Azure Management Groups for Resource Automation

Describe features and tools for managing and deploying Azure resources Describe features and tools in Azure for governance and compliance
Answer Correct answer: B — Management groups are organizational containers for governance and do not automate the creation of Azure resources; ARM templates are required for this goal.

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's infrastructure includes a number of business units that each need a large number of various Azure resources for everyday operation. The resources required by each business unit are identical. You are required to sanction a strategy to create Azure resources automatically. Solution: You recommend that management groups be included in the strategy. Does the solution meet the goal?

  1. Yes
  2. No Correct Answer

Community Insight

The common trap is confusing hierarchical organization (Management Groups) with deployment automation (ARM Templates or Blueprints).

This question tests whether Azure Management Groups can be used to automatically create resources. The page establishes that Management Groups are for governance, not automation, making the solution incorrect.

Many learners select 'Yes' because they associate Management Groups with managing multiple business units, failing to distinguish between organizing resources and creating them.

Community Discussion (80 comments)

Mouder 👍 3 Selected: B
No, the solution does not meet the objective. Why this solution is incorrect: Management Groups are used to manage governance, access policies (RBAC) and compliance across multiple Azure subscriptions simultaneously. They do not directly contain resources and do not allow for the automatic creation of identical Azure resources [1]. The correct approach: To automatically create an identical set of resources for each business unit, you must use an Infrastructure as Code (IaC) approach. Suitable solutions include: ARM (Azure Resource Manager) templates or Bicep files; third-party tools such as Terraform; and Azure Blueprints (standardised deployments combining templates, roles and policies).
eduardok95 👍 1 Selected: B
ARM templates is the solution
AlekksMaciel 👍 1 Selected: B
Management groups are part of the solution but only themselves just do not answer the question.
LePastore 👍 1 Selected: A
Management groups are part of the solution. Management groups can be used to automate the creation of Azure resources for each business unit. By creating a management group for each business unit, you can apply policies and templates to automate the creation of resources.
FemiA55 👍 1 Selected: A
If there is no MG, there will be no RG. Without RG, there will be no location to host a resource. The question was if MG is part of the solution, the answer is yes because without it, nobody can create any resource in Azure
descentguy2021 👍 1 Selected: B
No, the proposed solution of using management groups alone does not fully meet the goal of automatically creating Azure resources. While management groups are crucial for organizing and managing Azure resources at scale, they don't directly create resources themselves. To achieve automated resource creation, you need to combine management groups with other tools and strategies like ARM templates, Azure Policy, or Infrastructure as Code (IaC) tools.
Meesquared 👍 1 Selected: B
Management Groups are used to organize subscriptions and apply policies or RBAC at a higher level, not to automate the creation of Azure resources. Correct Solution: To create identical Azure resources automatically, you should use: ARM Templates (Azure Resource Manager templates) Bicep (simplified ARM template language) Terraform (for Infrastructure as Code) 👉 Management groups help with governance, but do not deploy resources.
AnaAC9 👍 1 Selected: A
it says that it should be included in the strategy, not to be the key of the strategy
mitddgr 👍 1 Selected: B
ARM (Azure Resource Manager) is a tool that automates the deployments on the AZ cloud.
GoofyGooff3r 👍 2 Selected: B
Management groups in Azure are primarily used to organize and manage access, policies, and compliance across subscriptions. While they provide a way to structure resources at a higher level than subscriptions, they do not directly automate the creation of Azure resources. To create Azure resources automatically, you would typically use services like Azure Resource Manager (ARM) templates, Azure Automation, or Azure DevOps pipelines. These tools allow for the provisioning and configuration of resources automatically, ensuring consistency across environments. Therefore, management groups are not the correct solution for automating the creation of resources.
arjunyv2022 👍 1 Selected: B
Management Groups do not create Azure resources, the given solution does not meet the goal.
Jas001 👍 2 Selected: B
Azure Resource Manager.
bobick 👍 1 Selected: B
Azure Resource Manager templates is correct tool.
nidhal00 👍 1 Selected: B
b is correct
helg 👍 1
Management groups provide a hierarchical structure for organizing and managing Azure subscriptions. By creating a management group for each business unit, you can: Centralized Policy: Apply consistent policies, such as resource limits, security settings, and tag requirements, to all subscriptions within a management group. This ensures that resources are provisioned according to your organization's standards. Simplified Management: Manage multiple subscriptions efficiently from a single location. Role-Based Access Control (RBAC): Assign appropriate roles to users at the management group level, allowing them to manage resources within their respective business units.
lakspri 👍 2
No Management groups in Azure are used to manage access, policies, and compliance across multiple subscriptions. While they are useful for organizing and applying governance at scale, they do not inherently provide a way to automatically create and deploy Azure resources. To automate the creation of Azure resources, you should consider using Azure Resource Manager (ARM) templates, Azure Blueprints, or Infrastructure as Code (IaC) tools like Terraform. These tools allow you to define and deploy Azure resources in a repeatable and consistent manner. So, including management groups alone does not meet the goal of automatically creating Azure resources for each business unit.
JackyN 👍 1
Sorry that I don't understand, what is the differences between "FULFILL/ACHIEVE the mandate" & "HELP/GOES ALONG the mandate" ?
amanomio 👍 2
