AZ400-Q: offer safe on-demand environments
Product teams need short-lived test environments on demand, but the platform team must enforce approved templates, identity, network standards, and cost controls. What is the best design?
- A) Let every developer create resources manually with subscription Owner.
- B) Email the platform team a list of desired resources.
- C) Copy a production resource group for every test.
- D) Provide a governed self-service environment/deployment path backed by reviewed IaC, scoped identities, and lifecycle cleanup. ✓
Answer: D. Self-service works when the platform supplies controlled templates, policies, permissions, and cleanup rather than unrestricted infrastructure creation.
Why not the others: Broad manual access and email workflows do not scale or enforce standards. Copying production increases data and configuration risk.