AI-102 Plan and manage an Azure AI solution Practice Question
You are deploying an Azure AI solution that uses multiple Azure AI services resources. You need to ensure that all resources are deployed in a consistent manner and can be managed as a single unit. You also need to be able to assign permissions to the entire group of resources at once. What should you use?
⚠ Common exam trap
A common mix-up: candidates confuse the deployment mechanism (ARM template) with the management boundary (resource group), or choosing a broader scope like a subscription when a resource group suffices.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Resource group
A resource group is the fundamental logical container for Azure resources. By placing all Azure AI services resources in one resource group, you can deploy them together using a template and assign RBAC permissions at the resource group scope, which cascades to all contained resources. This provides both consistent management and centralized access control without granting overly broad permissions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Management group
Why it's wrong here
A management group is used to organize multiple subscriptions and apply policies and permissions across them. While it provides a way to manage access at scale, it is not the appropriate unit for grouping individual resources within a subscription. Resources are grouped into resource groups, not management groups. Using a management group for this purpose would be overly broad and not align with the requirement to manage a set of resources as a single unit.
- ✗
Azure Resource Manager template
Why it's wrong here
An Azure Resource Manager (ARM) template allows you to define and deploy multiple resources consistently, but it does not provide a management boundary for assigning permissions to the group. After deployment, each resource is managed individually. To assign permissions to all resources at once, you need a higher-level scope such as a resource group or management group. An ARM template is a deployment tool, not a management unit.
- ✗
Azure subscription
Why it's wrong here
An Azure subscription is a billing and management boundary that contains resource groups. While you can assign permissions at the subscription level, doing so would grant access to all resources in the subscription, not just the Azure AI services resources. This violates the principle of least privilege. The requirement is to manage a specific group of resources as a single unit, which is better served by a resource group.
- ✓
Resource group
Why this is correct
A resource group is a logical container for Azure resources. Deploying all Azure AI services resources into the same resource group allows you to manage them as a single unit and assign role-based access control (RBAC) permissions at the resource group scope, which applies to all resources within it. This meets both the consistent deployment and centralized permission management requirements.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
About these practice questions
This AI-102 question is part of Courseiva's 761-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This AI-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-102 exam.