AZ-900 Azure Blueprints Practice Question
A company uses Azure Blueprints to define a standard environment. They publish a new version of the blueprint with an updated role assignment. All existing subscriptions that were created from an older version need to receive the new role assignment. What should they do?
⚠ Common exam trap
It's easy for candidates to assume blueprint updates are automatically applied to existing assignments, but Azure Blueprints requires an explicit update action to propagate changes, unlike Azure Policy which can auto-remediate.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use the 'Update existing assignments' option
Azure Blueprints provides a built-in 'Update existing assignments' option that propagates changes from a published blueprint version to all existing assigned subscriptions. This ensures that updated role assignments are applied without manual intervention, maintaining consistency across the environment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Reassign the blueprint to each subscription manually
Why it's wrong here
Reassigning the blueprint from scratch means deleting and re-creating each assignment, which tears down the existing assignment's resource groups, artifact deployments, and lock settings. This re-creation is more disruptive than an in-place update, and it risks duplicate resource provisioning or misconfiguration, whereas updating an existing assignment simply applies the changed artifacts to the current assignment.
When this WOULD be correct
If a blueprint has never been assigned to a subscription and you need to assign it for the first time, you would manually assign the blueprint to each subscription.
- ✗
The blueprint updates automatically
Why it's wrong here
Azure Blueprints does not push new versions to assignments automatically; a published blueprint version is an immutable snapshot that an assignment remains bound to until you explicitly perform an update. While you can deploy a new assignment from the latest version, existing subscriptions continue to run the old version, creating a governance gap if you assume the update happens on its own.
When this WOULD be correct
If the question stated that the blueprint was assigned with 'Locking' set to 'Read Only' and the role assignment was added to a new version, but the question asked about automatic updates for newly created subscriptions (not existing ones), then 'The blueprint updates automatically' would be correct for new assignments.
- ✗
Manually add the role assignment to each subscription
Why it's wrong here
Manually assigning a role through each subscription's IAM pane creates a resource that exists outside the blueprint's definitions. This bypasses the blueprint's versioning, compliance tracking, and audit capability, causing configuration drift and fragmenting the standard environment, so future blueprint updates will not cover or reconcile these manual role assignments.
When this WOULD be correct
This option would be correct if the question asked about applying a role assignment that is not part of a blueprint, or if the environment did not use Azure Blueprints at all, requiring manual configuration.
- ✓
Use the 'Update existing assignments' option
Why this is correct
When you publish a new version of a blueprint, existing assignments are not automatically upgraded. The 'Update existing assignments' action explicitly applies the published version's changes to all current assignments, evaluating the delta between the old and new definitions and updating resources while preserving the assignment's identity and lock mode.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Use the 'Update existing assignments' optionCorrect answer▾
Why this is correct
When you publish a new version of a blueprint, existing assignments are not automatically upgraded. The 'Update existing assignments' action explicitly applies the published version's changes to all current assignments, evaluating the delta between the old and new definitions and updating resources while preserving the assignment's identity and lock mode.
✗Reassign the blueprint to each subscription manuallyWrong answer — click to see why▾
Why this is wrong here
Reassigning the blueprint manually to each subscription does not automatically apply the updated role assignment; it only re-associates the blueprint without triggering an update of existing assignments.
★ When this WOULD be the correct answer
If a blueprint has never been assigned to a subscription and you need to assign it for the first time, you would manually assign the blueprint to each subscription.
Why candidates choose this
Candidates may think that reassigning the blueprint will force an update, confusing the initial assignment process with the update of existing assignments.
✗The blueprint updates automaticallyWrong answer — click to see why▾
Why this is wrong here
Azure Blueprints do not automatically update existing assignments when a new version is published; the 'Update existing assignments' option must be explicitly used.
★ When this WOULD be the correct answer
If the question stated that the blueprint was assigned with 'Locking' set to 'Read Only' and the role assignment was added to a new version, but the question asked about automatic updates for newly created subscriptions (not existing ones), then 'The blueprint updates automatically' would be correct for new assignments.
Why candidates choose this
Candidates may assume that publishing a new version automatically propagates changes to all existing assignments, similar to how some other Azure services (like Azure Policy) can auto-remediate.
✗Manually add the role assignment to each subscriptionWrong answer — click to see why▾
Why this is wrong here
Manually adding the role assignment to each subscription is not the intended method for applying blueprint updates; Azure Blueprints provides a built-in 'Update existing assignments' feature to propagate changes automatically.
★ When this WOULD be the correct answer
This option would be correct if the question asked about applying a role assignment that is not part of a blueprint, or if the environment did not use Azure Blueprints at all, requiring manual configuration.
Why candidates choose this
Candidates may think manual intervention is necessary because they are unaware of the 'Update existing assignments' feature, or they assume that blueprint updates do not automatically apply to existing assignments.
Analysis generated from the official AZ-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Azure Cost Management and Billing
Key term
Environment
An environment is a dedicated set of computing resources, configurations, and services used to develop, test, or host software applications in a controlled and repeatable way.
Key term
Blueprint
A blueprint in IT certification is a document that outlines the topics, skills, and weighting for an exam, telling you exactly what to study.
About these practice questions
This AZ-900 question is part of Courseiva's 981-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.