Microsoft Azure Security Technologies — Question 3
Your company plans to create separate subscriptions for each department. Each subscription will be associated to the same Azure Active Directory (Azure AD) tenant.
You need to configure each subscription to have the same role assignments.
What should you use?
Answer options
- A. Azure Security Center
- B. Azure Policy
- C. Azure AD Privileged Identity Management (PIM)
- D. Azure Blueprints
Correct answer: D
Explanation
Azure Blueprints is the correct choice because it allows you to define a set of policies, role assignments, and resource templates that can be applied consistently across multiple subscriptions. The other options like Azure Security Center, Azure Policy, and Azure AD Privileged Identity Management (PIM) do not provide the same comprehensive capability to duplicate role assignments across several subscriptions in the same manner as Azure Blueprints.