ARM template resources section in Azure - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ Configuration

intermediate

Identify the number of resources deployed

Given the following ARM template resources section, how many resources will be deployed?

Azure

{
  "resources": [
    {
      "type": "Microsoft.Storage/storageAccounts",
      "apiVersion": "2022-09-01",
      "name": "storageaccount1",
      "location": "eastus",
      "sku": { "name": "Standard_LRS" },
      "kind": "StorageV2"
    },
    {
      "type": "Microsoft.Compute/virtualMachines",
      "apiVersion": "2022-08-01",
      "name": "vm1",
      "location": "eastus",
      "properties": {
        "hardwareProfile": { "vmSize": "Standard_DS1_v2" }
      }
    },
    {
      "type": "Microsoft.Storage/storageAccounts",
      "apiVersion": "2022-09-01",
      "name": "storageaccount2",
      "location": "westus",
      "sku": { "name": "Standard_GRS" },
      "kind": "StorageV2"
    }
  ]
}

A 3

B 4

C 1

D 2

💡 Hint

Count each resource object inside the resources array.

The resources section contains three resource objects: two storage accounts and one virtual machine. Each object represents one resource to deploy.

❓ service_behavior

intermediate

Determine the deployment behavior with dependsOn

In an ARM template, if resource B has dependsOn set to resource A, what does this mean for deployment order?

A Resource B deploys before resource A

B Resource B deploys after resource A

C Resource B deployment is skipped if resource A fails

D Resources A and B deploy simultaneously

💡 Hint

dependsOn controls deployment sequence.

dependsOn ensures resource B waits until resource A finishes deploying before starting.

❓ Architecture

advanced

Identify the correct resource type for a virtual network

Which resource type string is correct to define a virtual network in an ARM template?

A Microsoft.Compute/virtualNetworks

B Microsoft.Storage/virtualNetworks

C Microsoft.Network/virtualNetworks

D Microsoft.Network/virtualMachines

💡 Hint

Virtual networks belong to the Network provider namespace.

Virtual networks are defined under Microsoft.Network with the resource type virtualNetworks.

❓ security

advanced

Identify the security risk in ARM template parameters

Which practice is a security risk when defining parameters in an ARM template?

A Hardcoding passwords directly in the template parameters section

B Using secureString type for passwords

C Referencing Key Vault secrets in parameters

D Using parameters without default values

💡 Hint

Think about exposing secrets in code.

Hardcoding passwords in templates exposes secrets and is insecure. Using secureString or Key Vault references is safer.

✅ Best Practice

expert

Choose the best practice for resource naming in ARM templates

Which option follows best practice for naming resources in ARM templates to avoid conflicts and improve clarity?

A Use names with spaces and special characters for readability

B Use fixed names like 'storageaccount' for all deployments

C Use random GUIDs as resource names without context

D Use unique names by combining parameters, resource group name, and a suffix

💡 Hint

Think about uniqueness and clarity in resource names.

Combining parameters and context ensures unique, meaningful names and avoids deployment conflicts.

Practice

1. What is the main purpose of the resources section in an ARM template?

easy

A. To list all cloud parts to create or update

B. To write scripts for manual deployment

C. To store user credentials securely

D. To monitor cloud resource usage

Solution

1. Step 1: Understand the role of the resources section

   The resources section defines what cloud parts (like servers, databases) to create or update automatically.

2. Step 2: Compare options with this role

   Only To list all cloud parts to create or update correctly describes this purpose. Other options describe unrelated tasks.

3. Final Answer:

   To list all cloud parts to create or update -> Option A

4. Quick Check:

   Resources section = list cloud parts [OK]

Hint: Resources section always defines cloud parts to deploy [OK]

Common Mistakes:

• Thinking resources section stores credentials
• Confusing resources with monitoring tools
• Assuming resources section is for scripts

2. Which of the following is a required property inside each resource in the resources section of an ARM template?

easy

A. version

B. dependsOn

C. location

D. tags

Solution

1. Step 1: Identify required properties for each resource

   Every Azure resource requires type, apiVersion, and name. The location property is required for regional resources to specify where the resource is created.

