted 5 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...