A company currently has several subscriptions. They are all associated with the same Azure AD tenant. You have to ensure that all subscriptions have the same role assignments. How can this be done…

Question

Exhibit

Options

• ABy using Azure Security Center policies
• BBy using Azure Blueprints
• CBy using Azure AD Privileged Identity Management
• DBy using Azure Policy

• A
  2% (1)
• B
  84% (38)
• C
  4% (2)
• D
  9% (4)

Explanation

Azure Blueprints for Consistent Role Assignments

Azure Blueprints (B) is the correct choice because it allows you to define a repeatable set of governance tools - including role assignments (RBAC), policies, and resource templates - and apply them consistently across multiple subscriptions within the same Azure AD tenant. Blueprints are specifically designed to enforce standards and configurations at scale across subscriptions.

Why the distractors are wrong:

• A (Azure Security Center policies): Security Center focuses on threat protection and security posture monitoring, not on standardizing role assignments across subscriptions.
• C (Azure AD Privileged Identity Management): PIM manages just-in-time and time-bound privileged access for individual users, but cannot enforce uniform role assignments across multiple subscriptions simultaneously.
• D (Azure Policy): Azure Policy enforces resource compliance rules (e.g., allowed VM sizes, required tags), but it cannot manage role assignments - that is outside its scope.

Memory Tip: Think of Blueprints like an architectural blueprint for a building - it defines the complete structure (roles, policies, templates) that gets stamped consistently across every subscription, just like identical buildings from the same plan. If the question mentions role assignments + multiple subscriptions, think Blueprints.

No community discussion yet for this question.