Subscriptions and management groups in Azure - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Azure Management Groups Hierarchy

In Azure, you want to organize multiple subscriptions under a management group hierarchy. Which statement correctly describes the relationship between management groups and subscriptions?

A A management group can contain multiple subscriptions and other management groups, forming a tree structure.

B A subscription can belong to multiple management groups at the same time.

C Subscriptions are always at the top level and cannot be nested under management groups.

D Management groups are only used for billing and cannot contain subscriptions.

💡 Hint

Think about how Azure organizes resources for governance and policy application.

Management groups form a hierarchy where each management group can contain subscriptions and other management groups, allowing centralized management.

❓ Architecture

intermediate

Designing Subscription Structure for Cost Management

You manage an organization with multiple departments. You want to separate billing and policies per department but keep centralized control. Which Azure structure best supports this?

A Create multiple management groups per department but use a single subscription for all.

B Create one subscription for all departments and use resource groups to separate resources.

C Use a single management group with no subscriptions and manage resources directly under it.

D Create separate subscriptions per department and place them under a single management group for centralized policy management.

💡 Hint

Consider how billing and policy boundaries work in Azure.

Separate subscriptions per department allow distinct billing and resource limits, while management groups enable centralized policy and access control.

❓ security

advanced

Applying Policies Across Multiple Subscriptions

You want to enforce a security policy that restricts VM sizes across all subscriptions in your organization. Where should you assign this policy for the most efficient management?

A Assign the policy individually to each subscription.

B Assign the policy at the management group that contains all subscriptions.

C Assign the policy at the resource group level inside each subscription.

D Assign the policy at the tenant root level only.

💡 Hint

Think about applying policies once to affect many subscriptions.

Assigning the policy at the management group level applies it to all subscriptions under it, simplifying management and ensuring consistency.

❓ service_behavior

advanced

Effect of Moving a Subscription Between Management Groups

You move a subscription from one management group to another. What immediate effect does this have on the subscription's policy and access control?

A The subscription inherits policies and access controls from the new management group immediately, replacing previous ones.

B The subscription retains all previous policies and access controls permanently.

C The subscription loses all policies and access controls until manually reassigned.

D The subscription duplicates policies from both old and new management groups, causing conflicts.

💡 Hint

Consider how inheritance works in Azure management groups.

When a subscription moves, it inherits policies and access controls from the new management group, which override previous ones.

✅ Best Practice

expert

Optimizing Management Group Structure for Large Enterprises

Your enterprise has hundreds of subscriptions across multiple regions and business units. What is the best practice for structuring management groups to balance governance, scalability, and ease of management?

A Create a flat structure with all subscriptions directly under the root management group to simplify hierarchy.

B Avoid using management groups and manage policies at the subscription level for maximum flexibility.

C Create a balanced hierarchy grouping subscriptions by business unit first, then by region, limiting nesting depth to maintain clarity.

D Create a deep hierarchy with many nested management groups per business unit and region to isolate policies strictly.

💡 Hint

Think about balancing complexity and manageability in large organizations.

A balanced hierarchy grouping by business unit and region with limited nesting helps maintain clarity, scalability, and effective governance.