ExpertAZ-305 · Question 17 · Domain 1.3: Design Governance
Your organization is adopting an Azure Landing Zone architecture.
You need to design a process for 'subscription vending'—rapidly provisioning new Azure subscriptions for application teams. Each new subscription must automatically have standard networking (VNet peering to a hub), security center standard tier enabled, and baseline RBAC roles assigned.
Which approach provides the most scalable and repeatable solution?
Your organization is adopting an Azure Landing Zone architecture.
You need to design a process for 'subscription vending'—rapidly provisioning new Azure subscriptions for application teams. Each new subscription must automatically have standard networking (VNet peering to a hub), security center standard tier enabled, and baseline RBAC roles assigned.
Which approach provides the most scalable and repeatable solution?
Answer options:
Manually create the subscription in the Azure Portal and run a PowerShell script.
Deploy an Azure Resource Manager (ARM) or Bicep template via Azure DevOps/GitHub Actions.
Use Azure Migrate to provision the subscriptions.
Create a custom Azure Policy to deploy the subscription.
How to approach this question
Full Answer
Common mistakes
Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 4
55 questions · hints · full answers · grading