Exam AZ-304 topic 2 question 28 discussion

2,2,4 Management groups can't span AAD tenant, so you need 2 management groups. Blueprints definition can be saved within management group which, in turn, means you need 2 blueprint definitions. Blueprint assignments are at subscription level, therefore you need 4.

After giving a lot of though, I will go with the answer, you will need 2, 2 and 2. You need 2 Management Groups as there is to AAD involved. You need 2 Blueprint as you will need one definition in each root management group. You need 2 Assignments as you can assign the blueprints to the root management group though the REST API. Ref on root management group: https://docs.microsoft.com/en-us/azure/security-center/security-center-management-groups "Each Azure AD tenant is given a single top-level management group called the root management group. This root management group is built into the hierarchy to have all management groups and subscriptions fold up to it. This group allows global policies and Azure role assignments to be applied at the directory level."

Assigning a blueprint definition to a management group means the assignment object exists at the management group. The deployment of artifacts still targets a subscription. To perform a management group assignment, the Create Or Update REST API must be used and the request body must include a value for properties.scope to define the target subscription. Then the answer is correct. box 1 = 2 box 2 = 1 box 3 = 4.

2-2-2 2 AAD, so 2 root MG BP defs # = Root MG#, so it's BP defs # is 2 You can assign BP to Root MGs, so BP assignments # =2

- 2 Management groups to separate regions - 1 Blueprint Definitioin - Assign that blueprint definition to each of the subcritptions. That's 4. Answer is correct.

People should just be quiet if they are not sure about what they are doing instead of clogging the thread. The answer is correct.

People should just be quiet if they are not sure about what they are doing instead of clogging the thread. The answer is correct.

Question is about "minimum number of objects required to deploy the application". 2 management groups one for tenant (can't have same across tenant) 2 Blueprint Objects (one definition but need two objects one for each tenant stored at management group level) 2 Blueprint assignments (since it can be assigned at Management group level, minimum 2 are required)

The correct answer is 2,1,2, the first two box is obvious the tricky one is the third box, which the given answer is wrong, it says the minimum number of object plus the published blueprint can be assigned either to a management group or a subscription, so in this case the number of assignments will be 2 (East and West management groups): Blueprint assignment: Each Published Version of a blueprint can be assigned (with a max name length of 90 characters) to an existing management group or subscription. In the portal, the blueprint defaults the Version to the one Published most recently. If there are artifact parameters or blueprint parameters, then the parameters are defined during the assignment process.

Must be 4 assignments, because the web app name is one of the parameters specified in the assignment, and web app names must be globally unique (unless we're deploying web apps into ASEs, and the question doesn't say this). We are deploying 4 web apps, 1 into each subscription, so 4 assignments. A web site must have a globally unique URL. When you create a web site that uses a hosting plan, the URL is http://<app-name>.azurewebsites.net. The app name must be globally unique. https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules#microsoftweb

On AZ-305 exam - 5.7.22

In my opinion, it should be: 2 Management groups, 2 Blueprint Definitions - one definition for each management group which makes it 2) and 2 blueprints assignment - blueprint assignments can be done at the Management or at the Subscription level. I will prefer to assign them at the management level rather than the subscription level so fewer admin tasks, also a minimum number of objects is what the question specifically asking.

On my exam today.

It's 2-2-4 for me. Blueprint definitions can be assigned to different mgmt groups or subs. But Azure has very few concepts for those assignments to cross tenant boundaries. Two tenants means two mgmt groups, two blueprint definitions (even if one's a copy of the other, they're still two separate definitions) and 4 assignments (one per sub).

should be 2,1,2 design like this: one root subscription, under one root there are 2 management group (East and West), under each group there are two subscription. With this design, you have 2 mgr group, 1 blueprint stored at the root, then assign the blueprint to 2 mgr group. So, 2,1,2.

Answer is 2,2,2

2 - because of diff tenant 1- create BP for one MG, export/import to other MG 2 - question mentions "assignment object", not assignment during deployment. BP assignment objects can exists at MG level (with REST API)