Azure Resource Manager (ARM) concept - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ service_behavior

intermediate

What happens when you deploy an ARM template with a missing required property?

You deploy an ARM template that defines a virtual machine but forget to include the vmSize property. What will Azure Resource Manager do?

Azure

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "resources": [
    {
      "type": "Microsoft.Compute/virtualMachines",
      "apiVersion": "2022-03-01",
      "name": "myVM",
      "location": "eastus",
      "properties": {
        "hardwareProfile": {
        },
        "storageProfile": {
          "imageReference": {
            "publisher": "MicrosoftWindowsServer",
            "offer": "WindowsServer",
            "sku": "2019-Datacenter",
            "version": "latest"
          }
        },
        "osProfile": {
          "computerName": "myVM",
          "adminUsername": "adminUser",
          "adminPassword": "Password123!"
        },
        "networkProfile": {
          "networkInterfaces": [
            {
              "id": "/subscriptions/xxx/resourceGroups/myRG/providers/Microsoft.Network/networkInterfaces/myNIC"
            }
          ]
        }
      }
    }
  ]
}

A The deployment will succeed but the VM will not start until vmSize is manually set later.

B Azure will assign a default vmSize automatically and complete the deployment.

C The deployment will fail with a validation error indicating the missing vmSize property.

D The deployment will partially succeed but the VM resource will be in a failed state.

💡 Hint

Think about how ARM validates templates before creating resources.

ARM requires all mandatory properties to be present in the template. Missing required properties cause deployment validation errors, so the deployment fails before any resource is created.

❓ Architecture

intermediate

How does ARM handle resource dependencies during deployment?

You have an ARM template that creates a storage account and a virtual machine that uses that storage account. How does ARM ensure the VM is created only after the storage account is ready?

A ARM automatically detects dependencies based on resource types and deployment order in the template.

B You must explicitly declare dependencies using the <code>dependsOn</code> property in the VM resource.

C ARM deploys all resources in parallel without waiting for dependencies.

D ARM uses tags on resources to determine deployment order.

💡 Hint

Consider how you tell ARM about resource order when one resource needs another.

ARM requires explicit dependency declarations using dependsOn to know the order of resource creation. Without it, ARM may deploy resources in parallel, causing failures if dependencies are not ready.

❓ security

advanced

What is the best practice to secure sensitive data in ARM templates?

You need to deploy a database with a password using an ARM template. Which approach ensures the password is not exposed in the template or logs?

A Use Azure Key Vault references in the ARM template to retrieve the password securely at deployment.

B Hardcode the password directly in the ARM template parameters section.

C Store the password in a plain text file and reference it in the template.

D Send the password as a deployment parameter in the Azure portal without encryption.

💡 Hint

Think about how to keep secrets safe and not visible in templates or logs.

Using Azure Key Vault references allows ARM templates to securely retrieve secrets at deployment time without exposing them in the template or logs, following best security practices.

❓ Configuration

advanced

What is the output of this ARM template deployment command with the --what-if flag?

You run the following Azure CLI command to deploy an ARM template with the --what-if flag:

az deployment group create --resource-group myRG --template-file template.json --what-if

What will be the result?

A The command shows a preview of changes that would be made without applying them.

B The command deploys the template and applies all changes immediately.

C The command validates the template syntax but does not show any changes.

D The command deletes existing resources before deploying the template.

💡 Hint

What does the --what-if flag do in Azure CLI deployments?

The --what-if flag previews the changes ARM would make if the template were deployed, without actually applying any changes. This helps understand impact before deployment.

✅ Best Practice

expert

Which approach best supports modular and reusable ARM templates for large infrastructure?

You manage a large Azure environment and want to organize your ARM templates for easier maintenance and reuse. Which approach follows best practices?

A Create one large ARM template with all resources defined inline.

B Write separate templates for each resource and deploy them independently without coordination.

C Use only Azure portal to create resources and avoid templates.

D Split resources into multiple smaller templates and use nested or linked templates with parameters.

💡 Hint

Think about how to keep templates manageable and reusable.

Using nested or linked templates with parameters allows modular design, easier maintenance, and reuse of ARM templates, which is a best practice for large environments.