A. Yes Management groups can be used to automate the creation of Azure resources. Management groups provide a hierarchical way to manage access, policies, and compliance for multiple subscriptions. You can use management groups to apply policies and initiatives across a set of subscriptions, so that you can easily manage access and apply policies to groups of resources. Therefore, including management groups in the strategy would allow you to automate the creation of Azure resources for each business unit, and would meet the goal of the scenario.
AntonioTech 👍 4
The answer seems to be A. Yes Using Azure management groups can be an effective strategy for organizing and managing resources, especially when you have multiple business units that require identical Azure resources. Azure management groups provide a way to apply governance and policies across multiple subscriptions, making it easier to enforce consistent standards and configurations. By creating management groups and associating subscriptions under those groups, you can define policies, access controls, and apply consistent naming conventions or tagging across all the resources used by each business unit. This can simplify resource deployment and management while ensuring that all business units follow the same guidelines. So, recommending the use of management groups in the strategy can help meet the goal of automatically creating and managing Azure resources for each business unit.
SAFM 👍 1
But the point is the automatic generation of such resources, and maybe the ARM templates could be the solution, right?
EduardoMC 👍 2
a) Sim Explicação: Os Grupos de Gerenciamento no Azure são uma maneira eficaz de organizar e gerenciar recursos em grande escala, fornecendo uma hierarquia para aplicar políticas e atribuir permissões de gerenciamento. Com os Grupos de Gerenciamento, é possível automatizar a criação de recursos do Azure para diferentes unidades de negócios de forma organizada e consistente. Portanto, recomendar a inclusão de Grupos de Gerenciamento na estratégia atende ao objetivo de criar recursos do Azure automaticamente para várias unidades de negócios.
EduardoMC 👍 4
A) Yes Explanation: Management Groups in Azure are an effective way to organize and manage resources at scale, providing a hierarchy for applying policies and assigning management permissions. With Management Groups, you can automate the creation of Azure resources for different business units in an organized and consistent way. Therefore, recommending the inclusion of Management Groups in the strategy serves the purpose of automatically creating Azure resources for multiple business units.
Shruti2024 👍 1 Selected: B
Should be ARM
maumari2 👍 1
B. Answer is NO. ARM templates works fine, but given the requirement to create Azure resources automatically and consistently for each business unit, Azure Blueprints would be the more comprehensive solution, as it includes additional governance features that can be beneficial for managing multiple business units.
siculoct 👍 2
it's B
Rageoxryan 👍 1 Selected: B
as per top comment
adu72 👍 2
Azure MG are used to take care of subscriptions. AZ ARM is the solution
ZForceX 👍 2
I believe a lot of people are confused with the answer because MGs and Azure Blueprints can play a key role here but Azure Blueprints are used mostly for policies and not for resource creation. You use ARM templates for that
Alonsochaves 👍 1
ARM templates can help create Azure resources automatically, the correct answer is no.
rexxxx_x 👍 1 Selected: A
its right
intentando 👍 2 Selected: B
B
Joipanom 👍 6
B. No. Management groups are used to organize resources and manage access, policy, and compliance across multiple subscriptions, but they are not specifically designed for automatically creating Azure resources[1]. Instead, consider using Azure Resource Manager templates (ARM templates) or Azure Blueprints for automating the creation and management of Azure resources.
KrishEXM 👍 1
I think the answer is Yes, recommending the use of Azure Management Groups as part of your strategy is a suitable approach for automatically creating Azure resources for multiple business units with identical resource requirements. Azure Management Groups are used to organize and manage resources at scale, and they can help streamline the management of resources for different business units with similar needs.
Bobip 👍 3
No need to bring a lots of evidence to prove the answer is N! just look at Q#18 to see the answer here should be N.
Ponpon3185 👍 3
To my mind in think its A...cause this part of the sentence: "You recommend that management groups be included in the strategy"... (Be Included)...it's not enough...but it's a part of the solution? Are you agree
tushar629 👍 1
chatGPT says yes, can someone confirm this?
NoursBear 👍 1
This confirms what I knew all along here is nothing more stupid than AI
clever97 👍 2
Los grupos de gestión son una forma conveniente de aplicar políticas y control de acceso a los recursos, mas no para la creación de recursos. Respuesta B
Capzn 👍 1
You can write an Automation PowerShell runbook that deploys an Azure resource by using an Azure Resource Manager template. Templates allow you to use Azure Automation to automate deployment of your Azure resources. You can maintain your Resource Manager templates in a central, secure location, such as Azure Storage. - From Microsoft. so the answer is B
zimzimzimma 👍 5
"You recommend that management groups be included in the strategy." Included. So yes. You can create management groups with ARM templates. Doesn't matter that the resources are identical, some business units need more rights than others. I'm going for A.
ArmadilloIta 👍 2
You can recommend whatever you want, but the goal is to create the Resources automatically. Templates are needed. It's B
jana90 👍 1
No We can use Azure Resource Manager templates to automate the creation of the Azure resources. Deploying resource through templates is known as Infrastructure as code. To implement infrastructure as code for Azure solutions, use Azure Resource Manager templates.
louloua 👍 1
Answer is "No" (option B) : Based on the wording MG is just a part of the overall strategy, rather than the entire solution. In any other scenario the response would be "Yes" and that is based on the assumption that the strategy would include additional components along with management groups. But the resources required by each business unit are identical which makes the inclusion of management groups unnecessary in this specific scenario. Therefore, in this specific scenario, the answer would be "No".
