Examkin

Question

Difficulty: EasyAzure Role-Based Access Control (RBAC)

An administrator is configuring access and governance for an Azure subscription. The administrator needs to determine whether to use Azure Role-Based Access Control (RBAC) or Azure Policy for different requirements.

Which of the following scenarios are best addressed by using Azure RBAC? (Select two correct options.)

  1. Allowing a database administrator to manage SQL databases but not the virtual machines that host them.Answer
  2. Allowing an external auditor to view the configuration settings of all resources in a resource group without making changes.Answer
  3. C
    Preventing the deployment of virtual machines that do not have a cost center tag assigned.
  4. D
    Restricting the creation of virtual machines to only specific allowed sizes to control costs.

Answer

Azure RBAC is best suited for allowing a database administrator to manage SQL databases but not virtual machines, and allowing an external auditor to view resource configurations without making changes.
Azure RBAC is designed for user access management. Allowing a database administrator to manage SQL databases and allowing an auditor to view resource configurations are access-control permissions managed through RBAC roles (such as SQL DB Contributor and Reader).

Step-by-Step Solution

1
Analyze the purpose of Azure RBAC.
Azure RBAC focuses on user access management, specifying who (user, group, service principal) has what access (Owner, Contributor, Reader) to which resources.
This establishes the boundary of Azure RBAC capabilities.
2
Analyze the purpose of Azure Policy.
Azure Policy focuses on resource properties and compliance, ensuring that deployed resources adhere to organizational standards (e.g., tags, allowed regions, VM sizes).
This distinguishes Azure Policy from Azure RBAC.
3
Evaluate the scenarios against the capabilities of each tool.
Managing SQL databases (a permissions action) and viewing resource configurations (a read permission) are user access scenarios managed by Azure RBAC. Requiring tags and restricting VM sizes are resource property constraints managed by Azure Policy.
This identifies the correct options.

Key Concept

Azure Role-Based Access Control (RBAC) vs Azure Policy
Rate this question

Topics

Azure Role-Based Access Control (RBAC)

More questions from this topic