Resource groups as logical containers in Azure - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Purpose of Azure Resource Groups

Which of the following best describes the main purpose of an Azure Resource Group?

A It acts as a logical container to manage and organize related Azure resources together.

B It is a physical server where Azure resources are hosted.

C It is a security boundary that encrypts all resources inside it automatically.

D It is a billing account that charges resources individually.

💡 Hint

Think about how you would group related items in a folder to keep them organized.

An Azure Resource Group is a logical container that helps organize and manage related resources as a single unit. It is not a physical server or billing account, nor does it automatically encrypt resources.

❓ Architecture

intermediate

Resource Group Scope for Role-Based Access Control

You want to assign permissions to a team so they can manage only the resources related to a specific project. What is the best scope to assign the role?

A Assign the role at the management group level above subscriptions.

B Assign the role at the individual resource level for each resource in the project.

C Assign the role at the subscription level to cover all projects.

D Assign the role at the resource group level containing the project resources.

💡 Hint

Consider the smallest logical container that groups all project resources together.

Assigning roles at the resource group level allows the team to manage only the resources within that group, providing precise access control without exposing other projects or resources.

❓ Configuration

advanced

Deploying Resources Across Multiple Resource Groups

You have an ARM template that deploys a virtual network and a virtual machine. You want the virtual network in Resource Group A and the virtual machine in Resource Group B. Which approach is correct?

A Create a single resource group containing both resources; ARM templates cannot deploy across multiple groups.

B Deploy the ARM template once to Resource Group A; resources will automatically distribute to Resource Group B.

C Deploy the ARM template twice, once targeting Resource Group A for the network, and once targeting Resource Group B for the VM.

D Deploy the ARM template once to Resource Group B; resources will automatically distribute to Resource Group A.

💡 Hint

Think about how ARM templates target resource groups during deployment.

ARM templates deploy resources to the resource group specified during deployment. To deploy resources to different groups, deploy the template separately for each group with the appropriate parameters.

❓ security

advanced

Impact of Deleting a Resource Group

What happens when you delete an Azure Resource Group?

A Only the resource group container is deleted; resources remain intact.

B The resource group and all resources inside it are deleted permanently.

C Resources are moved to a default resource group automatically.

D Resources are archived for 30 days before permanent deletion.

💡 Hint

Consider what happens to items inside a folder when you delete the folder itself.

Deleting a resource group deletes the group and all resources contained within it permanently. There is no automatic archiving or moving of resources.

❓ service_behavior

expert

Resource Group Location and Resource Deployment

You create a resource group in the East US region. Later, you deploy a storage account to this resource group but specify the West US region for the storage account location. What is the outcome?

A The storage account is created in West US, independent of the resource group location.

B Deployment fails because resource location must match resource group location.

C The storage account is created in East US, matching the resource group location automatically.

D The storage account is created in a random Azure region.

💡 Hint

Think about whether resource group location restricts where resources can be placed.

Resource group location is metadata for storing resource group data and does not restrict where resources inside it are deployed. Resources can be in any region regardless of the resource group location.