Knowledge check

Completed

Consider the following Bicep files:

main.bicep:

targetScope = 'managementGroup'

module myModule 'module.bicep' = {
  scope: subscription('f0750bbe-ea75-4ae5-b24d-a92ca601da2c')
  name: 'my-module'
}

module.bicep:

targetScope = 'subscription'

resource policyDefinition 'Microsoft.Authorization/policyDefinitions@2020-09-01' = {
  name: 'my-policy'
  // (other properties related to the policy definition)
}

1.

When you submit a deployment for the main.bicep file, what will happen?

The deployment will fail with an error.

A policy definition named my-policy will be created at the management group scope.

A policy definition named my-policy will be created at the subscription scope.

2.

You need to create a role definition that will work throughout your whole organization. You decide to deploy it by using a Bicep template. Which targetScope value should you use for the file?

targetScope = 'tenant'

targetScope = 'managementGroup'

targetScope = 'subscription'

3.

Which of these statements is true?

A resource deployed to a management group's scope has a subscription ID in its resource ID.

Management groups must be deployed to the tenant scope.

Management groups must be deployed in the scope of a parent management group.

You must answer all questions before checking your work.