AZ-500 Exam QuestionsBrowse all questions from this exam
Go to Exam

AZ-500 Exam - Question 10

You need to consider the underlined segment to establish whether it is accurate.

You have been tasked with creating a different subscription for each of your company's divisions. However, the subscriptions will be linked to a single Azure Active

Directory (Azure AD) tenant.

You want to make sure that each subscription has identical role assignments.

You make use of Azure AD Privileged Identity Management (PIM).

Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

Show Answer
Correct Answer: AB

To ensure that each subscription has identical role assignments, Azure Blueprints is the most appropriate choice. Azure Blueprints allows the creation and management of templates that can include role assignments, policy assignments, and other configurations. This helps in maintaining consistency across multiple subscriptions by applying the same blueprint to each subscription. Although Azure AD Privileged Identity Management (PIM) can assign roles within a subscription, it does not provide the capabilities to ensure identical role assignments across multiple subscriptions like Azure Blueprints does.

Discussion

17 comments
Sign in to comment
RumeOption: B
Jun 30, 2021

B. Azure Blueprints

ChinkSantana
Jul 4, 2021

Yes Azure Blueprints

kakakayayaya
Aug 21, 2021

100% B Blueprint Role Assignment (Subscription, Resource Group) - Add an existing user or group to a built-in role to make sure the right people always have the right access to your resources. Role assignments can be defined for the entire subscription or nested to a specific resource group included in the blueprint.

adamscaOption: B
Dec 5, 2021

azure Blueprints

God2029Option: A
Dec 2, 2022

Reading the question again. Your Task is to create different subscriptions for each of your company's divisions. Can blue print be used to create new subscriptions? I have been going through Microsoft docs but nowhere found that a new subscription can be created with blueprint. Once you create subscription with PIM you can use blue print to assign various resources groups, into the subscription and add resources to resource group. As you already have the PIM previlage go ahead create subscriptions and once it is created use blueprint to check if the resources/roles are identical. But First go ahead and create subscriptions. No adjustment required is the perfect answer in this context.

fonte
Dec 14, 2022

The way I read it is that the blueprints are going to be used to create the role assignments in each subscriptions, not to create the subscriptions.

Mazhar1993Option: B
Apr 19, 2024

 No adjustment required: Inaccurate because it overlooks the need for a solution to ensure consistent role assignments across subscriptions.  Azure Blueprints: Suitable as it enables the automated deployment of Azure resources with predefined configurations and role assignments, ensuring consistency across subscriptions.  Conditional access policies: Not suitable as they focus on access controls based on conditions like user location or device compliance, rather than ensuring identical role assignments.  Azure DevOps: Not suitable as it primarily facilitates software development processes and infrastructure management, lacking direct relevance to ensuring consistent role assignments across subscriptions. https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-how-to-add-role-to-user

majstor86Option: B
Mar 2, 2023

B. Azure Blueprints

ctlearnOption: B
Dec 6, 2023

Azure Blueprints for ensuring identical role assignments across multiple subscriptions. PIM only manages, controls, and monitors access within a subscription.

koreshioOption: B
Oct 14, 2022

as other have explained as well.

awfnewf1q243Option: B
Oct 26, 2022

B. Azure Blueprints https://learn.microsoft.com/en-us/azure/governance/blueprints/overview

yusof786Option: B
Dec 5, 2022

Answer is B

SeelearndoOption: B
Jan 9, 2023

https://learn.microsoft.com/en-us/azure/governance/blueprints/overview

BrandonzzmOption: C
Feb 14, 2023

Correct one is C. Azure Blueprints, Azure Blueprints can be used to create and manage resources across multiple subscriptions, ensuring that each subscription has the same set of resources, policies, and roles. By creating a blueprint that includes the required roles and permissions, you can ensure that each subscription has identical role assignments.

Andre369Option: B
Apr 24, 2023

The answer is Azure Blueprints

zellckOption: B
May 7, 2023

B is the answer. https://learn.microsoft.com/en-us/azure/governance/blueprints/overview Blueprints are a declarative way to orchestrate the deployment of various resource templates and other artifacts such as: - Role Assignments - Policy Assignments - Azure Resource Manager templates (ARM templates) - Resource Groups

Andre369Option: B
May 18, 2023

To ensure that each subscription has identical role assignments, you should make use of Azure Blueprints. Azure Blueprints provide a declarative way to orchestrate the deployment of various Azure resources, including role assignments, policies, and resource configurations. By creating an Azure Blueprint that defines the desired role assignments, you can apply the same blueprint to each subscription, ensuring consistent role assignments across all divisions.

vicwellyOption: B
Jul 24, 2023

Answer is Azure Blueprints. ET sometimes give wrong answers on purpose to make sure we are not doing Parrot Learning.

ESAJRROption: B
Aug 14, 2023

B. Azure Blueprints

xRiot007Option: B
Jul 15, 2024

To make sure that all current and future subs are compliant, use Azure Blueprints (B). In the future, I think mid 2026, Blueprints will be deprecated, so you should start migrating to Template Specs and Deployment Stacks.