Correct Answer: Use 'Infrastructure as Code' (IaC) with Bicep/ARM templates stored in Git, deployed via a CI/CD pipeline with versioning
IaC provides a declarative, repeatable, and versioned way to manage infrastructure, making changes transparent and reversible....
Correct Answer
Use 'Infrastructure as Code' (IaC) with Bicep/ARM templates stored in Git, deployed via a CI/CD pipeline with versioning
Why This Answer Is Correct
IaC provides a declarative, repeatable, and versioned way to manage infrastructure, making changes transparent and reversible.
This question evaluates your knowledge of Azure Resource Manager (ARM) — a core concept tested in Microsoft Certified: Azure Solutions Architect Expert (AZ-305). Understanding Azure Resource Manager (ARM) is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?
A financial firm requires that all their Azure resources follow a strict binary-level security baseline. They want to create a package that includes Resource Groups, Policies, RBAC assignments, and ARM templates to ensure consistent deployment of new environments. What should they use?
An organization wants to implement 'Governance as Code' and wants to ensure that any new subscription created under their enterprise agreement automatically has a specific set of security policies and RBAC assignments applied. Which feature handles this automated setup?
Which Azure feature allows you to query your entire Azure resource inventory (across subscriptions and regions) using a SQL-like language to identify resources that are missing specific tags or have certain configurations?
Scenario: To minimize the risk of an admin accidentally deleting a production resource group, you want to ensure that no one can perform a 'Delete' operation without first removing a specific 'lock' from the resource. Solution ?