Examkin

Soru

Zorluk: KolayAzure Role-Based Access Control (RBAC)

An organization employs a financial auditor who needs to view the configuration details of all resources in an Azure resource group named billing-rg. The auditor must not be allowed to edit any resources or modify any user permissions. Which action should you perform to meet these requirements?

  1. Assign the Reader role to the auditor for the billing-rg resource group.Cevap
  2. B
    Assign an Azure Policy definition to the billing-rg resource group that grants read permissions to the auditor.
  3. C
    Apply a ReadOnly resource lock to the billing-rg resource group for the auditor's user account.
  4. D
    Assign the Contributor role to the auditor for the billing-rg resource group and configure a deny policy.

Cevap

Assign the Reader role to the auditor for the billing-rg resource group.
Assigning the Reader role to the auditor for the resource group allows them to view all resources but prevents them from editing resources or modifying permissions. Azure RBAC is the correct tool for managing user permissions.

Adım Adım Çözüm

1
Identify the user's requirements: read-only access to resources within a specific resource group without permission to modify resources or access control.
The target scope is the billing-rg resource group, and the required access level is read-only.
This establishes the scope and permission level needed for the solution.
2
Evaluate the built-in Azure RBAC roles that match the required access level.
The Reader role allows viewing resources but not modifying them or their permissions, which perfectly matches the requirements.
Understanding built-in roles ensures the principle of least privilege is applied correctly.
3
Select the correct role assignment at the appropriate scope.
Assigning the Reader role at the resource group scope grants the necessary read-only access to all resources within that group.
Assigning roles at the resource group level ensures the permissions inherit down to all resources inside it.

Anahtar Kavram

Azure Role-Based Access Control (RBAC) is used to manage user access and permissions to Azure resources.
Tahmini Süre:45s
Bu soruyu puanla

Konular

Azure Role-Based Access Control (RBAC)

Bu konudan daha fazla soru