
Ultimate access to all questions.
A government agency is planning to migrate its IT infrastructure to Azure, emphasizing the need for strict access controls and comprehensive auditing capabilities to comply with regulatory requirements. The agency's environment includes multiple departments, each with distinct access needs and auditing requirements. Considering Azure's management groups, subscriptions, and resource groups, which of the following strategies BEST addresses these needs while ensuring scalability and cost-effectiveness? Choose the two most appropriate options.
A
Implement a flat structure with a single management group for all departments, applying granular RBAC roles and Azure Policies at the subscription level to enforce access controls and auditing.
B
Design a deep hierarchy of management groups mirroring the organizational structure, assigning specific RBAC roles and Azure Policies at each level to ensure department-specific access controls and auditing.
C
Utilize resource groups exclusively for access control and auditing, ignoring management groups and subscriptions to simplify the architecture.
D
Adopt a balanced hierarchy of management groups that reflects the organizational structure moderately, applying well-defined RBAC roles and Azure Policies at appropriate levels for scalable access control and auditing.
E
Combine a balanced hierarchy of management groups with Azure Blueprints to standardize deployments, ensuring consistent access controls and auditing across all departments.