Resource groups as logical containers in Azure - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Purpose of Azure Resource Groups

Which of the following best describes the main purpose of an Azure Resource Group?

A It acts as a logical container to manage and organize related Azure resources together.

B It is a physical server where Azure resources are hosted.

C It is a security boundary that encrypts all resources inside it automatically.

D It is a billing account that charges resources individually.

💡 Hint

Think about how you would group related items in a folder to keep them organized.

An Azure Resource Group is a logical container that helps organize and manage related resources as a single unit. It is not a physical server or billing account, nor does it automatically encrypt resources.

❓ Architecture

intermediate

Resource Group Scope for Role-Based Access Control

You want to assign permissions to a team so they can manage only the resources related to a specific project. What is the best scope to assign the role?

A Assign the role at the management group level above subscriptions.

B Assign the role at the individual resource level for each resource in the project.

C Assign the role at the subscription level to cover all projects.

D Assign the role at the resource group level containing the project resources.

💡 Hint

Consider the smallest logical container that groups all project resources together.

Assigning roles at the resource group level allows the team to manage only the resources within that group, providing precise access control without exposing other projects or resources.

❓ Configuration

advanced

Deploying Resources Across Multiple Resource Groups

You have an ARM template that deploys a virtual network and a virtual machine. You want the virtual network in Resource Group A and the virtual machine in Resource Group B. Which approach is correct?

A Create a single resource group containing both resources; ARM templates cannot deploy across multiple groups.

B Deploy the ARM template once to Resource Group A; resources will automatically distribute to Resource Group B.

C Deploy the ARM template twice, once targeting Resource Group A for the network, and once targeting Resource Group B for the VM.

D Deploy the ARM template once to Resource Group B; resources will automatically distribute to Resource Group A.

💡 Hint

Think about how ARM templates target resource groups during deployment.

ARM templates deploy resources to the resource group specified during deployment. To deploy resources to different groups, deploy the template separately for each group with the appropriate parameters.

❓ security

advanced

Impact of Deleting a Resource Group

What happens when you delete an Azure Resource Group?

A Only the resource group container is deleted; resources remain intact.

B The resource group and all resources inside it are deleted permanently.

C Resources are moved to a default resource group automatically.

D Resources are archived for 30 days before permanent deletion.

💡 Hint

Consider what happens to items inside a folder when you delete the folder itself.

Deleting a resource group deletes the group and all resources contained within it permanently. There is no automatic archiving or moving of resources.

❓ service_behavior

expert

Resource Group Location and Resource Deployment

You create a resource group in the East US region. Later, you deploy a storage account to this resource group but specify the West US region for the storage account location. What is the outcome?

A The storage account is created in West US, independent of the resource group location.

B Deployment fails because resource location must match resource group location.

C The storage account is created in East US, matching the resource group location automatically.

D The storage account is created in a random Azure region.

💡 Hint

Think about whether resource group location restricts where resources can be placed.

Resource group location is metadata for storing resource group data and does not restrict where resources inside it are deployed. Resources can be in any region regardless of the resource group location.

Practice

1. What is the main purpose of a resource group in Azure?

easy

A. To store data permanently

B. To organize and manage related cloud resources together

C. To provide a virtual machine environment

D. To create user accounts

Solution

1. Step 1: Understand resource group function

   A resource group is a container that holds related resources for an Azure solution.

2. Step 2: Identify the main purpose

   It helps organize and manage resources like databases, virtual machines, and networks as a single unit.

3. Final Answer:

   To organize and manage related cloud resources together -> Option B

4. Quick Check:

   Resource group = Organize resources [OK]

Hint: Resource groups group resources logically for easy management [OK]

Common Mistakes:

• Confusing resource groups with storage accounts
• Thinking resource groups create compute power
• Assuming resource groups manage user identities

2. Which of the following is the correct Azure CLI command to create a resource group named MyGroup in the eastus region?

easy

A. az group create --name MyGroup --location eastus

B. az resource create --group MyGroup --location eastus

C. az create resourcegroup --name MyGroup --region eastus

D. az group new --name MyGroup --location eastus

Solution

1. Step 1: Recall Azure CLI syntax for resource groups

   The correct command uses az group create with --name and --location parameters.

2. Step 2: Match the command to options

   az group create --name MyGroup --location eastus matches the correct syntax exactly.

3. Final Answer:

   az group create --name MyGroup --location eastus -> Option A

4. Quick Check:

   Correct CLI command = az group create --name MyGroup --location eastus [OK]

Hint: Use 'az group create' to make resource groups [OK]

Common Mistakes:

• Using 'az resource create' instead of 'az group create'
• Wrong parameter names like --region instead of --location
• Using 'az group new' which is invalid

3. Given the following Azure CLI commands, what will be the output of az group list --query "[].name" after execution?

az group create --name GroupA --location westus
az group create --name GroupB --location eastus
az group delete --name GroupA --yes --no-wait

medium

A. []

B. ["GroupA", "GroupB"]

C. ["GroupB"]

D. ["GroupA"]

Solution

1. Step 1: Analyze the commands executed

   Two groups are created: GroupA and GroupB. Then GroupA is deleted asynchronously.

2. Step 2: Determine the list output

   After deletion, only GroupB remains, so the list shows ["GroupB"].

3. Final Answer:

   ["GroupB"] -> Option C

4. Quick Check:

   Deleted GroupA, only GroupB left [OK]

Hint: Deleted groups won't appear in list output [OK]

Common Mistakes:

• Assuming deletion is instant without --no-wait
• Expecting both groups to appear after deletion
• Confusing command output format

4. You run the command az group create --name MyGroup --location but get an error. What is the most likely cause?

medium

A. Missing location value after --location parameter

B. Resource group name is invalid

C. You need to delete existing resource group first

D. Azure CLI is not installed

Solution

1. Step 1: Check command syntax

   The command ends with --location but no region value is provided.

2. Step 2: Identify error cause

   Azure CLI requires a location value after --location, so missing it causes an error.

3. Final Answer:

   Missing location value after --location parameter -> Option A

4. Quick Check:

   --location needs a region value [OK]

Hint: Always provide a region after --location [OK]

Common Mistakes:

• Forgetting to specify location value
• Assuming name format causes error
• Ignoring CLI installation issues

5. You want to organize your Azure resources by project and environment. Which approach best uses resource groups to achieve this?

hard

A. Create one resource group per project, containing all environments

B. Create resource groups only for production environment

C. Create one resource group for all projects and environments

D. Create separate resource groups for each environment within each project

Solution

1. Step 1: Understand resource group purpose for organization

   Resource groups help manage resources by logical grouping, often by environment or project.

2. Step 2: Evaluate options for best organization

   Separating resource groups by environment within each project allows clear management, access control, and lifecycle handling.

3. Final Answer:

   Create separate resource groups for each environment within each project -> Option D

4. Quick Check:

   Separate groups per environment improve control [OK]

Hint: Use resource groups per environment for clear management [OK]

Common Mistakes:

• Putting all environments in one group causing confusion
• Using one group for all projects losing separation
• Ignoring non-production environments