Fundamental
Prepare and test your skills
Fundamental
Prepare and test your skills
Creating Resource Groups with Azure PowerShell
Free sample question, answered and explained below. The AZ-900 Microsoft Azure Fundamentals Exam practice bank has 688 more like it. Try 10 free: instant score, no account.
An IT administrator needs to automate the creation of a dedicated resource container for a new project using administrative scripts. The team plans to manage the entire lifecycle of all project components together and requires a script that runs specifically in an Azure PowerShell environment.
Which command should the administrator use to create the new resource group?
Explanations
New-AzResourceGroupDeployment
New-AzResourceGroupDeployment
What New-AzResourceGroupDeployment Is
New-AzResourceGroupDeployment is an Azure PowerShell cmdlet used to execute the deployment of Azure Resource Manager (ARM) templates or Bicep files into an existing resource group.
Why It Doesn't Meet the Requirement
This cmdlet deploys individual infrastructure resources (such as virtual machines, databases, or networking components) into a target resource group that has already been created. It cannot create the parent resource group itself; running this command requires referencing a pre-existing resource group via the -ResourceGroupName parameter.
Key Characteristics and Limitations
- Template Orchestration: Deploys declarative JSON or Bicep templates into a specified target scope.
- Deployment Modes: Operates in incremental or complete deployment modes to reconcile resource states.
- Dependency Management: Evaluates resource dependencies defined in infrastructure-as-code files.
This Answer Would Be Correct If
This option would be correct if the requirement were to deploy an ARM template or Bicep template containing application resources into an already established resource group.
New-AzResourceLock
New-AzResourceLock
What New-AzResourceLock Is
New-AzResourceLock is an Azure PowerShell cmdlet used to apply a management lock to an Azure subscription, resource group, or individual resource. Management locks prevent unauthorized or accidental modifications and deletions.
Why It Doesn't Meet the Requirement
New-AzResourceLock does not provision a resource group; instead, it enforces protection settings (CanNotDelete or ReadOnly) on an existing container or resource. Attempting to run this command before a resource group exists will result in an error because there is no target container to lock.
Key Characteristics and Limitations
- Governance and Protection: Safeguards critical resources from accidental deletion or structural alterations.
- Lock Levels: Supports
CanNotDelete(authorized users can read/modify but not delete) andReadOnly(users can only read). - Prerequisite Target: Requires an existing resource, resource group, or subscription ID to apply governance rules.
This Answer Would Be Correct If
This option would be correct if the administrator needed to protect an existing resource group from accidental deletion by team members.
New-AzResourceGroup
New-AzResourceGroup
What New-AzResourceGroup Is
New-AzResourceGroup is the official Azure PowerShell cmdlet within the Az module used to provision a new Azure resource group. A resource group serves as a logical container that aggregates related Azure resources—such as virtual networks, virtual machines, and storage accounts—so they can be managed, secured, and monitored as a single administrative unit.
How It Meets the Requirement
When writing automation scripts in Azure PowerShell, the administrator needs a cmdlet that specifically initializes a resource group container by specifying essential parameters such as -Name and -Location:
New-AzResourceGroup -Name "myProject-RG" -Location "eastus"
By executing this cmdlet, Azure Resource Manager creates the container metadata in the selected Azure region, establishing the logical boundary needed to group project assets together.
Key Advantages and Capabilities
- PowerShell Pipeline Compatibility: Integrates seamlessly with other Az module cmdlets through PowerShell objects and hashtables.
- Lifecycle Organization: Enables administrators to group resources that share identical development, testing, or production lifecycles.
- Metadata Location Specification: Allows organizations to declare where resource group management metadata resides for compliance.
- Declarative and Scriptable: Can be incorporated into continuous integration and deployment (CI/CD) pipelines and local administrative scripts.
Why This Is Optimal
New-AzResourceGroup is the exact, standard command designed for creating resource groups natively within Azure PowerShell. It directly fulfills the requirement to provision a resource group container using PowerShell syntax without requiring external shells or template deployment steps.
az group create
az group create
What az group create Is
az group create is a command belonging to the Azure Command-Line Interface (Azure CLI). Like its PowerShell equivalent, it provisions a logical resource group container inside an Azure subscription using parameters such as --name and --location.
Why It Doesn't Meet the Requirement
The scenario specifically requires automation using Azure PowerShell. az group create uses the Azure CLI syntax (POSIX style arguments with double dashes) rather than the standard PowerShell verb-noun cmdlet format (New-AzResourceGroup). While Azure CLI can be executed inside a PowerShell terminal if installed, native PowerShell scripts rely on the Az module cmdlets.
Key Characteristics and Limitations
- Syntax Structure: Utilizes POSIX-style command patterns (
az --parameter value). - Cross-Platform Tooling: Designed primarily for Bash, Windows Command Prompt, and cross-platform scripting.
- Output Formatting: Returns JSON by default rather than structured .NET objects used by PowerShell pipelines.
This Answer Would Be Correct If
This option would be correct if the scenario stated that the administrator was writing a Bash script or using the Azure CLI toolset across platforms.
Try 10 interactive questions like this one, free
Answer them yourself and get your score the moment you finish. No account needed.
Full access includes
- 688 practice questions across all 3 exam domains
- Every answer explained: why it is right, and why the others are not
- Scout, an AI tutor that answers your follow-up questions
- Readiness tracking by domain, so you know when to book the exam
Related questions
Keep the momentum going with these hand-picked practice scenarios
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Resource Manager Templates
Describe Azure resources and resource groups
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure RBAC and Azure Policy
Describe Azure resources and resource groups
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Blob Storage
Describe Azure resources and resource groups
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Resource Group
Describe Azure resources and resource groups
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Availability Zones and Zone-Redundant Storage
Describe availability zones
ExpertAZ-500 Microsoft Azure Security Technologies Exam
Application Permissions vs Delegated Permissions
Configure app registration permission scopes
Last updated Validated