zimzimzimma 👍 1
"Based on the wording MG is just a part of the overall strategy, rather than the entire solution." But that's exactly what the question is stating?? It says management groups being INCLUDED in the strategy. Nowhere it is said that they're the entire solution. Of course you need ARM templates, but you can include management groups.
Selma97 👍 5 Selected: A
A. Yes, including management groups in the strategy is a good approach to creating Azure resources automatically for multiple business units. Management groups allow you to manage and organize multiple subscriptions and resources in a hierarchical structure, making it easier to apply policies and templates to multiple resources at once. By creating a management group for each business unit, you can easily apply the same policies and templates to all the resources associated with that business unit, making it simpler and more efficient to manage and govern your Azure resources.
speedyweedy 👍 3 Selected: A
A. Yes, including management groups in the strategy is a good approach to creating Azure resources automatically for multiple business units. Management groups allow you to manage and organize multiple subscriptions and resources in a hierarchical structure, making it easier to apply policies and templates to multiple resources at once. By creating a management group for each business unit, you can easily apply the same policies and templates to all the resources associated with that business unit, making it simpler and more efficient to manage and govern your Azure resources.
K4tya_ 👍 4
It says to 'include' the management groups in to the strategy, not use it as the sole solution...it's a leaning A
Logan987 👍 2 Selected: B
B is the correct answer
Zaidsdb 👍 1 Selected: B
answer b
Zaidsdb 👍 2 Selected: A
Answer A
emptyH 👍 2 Selected: B
Management groups arent going to do this. You will need ARM templates for this.
zimzimzimma 👍 1
Nowhere it's said that management groups are the sole solution for this. They're being INCLUDED in the strategy. I'm going for A.
viktornm 👍 1
Azure Resource Manager templates should be used. Management groups are only containers. To add the automating capability we need to utilize templates. Azure Resource Manager templates are JavaScript Object Notation (JSON) files that define the infrastructure and configuration for your project.
Kanders 👍 1
B. No - The Azure Resource Manager (ARM) is the best scenario for managing the resources. Azure Management Groups are primarily for managing and distribution of subscriptions.
buiducvu 👍 1 Selected: B
B. No - it is Azure Resource Manager templates
King_Laps 👍 1
The best answer for this question is ARM.
Luansi 👍 1 Selected: B
B You can create policies in Azure Management Groups focused on access but ARM template is the correct way to deploy resources
agaonion 👍 1 Selected: B
answer: no
Maki_05 👍 1
Answer: B
diocleziano 👍 2 Selected: B
ARM (Azure Resource Manager) do this.
NickClick 👍 1 Selected: B
Azure Resource Manager templates (ARM templates)
Matthew25187 👍 2 Selected: B
This is a job for ARM templates.
ruank 👍 1 Selected: A
ARM seems to satisfy the requirements.
Monster5566 👍 1
Azure Resource Manager templates https://docs.microsoft.com/zh-tw/azure/azure-resource-manager/templates/overview
rameshsee 👍 2
Selected Answer: B
dev2dev 👍 3
Managed groups are used for managing multiple subscriptions by single accout
Vinarino 👍 2
Tests are utilized to lock people out, plus to retest (=$); hence, confusing, obfuscated, wrong punctuation, no Capitols, long-run-on questions
arjaycee 👍 1
Answer is No.
RugminiV 👍 2
Azure Blueprints enables cloud architects and central information technology groups to define a repeatable set of Azure resources that implements and adheres to an organization's standards, patterns, and requirements. Azure Blueprints makes it possible for development teams to rapidly build and stand up new environments with trust they're building within organizational compliance with a set of built-in components, such as networking, to speed up development and delivery.
RaySmith 👍 1
Answer is: B
sudheerdhawangis 👍 1
ARN Should be used
bashy96 👍 3
Answer should be Azure Resource Manager templates
kate_py 👍 84
Azure Resource Manager templates should be used (as in the next question). Management groups are only containers. To add the automating capability we need to utilise templates.
unicos 👍 1
Thanks. I guess I need to be careful of taking the verbiage to literally.
ddponder 👍 4
The correct answer is B. Azure management groups help you organize your resources and subscriptions.
BinuRaj 👍 41
Answer seems correct. It should be ARM template. https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/overview To meet these challenges, you can automate deployments and use the practice of infrastructure as code. In code, you define the infrastructure that needs to be deployed. The infrastructure code becomes part of your project. Just like application code, you store the infrastructure code in a source repository and version it. Any one on your team can run the code and deploy similar environments.
unicos 👍 5
Not sure why including management groups in strategy would not be a good idea? With MG you could create policies around resources that would enforce rigor across subscriptions. Each business unit could have it's own billing subscription. Unless I'm missing a detail I think this answer should be yes.
Mozbius_ 👍 13
I have noticed that many questions appear to be purposely formulated to confuse people instead of ACTUALLY testing knowledge! And yes, I absolutely agree "recommending to include in the strategy" Management Groups does in fact "meet the goal". Is that an ambiguous question? ABSOLUTELY!!!!! I bet many fail because of the ambiguity caused by questions formulation. Why are they not instead asking "Does the solution do what's asked?" (or something of the sort) ?!?! MG would indeed NOT be the answer to such question. So basically people can get screwed BECAUSE they ACTUALLY UNDERSTAND the purpose of some functionalities!!! So I guess the lesson to be learned here is when you see "Does the solution meet the goal?" read it as "Does your answer FULFILL/ACHIEVE the mandate?" and NOT "Does your answer HELP/GOES ALONG the mandate?".
ssg010 👍 4
For managing resources you need MGs. For creating resources automatically you need an ARM template.
Vikas5120 👍 9
They are asking for a strategy to automatically create resources, not organising them. I think you're missing this point.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

