Exam AZ-900 topic 1 question 17 discussion

Azure Resource Manager templates should be used (as in the next question). Management groups are only containers. To add the automating capability we need to utilise templates.

Answer seems correct. It should be ARM template. https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/overview To meet these challenges, you can automate deployments and use the practice of infrastructure as code. In code, you define the infrastructure that needs to be deployed. The infrastructure code becomes part of your project. Just like application code, you store the infrastructure code in a source repository and version it. Any one on your team can run the code and deploy similar environments.

it says that it should be included in the strategy, not to be the key of the strategy

ARM (Azure Resource Manager) is a tool that automates the deployments on the AZ cloud.

Management groups in Azure are primarily used to organize and manage access, policies, and compliance across subscriptions. While they provide a way to structure resources at a higher level than subscriptions, they do not directly automate the creation of Azure resources. To create Azure resources automatically, you would typically use services like Azure Resource Manager (ARM) templates, Azure Automation, or Azure DevOps pipelines. These tools allow for the provisioning and configuration of resources automatically, ensuring consistency across environments. Therefore, management groups are not the correct solution for automating the creation of resources.

Management Groups do not create Azure resources, the given solution does not meet the goal.

Azure Resource Manager.

Azure Resource Manager templates is correct tool.

b is correct

Management groups provide a hierarchical structure for organizing and managing Azure subscriptions. By creating a management group for each business unit, you can: Centralized Policy: Apply consistent policies, such as resource limits, security settings, and tag requirements, to all subscriptions within a management group. This ensures that resources are provisioned according to your organization's standards. Simplified Management: Manage multiple subscriptions efficiently from a single location. Role-Based Access Control (RBAC): Assign appropriate roles to users at the management group level, allowing them to manage resources within their respective business units.

No Management groups in Azure are used to manage access, policies, and compliance across multiple subscriptions. While they are useful for organizing and applying governance at scale, they do not inherently provide a way to automatically create and deploy Azure resources. To automate the creation of Azure resources, you should consider using Azure Resource Manager (ARM) templates, Azure Blueprints, or Infrastructure as Code (IaC) tools like Terraform. These tools allow you to define and deploy Azure resources in a repeatable and consistent manner. So, including management groups alone does not meet the goal of automatically creating Azure resources for each business unit.

A. Yes Management groups can be used to automate the creation of Azure resources. Management groups provide a hierarchical way to manage access, policies, and compliance for multiple subscriptions. You can use management groups to apply policies and initiatives across a set of subscriptions, so that you can easily manage access and apply policies to groups of resources. Therefore, including management groups in the strategy would allow you to automate the creation of Azure resources for each business unit, and would meet the goal of the scenario.

The answer seems to be A. Yes Using Azure management groups can be an effective strategy for organizing and managing resources, especially when you have multiple business units that require identical Azure resources. Azure management groups provide a way to apply governance and policies across multiple subscriptions, making it easier to enforce consistent standards and configurations. By creating management groups and associating subscriptions under those groups, you can define policies, access controls, and apply consistent naming conventions or tagging across all the resources used by each business unit. This can simplify resource deployment and management while ensuring that all business units follow the same guidelines. So, recommending the use of management groups in the strategy can help meet the goal of automatically creating and managing Azure resources for each business unit.

a) Sim Explicação: Os Grupos de Gerenciamento no Azure são uma maneira eficaz de organizar e gerenciar recursos em grande escala, fornecendo uma hierarquia para aplicar políticas e atribuir permissões de gerenciamento. Com os Grupos de Gerenciamento, é possível automatizar a criação de recursos do Azure para diferentes unidades de negócios de forma organizada e consistente. Portanto, recomendar a inclusão de Grupos de Gerenciamento na estratégia atende ao objetivo de criar recursos do Azure automaticamente para várias unidades de negócios.

A) Yes Explanation: Management Groups in Azure are an effective way to organize and manage resources at scale, providing a hierarchy for applying policies and assigning management permissions. With Management Groups, you can automate the creation of Azure resources for different business units in an organized and consistent way. Therefore, recommending the inclusion of Management Groups in the strategy serves the purpose of automatically creating Azure resources for multiple business units.

Should be ARM

B. Answer is NO. ARM templates works fine, but given the requirement to create Azure resources automatically and consistently for each business unit, Azure Blueprints would be the more comprehensive solution, as it includes additional governance features that can be beneficial for managing multiple business units.