AZ-104 Certification Practice Question #43

Question

You have the Azure management groups shown in the following table:

You add Azure subscriptions to the management groups as shown in the following table:

You create the Azure policies shown in the following table:

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

1. **Statement 1 (No):** Subscription1 is under ManagementGroup21, which inherits the "Not allowed resource types: virtualNetworks" policy assigned at the Tenant Root Group level. This denies Virtual Network deployment.
2. **Statement 2 (No):** Subscription2 is under ManagementGroup12. ManagementGroup12 has an "Allowed resource types" policy that acts as an exclusive allow-list for `Microsoft.Network/virtualNetworks` only. Because this list is exclusive and does not include virtual machines (`Microsoft.Compute/virtualMachines`), virtual machine creation is denied.
3. **Statement 3 (No):** A subscription can only have exactly one parent management group at any given time. Therefore, you cannot "add" Subscription1 to ManagementGroup11 while it is already a member of ManagementGroup21; it can only be moved, which changes its single parent.

More AZ-104 practice questions