AZ-500 Question #82: Real Exam Question with Answer & Explanation

Question

Your company plans to create separate subscriptions for each department. Each subscription will be associated to the same Azure Active Directory (Azure AD) tenant. You need to configure each subscription to have the same role assignments. What should you use?

Options

• AAzure Security Center
• BAzure Policy
• CAzure AD Privileged Identity Management (PIM)
• DAzure Blueprints

Explanation

Azure Blueprints is the correct choice because it allows you to define a repeatable set of Azure resources, policies, and role assignments that can be consistently deployed across multiple subscriptions tied to the same Azure AD tenant - making it ideal for enforcing uniform governance at scale.

Why the others are wrong:

• Azure Security Center (A) focuses on security posture management and threat protection, not on replicating role assignments across subscriptions.
• Azure Policy (B) enforces compliance rules on resources (e.g., allowed VM sizes, required tags), but it does not manage or replicate role assignments between subscriptions.
• Azure AD PIM (C) manages just-in-time privileged access and time-bound role activations for individuals, but it is not designed to standardize role assignments across multiple subscriptions.

Memory Tip: Think of Blueprints like an architectural blueprint for a building - just as a blueprint ensures every floor is built the same way, Azure Blueprints ensures every subscription is configured with the same roles, policies, and resources. If the question involves consistency across subscriptions, Blueprints is almost always the answer.

No community discussion yet for this question.