Examkin

Question

Difficulty: EasyAzure Role-Based Access Control (RBAC)

An organization wants to restrict its developers so they can only deploy virtual machines of a specific size. Is the statement that the administrator should assign a custom Azure Role-Based Access Control (RBAC) role to enforce this resource size restriction true or false?

Answer: Answer

Answer

False
The statement is false because Azure RBAC is used to manage access permissions (who can perform actions on resources), whereas Azure Policy is used to enforce resource properties and compliance constraints (such as restricting the allowed sizes of virtual machines).

Step-by-Step Solution

1
Identify the goal: restrict developers to deploying only specific virtual machine sizes.
This is a resource configuration constraint.
Analyzing the scenario requirements determines what type of governance action is needed.
2
Evaluate Azure RBAC functionality.
Azure RBAC manages user authorization (who can perform actions like create, read, update, or delete on resources). It does not control resource properties like VM size.
Determining if the proposed tool (RBAC) can fulfill the goal.
3
Evaluate Azure Policy functionality.
Azure Policy enforces resource properties and compliance, such as restricting allowed SKU sizes during deployment.
Identifying the correct Azure service for resource-level restrictions.
4
Conclude whether the statement is true or false.
Since Azure RBAC cannot enforce VM size restrictions and Azure Policy must be used instead, the statement is false.
Determining the final answer based on service capabilities.

Key Concept

Azure RBAC vs. Azure Policy
Rate this question

Topics

Azure Role-Based Access Control (RBAC)

More questions from this topic