AZ-900 Practice Question: Azure Blueprint assignments are version-specific.
This AZ-900 practice question tests your understanding of describe azure management and governance. Match the stated requirement to the specific cloud service, access model, or configuration option — many options are valid in isolation but not for this scenario. A key principle to apply: azure Blueprint assignments are version-specific.. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A company uses Azure Blueprints to define a standard environment with policies, role assignments, and resource groups. They publish a new version of the blueprint that adds a new role assignment. However, existing subscriptions created from older versions do not have this new role assignment. What must they do to apply the update to existing subscriptions?
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
They need to update the existing blueprint assignment to use the latest published version.
Azure Blueprints assignments are not automatically updated when a new version of the blueprint is published. To apply the new role assignment to existing subscriptions, you must update the existing blueprint assignment to reference the latest published version. This triggers Azure to evaluate and apply the changes defined in the new version, including the new role assignment, to the assigned subscriptions.
Key principle: Azure Blueprint assignments are version-specific.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✗
Delete and recreate the subscriptions using the new blueprint.
Why it's wrong here
This is disruptive and unnecessary; the existing assignment can be updated.
✗
The blueprint version update is automatically applied to all existing subscriptions.
Why it's wrong here
Automatic update is not supported; assignments must be manually updated.
✗
They must manually assign the role to each subscription.
Why it's wrong here
Manual assignment defeats the purpose of using Blueprints for governance.
✓
They need to update the existing blueprint assignment to use the latest published version.
Why this is correct
Updating the assignment applies the latest blueprint version's artifacts to the scoped resources.
Related concept
Azure Blueprint assignments are version-specific.
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is assuming that publishing a new blueprint version automatically propagates changes to existing assignments, when in fact you must manually update the assignment to the new version to apply the changes.
Detailed technical explanation
How to think about this question
When you update a blueprint assignment to a newer version, Azure Blueprints uses Azure Resource Manager to perform an incremental update, applying only the changes between the old and new versions. This includes adding new role assignments, policies, and resource groups, while respecting existing resources. In a real-world scenario, this allows organizations to roll out security enhancements, like a new Reader role for a compliance team, across hundreds of subscriptions without manual intervention or downtime.
KKey Concepts to Remember
Azure Blueprint assignments are version-specific.
Updating an assignment applies the latest blueprint version's artifacts.
Blueprint updates are not automatically applied to existing assignments.
Updating an assignment ensures consistent governance across subscriptions.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Azure Blueprint assignments are version-specific.
Real-world example
How this comes up in practice
A company's IT admin needs to give a contractor read-only access to production logs without sharing account credentials. Using role-based access control (RBAC) and temporary scoped permissions — not a permanent shared password — is the correct pattern. Questions like this test whether you can apply least-privilege access across cloud identity services.
Related glossary terms
Concepts from this question explained
These glossary pages explain the core terms tested in this AZ-900 question in full detail.
Describe Azure management and governance — This question tests Describe Azure management and governance — Azure Blueprint assignments are version-specific..
What is the correct answer to this question?
The correct answer is: They need to update the existing blueprint assignment to use the latest published version. — Azure Blueprints assignments are not automatically updated when a new version of the blueprint is published. To apply the new role assignment to existing subscriptions, you must update the existing blueprint assignment to reference the latest published version. This triggers Azure to evaluate and apply the changes defined in the new version, including the new role assignment, to the assigned subscriptions.
What should I do if I get this AZ-900 question wrong?
Review azure Blueprint assignments are version-specific., then practise related AZ-900 questions on the same topic to reinforce the concept.
What is the key concept behind this question?
Azure Blueprint assignments are version-specific.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.