Exam AZ-305 topic 1 question 19 discussion

Blueprint can be assigned to MG level although the following statement from Azure docs is confusing: "Assigning a blueprint definition to a management group means the assignment object exists at the management group. The deployment of artifacts still targets a subscription" https://docs.microsoft.com/en-us/azure/governance/blueprints/overview so the answer should be 2-2-2

2-2-4 is correct

2-2-4 🔍 Blueprint Assignments Are Always at the Subscription Level Blueprint definitions can be created at the management group or subscription level. But assignments must always target a specific subscription — not a management group. Even if you define the blueprint at the management group level (which is useful for sharing across multiple subscriptions within the same tenant), you still need to assign it individually to each subscription. 🧩 In Your Case You have 2 tenants, each with 2 subscriptions. You can define 1 blueprint per tenant at the management group level. But you must still create 2 assignments per tenant (1 per subscription), totaling 4 assignments.

2 - 2 - 4 (Copilot Explanation) Management Groups 2 One per tenant (East and West). Blueprints are defined at the management group or subscription level, and since tenants are isolated, you need at least one management group per tenant. Blueprint Definitions 2 One per tenant. Blueprint definitions cannot be shared across tenants, so you need one per tenant even if the content is identical. Blueprint Assignments 4 One per subscription. Assignments are made at the subscription level, so each of the 4 subscriptions needs its own assignment.

2 2 4 2 2 4 2 2 4 2 2 4 2 2 4

its 2 - two different tenants so need to create 2 management groups 2 - two different blueprints because you can save blueprints in either management group or subscription. 2 - Assign blueprint definition to management group. there is no need to assign to all individual subscriptions.

WRONG 2 2 4 (4 assignment for 4 subscriptions)

On July 11, 2026, Blueprints (Preview) will be deprecated. Migrate your existing blueprint definitions and assignments to Template Specs and Deployment Stacks. Blueprint artifacts are to be converted to ARM JSON templates or Bicep files used to define deployment stacks. To learn how to author an artifact as an ARM resource, see:

WRONG. RIGHT: 2-1-4 Artificial Intelligence: Management Groups Since there are two different Azure AD tenants (one for each division), you would need 2 management groups. Blueprint Definitions You need 1 blueprint definition that can be applied across all subscriptions, as it will include the resource group, Azure web app, custom role assignments, and Azure Cosmos DB account. Blueprint Assignments You need a total of 4 blueprint assignments (one for each subscription in both the East and West divisions). So the minimum number of objects required are: Management groups: 2 Blueprint definitions: 1 Blueprint assignments: 4

2-2-4. Explanation: Management Groups (2): One management group per tenant to organize the subscriptions within each tenant. Blueprint Definitions (2): Since Blueprints are tenant-scoped, you need one Blueprint definition per tenant (East and West). Blueprint Assignments (4): Assign the Blueprint to each subscription individually (Sub1, Sub2, Sub3, Sub4) because resource deployments (resource groups, web apps, Cosmos DB accounts) require subscription-level assignments. Even though you might use the same Blueprint definition within a tenant, you need separate assignments for each subscription to deploy the resources into them.

A single blueprint definition can include multiple artifacts (resource group, web app, role assignments, Cosmos DB account). The same blueprint definition can be used for both divisions since the structure of the resources is the same. That's the answer Chat GPT gives which leads me to 2, 1, 4. But it appears nobody can agree on this answer and one person says it's no longer on the test after Jan. ¯\_(ツ)_/¯

Correct Answer 2-1-4. Management Groups: 2 (one for each division) Blueprint Definitions: 1 (one definition applicable to all subscriptions). (Remember, we literally need 1 definition) Blueprint Assignments: 4 (one for each subscription)

Final Answer: 2-2-2.

I believe after Jan 2024, Blueprint related questions are deprecated

This question has had a lot of exchanges. Blueprints can be assigned at an MG level and I quote: “ The only option to prevent subscription owners from removing a blueprint assignment is to assign the blueprint to a management group. In this scenario, only Owners of the management group have the permissions needed to remove the blueprint assignment.” See: https://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/resource-locking under Assign at management group. So answer should be that at a minimum is 2,2,2 imho

2-2-4 2 Mgmt Group 2 BluePrint Def 4 -Assignment for subcription

It is 2,2,2 Two definitions (since there are two tenants) as the plan is to deploy a custom application to each subscription. With Azure Blueprints, the relationship between the blueprint definition (what should be deployed) and the blueprint assignment (what was deployed) is preserved. https://docs.microsoft.com/en-us/azure/governance/blueprints/overview