AZ-305 · Question 17 · Domain 1.3: Design Governance
Your organization is adopting an Azure Landing Zone architecture.
You need to design a process for 'subscription vending'—rapidly provisioning new Azure subscriptions for application teams. Each new subscription must automatically have standard networking (VNet peering to a hub), security center standard tier enabled, and baseline RBAC roles assigned.
Which approach provides the most scalable and repeatable solution?
Answer options:
Manually create the subscription in the Azure Portal and run a PowerShell script.
Deploy an Azure Resource Manager (ARM) or Bicep template via Azure DevOps/GitHub Actions.
Use Azure Migrate to provision the subscriptions.
Create a custom Azure Policy to deploy the subscription.
55 questions · hints · full answers · grading
Expert