Exam AZ-500 All QuestionsBrowse all questions from this exam
Go to Exam
Question 10

You need to consider the underlined segment to establish whether it is accurate.

You have been tasked with creating a different subscription for each of your company's divisions. However, the subscriptions will be linked to a single Azure Active

Directory (Azure AD) tenant.

You want to make sure that each subscription has identical role assignments.

You make use of Azure AD Privileged Identity Management (PIM).

Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

    Correct Answer: B

    To ensure that each subscription has identical role assignments, Azure Blueprints is the most appropriate choice. Azure Blueprints allows the creation and management of templates that can include role assignments, policy assignments, and other configurations. This helps in maintaining consistency across multiple subscriptions by applying the same blueprint to each subscription. Although Azure AD Privileged Identity Management (PIM) can assign roles within a subscription, it does not provide the capabilities to ensure identical role assignments across multiple subscriptions like Azure Blueprints does.

Discussion
RumeOption: B

B. Azure Blueprints

ChinkSantana

Yes Azure Blueprints

kakakayayaya

100% B Blueprint Role Assignment (Subscription, Resource Group) - Add an existing user or group to a built-in role to make sure the right people always have the right access to your resources. Role assignments can be defined for the entire subscription or nested to a specific resource group included in the blueprint.

adamscaOption: B

azure Blueprints

God2029Option: A

Reading the question again. Your Task is to create different subscriptions for each of your company's divisions. Can blue print be used to create new subscriptions? I have been going through Microsoft docs but nowhere found that a new subscription can be created with blueprint. Once you create subscription with PIM you can use blue print to assign various resources groups, into the subscription and add resources to resource group. As you already have the PIM previlage go ahead create subscriptions and once it is created use blueprint to check if the resources/roles are identical. But First go ahead and create subscriptions. No adjustment required is the perfect answer in this context.

fonte

The way I read it is that the blueprints are going to be used to create the role assignments in each subscriptions, not to create the subscriptions.

Mazhar1993Option: B

 No adjustment required: Inaccurate because it overlooks the need for a solution to ensure consistent role assignments across subscriptions.  Azure Blueprints: Suitable as it enables the automated deployment of Azure resources with predefined configurations and role assignments, ensuring consistency across subscriptions.  Conditional access policies: Not suitable as they focus on access controls based on conditions like user location or device compliance, rather than ensuring identical role assignments.  Azure DevOps: Not suitable as it primarily facilitates software development processes and infrastructure management, lacking direct relevance to ensuring consistent role assignments across subscriptions. https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-how-to-add-role-to-user

ctlearnOption: B

Azure Blueprints for ensuring identical role assignments across multiple subscriptions. PIM only manages, controls, and monitors access within a subscription.

majstor86Option: B

B. Azure Blueprints

xRiot007Option: B

To make sure that all current and future subs are compliant, use Azure Blueprints (B). In the future, I think mid 2026, Blueprints will be deprecated, so you should start migrating to Template Specs and Deployment Stacks.

ESAJRROption: B

B. Azure Blueprints

vicwellyOption: B

Answer is Azure Blueprints. ET sometimes give wrong answers on purpose to make sure we are not doing Parrot Learning.

Andre369Option: B

To ensure that each subscription has identical role assignments, you should make use of Azure Blueprints. Azure Blueprints provide a declarative way to orchestrate the deployment of various Azure resources, including role assignments, policies, and resource configurations. By creating an Azure Blueprint that defines the desired role assignments, you can apply the same blueprint to each subscription, ensuring consistent role assignments across all divisions.

zellckOption: B

B is the answer. https://learn.microsoft.com/en-us/azure/governance/blueprints/overview Blueprints are a declarative way to orchestrate the deployment of various resource templates and other artifacts such as: - Role Assignments - Policy Assignments - Azure Resource Manager templates (ARM templates) - Resource Groups

Andre369Option: B

The answer is Azure Blueprints

BrandonzzmOption: C

Correct one is C. Azure Blueprints, Azure Blueprints can be used to create and manage resources across multiple subscriptions, ensuring that each subscription has the same set of resources, policies, and roles. By creating a blueprint that includes the required roles and permissions, you can ensure that each subscription has identical role assignments.

SeelearndoOption: B

https://learn.microsoft.com/en-us/azure/governance/blueprints/overview

yusof786Option: B

Answer is B

awfnewf1q243Option: B

B. Azure Blueprints https://learn.microsoft.com/en-us/azure/governance/blueprints/overview

koreshioOption: B

as other have explained as well.