Template deployment methods in Azure - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Azure Resource Manager (ARM) template deployment scopes

Which deployment scope allows you to deploy resources at the subscription level, such as creating resource groups or policies?

A Management group scope

B Resource group scope

C Tenant scope

D Subscription scope

💡 Hint

Think about where resource groups are created in Azure.

The subscription scope allows deployment of resources that exist at the subscription level, including creating resource groups and policies. Resource group scope is limited to resources inside a specific group. Management group and tenant scopes are for broader organizational management.

❓ Configuration

intermediate

Determining the output of an ARM template deployment command

What is the output of this Azure CLI command when deploying an ARM template to a resource group?

az deployment group create --resource-group MyGroup --template-file template.json

A Plain text confirmation message only

B JSON object with deployment details including outputs and provisioning state

C Error message about missing subscription ID

D List of all resource groups in the subscription

💡 Hint

Consider what the CLI returns after a successful deployment.

The Azure CLI returns a JSON object containing details about the deployment, including outputs defined in the template and the provisioning state. It does not return plain text confirmation or unrelated lists.

❓ Architecture

advanced

Choosing the correct deployment method for multi-region resource deployment

You need to deploy identical resources to multiple Azure regions using ARM templates. Which deployment method best supports this scenario?

A Use a subscription-level deployment with location parameters for each region

B Deploy the template once at the management group scope

C Deploy the ARM template separately to each resource group in each region

D Use Azure Blueprints instead of ARM templates

💡 Hint

Think about how to deploy resources across multiple regions efficiently.

Subscription-level deployments allow you to deploy resources across multiple resource groups and regions by passing location parameters. Deploying separately is less efficient. Management group scope is for policies and governance, not resource deployment. Blueprints are for governance, not direct resource deployment.

❓ security

advanced

Securing sensitive data in ARM template deployments

Which method is the most secure way to handle sensitive information like passwords in ARM template deployments?

A Hardcode passwords directly in the ARM template parameters

B Store passwords in plain text files alongside the template

C Use Azure Key Vault references in the ARM template parameters

D Pass passwords as command line arguments without encryption

💡 Hint

Consider Azure services designed for secret management.

Using Azure Key Vault references allows secure retrieval of secrets during deployment without exposing them in templates or scripts. Hardcoding or storing passwords in plain text is insecure. Passing passwords unencrypted on command line risks exposure.

❓ service_behavior

expert

Behavior of incremental vs complete deployment modes in ARM templates

What happens to existing resources in a resource group when you deploy an ARM template using the complete mode?

A Resources not in the template are deleted from the resource group

B Resources not in the template remain unchanged in the resource group

C All resources in the subscription are deleted except those in the template

D Deployment fails if resources exist outside the template

💡 Hint

Think about how complete mode manages resources compared to incremental mode.

Complete mode deletes any resources in the resource group that are not defined in the ARM template, ensuring the resource group matches the template exactly. Incremental mode leaves existing resources untouched.