Question

Difficulty: EasyAzure Role-Based Access Control (RBAC)

Azure Role-Based Access Control (RBAC) is used to restrict the geographic regions where resources can be deployed within a subscription.

Answer: Answer

Answer

False
The statement is false because restricting resource locations or compliance rules is enforced by Azure Policy, whereas Azure RBAC only manages who has access to Azure resources, what they can do with those resources, and what areas they have access to.

Step-by-Step Solution

1
Analyze the capability described in the statement: restricting deployment to specific geographic regions.
Identify that this is a resource property compliance and governance constraint, rather than a user permission setting.
Understanding the difference between resource governance compliance (rules on resources) and access management (permissions on users).
2
Determine which Azure service governs resource properties and compliance.
Azure Policy is the service that enforces resource properties, including restricting allowed deployment regions.
Knowing that Azure Policy evaluates resources to ensure they align with organizational standards.
3
Evaluate the role of Azure Role-Based Access Control (RBAC).
Azure RBAC manages access by granting authorization to security principals (users, groups, applications) to perform operations (like read, write, delete) on resources.
Confirming that Azure RBAC does not check resource configurations like location during deployment.

Key Concept

Azure RBAC vs. Azure Policy
Rate this question