2. Step 2: Check options for required property

   location (location) is required. version is incorrect; the correct property is apiVersion. tags and dependsOn are optional.

3. Final Answer:

   location -> Option C

4. Quick Check:

   Location is required for resource placement [OK]

Hint: Location is required for regional resources [OK]

Common Mistakes:

• Confusing apiVersion with version
• Assuming tags are mandatory
• Thinking dependsOn is always required

3. Given this resource snippet in an ARM template's resources section:

{
  "type": "Microsoft.Storage/storageAccounts",
  "apiVersion": "2022-09-01",
  "name": "mystorageaccount",
  "location": "eastus",
  "sku": { "name": "Standard_LRS" },
  "kind": "StorageV2"
}

What will happen when this template is deployed?

medium

A. Deployment fails due to missing 'dependsOn' property

B. A new storage account named 'mystorageaccount' is created in East US

C. The storage account is created but with default SKU

D. The template will error because 'kind' is invalid

Solution

1. Step 1: Analyze resource properties

   The resource defines a storage account with a valid type, apiVersion, name, location, sku, and kind. All required fields are present and valid.

2. Step 2: Understand deployment behavior

   Since all required properties are correct, deployment will create the storage account named 'mystorageaccount' in 'eastus' with the specified SKU and kind. dependsOn is optional here.

3. Final Answer:

   A new storage account named 'mystorageaccount' is created in East US -> Option B

4. Quick Check:

   Valid resource properties = successful creation [OK]

Hint: Check required fields; missing dependsOn is okay if no dependencies [OK]

Common Mistakes:

• Thinking dependsOn is always mandatory
• Assuming default SKU applies if specified
• Believing 'kind' property is invalid

4. You have this resource in your ARM template's resources section:

{
  "type": "Microsoft.Web/sites",
  "apiVersion": "2021-02-01",
  "name": "mywebapp",
  "location": "westus"
}

Deployment fails with an error about missing properties. What is the likely cause?

medium

A. Missing 'properties' section with site configuration

B. Missing required 'kind' property for web app

C. Missing 'dependsOn' property for resource order

D. Missing 'sku' property defining pricing tier

Solution

1. Step 1: Review required properties for Microsoft.Web/sites

   Besides type, apiVersion, name, and location, a web app resource requires a properties section to define site settings.

2. Step 2: Identify missing required section

   The snippet lacks the properties section, causing deployment failure. sku and dependsOn are optional, and kind defaults to 'app' if omitted.

3. Final Answer:

   Missing 'properties' section with site configuration -> Option A

4. Quick Check:

   Web app needs properties section [OK]

Hint: Web apps require properties section; check for it [OK]

Common Mistakes:

• Assuming dependsOn is mandatory
• Confusing kind as required
• Ignoring properties section necessity

5. You want to deploy two resources in an ARM template: a storage account and a web app that uses that storage. How do you ensure the web app deploys only after the storage account is ready?

hard

A. Use the same 'apiVersion' for both resources

B. Place the web app resource before the storage account in the resources array

C. Set the web app's 'location' to the storage account's location

D. Add the storage account's name in the web app's 'dependsOn' property

Solution

1. Step 1: Understand resource deployment order control

   ARM templates use the dependsOn property to specify that one resource must finish deploying before another starts.

2. Step 2: Apply dependsOn for correct order

   Adding the storage account's resource name in the web app's dependsOn ensures the web app waits for the storage account to be ready.

3. Final Answer:

   Add the storage account's name in the web app's 'dependsOn' property -> Option D

4. Quick Check:

   dependsOn controls deployment order [OK]

Hint: Use dependsOn to order resource deployment [OK]

Common Mistakes:

• Thinking resource order in array controls deployment
• Believing apiVersion affects deployment order
• Assuming location controls deployment sequence