Exam AZ-104 topic 4 question 38 discussion

Tag assigned to RG1 - tag1: value1 Tag assigned to storage1: tag2: value2 and tag3: value3 RG1 already exists so does not receive tag2. According to the documentation: "Add a tag to resources" Adds the specified tag and value when any resource missing this tag is created or updated. Existing resources can be remediated by triggering a remediation task. If the tag exists with a different value it will not be changed. Does not modify tags on resource groups.

I was not sure til i read the following, i think part important to pay attention to it the "Append a tag and its value to resources" and as per below Append a tag and its value to resources Appends the specified tag and value when any resource which is missing this tag is created or updated. Does not modify the tags of resources created before this policy was applied until those resources are changed. Does not apply to resource groups. New 'modify' effect policies are available that support remediation of tags on existing resources (see https://aka.ms/modifydoc). Ans is Tag assigned to RG1 - tag1: value1 Tag assigned to storage1: tag2: value2 and tag3: value3 https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/tag-policies

Tags assigned to RG1: tag1: 'value1' and tag2: 'value2' Tags assigned to storage1: tag2: 'value2' and tag3: 'value3' Initial state of RG1: RG1 is created with a tag: tag1: 'value1'. Policy Assignment: Policy1 is assigned to Subscription1. The policy definition is "Append a tag and its value to resources". The tag name specified in the policy is tag2 with a value of value2. Policy Scope: Since Policy1 is assigned to Subscription1, it applies to all resources created within that subscription, including existing resource groups (unless explicitly excluded). Effect of "Append" Policy: An "append" policy adds the specified tag if it's missing. If the tag already exists, it modifies its value to the one defined in the policy. However, if the resource already has the tag defined before the policy is applied and enforced, the policy will append it if it's not present. If tag2 was not on RG1, it will be added.

Tag assigned to RG1: Initially starts with tag1:value1, however, after Policy1 is created AND storage1 is created, Policy1 is considered. Unlike an "Add" policy that does not propagate, an "Append" policy propagates. Therefore Policy1 affects Subscription1, RG1 and any resources created within Subscription1. The "Append" policy examines RG1 as Storage1 is created, notes that tag2 is not there and so "appends" it. So after storage1 is created, RG1 will have tag1:value1 and tag2:value2. Tag assigned to storage1: Tags assigned to resource groups are not inherited by resources created in it. However, as noted above, Policy1 is applicable to storage1. Therefore, after it is created, it will have tag3:value3 that was added manually and tag2:value2 that was added automatically via Policy1.

On Exam 02/07/2024

given answer is correct

- tag1: value1 Only - value2 and tag3: value3 only

Tag assigned to RG1 - tag1: value1 and tag2: value2 Tag assigned to storage1: tag2: value2 and tag3: value3 Virtual machines, storage accounts, web apps, databases, and virtual networks are examples of resources. Resource groups, subscriptions, management groups, and tags are also examples of resources. https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/overview

Correct Answer. This is a really good question. Confusing yet test your real world experience on Tag/Policy.

Correct. RG is not a resource in itself, so it will only have tag 1. Tag 2 is a policy for resources only, and tag 3 was created for the storage account. The storage account has tag 2 as per the policy settings, and obivously has tag 3 associated as per the settings on the resource itself.

answer is correct. confirm it in my lab

As of 17/08/2023, confirmed in Lab. "Append a tag and its value to resources" does not take effect on Resource Groups, only on Resources. Also, the policy applies on newly created or updated resources only. The existing resources will stay as is. So given answer is correct. Created same policy as shown here > Waited 1 Hour > Created new RG > no tags applied from policy. Created Storage Account & VM > tag from policy applied to both.

RG1 Tag: tag1: value1 storage1 Tags: tag1: value1, tag3: value3, tag2: value2

Simular question was on todays exam. (7th April 2023)

This is 100% the correct answer to this question: Tag assigned to RG1 - tag1: value1 Tag assigned to storage1: tag1: value1, tag2: value2 and tag3: value3 Storage1 inherits 'tag1: value1' from RG1 also as storage1 was created in this resource group after it's creation and tags are indeed inherited from the resource group IF created after tags are applied to the resource group. Slight technicality will catch many people out!

The answer is correct. Need to follow the sequence

The resource group Tag does not pass down to the resources. so Tag1: value 1 will never make it to the storage account. But the AZURE POLICY set at the SUB level will be passed down to the NEW RESOURCES ONLY. so it will be Tag2: value 2 and Tag 3