Exam: AZ-900: Microsoft Azure Fundamentals 0 Likes
You need to deploy several virtual machines to Azure. You need to... (AZ-900)
You need to deploy several virtual machines to Azure. You need to ensure that you can assign permissions to the virtual machines simultaneously.
Which of the following can be implemented to fulfil this requirement?
A) Deploy all the virtual machines to the same region.
B) Deploy all the virtual machines to the same resource group.
C) Deploy all the virtual machines to the same availability zone.
D) Deploy all the virtual machines to the same scale.
Solution
Correct answer: B) Deploy all the virtual machines to the same resource group.
Deploying all the virtual machines to the same resource group in Azure is the best way to ensure that you can assign permissions to the virtual machines simultaneously.
Here's why:
Resource groups in Azure are logical containers that hold related resources. When you deploy multiple virtual machines to the same resource group, they are all part of the same logical unit.
Azure Role-Based Access Control (RBAC) allows you to assign permissions at the resource group level. By assigning the necessary permissions to the resource group, those permissions will automatically apply to all the virtual machines within that resource group.
This approach simplifies the management of permissions and access control, as you can easily grant or revoke permissions for the entire set of virtual machines by modifying the RBAC settings at the resource group level.
Deploying the virtual machines to the same region, availability zone, or scale set would not provide the same level of control over permissions and access management. The resource group is the appropriate logical unit for managing permissions and access control for a set of related Azure resources, including virtual machines.
Category: Azure management and governance