The correct answer is B (No) because Management Groups are strictly organizational containers used to apply policies and access controls across subscriptions; they do not have the capability to provision or create Azure resources. To automatically create a set of identical resources for various business units, you must use deployment tools like Azure Resource Manager (ARM) templates or Azure Blueprints. A strategy focused on 'creating' resources requires an infrastructure-as-code approach, which Management Groups cannot provide.

Why the Other Options Are Wrong

Selecting 'Yes' (Option A) is incorrect because it conflates governance with deployment. While Management Groups help organize subscriptions and enforce compliance, they are passive structures. As noted by users like Kate_py and BinuRaj, ARM templates are the required tool for automating deployments. Comments suggesting that including MGs in a broader strategy counts as meeting the goal miss the specific requirement to 'create Azure resources automatically,' which MGs cannot do directly.

Community Comment Notes

Several commenters correctly identified that Management Groups are only for organizing resources and managing access, not for creation. User Vikas5120 pointed out that the question asks for automatic creation, not just organization. However, some users like EduardoMC and Joipanom expressed confusion, arguing that MGs allow for organized management, thereby missing the critical distinction between governance and resource provisioning.

Official Reference

Exam Strategy

Always distinguish between 'organizing/managing' (Governance/Compliance) and 'provisioning/deploying' (Compute/Networking/Deployment). If the goal involves creating resources automatically, look for ARM Templates, CLI, PowerShell, or Blueprints, not Management Groups.

Frequently Asked Questions

Can Management Groups deploy resources?

No, Management Groups are hierarchical containers for applying policies and access controls. They cannot provision or create resources.

What should I use to auto-create identical resources?

Use Azure Resource Manager (ARM) templates or Azure Blueprints to define and automate the deployment of identical resource sets.

More AZ-900 FAQ →

Related Analysis

Practice All AZ-900 Questions

Access 90 questions with complete answers and detailed explanations.

View Full AZ-900 Practice Test →

← Back to AZ-900 Study Guide