Ends in
00
days
00
hrs
00
mins
00
secs
SHOP NOW

Valentine's Sale Extension - Get 20% OFF Any Reviewer. Use Coupon Code: CLOUD-DOJO

Find answers, ask questions, and connect with our
community around the world.

Home Forums Azure AZ-104 Microsoft Azure Administrator The answer to No 28 of “Timed Mode Set 3 – AZ-104 Azure Administrator”

  • The answer to No 28 of “Timed Mode Set 3 – AZ-104 Azure Administrator”

  • Bostonasian

    Member
    July 4, 2022 at 10:17 pm

    Answer to “You can create a virtual machine in TD-Subscription2” – No 28 of “Timed Mode Set 3 – AZ-104 Azure Administrator” doesn’t sound right.

    TD-Subscription2 is the child to the management group TD-Management-Group20 which has “Allowed resource Types=Virtual Networks”. So this means that you can create a virtual network in this subscription. And this also means that it allows to create virtual machines, no?
    Please have a look. This doesn’t sound right.

  • Gerome-TutorialsDojo

    Member
    July 10, 2022 at 5:27 pm

    Hi Bostonasian,

    Thanks for sharing your thoughts on this item.

    Take note that there is also a policy “Not allowed resource types” and the scope is Tenant Root Group. Since the TD-Management-Group20 is under that root group, the policy would also take effect on the management groups.

    When you assign a policy to the tenant root group, the policy would also be applied to the subscription and management group. For example, if there is a Deny policy at the tenant root group then the policy will be applied to the hierarchy of management groups and subscriptions. Remember that a Deny policy always overrides an Allow policy.

    Therefore, you can’t create a virtual machine in TD-Subscription2 if a virtual network can’t also be created. That is why the answer to the statement is No.

    Regards,
    Gerome @ Tutorials Dojo

Viewing 1 - 2 of 2 replies

Log in to reply.

Original Post
0 of 0 posts June 2018
Now