AZ-900 Question #114: Real Exam Question with Answer & Explanation

Question

Your company plans to migrate to Azure. The company has several departments. All the Azure resources used by each department will be managed by a department administrator. You need to recommend an Azure deployment that provides the ability to segment Azure for the departments. The solution must minimize administrative effort. What should you include in the recommendation?

Options

• Amultiple subscriptions
• Bmultiple Azure Active Directory (Azure AD) directories
• Cmultiple regions
• Dmultiple resource groups

Explanation

To segment Azure resources by department with minimal administrative effort, recommending multiple Azure subscriptions is ideal, as each subscription can have its own billing and access management.

Common mistakes.

• B. Using multiple Azure Active Directory (Azure AD) directories would create separate identity stores, significantly increasing administrative overhead for managing users, groups, and cross-directory access, which is not ideal for minimizing effort within a single company.
• C. Multiple regions are about geographical distribution of resources for availability and latency, not logical segmentation for departmental administration or minimizing administrative effort.
• D. While resource groups provide logical grouping of resources, they exist within a single subscription and do not offer the same level of administrative and billing separation as multiple subscriptions, making cross-departmental access controls and cost management more complex within one subscription.

Concept tested. Azure subscriptions for departmental segmentation

Reference. https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-best-practices/organize-subscriptions

No community discussion yet for this question.