Module 1c - Understanding Azure Architecture and Management - Resource Groups

Question 1

What is ARM?

Answer 1

Azure Resource Manager. The deployment and management service for Azure

Question 2

Hint: you can define things…

What are some key advantages with ARM?

Answer 2

• Declarative JSON templates; easy infrastructure management
• Manage a single Resource or a group of them - Deploy and Redeploy easily and consistently
• Define dependencies between Resources for correct deployment order
• Apply RBAC (Role Based Access Control)
• Apply additional Tags/Tagging

Question 3

How do you interact with ARM?

Answer 3

• Azure Portal
• Azure Powershell
• Azure CLI
• Azure Portal’s Cloud Shell
• Azure SDK

Question 4

What are Resource Groups?

Answer 4

A group of Resources that share the same lifecycle. Those Resources deploy, update and get deleted when the Resouce Group gets deployed, updated and deleted.

Question 5

Resources in one Resource Group can communicate with Resources of another Resource Group (T/F)?

Answer 5

True. They can do this with any number of network services.

Question 6

Hint: DEL

Resource Groups - Describe what the Lifecycle is

Answer 6

Deleting the group DELETES ALL contained Resources. Great for experimenting.

Question 7

Resource Groups - How do you apply Authorization?

Answer 7

Resource Groups can be scoped to RBAC (Role-Based Access Control). This way you can scope users to certain permissions sets (restrict access to certain services and features)

Question 8

Resource Groups - What are Region Requirements?

Answer 8

You need to set the Region for a Resource Group. This defines where the metadata for the Resource Group exists, NOT where the Resource(s) in the Group reside. This is important to know if you have data residency requirements to consider (including metadata)

Question 9

Resource Groups can contain Resources provisioned to different Regions (T/F)?

Answer 9

True. You can put Resources from different Regions i.e. a Resource in the Group can be of Region A while the Resource Group can be defined in Region B. This allows for logical grouping of Availability/Redundancy-dedicated Resources

Question 10

A Resource CANNOT exist in more than one Resource Group (T/F)?

Answer 10

True

Question 11

RBAC and other Security Controls must be applied separately to each Resource in a Resource Group i.e. Resource Groups do not offer Group-level security (T/F)

Answer 11

Totally FALSE! Resource Groups serve as a parent to the Resources it contains, thus security controls applied to the Group propagate to Resources contained. You can still apply individual security controls to the individual Resource, however these would NOT override the Group-level applications (maintains proper governance and security)

Question 12

Resources Groups can be nested to form a Group Hierarchy (T/F)?

Answer 12

FALSE. The CANNOT be nested

Question 13

Explain the diff between Service vs Resource

Answer 13

A Service is a compute or virtual hardware offering from a Cloud Provider, whereas a Resource is an instance of a Service

Question 14

What’s the difference between a Subscription and a Resource Group?

Answer 14

• A Subscription is a logical grouping of Services
• A Resource Group is a logical grouping of Resources