Examkin

Question

Difficulty: EasyAzure Role-Based Access Control (RBAC)

An administrator assigns a developer the built-in Contributor role for an Azure resource group. Which of the following tasks can the developer perform within this resource group? (Select TWO.)

  1. Create new resources, such as virtual machines and storage accountsAnswer
  2. Delete existing resources, such as virtual machines and storage accountsAnswer
  3. C
    Restrict resource deployments to specific Azure regions
  4. D
    Enforce a requirement that all resources must have specific tags applied

Answer

The developer can create new resources and delete existing resources within the resource group.
The Contributor role allows users to perform full resource management tasks, which include creating new resources and deleting existing resources within the resource group where they hold the role.

Step-by-Step Solution

1
Determine the permissions associated with the Contributor role in Azure RBAC.
The Contributor role allows full access to create, update, and delete resources, but does not allow assigning roles or enforcing governance policies.
This establishes what resources the developer can manage.
2
Distinguish between Azure RBAC and Azure Policy.
Creating and deleting resources are RBAC actions. Restricting regions and enforcing tags are compliance actions handled by Azure Policy.
This filters out the distractors that confuse RBAC with Azure Policy.

Key Concept

Azure Role-Based Access Control (RBAC) grants specific permissions to manage Azure resources, whereas Azure Policy enforces compliance and resource properties.
Rate this question

Topics

Azure Role-Based Access Control (RBAC)

More questions from this topic