Question 300 An engineering team wants to organize a web app, database and associated network components that share an application lifecycle. Which container should it evaluate? A datacenter building A region pair An Azure role assignment by itself An Azure resource group Explanation Correct Answer D:Resource groups logically organize related resources for management and deployment. Incorrect Answers A:Tenants don't group their resources by owning provider facilities. B:Region pairing is geographic, not an application resource container. C:RBAC grants permissions but does not organize resource objects into a lifecycle container.
Question 301 A developer tries to place one Azure VM simultaneously in two resource groups. What is the correct rule? A VM can have no resource group under standard ARM management Every resource must belong to all resource groups in a subscription Resource groups are the same as public IP address ranges A resource belongs to one resource group at a time Explanation Correct Answer D:The VM is managed within one group even if linked to resources in other groups. Incorrect Answers A:Azure resources are generally created within a group. B:Groups are not universal memberships. C:Groups are management containers, not subnets.
Question 302 A resource group is created with metadata location X, but a contained VM is deployed in supported region Y. Is this necessarily invalid? No; group metadata location and resource deployment regions can differ The resource group automatically becomes a second Azure subscription Yes; all members must always occupy the group's metadata region The VM is not a resource if regions differ Explanation Correct Answer A:A resource group's location stores its metadata, not a blanket geographic constraint on every member. Incorrect Answers B:A group location does not alter subscription boundaries. C:Resources can be located in other supported regions. D:Region differences do not change resource status.
Question 303 An administrator deletes an application resource group. What is the principal risk? Only the resource group label changes The customer's Microsoft Entra tenant is automatically destroyed All Azure regions worldwide are deleted Resources within that group are deleted as part of the group deletion operation Explanation Correct Answer D:Group removal is a lifecycle action that can affect the entire contained workload. Incorrect Answers A:Deletion has operational effects beyond renaming metadata. B:Identity tenant deletion is a separate operation. C:A resource group is a tenant management container.
Question 304 A team asks whether all resources in an Azure resource group must be deployed to the same region. Which statement is accurate? Every group is a physical single-region datacenter rack Every resource group creates its own sovereign cloud Resources in one group can be deployed to different supported regions A group can only contain resources from one service type Explanation Correct Answer C:Grouping defines management association, not universal regional colocation. Incorrect Answers A:A resource group is logical. B:Grouping cannot change cloud jurisdiction. D:Groups may hold multiple service types.
Question 305 An administrator wants to move resources between resource groups. What should be checked before assuming the move is always possible? Whether both groups use the same icon in the portal Only whether both group names have equal character counts Support and dependencies of each resource type for the move operation Whether resource tags are identical Explanation Correct Answer C:Some resource types or configurations have limitations on moves. Incorrect Answers A:UI decoration does not control move compatibility. B:Name lengths do not establish move support. D:Matching tags are not a universal move prerequisite.
Question 306 A team needs to grant a contractor Reader access to only one application's group of resources. At what scope can Azure RBAC be assigned? Only by changing a VM's public IP address The specific resource group Only at an availability zone Only at the entire Microsoft Entra tenant root Explanation Correct Answer B:A role at group scope can cover its contained resources under inheritance rules. Incorrect Answers A:IP changes do not assign resource read permissions. C:Zones are not the standard RBAC management scope for resources. D:Azure RBAC supports narrower scopes.
Question 307 A cost administrator assigns a department tag to a resource group and assumes every member resource automatically inherits it in all cases. What should be verified? Delete subscription policy to make tags propagate Whether the desired tag propagation is implemented by policy or automation Rename the region to the department Assume all resources immediately inherit every group tag Explanation Correct Answer B:Resource-group tags do not universally auto-populate each member without a mechanism. Incorrect Answers A:Removing governance does not implement inheritance. C:Region placement is not a tagging inheritance mechanism. D:Tagging behavior must be configured where inheritance is required.
Question 308 An organization assigns a governance policy at a resource group scope. What should it expect? Policy changes the datacenter's physical location automatically Every unrelated subscription automatically receives the same policy Applicable descendant resources are evaluated within that policy scope Policy applies only to the resource group name string Explanation Correct Answer C:Azure Policy can apply through a management hierarchy, subject to exclusions and effects. Incorrect Answers A:Governance evaluation does not relocate hardware. B:Assignments follow configured scopes and inheritance. D:Many policy rules evaluate contained resource properties.
Question 309 A team deletes a virtual network resource still referenced by application VMs. Which planning issue matters? Resource groups automatically archive all application traffic before deletion Changing an Azure region pair resolves all dependencies Tags always prevent every possible network deletion Dependent resource relationships can prevent or disrupt deletion Explanation Correct Answer D:Network objects used by workloads need dependency-aware lifecycle management. Incorrect Answers A:Grouping is not a traffic archival service. B:Geographic settings do not remove VNet references. C:Tags are not hard deletion protections.
Question 310 A corporation needs separate operational and billing boundaries for production and development resources. Which Azure construct is most relevant? Additional resource tags alone Separate subnets inside the same VNet only Separate subscriptions where organizationally appropriate Extra Azure availability zones only Explanation Correct Answer C:Subscriptions divide resource billing and management scope. Incorrect Answers A:Tags can attribute spending but do not create subscription boundaries. B:Subnet separation does not create subscription billing boundaries. D:Zones separate failure domains, not departmental billing.
