The correct answer is Automate the repeatable deployment of an interdependent set of Azure resources.

Azure Resource Manager templates are declarative files that describe the resources you want to deploy and the relationships between them so you can recreate the same architecture reliably. Templates are idempotent and support parameters, outputs, and linked or nested templates which makes them suitable for automating deployments of interdependent resources in CI CD pipelines and across environments.

Assign complex access permissions to existing Azure resources is incorrect because granular access control is primarily handled by Azure role based access control and Azure Active Directory. While templates can include role assignments, assigning and managing complex permission sets is usually done with RBAC tools, policy, or administrative scripts.

Provision whole Azure subscriptions and enforce tenant level policies across several tenants is incorrect because templates deploy resources at resource group, subscription, or management group scope and they do not provision subscriptions across tenants. Creating subscriptions and applying tenant wide governance is usually done with management groups, Azure Blueprints, or tenant level APIs and tooling.

Use Google Cloud Deployment Manager instead of an Azure template is incorrect because that option refers to a different cloud provider. Google Cloud Deployment Manager is not an Azure tool and it would not be used to deploy Azure infrastructure.

Full AWS Practitioner Certification Question