Fundamental
Prepare and test your skills
Fundamental
Prepare and test your skills
Declarative Infrastructure Deployment with ARM Templates
Free sample question, answered and explained below. The AZ-900 Microsoft Azure Fundamentals Exam practice bank has 688 more like it. Try 10 free: instant score, no account.
An IT engineering team is designing a deployment strategy to provision resources across multiple environments, including development, testing, and production.
The team requires a solution that uses declarative JavaScript Object Notation (JSON) files to specify the desired end state of the cloud infrastructure, allowing the entire environment to be deployed repeatedly and consistently without writing step-by-step procedural scripts.
Which solution should the team implement?
Explanations
Azure Policy
Azure Policy
What Azure Policy Is
Azure Policy is a governance service in Microsoft Azure that allows administrators to create, assign, and enforce business rules and compliance standards across cloud resources. It continually assesses resources against defined policy definitions to detect non-compliance and can prevent non-compliant resources from being created.
Why It Doesn't Meet the Requirement
While Azure Policy integrates with infrastructure deployment workflows, it is not a provisioning tool or an Infrastructure as Code (IaC) deployment format:
- It does not define or orchestrate the deployment of multi-resource application architectures.
- Its primary purpose is governance and audit enforcement, rather than defining baseline infrastructure templates in JSON for automated environment creation.
Key Characteristics and Limitations
- Continuous compliance auditing: Monitors existing and newly created resources to verify adherence to organizational governance standards.
- Enforcement modes: Can deny non-compliant resource creation, log audit warnings, or trigger automated remediation.
- Scope-based assignment: Applies across management groups, subscriptions, or specific resource groups.
This Answer Would Be Correct If
The organization needed a mechanism to prevent administrators from deploying resources in unauthorized regions or enforce required naming tags on all deployed virtual machines.
Additional Context
Azure Policy operates complementarily to ARM templates; when an ARM template is deployed, Azure Policy evaluates the proposed resources during preflight validation to verify policy compliance before provisioning begins.
Resource locks
Resource locks
What Resource Locks Are
Resource locks are management settings applied to Azure subscriptions, resource groups, or individual resources to prevent unauthorized or accidental modifications and deletions.
Why It Doesn't Meet the Requirement
Resource locks serve strictly as protection safeguards and cannot be used to provision or define cloud infrastructure:
- They do not contain resource definitions, configurations, or orchestration logic.
- They do not provide a declarative framework for deploying environments across development, testing, and production stages.
Key Characteristics and Limitations
- Lock levels: Supports two main lock levels:
CanNotDelete(authorized users can read and modify a resource, but cannot delete it) andReadOnly(authorized users can read a resource, but cannot update or delete it). - Inheritance: Locks applied at higher scopes, such as resource groups or subscriptions, automatically inherit down to all nested resources.
- Administrative safeguard: Intended to protect mission-critical workloads against accidental administrative deletion.
This Answer Would Be Correct If
The team needed to safeguard an existing production database from being accidentally deleted by administrators or automated automation scripts.
Additional Context
While resource locks can be defined within an ARM template to safeguard newly created resources, the locks themselves are not the mechanism that orchestrates resource provisioning.
Azure Resource Manager (ARM) templates
Azure Resource Manager (ARM) templates
What Azure Resource Manager (ARM) Templates Are
Azure Resource Manager (ARM) templates are JavaScript Object Notation (JSON) files that implement an Infrastructure as Code (IaC) solution for deploying and managing Azure resources. They allow organizations to define their infrastructure and configurations in a declarative syntax, meaning developers describe what resources should look like and how they should be configured without writing the sequential, procedural code needed to build them.
How It Meets the Requirements
ARM templates directly satisfy the scenario's requirements through the following capabilities:
- Declarative JSON structure: The entire infrastructure state is expressed within structured JSON files containing defined sections such as parameters, variables, and resources.
- Consistency and repeatability: The same template can be executed repeatedly across multiple environments (such as development, testing, and production) to ensure identical, standardized resource provisioning.
- Elimination of procedural scripting: Azure Resource Manager parses the template, resolves resource dependencies, and automatically executes the underlying REST API operations in parallel where applicable.
Key Advantages and Capabilities
- Idempotency: Running a template multiple times produces the exact same environment configuration without duplicating existing resources.
- Dependency orchestration: Resource Manager assesses resource relationships to deploy resources in the appropriate sequence automatically.
- Preflight validation and What-If analysis: Templates can be evaluated prior to deployment to identify syntax issues and preview configuration changes.
- CI/CD integration: Templates natively integrate into deployment pipelines such as Azure DevOps and GitHub Actions for automated releases.
Why This Is Optimal
ARM templates represent Azure's native Infrastructure as Code standard. By defining infrastructure declaratively, teams avoid the maintenance overhead and error-prone nature of manual provisioning or custom imperative scripts.
Azure Advisor
Azure Advisor
What Azure Advisor Is
Azure Advisor is a personalized cloud consultant service that analyzes resource configurations and usage telemetry to provide actionable recommendations for optimizing Azure workloads.
Why It Doesn't Meet the Requirement
Azure Advisor is an analytical optimization tool, not an Infrastructure as Code provisioning service:
- It does not generate, parse, or execute declarative JSON templates to deploy Azure infrastructure.
- It provides guidance on optimizing existing deployments rather than serving as the engine to provision new infrastructure across environments.
Key Characteristics and Limitations
- Optimization categories: Delivers recommendations across five core pillars: Cost, Security, Reliability, Operational Excellence, and Performance.
- Proactive guidance: Identifies unattached resources, underutilized virtual machines, and security configuration gaps.
- Advisory nature: Suggests best practice modifications but does not act as a deployment authoring tool.
This Answer Would Be Correct If
The organization wanted to analyze their current cloud spending to identify idle resources and receive actionable recommendations to reduce operational costs.
Additional Context
Azure Advisor is used after resources are already deployed and running to help administrators optimize their environment, whereas ARM templates are used beforehand to define and automate provisioning.
Try 10 interactive questions like this one, free
Answer them yourself and get your score the moment you finish. No account needed.
Full access includes
- 688 practice questions across all 3 exam domains
- Every answer explained: why it is right, and why the others are not
- Scout, an AI tutor that answers your follow-up questions
- Readiness tracking by domain, so you know when to book the exam
Related questions
Keep the momentum going with these hand-picked practice scenarios
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Bicep vs ARM Templates
Describe infrastructure as code (IaC)
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Pipelines IaC CI/CD Automation
Describe infrastructure as code (IaC)
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Policy Compliance Enforcement
Describe infrastructure as code (IaC)
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure RBAC Scope Inheritance
Describe Azure role-based access control (RBAC)
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Developer Support Plan Non-Production
Compare cloud pricing models
IntermediateAZ-204 Developing Solutions for Microsoft Azure Exam
Azure Blob System Properties vs User-Defined Metadata
Set and retrieve properties and metadata
Last updated Validated