Two production and sandbox subscriptions share a parent management group. An administrator has Owner inherited from that parent. Which isolation issue must the architect address?

Choose the single best answer.

A.The inherited privilege reaches applicable descendants, so subscription separation alone does not isolate that administrator.
B.Separate subscriptions automatically cancel all parent-scope roles.
C.Moving each subscription to a different resource group removes inheritance.
D.A sandbox tag makes the inherited role read-only.

Show the answer and explanation

✓ Correct answer

The inherited privilege reaches applicable descendants, so subscription separation alone does not isolate that administrator.

Applicable parent assignments inherit, so restrict broad scope and role grants to enforce the desired production boundary. Separate subscriptions do not cancel inherited roles. Tags do not modify authorization, and subscriptions do not belong inside resource groups. Source: AZ-305 Study Guide.pdf, PDF page(s) 18.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.