Examice

Exam AZ-900 All QuestionsBrowse all questions from this exam

Question 8

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

You are planning to migrate a company to Azure. Each of the company's numerous divisions will have an administrator in place to manage the Azure resources used by their respective division.

You want to make sure that the Azure deployment you employ allows for Azure to be segmented for the divisions, while keeping administrative effort to a minimum.

Solution: You plan to make use of several Azure Active Directory (Azure AD) directories.

Does the solution meet the goal?

Yes

Correct Answer: B

The solution does not meet the goal. Using several Azure Active Directory (Azure AD) directories to segment Azure resources for each division is not efficient and increases administrative complexity. Instead, a more effective approach would be to utilize Azure Resource Manager to create separate resource groups for each division. This allows for resource segregation while maintaining centralized management. Additionally, Azure Role-Based Access Control (RBAC) can be used to assign appropriate permissions to each division's administrator within the same Azure AD directory, thereby minimizing administrative effort.

Discussion

GeorgessOption: B

The proposed solution is: You plan to make use of several Azure Active Directory (Azure AD) directories. I think the key word is SEVERAL. Why in the world a company will create SEVERAL AADs when it can create a single AAD and organize its divisions right there? This is why I consider the correct answer B (No).

Chennings

that's what I was thinking too. It makes no sense to have more than one.

BeauChateauOption: B

No, the solution does not meet the goal. Using multiple Azure Active Directory (Azure AD) directories to segment Azure resources for each division may not be the most efficient way to manage the resources. While it does provide segregation of resources and administrative control, it can result in additional administrative effort for managing multiple directories. A better solution would be to use Azure Resource Manager (ARM) to create separate resource groups for each division. Resource groups allow for segregation of resources, while still providing a single management interface. Each division can have an administrator assigned to their respective resource group, allowing them to manage the resources for their division. Using Azure Resource Manager (ARM) to create separate resource groups for each division provides an efficient way to segment Azure resources while keeping administrative effort to a minimum. Therefore, the proposed solution of using multiple Azure AD directories does not meet the goal, and using Azure Resource Manager (ARM) to create separate resource groups should be used instead.

Soumyat85Option: B

B. No The solution does not meet the goal. Creating several Azure Active Directory (Azure AD) directories would separate the Azure resources into different environments, but it would also increase administrative effort and complexity. Each Azure AD directory would require separate management and administration, leading to duplication of efforts and potential challenges in maintaining consistency across divisions. A more appropriate solution to meet the goal of segmenting Azure for divisions while minimizing administrative effort would be to use Azure RBAC (Role-Based Access Control) and resource groups. By leveraging Azure RBAC, you can assign division-specific administrators with appropriate access permissions to manage the Azure resources within their respective resource groups. This approach allows for segregation of resources based on divisions while maintaining centralized management and reducing administrative overhead.

Du_MS900Option: B

B. Não A solução proposta de usar vários diretórios do Azure Active Directory (Azure AD) não atende ao objetivo de segmentar o Azure para as divisões da empresa enquanto mantém o esforço administrativo mínimo. Usar vários diretórios do Azure AD criaria ambientes de diretório separados para cada divisão, o que pode aumentar a complexidade e o esforço administrativo, pois você precisaria gerenciar cada diretório separadamente. Isso também pode dificultar a colaboração e a integração entre as divisões da empresa. Uma abordagem mais adequada seria usar a segmentação baseada em assinaturas e grupos de recursos no Azure. Você pode criar diferentes assinaturas para cada divisão e usar grupos de recursos para organizar e gerenciar os recursos dentro de cada assinatura. Isso permite que você mantenha a segregação entre as divisões, mas ainda mantenha um único diretório do Azure AD, simplificando o gerenciamento de identidade e acesso.

AntonioTechOption: B

The answer is B. No Creating multiple Azure Active Directory (Azure AD) directories for each division is not the most suitable solution for achieving segmentation of Azure resources for divisions. While it's technically possible to have separate Azure AD directories for different divisions, this approach can lead to increased administrative complexity and additional management overhead. Managing multiple directories could require more effort and potentially result in a less cohesive and efficient setup. A more suitable solution would involve using Azure RBAC (Role-Based Access Control) to assign appropriate permissions to administrators within a single Azure AD directory. This way, you can achieve the desired segmentation of resources while minimizing administrative effort. Each division's administrator can be assigned specific roles and permissions to manage their respective resources within the same Azure AD directory.

MaabsOption: B

Answer is B.

CavitePinoyOption: B

B is the correct answer

Santhosh88

i think that each department can use their own resource group, because they want us to make sure that the Azure deployment you employ allows for Azure to be segmented.

thej_raaaaasOption: B

No need to use several AAD

azure15236Option: B

B is the correct answer

JayStolzenwaldOption: B

I would never go with multiple AAD

Sushant_02Option: B

They can easily manage multiple admin access through administrative unit or management unit

glazdubOption: B

Answer is B only one AAD is sufficient

younessjbOption: B

Selected Answer: B

MolotaOption: B

B is the correct answer

navid1365Option: B

B is the correct answer

suresh_fxOption: A

No, the solution does not meet the goal. Creating multiple Azure AD directories would result in administrative overhead and complexity, as each directory would need to be managed separately